last executing test programs: 2m50.552246049s ago: executing program 4 (id=1022): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e24, @remote}, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2m49.937031848s ago: executing program 4 (id=1026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) 2m48.157143535s ago: executing program 4 (id=1036): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf251e00000008000300", @ANYRES32=r3, @ANYBLOB='(\x00/'], 0x44}, 0x1, 0x0, 0x0, 0x20048041}, 0x4008010) 2m47.897306408s ago: executing program 4 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000440)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='devpts\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m47.59515225s ago: executing program 4 (id=1042): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x402d1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x10080, 0x40d}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048040}, 0x4000000) 2m46.3767846s ago: executing program 4 (id=1054): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f0000000280)="4591c28e8b83", 0x6) 2m45.967789621s ago: executing program 32 (id=1054): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f0000000280)="4591c28e8b83", 0x6) 1m58.863832676s ago: executing program 1 (id=1392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0xffffffff, 0x2}) 1m58.232714976s ago: executing program 1 (id=1400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000000440)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x2, r0, 0x0}]) 1m57.788453424s ago: executing program 1 (id=1407): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 1m57.48295633s ago: executing program 1 (id=1411): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 1m57.253238219s ago: executing program 1 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10820, 0x400}}, 0x20}}, 0x4084) 1m56.454902272s ago: executing program 1 (id=1422): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) sendfile(r1, r1, 0x0, 0x970b) 1m55.678800484s ago: executing program 33 (id=1422): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) sendfile(r1, r1, 0x0, 0x970b) 1m24.588629211s ago: executing program 6 (id=1604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x7, 0x0, 0x24, 0xa5, 0x5c}) 1m24.381429718s ago: executing program 6 (id=1606): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) 1m24.138425741s ago: executing program 6 (id=1610): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.467504834s ago: executing program 6 (id=1618): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m23.405228291s ago: executing program 6 (id=1619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1m22.433102004s ago: executing program 6 (id=1628): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x2, "b88c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x1, 0x2, "a38d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m22.068597339s ago: executing program 34 (id=1628): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x2, "b88c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x1, 0x2, "a38d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.442819932s ago: executing program 3 (id=1860): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6ffb}, @device_b, @device_a, @random="c1f744afaad5", {0x0, 0x1}}, @ntf_ch_w}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) 50.160840124s ago: executing program 3 (id=1863): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3acf1ec7ae70bb24"}}, 0x48}}, 0x0) 49.744963126s ago: executing program 3 (id=1864): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000005c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x200840b0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x2000, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000100)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40002c1, 0x2000a002, 0x0) 49.266843303s ago: executing program 3 (id=1866): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 49.054243343s ago: executing program 3 (id=1868): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0xa0, 0x11, 0xaa, 0x10, 0x2001, 0x4002, 0xdfbf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0xe6, 0xce}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000d40)={0x0, 0x16, 0x1, "88"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.828645304s ago: executing program 3 (id=1871): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r1, 0x0) 47.298252651s ago: executing program 35 (id=1871): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r1, 0x0) 5.130909571s ago: executing program 8 (id=2188): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x5, "33ee480f"}, @main=@item_012={0x1, 0x0, 0x9, "c5"}]}}, 0x0}, 0x0) 4.506504187s ago: executing program 7 (id=2198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) listen(r0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) 4.317800759s ago: executing program 7 (id=2199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) 3.84982232s ago: executing program 7 (id=2202): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2.871942522s ago: executing program 7 (id=2215): r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0xfe, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) 2.626632798s ago: executing program 7 (id=2219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_getevents(r1, 0x5, 0x5, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x2, r0, 0x0}]) 2.607630586s ago: executing program 2 (id=2220): unshare(0x60600) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 2.353875986s ago: executing program 2 (id=2223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c000280080002"], 0x3c}}, 0x40) 2.126457464s ago: executing program 2 (id=2227): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0, 0xfffffffffffffcb5}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.982766347s ago: executing program 2 (id=2228): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, r1, 0x0, 0x46) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.982385121s ago: executing program 8 (id=2229): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="04"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0x4, 0x0, 0x8, &(0x7f0000000540)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.867481386s ago: executing program 8 (id=2231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) prlimit64(0x0, 0x9, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1.735924558s ago: executing program 2 (id=2234): timer_create(0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) rt_sigaction(0xe, &(0x7f0000000300)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x18000002, 0x0, {[0xffffffffffff7fff]}}, 0x0, 0x8, &(0x7f0000000280)) 1.696334579s ago: executing program 5 (id=2235): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/96, 0x60}, 0xfff}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.617624355s ago: executing program 0 (id=2236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@cgroup=r0, r2, 0x2f, 0x8, 0x4, @void, @value=r1}, 0x20) 1.461125416s ago: executing program 7 (id=2237): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000900)={0x5, "11a0c02a8e"}) 1.459637324s ago: executing program 8 (id=2238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.423853266s ago: executing program 5 (id=2239): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0089364, &(0x7f00000001c0)) 1.352264711s ago: executing program 8 (id=2240): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f00000000c0)=r3) 1.193652242s ago: executing program 0 (id=2241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000680)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 1.192753588s ago: executing program 8 (id=2242): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0xfffffffe, 0x1f7}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.110158706s ago: executing program 5 (id=2243): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 975.479673ms ago: executing program 0 (id=2244): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="4d00330040bc01000802110000000000000000000250505050509400ac0146c0000f9db4a84f2beb2f4ecb945a20a904b02d1a00080010000000000000000300010008000000000406000000090000000600cd000000000004008e0008005700961200ca"], 0x88}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) 810.005762ms ago: executing program 5 (id=2245): creat(&(0x7f0000000000)='./file0\x00', 0x261) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0x1000, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 734.86301ms ago: executing program 0 (id=2246): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}, {&(0x7f0000000080)=""/101, 0x65}], 0x2, 0x0, 0x0) 481.541084ms ago: executing program 2 (id=2247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 408.106417ms ago: executing program 0 (id=2248): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004"], 0x0, 0x6e, 0x0, 0x1}, 0x28) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 360.124993ms ago: executing program 5 (id=2249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000940)=""/192, 0xc0}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f00000008c0)=""/89, 0x59}, {&(0x7f0000002fc0)=""/4091, 0xffb}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x20, 0x0) 58.662616ms ago: executing program 5 (id=2250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000000080)=""/242, 0x2d, 0xf2, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) 0s ago: executing program 0 (id=2251): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): invalid domain name for directory. [ 189.898166][ T5925] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 190.038772][ T5820] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.057699][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 190.082351][ T7551] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.626'. [ 190.104559][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.105919][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 190.105963][ T5925] usb 4-1: can't read configurations, error -71 [ 190.210695][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 190.213228][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.213255][ T5820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.231177][ T5820] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.231213][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.231235][ T5820] usb 3-1: Product: syz [ 190.231251][ T5820] usb 3-1: Manufacturer: syz [ 190.231267][ T5820] usb 3-1: SerialNumber: syz [ 190.716603][ T5820] usb 3-1: 0:2 : does not exist [ 191.139033][ T5820] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 191.191970][ T5820] usb 3-1: USB disconnect, device number 10 [ 191.274776][ T7592] ======================================================= [ 191.274776][ T7592] WARNING: The mand mount option has been deprecated and [ 191.274776][ T7592] and is ignored by this kernel. Remove the mand [ 191.274776][ T7592] option from the mount to silence this warning. [ 191.274776][ T7592] ======================================================= [ 191.971254][ T7609] sock: sock_set_timeout: `syz.0.651' (pid 7609) tries to set negative timeout [ 192.479160][ T5925] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.546169][ T7624] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 192.642034][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 192.645418][ T5925] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 192.645451][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.723980][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 192.724002][ T5925] pvrusb2: ********** [ 192.724009][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 192.724022][ T5925] pvrusb2: Important functionality might not be entirely working. [ 192.724031][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 192.724043][ T5925] pvrusb2: ********** [ 192.928493][ T5152] Bluetooth: hci4: link tx timeout [ 192.929704][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.954492][ T5820] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 192.981703][ T2367] pvrusb2: Invalid write control endpoint [ 193.117812][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 193.159466][ T5820] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 193.159499][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.159519][ T5820] usb 4-1: Product: syz [ 193.159534][ T5820] usb 4-1: Manufacturer: syz [ 193.159549][ T5820] usb 4-1: SerialNumber: syz [ 193.166597][ T5820] usb 4-1: config 0 descriptor?? [ 193.213730][ T5820] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 193.232851][ T7613] pvrusb2: Invalid write control endpoint [ 193.243238][ T6001] usb 1-1: USB disconnect, device number 9 [ 193.257979][ T2367] pvrusb2: Invalid write control endpoint [ 193.257997][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 193.258007][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 193.258016][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 193.258027][ T2367] pvrusb2: Device being rendered inoperable [ 193.262692][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 193.262831][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 193.369007][ T2367] pvrusb2: Attached sub-driver cx25840 [ 193.369026][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 193.369038][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 194.199009][ T5820] gspca_ov534_9: reg_w failed -71 [ 194.517824][ T5820] gspca_ov534_9: Unknown sensor 0000 [ 194.517928][ T5820] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 194.546720][ T5820] usb 4-1: USB disconnect, device number 10 [ 194.742910][ T7664] vxcan0: tx address claim with dlc 0 [ 194.960791][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 195.380735][ T7680] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.680'. [ 195.467664][ T6245] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 195.580165][ T7659] netlink: 'syz.4.672': attribute type 6 has an invalid length. [ 195.632566][ T6245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.649455][ T6245] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.649487][ T6245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.649508][ T6245] usb 4-1: Product: syz [ 195.649523][ T6245] usb 4-1: Manufacturer: syz [ 195.649538][ T6245] usb 4-1: SerialNumber: syz [ 196.852370][ T6245] cdc_ncm 4-1:1.0: bind() failure [ 196.905924][ T6245] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 196.905982][ T6245] cdc_ncm 4-1:1.1: bind() failure [ 196.948273][ T6245] usb 4-1: USB disconnect, device number 11 [ 197.364795][ T7709] sp0: Synchronizing with TNC [ 198.032946][ T5925] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 198.209200][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 198.216418][ T5925] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 198.216448][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.282998][ T5925] usb 2-1: config 0 descriptor?? [ 198.311199][ T5925] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 198.414398][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 198.414459][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 198.571964][ T6001] IPVS: starting estimator thread 0... [ 198.574745][ T7728] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.682756][ T7730] IPVS: using max 6 ests per chain, 14400 per kthread [ 199.382856][ T5925] gspca_sonixj: reg_w1 err -71 [ 199.397239][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.705'. [ 199.397275][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 199.397973][ T5925] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 199.429346][ T5925] usb 2-1: USB disconnect, device number 5 [ 199.584676][ T7749] unknown channel width for channel at 909000KHz? [ 199.584699][ T7749] unknown channel width for channel at 909000KHz? [ 199.584710][ T7749] unknown channel width for channel at 909000KHz? [ 199.723010][ T7754] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 199.942938][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.943022][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.167672][ T6001] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.319490][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 200.324374][ T6001] usb 1-1: config 32 has an invalid interface number: 32 but max is 0 [ 200.324403][ T6001] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 200.324423][ T6001] usb 1-1: config 32 has no interface number 0 [ 200.324472][ T6001] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 200.324495][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.327687][ T5911] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 200.354448][ T6001] hub 1-1:32.32: bad descriptor, ignoring hub [ 200.354493][ T6001] hub 1-1:32.32: probe with driver hub failed with error -5 [ 200.407742][ T5925] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 200.480920][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 200.483695][ T5911] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.483726][ T5911] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.483752][ T5911] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 200.483774][ T5911] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 200.483796][ T5911] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.483840][ T5911] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.483863][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.587715][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 200.604780][ T5925] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 200.604808][ T5925] usb 4-1: config 0 has no interface number 0 [ 200.605325][ T5925] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.605356][ T5925] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.616693][ T5911] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 200.643274][ T5925] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 200.643306][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 200.643327][ T5925] usb 4-1: Product: syz [ 200.643341][ T5925] usb 4-1: SerialNumber: syz [ 200.713164][ T7775] netlink: 4344 bytes leftover after parsing attributes in process `syz.4.719'. [ 200.731582][ T5925] usb 4-1: config 0 descriptor?? [ 200.747772][ T5925] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 200.750959][ T5925] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input13 [ 200.973869][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 201.134726][ T6001] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 201.201561][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 201.506659][ T5820] usb 4-1: USB disconnect, device number 12 [ 201.673783][ T5820] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 202.291298][ T6001] usb 1-1: USB disconnect, device number 10 [ 202.354326][ T7800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.728'. [ 203.172860][ T6245] usb 2-1: USB disconnect, device number 6 [ 204.522104][ T7833] use of bytesused == 0 is deprecated and will be removed in the future, [ 204.522121][ T7833] use the actual size instead. [ 205.098076][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.748'. [ 205.917744][ T6245] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.078023][ T6245] usb 4-1: Using ep0 maxpacket: 16 [ 206.082883][ T6245] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 206.082919][ T6245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.118329][ T6245] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 206.118359][ T6245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.118380][ T6245] usb 4-1: Product: syz [ 206.118394][ T6245] usb 4-1: Manufacturer: syz [ 206.118409][ T6245] usb 4-1: SerialNumber: syz [ 206.168328][ T5959] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 206.169853][ T6245] usb 4-1: config 0 descriptor?? [ 206.176420][ T6245] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 206.176461][ T6245] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 206.230370][ T5911] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 206.317785][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 206.320459][ T5959] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 206.320490][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.332253][ T5959] usb 5-1: config 0 descriptor?? [ 206.389130][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 206.397355][ T5911] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 206.422432][ T5911] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 206.422467][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.422489][ T5911] usb 3-1: Product: syz [ 206.422505][ T5911] usb 3-1: Manufacturer: syz [ 206.422520][ T5911] usb 3-1: SerialNumber: syz [ 206.510406][ T5911] usb 3-1: config 0 descriptor?? [ 206.514859][ T7872] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 206.622469][ T5911] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.691943][ T5959] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 206.823791][ T7884] syzkaller1: entered promiscuous mode [ 206.823827][ T7884] syzkaller1: entered allmulticast mode [ 206.829753][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.842033][ T5959] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 206.842142][ T5959] usb 5-1: media controller created [ 206.870905][ T6245] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 206.871783][ T6245] em28xx 4-1:0.0: Config register raw data: 0x54 [ 206.963795][ T5911] usb 3-1: USB disconnect, device number 11 [ 207.040561][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.096827][ T6245] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 207.096864][ T6245] em28xx 4-1:0.0: No AC97 audio processor [ 207.135191][ T5959] az6027: usb out operation failed. (-71) [ 207.137404][ T5959] az6027: usb out operation failed. (-71) [ 207.137424][ T5959] stb0899_attach: Driver disabled by Kconfig [ 207.137434][ T5959] az6027: no front-end attached [ 207.137434][ T5959] [ 207.143728][ T5959] az6027: usb out operation failed. (-71) [ 207.143756][ T5959] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 207.162070][ T5959] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 207.178539][ T5959] dvb-usb: schedule remote query interval to 400 msecs. [ 207.178566][ T5959] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 207.205873][ T5959] usb 5-1: USB disconnect, device number 7 [ 207.220834][ T6245] usb 4-1: USB disconnect, device number 13 [ 207.240083][ T6245] em28xx 4-1:0.0: Disconnecting em28xx [ 207.275481][ T6245] em28xx 4-1:0.0: Freeing device [ 207.575477][ T5959] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 207.909644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 208.037766][ T5911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 208.250568][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.250610][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.250651][ T5911] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 208.250675][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.340282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.380205][ T5911] usb 5-1: config 0 descriptor?? [ 208.809761][ T5911] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 208.809906][ T5911] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 208.813623][ T5911] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input15 [ 208.964810][ T7912] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.778'. [ 208.998497][ T5911] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 209.132935][ T6245] usb 5-1: USB disconnect, device number 8 [ 209.617642][ T5820] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.770429][ T5820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.770458][ T5820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.772644][ T5820] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 209.772675][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.772695][ T5820] usb 1-1: SerialNumber: syz [ 209.817861][ T7931] netlink: 'syz.2.786': attribute type 10 has an invalid length. [ 209.928517][ T7931] team0: Port device team_slave_0 removed [ 210.074964][ T5820] usb 1-1: 0:2 : does not exist [ 210.126780][ T5820] usb 1-1: USB disconnect, device number 11 [ 211.667710][ T5959] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.829653][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 211.833122][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.837039][ T5959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 211.837098][ T5959] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1048, setting to 1024 [ 211.837126][ T5959] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 211.837152][ T5959] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 211.873258][ T5959] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.873296][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.873322][ T5959] usb 3-1: Product: syz [ 211.873339][ T5959] usb 3-1: Manufacturer: syz [ 211.873356][ T5959] usb 3-1: SerialNumber: syz [ 212.287841][ T6245] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.362372][ T7975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.362666][ T7975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.437707][ T6245] usb 5-1: Using ep0 maxpacket: 8 [ 212.444125][ T6245] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.444190][ T6245] usb 5-1: config 179 has no interface number 0 [ 212.444251][ T6245] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 212.444274][ T6245] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 212.444298][ T6245] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 212.444318][ T6245] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.444339][ T6245] usb 5-1: config 179 interface 65 has no altsetting 0 [ 212.444371][ T6245] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 212.444453][ T6245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.809241][ T991] usb 5-1: USB disconnect, device number 9 [ 212.830021][ T6001] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 212.974867][ T5959] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 212.982027][ T5959] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 213.015075][ T5959] cdc_ncm 3-1:1.0: bind() failure [ 213.037258][ T6001] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 213.037290][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.037310][ T6001] usb 4-1: Product: syz [ 213.037324][ T6001] usb 4-1: Manufacturer: syz [ 213.037339][ T6001] usb 4-1: SerialNumber: syz [ 213.079978][ T6001] usb 4-1: config 0 descriptor?? [ 213.100480][ T6001] ch341 4-1:0.0: ch341-uart converter detected [ 213.123130][ T5959] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 213.123242][ T5959] cdc_ncm 3-1:1.1: bind() failure [ 213.193914][ T5959] usb 3-1: USB disconnect, device number 12 [ 214.047702][ T991] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.180077][ T6001] usb 4-1: failed to send control message: -71 [ 214.180142][ T6001] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 214.187253][ T6001] usb 4-1: USB disconnect, device number 14 [ 214.190970][ T6001] ch341 4-1:0.0: device disconnected [ 214.210318][ T991] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.210359][ T991] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 214.210387][ T991] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 214.210430][ T991] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.210453][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.274699][ T8018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.303494][ T991] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.632216][ T991] usb 2-1: USB disconnect, device number 7 [ 214.734854][ T8038] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 214.735134][ T8038] syzkaller1: linktype set to 773 [ 215.787005][ T8070] ubi31: attaching mtd0 [ 216.957818][ T6001] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 217.079088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 217.188397][ T6001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.188453][ T6001] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 217.188478][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.237263][ T6001] usb 2-1: config 0 descriptor?? [ 217.857571][ T6001] uclogic 0003:5543:0522.0005: unbalanced delimiter at end of report description [ 217.859941][ T6001] uclogic 0003:5543:0522.0005: parse failed [ 217.860063][ T6001] uclogic 0003:5543:0522.0005: probe with driver uclogic failed with error -22 [ 217.938449][ T6001] usb 2-1: USB disconnect, device number 8 [ 219.713009][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 219.778280][ T8141] bond0: entered promiscuous mode [ 219.778307][ T8141] bond_slave_0: entered promiscuous mode [ 219.778571][ T8141] bond_slave_1: entered promiscuous mode [ 219.791879][ T8141] batadv0: entered promiscuous mode [ 219.816587][ T8141] debugfs: 'hsr1' already exists in 'hsr' [ 219.816619][ T8141] Cannot create hsr debugfs directory [ 219.816934][ T8141] hsr1: entered allmulticast mode [ 219.816950][ T8141] bond0: entered allmulticast mode [ 219.816964][ T8141] bond_slave_0: entered allmulticast mode [ 219.816988][ T8141] bond_slave_1: entered allmulticast mode [ 219.817038][ T8141] batadv0: entered allmulticast mode [ 219.818102][ T8141] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 220.052274][ T8134] input: syz0 as /devices/virtual/input/input16 [ 221.017652][ T991] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.217670][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 221.240607][ T991] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.240644][ T991] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.240671][ T991] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 221.243069][ T991] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.243089][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.243103][ T991] usb 5-1: Product: syz [ 221.243114][ T991] usb 5-1: Manufacturer: syz [ 221.243124][ T991] usb 5-1: SerialNumber: syz [ 221.327492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 221.327605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 221.390896][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.390932][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.390966][ T5911] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 221.390987][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.478296][ T5911] usb 2-1: config 0 descriptor?? [ 222.335929][ T5911] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 222.336008][ T5911] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 222.336312][ T5911] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 222.395749][ T5911] usb 2-1: USB disconnect, device number 9 [ 222.454201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 222.488610][ T8160] Bluetooth: hci2: command 0x0406 tx timeout [ 222.488648][ T8160] Bluetooth: hci1: command 0x0406 tx timeout [ 222.488672][ T8160] Bluetooth: hci3: command 0x0406 tx timeout [ 222.488957][ T991] cdc_ncm 5-1:1.0: bind() failure [ 222.602922][ T991] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 222.610485][ T991] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 222.635943][ T991] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 222.674368][ T991] usb 5-1: USB disconnect, device number 10 [ 222.717311][ T8183] ªªªªªª: renamed from wg2 (while UP) [ 223.258175][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 223.548548][ T991] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.697619][ T991] usb 1-1: Using ep0 maxpacket: 16 [ 223.700595][ T991] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.700639][ T991] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 223.700664][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.723861][ T991] usb 1-1: config 0 descriptor?? [ 223.784964][ T8215] tipc: Started in network mode [ 223.784991][ T8215] tipc: Node identity 8, cluster identity 117 [ 223.785005][ T8215] tipc: Node number set to 8 [ 223.997922][ T5820] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 224.160029][ T5820] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.160058][ T5820] usb 3-1: config 0 has no interface number 0 [ 224.169485][ T991] hid (null): unknown global tag 0xc [ 224.179652][ T5820] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 224.179689][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.179714][ T5820] usb 3-1: Product: syz [ 224.179729][ T5820] usb 3-1: Manufacturer: syz [ 224.179747][ T5820] usb 3-1: SerialNumber: syz [ 224.228852][ T5820] usb 3-1: config 0 descriptor?? [ 224.381160][ T5911] usb 1-1: USB disconnect, device number 12 [ 224.464608][ T5820] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 224.514597][ T5820] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.515127][ T5820] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 224.515178][ T5820] usb 3-1: media controller created [ 224.653916][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.960712][ T5820] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 225.149499][ T5820] usb 3-1: USB disconnect, device number 13 [ 226.523407][ T8272] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.935'. [ 227.705850][ C1] sd 0:0:1:0: [sda] tag#7512 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 227.705925][ C1] sd 0:0:1:0: [sda] tag#7512 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 227.727792][ T6001] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 227.877581][ T6001] usb 4-1: Using ep0 maxpacket: 16 [ 227.880474][ T6001] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 227.880503][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.880522][ T6001] usb 4-1: config 0 has no interface number 0 [ 227.880575][ T6001] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 227.880599][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.939970][ T6001] usb 4-1: config 0 descriptor?? [ 227.962971][ T6001] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 227.963017][ T6001] usb 4-1: No valid video chain found. [ 228.179326][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.179852][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.597738][ T6001] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 228.764153][ T6001] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 228.764187][ T6001] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.827251][ T6001] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.827283][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 228.827304][ T6001] usb 3-1: Product: syz [ 228.827405][ T6001] usb 3-1: Manufacturer: syz [ 228.827421][ T6001] usb 3-1: SerialNumber: syz [ 228.881049][ T6001] usb 3-1: config 0 descriptor?? [ 228.910297][ T6001] usb 3-1: selecting invalid altsetting 0 [ 229.171407][ T991] usb 3-1: USB disconnect, device number 14 [ 229.857621][ T991] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 230.027628][ T991] usb 5-1: Using ep0 maxpacket: 16 [ 230.038590][ T991] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 230.038626][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.068286][ T991] usb 5-1: config 0 descriptor?? [ 230.098670][ T991] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 230.175520][ T5925] kernel write not supported for file /input/mouse0 (pid: 5925 comm: kworker/0:5) [ 230.410897][ T5959] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.427488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.428104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.428271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.428442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.519554][ T5925] usb 4-1: USB disconnect, device number 15 [ 230.557640][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 230.560645][ T5959] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 230.560678][ T5959] usb 2-1: config 150 has no interface number 0 [ 230.560751][ T5959] usb 2-1: config 150 interface 204 has no altsetting 0 [ 230.560771][ T5959] usb 2-1: config 150 interface 1 has no altsetting 0 [ 230.607788][ T5959] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 230.607821][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.607842][ T5959] usb 2-1: Product: syz [ 230.607857][ T5959] usb 2-1: Manufacturer: syz [ 230.607872][ T5959] usb 2-1: SerialNumber: syz [ 231.001737][ T5959] xr_serial 2-1:150.204: xr_serial converter detected [ 231.227803][ T5911] usb 5-1: USB disconnect, device number 11 [ 231.769118][ T5959] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 231.769189][ T5959] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 231.808176][ T5959] usb 2-1: USB disconnect, device number 10 [ 231.816247][ T5959] xr_serial 2-1:150.204: device disconnected [ 232.809630][ T5842] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 232.875034][ T8393] input: syz1 as /devices/virtual/input/input17 [ 232.972320][ T5842] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 232.972342][ T5842] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 232.972383][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.972402][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.972417][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.972448][ T5842] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 232.972465][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.051055][ T5842] usb 2-1: config 0 descriptor?? [ 233.464462][ T8402] input: syz1 as /devices/virtual/input/input18 [ 233.487812][ T5820] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 233.577055][ T5842] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0008/input/input19 [ 233.675595][ T5842] uclogic 0003:28BD:0909.0008: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 233.749850][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.749875][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.749891][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.749922][ T5820] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.749938][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.754573][ T5820] usb 3-1: config 0 descriptor?? [ 233.947156][ T5925] usb 2-1: USB disconnect, device number 11 [ 234.248172][ T5820] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 234.248212][ T5820] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 234.248239][ T5820] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 234.248266][ T5820] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 234.248293][ T5820] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 234.248319][ T5820] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 234.248345][ T5820] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 234.284980][ T5820] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 234.515045][ T5842] usb 3-1: USB disconnect, device number 15 [ 235.756246][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.757887][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.886004][ T8443] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1007'. [ 236.772428][ T8460] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.176907][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.254152][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.381433][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.460869][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.573368][ T8501] input: syz0 as /devices/virtual/input/input20 [ 240.040721][ T1361] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.040775][ T1361] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.295193][ T8516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1036'. [ 240.776085][ T8526] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.395846][ T8535] dlm: non-version read from control device 4 [ 241.596769][ T8539] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 241.619625][ T8539] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 242.360527][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.849338][ T8567] batadv_slave_1: entered promiscuous mode [ 242.910525][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.990976][ T8565] batadv_slave_1: left promiscuous mode [ 243.187536][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.494486][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.519034][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.542716][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.561935][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.565412][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.849325][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.850312][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.953219][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.027001][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.568615][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 245.568637][ T37] audit: type=1326 audit(1756219077.421:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.1.1077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3a6aebe9 code=0x0 [ 245.677747][ T5152] Bluetooth: hci4: command tx timeout [ 245.753026][ T8632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.753046][ T8632] IPv6: NLM_F_CREATE should be set when creating new route [ 246.686732][ T4747] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.753554][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.875075][ T4747] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.905322][ T4747] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.905374][ T4747] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.979985][ T8642] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 246.980026][ T8642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.171690][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1087'. [ 247.171731][ T8651] netlink: 'syz.0.1087': attribute type 7 has an invalid length. [ 247.171745][ T8651] netlink: 'syz.0.1087': attribute type 8 has an invalid length. [ 247.171759][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 247.203913][ T8651] gretap0: entered promiscuous mode [ 247.205660][ T8651] batadv_slave_1: entered promiscuous mode [ 247.212775][ T8651] erspan0: entered promiscuous mode [ 247.214648][ T8651] erspan0: left promiscuous mode [ 247.278328][ T8651] gretap0: left promiscuous mode [ 247.328458][ T8651] batadv_slave_1: left promiscuous mode [ 247.757788][ T5152] Bluetooth: hci4: command tx timeout [ 248.192496][ T8655] Invalid ELF header magic: != ELF [ 248.531859][ T8672] kvm: user requested TSC rate below hardware speed [ 248.933816][ T13] bridge_slave_1: left allmulticast mode [ 248.934630][ T13] bridge_slave_1: left promiscuous mode [ 248.941000][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.042029][ T13] bridge_slave_0: left allmulticast mode [ 249.042066][ T13] bridge_slave_0: left promiscuous mode [ 249.047895][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.840374][ T5152] Bluetooth: hci4: command tx timeout [ 249.983757][ T8701] vivid-000: disconnect [ 250.002601][ T8700] vivid-000: reconnect [ 250.152043][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.479437][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.678667][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.846870][ T8718] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 251.457358][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.845533][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.867751][ T8601] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 251.917580][ T5152] Bluetooth: hci4: command tx timeout [ 252.037781][ T8601] usb 3-1: Using ep0 maxpacket: 16 [ 252.042455][ T8601] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.042568][ T8601] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.042593][ T8601] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.042636][ T8601] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 252.042657][ T8601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.049687][ T8601] usb 3-1: config 0 descriptor?? [ 252.493096][ T8601] cougar 0003:060B:500A.000A: unexpected long global item [ 252.493659][ T8601] cougar 0003:060B:500A.000A: parse failed [ 252.493729][ T8601] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 252.598654][ T13] bond0 (unregistering): left promiscuous mode [ 252.598680][ T13] bond_slave_0: left promiscuous mode [ 252.599151][ T13] bond_slave_1: left promiscuous mode [ 252.633474][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.669375][ T13] bond_slave_0: left allmulticast mode [ 252.694437][ T8622] usb 3-1: USB disconnect, device number 16 [ 252.698652][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.728840][ T13] bond_slave_1: left allmulticast mode [ 252.732006][ T13] bond0 (unregistering): Released all slaves [ 253.161058][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.550608][ T8735] loop2: detected capacity change from 0 to 7 [ 253.586189][ T8735] Dev loop2: unable to read RDB block 7 [ 253.586250][ T8735] loop2: unable to read partition table [ 253.586502][ T8735] loop2: partition table beyond EOD, truncated [ 253.586522][ T8735] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 253.696512][ T37] audit: type=1326 audit(1756219085.551:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.2.1124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff904b6ebe9 code=0x0 [ 254.040008][ T8585] chnl_net:caif_netlink_parms(): no params data found [ 254.077717][ T8622] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 254.245806][ T8622] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.246702][ T8622] usb 1-1: not running at top speed; connect to a high speed hub [ 254.251339][ T8622] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 254.251374][ T8622] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 254.251396][ T8622] usb 1-1: config 4 has no interface number 0 [ 254.263672][ T8622] usb 1-1: string descriptor 0 read error: -22 [ 254.263933][ T8622] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 254.263961][ T8622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.318400][ T8622] usb 1-1: Found UVC 0.00 device (04f2:b746) [ 254.318605][ T8622] usb 1-1: No valid video chain found. [ 254.506367][ T5925] usb 1-1: USB disconnect, device number 13 [ 254.727304][ T8753] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 254.845133][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.859468][ T8753] bridge_slave_1: left allmulticast mode [ 254.859501][ T8753] bridge_slave_1: left promiscuous mode [ 254.859796][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.005618][ T8753] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 255.048463][ T13] batadv0: left promiscuous mode [ 255.297725][ T13] hsr_slave_0: left promiscuous mode [ 255.334894][ T8771] netlink: 520 bytes leftover after parsing attributes in process `syz.1.1137'. [ 255.353256][ T13] hsr_slave_1: left promiscuous mode [ 255.354844][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.354955][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.408263][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.408299][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.792912][ T13] veth1_macvtap: left promiscuous mode [ 255.793210][ T13] veth0_macvtap: left promiscuous mode [ 255.798039][ T13] veth1_vlan: left promiscuous mode [ 255.803876][ T13] veth0_vlan: left promiscuous mode [ 256.247818][ T5904] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 256.457725][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.461198][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 256.465262][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.465289][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.499360][ T5904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.499384][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.499398][ T5904] usb 1-1: Product: syz [ 256.499408][ T5904] usb 1-1: Manufacturer: syz [ 256.499418][ T5904] usb 1-1: SerialNumber: syz [ 256.959377][ T5904] usb 1-1: 0:2 : does not exist [ 257.272916][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.392219][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.619882][ T8601] usb 1-1: USB disconnect, device number 14 [ 257.676659][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.857774][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.140684][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.315274][ T37] audit: type=1326 audit(1756219090.171:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 258.316320][ T37] audit: type=1326 audit(1756219090.171:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 258.317163][ T37] audit: type=1326 audit(1756219090.171:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 258.319028][ T37] audit: type=1326 audit(1756219090.171:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 258.319455][ T37] audit: type=1326 audit(1756219090.181:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 258.319867][ T37] audit: type=1326 audit(1756219090.181:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 258.968005][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 259.141235][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.141271][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.141312][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 259.141337][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.151191][ T9] usb 1-1: config 0 descriptor?? [ 259.301688][ T13] team0 (unregistering): Port device team_slave_1 removed [ 259.612332][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x2 [ 259.612371][ T9] pyra 0003:1E7D:2CF6.000B: unknown global tag 0xc [ 259.612387][ T9] pyra 0003:1E7D:2CF6.000B: item 0 2 1 12 parsing failed [ 259.613218][ T9] pyra 0003:1E7D:2CF6.000B: parse failed [ 259.613293][ T9] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -22 [ 259.689080][ T13] team0 (unregistering): Port device team_slave_0 removed [ 259.831125][ T8581] usb 1-1: USB disconnect, device number 15 [ 261.368605][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.368702][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.777683][ T8581] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 262.928128][ T8581] usb 1-1: Using ep0 maxpacket: 8 [ 262.960824][ T8581] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 262.960855][ T8581] usb 1-1: config 179 has no interface number 0 [ 262.960907][ T8581] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 262.960938][ T8581] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 262.960967][ T8581] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 262.960995][ T8581] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 262.961024][ T8581] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 262.961069][ T8581] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 262.961092][ T8581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.967894][ T8822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 263.258679][ T8822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.260096][ T8822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.692619][ T5925] usb 1-1: USB disconnect, device number 16 [ 263.692662][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 263.692732][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 264.377677][ T8601] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 264.538241][ T8601] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.538278][ T8601] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 264.538312][ T8601] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 264.538354][ T8601] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.538378][ T8601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.568071][ T8830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.625774][ T8601] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.736685][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 264.736727][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 265.032692][ T5925] usb 4-1: USB disconnect, device number 16 [ 265.278375][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.278533][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.278782][ T8585] bridge_slave_0: entered allmulticast mode [ 265.289315][ T8585] bridge_slave_0: entered promiscuous mode [ 265.318657][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.326389][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.326656][ T8585] bridge_slave_1: entered allmulticast mode [ 265.346870][ T8585] bridge_slave_1: entered promiscuous mode [ 265.598008][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1166'. [ 265.598044][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1166'. [ 265.732089][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.819797][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.825021][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.348756][ T8585] team0: Port device team_slave_0 added [ 266.388788][ T8585] team0: Port device team_slave_1 added [ 266.419351][ T13] IPVS: stop unused estimator thread 0... [ 266.793282][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.793299][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.793322][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.910798][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.913957][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.913995][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.323759][ T8585] hsr_slave_0: entered promiscuous mode [ 267.351146][ T8585] hsr_slave_1: entered promiscuous mode [ 267.360210][ T8585] debugfs: 'hsr0' already exists in 'hsr' [ 267.360245][ T8585] Cannot create hsr debugfs directory [ 269.251492][ T8585] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.337942][ T8585] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.396340][ T8585] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.468589][ T8585] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.315960][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.428792][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.504554][ T8915] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.507943][ T8915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.587978][ T37] audit: type=1326 audit(1756219102.451:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f4bcebe9 code=0x7fc00000 [ 270.755012][ T8915] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.755269][ T8915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.291757][ T37] audit: type=1326 audit(1756219103.151:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41f4bcebe9 code=0x7fc00000 [ 272.586008][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.488739][ T9036] program syz.1.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.008575][ T9044] tun0: tun_chr_ioctl cmd 1074025675 [ 274.008602][ T9044] tun0: persist enabled [ 274.010725][ T9049] tun0: tun_chr_ioctl cmd 1074025675 [ 274.010751][ T9049] tun0: persist enabled [ 274.392850][ T8585] veth0_vlan: entered promiscuous mode [ 274.511317][ T8585] veth1_vlan: entered promiscuous mode [ 274.589881][ T9066] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.978213][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 275.270810][ T8585] veth0_macvtap: entered promiscuous mode [ 275.364393][ T8585] veth1_macvtap: entered promiscuous mode [ 275.531913][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.608812][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.630720][ T9093] sctp: [Deprecated]: syz.0.1245 (pid 9093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.630720][ T9093] Use struct sctp_sack_info instead [ 275.682069][ T8921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.682328][ T8921] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.682551][ T8921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.682769][ T8921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.340955][ T9110] autofs: Bad value for 'fd' [ 276.545087][ T8919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.545111][ T8919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.695641][ T8914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.695665][ T8914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.713177][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 276.757633][ T9118] chnl_net:caif_netlink_parms(): no params data found [ 277.870607][ T37] audit: type=1326 audit(1756219109.711:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9151 comm="syz.2.1269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff904b6ebe9 code=0x0 [ 278.431871][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.274835][ T9189] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1285'. [ 279.613186][ T9196] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 279.647596][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.018935][ T9210] bridge0: entered allmulticast mode [ 280.020176][ T9210] bridge0: left allmulticast mode [ 281.017685][ T6245] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 281.174928][ T6245] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.174966][ T6245] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 281.174995][ T6245] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 281.175037][ T6245] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.175061][ T6245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.208457][ T9234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.234082][ T6245] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.626811][ T8592] usb 1-1: USB disconnect, device number 17 [ 281.800314][ T9250] program syz.3.1309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.997810][ T6245] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 282.147610][ T6245] usb 2-1: Using ep0 maxpacket: 8 [ 282.150665][ T6245] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 282.150714][ T6245] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 282.150743][ T6245] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.150778][ T6245] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 282.150802][ T6245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.224551][ T6245] usb 2-1: config 0 descriptor?? [ 282.694355][ T6245] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x6 [ 282.810936][ T6245] gt683r_led 0003:1770:FF00.000C: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 282.944738][ T8592] usb 2-1: USB disconnect, device number 12 [ 282.960710][ T8597] gt683r_led 0003:1770:FF00.000C: failed to send set report request: -19 [ 282.977778][ T8597] gt683r_led 0003:1770:FF00.000C: failed to send set report request: -19 [ 282.987614][ T8597] gt683r_led 0003:1770:FF00.000C: failed to send set report request: -19 [ 284.319926][ T9297] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1331'. [ 284.319981][ T9297] netlink: 'syz.3.1331': attribute type 5 has an invalid length. [ 285.175015][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 285.522753][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 285.522787][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1347'. [ 285.529891][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 285.529929][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1347'. [ 286.101498][ T9345] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.1352'. [ 286.587580][ T5925] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 286.740142][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.740189][ T5925] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.740215][ T5925] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.743291][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.743323][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.743344][ T5925] usb 3-1: Product: syz [ 286.743359][ T5925] usb 3-1: Manufacturer: syz [ 286.743375][ T5925] usb 3-1: SerialNumber: syz [ 287.653294][ T9385] input: syz0 as /devices/virtual/input/input21 [ 287.892542][ T5925] cdc_ncm 3-1:1.0: bind() failure [ 287.957599][ T5925] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 287.958578][ T5925] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 287.967093][ T5925] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 288.026223][ T5925] usb 3-1: USB disconnect, device number 17 [ 288.893023][ T9416] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1383'. [ 288.975911][ T9418] loop2: detected capacity change from 0 to 7 [ 289.035694][ T9418] Dev loop2: unable to read RDB block 7 [ 289.035753][ T9418] loop2: unable to read partition table [ 289.035991][ T9418] loop2: partition table beyond EOD, truncated [ 289.036009][ T9418] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.678357][ T9443] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1394'. [ 289.968598][ T9449] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1397'. [ 291.355251][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.423014][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.004976][ T8915] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.436477][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1432'. [ 294.567547][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.641578][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.669305][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.680397][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.686291][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.862853][ T8915] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.173835][ T9536] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 295.213455][ T9538] input: syz0 as /devices/virtual/input/input22 [ 295.236866][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.427669][ T6245] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 295.494124][ T8915] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.593963][ T6245] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 295.594027][ T6245] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.594050][ T6245] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.594074][ T6245] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.594118][ T6245] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 295.594140][ T6245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.702114][ T6245] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.933571][ T6245] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 295.970519][ T6245] usb 6-1: USB disconnect, device number 2 [ 296.076621][ T8915] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.527590][ T6245] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 296.681290][ T6245] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.681318][ T6245] usb 4-1: config 0 has no interface number 0 [ 296.681360][ T6245] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.681384][ T6245] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.681421][ T6245] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 296.681444][ T6245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.771097][ T6245] usb 4-1: config 0 descriptor?? [ 296.800277][ T5152] Bluetooth: hci0: command tx timeout [ 297.215274][ T6245] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 297.215317][ T6245] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 297.237930][ T6245] prodikeys 0003:041E:2801.000D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 297.242359][ T6245] hid_prodikeys: hid-prodikeys: failed to find output report [ 297.242359][ T6245] [ 297.442562][ T8601] usb 4-1: USB disconnect, device number 17 [ 297.524620][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1457'. [ 297.624985][ T9530] chnl_net:caif_netlink_parms(): no params data found [ 298.342334][ T8915] bridge_slave_1: left allmulticast mode [ 298.342370][ T8915] bridge_slave_1: left promiscuous mode [ 298.342640][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.471765][ T8915] bridge_slave_0: left allmulticast mode [ 298.471802][ T8915] bridge_slave_0: left promiscuous mode [ 298.472094][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.880159][ T5152] Bluetooth: hci0: command tx timeout [ 299.251673][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.327644][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 299.478084][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 299.480553][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 299.480579][ T9] usb 4-1: config 0 has no interface number 0 [ 299.480631][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.480656][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 299.480678][ T9] usb 4-1: config 0 interface 55 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 299.480702][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.480744][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 299.480767][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.496796][ T9] usb 4-1: config 0 descriptor?? [ 299.583260][ T9] ldusb 4-1:0.55: Interrupt in endpoint not found [ 299.718718][ T8597] usb 4-1: USB disconnect, device number 18 [ 300.117672][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.402548][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.655119][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.979750][ T5152] Bluetooth: hci0: command tx timeout [ 301.317635][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.385341][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.438958][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.509150][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.557911][ T8915] bond0 (unregistering): Released all slaves [ 301.773572][ T8915] tipc: Left network mode [ 301.940835][ T9641] input: syz1 as /devices/virtual/input/input23 [ 303.047697][ T5152] Bluetooth: hci0: command tx timeout [ 303.344788][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.344938][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.345287][ T9530] bridge_slave_0: entered allmulticast mode [ 303.359117][ T9530] bridge_slave_0: entered promiscuous mode [ 303.385038][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.385270][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.385519][ T9530] bridge_slave_1: entered allmulticast mode [ 303.421983][ T9530] bridge_slave_1: entered promiscuous mode [ 303.793458][ T9686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.002976][ T9690] input: syz0 as /devices/virtual/input/input24 [ 304.081830][ T8915] hsr_slave_0: left promiscuous mode [ 304.102513][ T9696] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1501'. [ 304.120882][ T8915] hsr_slave_1: left promiscuous mode [ 304.122041][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.122071][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.185762][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.185798][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.430438][ T8915] veth1_macvtap: left promiscuous mode [ 304.430573][ T8915] veth0_macvtap: left promiscuous mode [ 304.431027][ T8915] veth1_vlan: left promiscuous mode [ 304.431262][ T8915] veth0_vlan: left promiscuous mode [ 305.067660][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 305.072940][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 305.237819][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 305.258179][ T9] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 305.258211][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.258231][ T9] usb 1-1: Product: syz [ 305.258246][ T9] usb 1-1: Manufacturer: syz [ 305.258260][ T9] usb 1-1: SerialNumber: syz [ 305.267131][ T9] usb 1-1: config 0 descriptor?? [ 305.757806][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 305.763032][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.763886][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 305.763940][ T9] usb 1-1: media controller created [ 305.874103][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.459525][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 306.459539][ T9717] dtv5100: wlen = 0, aborting. [ 306.459589][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 306.459605][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 306.502063][ T9] usb 1-1: USB disconnect, device number 18 [ 306.691133][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 308.617741][ T6245] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 308.784931][ T6245] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 308.785033][ T6245] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 308.785057][ T6245] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 308.785079][ T6245] usb 1-1: config 220 has no interface number 2 [ 308.785147][ T6245] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 308.785167][ T6245] usb 1-1: config 220 interface 0 has no altsetting 0 [ 308.785180][ T6245] usb 1-1: config 220 interface 76 has no altsetting 0 [ 308.785193][ T6245] usb 1-1: config 220 interface 1 has no altsetting 0 [ 308.847783][ T6245] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 308.847821][ T6245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.847846][ T6245] usb 1-1: Product: syz [ 308.847863][ T6245] usb 1-1: Manufacturer: syz [ 308.847879][ T6245] usb 1-1: SerialNumber: syz [ 309.132597][ T6245] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 309.132635][ T6245] usb 1-1: No valid video chain found. [ 309.132701][ T6245] usb 1-1: selecting invalid altsetting 0 [ 309.211947][ T6245] usb 1-1: selecting invalid altsetting 0 [ 309.211991][ T6245] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 309.216805][ T6245] usb 1-1: USB disconnect, device number 19 [ 309.378417][ T8915] team0 (unregistering): Port device team_slave_1 removed [ 309.718380][ T8915] team0 (unregistering): Port device team_slave_0 removed [ 312.556509][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.597911][ T5904] infiniband syz1: ib_query_port failed (-19) [ 312.662335][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.555592][ T9530] team0: Port device team_slave_0 added [ 313.585865][ T9530] team0: Port device team_slave_1 added [ 314.198872][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.198892][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.198923][ T9530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.202141][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.202161][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.202191][ T9530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.821103][ T9530] hsr_slave_0: entered promiscuous mode [ 314.825390][ T9530] hsr_slave_1: entered promiscuous mode [ 314.840615][ T9530] debugfs: 'hsr0' already exists in 'hsr' [ 314.840648][ T9530] Cannot create hsr debugfs directory [ 315.597736][ T5924] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 315.754340][ T5924] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 315.754413][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.756050][ T5924] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 315.756080][ T5924] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 315.756101][ T5924] usb 1-1: Manufacturer: syz [ 315.827150][ T5924] usb 1-1: config 0 descriptor?? [ 316.067640][ T5924] rc_core: IR keymap rc-hauppauge not found [ 316.067661][ T5924] Registered IR keymap rc-empty [ 316.134519][ T5924] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 316.151693][ T5924] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 316.179822][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 316.237906][ T5924] usb 1-1: USB disconnect, device number 20 [ 316.510793][ T9530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.566108][ T9530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.596620][ T9530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.678063][ T9530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 317.126422][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.182552][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.250045][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.257699][ T8919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.309896][ T8915] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.310152][ T8915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.768059][ T9854] syzkaller1: entered promiscuous mode [ 317.768090][ T9854] syzkaller1: entered allmulticast mode [ 318.568849][ T9530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.977547][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 319.133146][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.133185][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.133229][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 319.133254][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.199686][ T9] usb 1-1: config 0 descriptor?? [ 319.647735][ T9] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 319.647778][ T9] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 319.647805][ T9] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 319.647831][ T9] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 319.647857][ T9] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 319.699110][ T9530] veth0_vlan: entered promiscuous mode [ 319.699899][ T9] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 319.774666][ T9530] veth1_vlan: entered promiscuous mode [ 319.878649][ T9] playstation 0003:054C:0DF2.000E: Invalid byte count transferred, expected 20 got 0 [ 319.878694][ T9] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense pairing info: -22 [ 319.878748][ T9] playstation 0003:054C:0DF2.000E: Failed to get MAC address from DualSense [ 319.878770][ T9] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 319.936430][ T9] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -22 [ 320.051798][ T9530] veth0_macvtap: entered promiscuous mode [ 320.066157][ T9530] veth1_macvtap: entered promiscuous mode [ 320.142033][ T5904] usb 1-1: USB disconnect, device number 21 [ 320.238562][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.280206][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.309802][ T8915] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.311302][ T8915] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.312686][ T8915] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.312989][ T8915] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.829206][ T8914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.829229][ T8914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.026994][ T8918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.027021][ T8918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.106133][ T9921] input: syz1 as /devices/virtual/input/input27 [ 321.199390][ T8597] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 321.377448][ T8597] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 321.377479][ T8597] usb 1-1: config 0 has no interface number 0 [ 321.377534][ T8597] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.377562][ T8597] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.377602][ T8597] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 321.377626][ T8597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.391369][ T8597] usb 1-1: config 0 descriptor?? [ 321.882296][ T8597] uclogic 0003:256C:006E.000F: interface is invalid, ignoring [ 321.969789][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1591'. [ 321.983430][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1591'. [ 322.116746][ T8597] usb 1-1: USB disconnect, device number 22 [ 322.810097][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.810192][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.001769][ T37] audit: type=1326 audit(1756219156.851:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10003 comm="syz.5.1620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d587debe9 code=0x0 [ 326.471868][T10034] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 326.790579][ T8581] IPVS: starting estimator thread 0... [ 326.794377][T10036] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 326.813904][ T8918] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.887608][T10040] IPVS: using max 7 ests per chain, 16800 per kthread [ 327.216745][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.250405][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.252277][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.257233][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.278293][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.327010][T10050] netlink: 'syz.5.1638': attribute type 23 has an invalid length. [ 327.717875][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.825228][ T8918] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.199477][ T8918] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.550142][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.663775][ T8918] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.111278][T10092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1657'. [ 329.111394][T10092] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1657'. [ 329.361118][ T5152] Bluetooth: hci0: command tx timeout [ 330.057691][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 330.110183][ T8918] bridge_slave_1: left allmulticast mode [ 330.110434][ T8918] bridge_slave_1: left promiscuous mode [ 330.110716][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.224269][ T8918] bridge_slave_0: left allmulticast mode [ 330.224309][ T8918] bridge_slave_0: left promiscuous mode [ 330.224586][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.256049][ T9] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 330.256081][ T9] usb 4-1: config 0 has no interface number 0 [ 330.256135][ T9] usb 4-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 330.256160][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.309778][ T9] usb 4-1: config 0 descriptor?? [ 330.737760][T10136] block nbd5: Send control failed (result -32) [ 330.738051][T10136] block nbd5: Request send failed, requeueing [ 330.793269][ T63] block nbd5: Dead connection, failed to find a fallback [ 330.793302][ T63] block nbd5: shutting down sockets [ 330.793587][ T63] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.825521][T10136] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.844059][T10136] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 330.846176][T10136] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.846315][T10136] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 331.036642][T10136] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.054499][T10136] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.054717][T10136] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 331.066751][T10136] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.067283][T10136] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 331.102668][T10136] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.105280][T10136] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.106877][T10136] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 331.149109][T10136] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.149370][T10136] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 331.184247][T10136] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.186464][T10136] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 331.216353][T10136] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 331.216389][T10136] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 331.289260][ T9] asix 4-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 331.289294][ T9] asix 4-1:0.102 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 331.289579][ T9] asix 4-1:0.102: probe with driver asix failed with error -71 [ 331.354366][ T9] usb 4-1: USB disconnect, device number 19 [ 331.437729][ T5152] Bluetooth: hci0: command tx timeout [ 332.314231][ T37] audit: type=1400 audit(1756219164.111:38): lsm=SMACK fn=smack_key_permission action=denied subject="y" object="_" requested=w pid=10159 comm="syz.0.1680" key_serial=275074852 key_desc="_uid_ses.0" [ 333.527839][ T5152] Bluetooth: hci0: command tx timeout [ 334.482063][T10196] could not open pipe file descriptor [ 335.630220][ T5152] Bluetooth: hci0: command tx timeout [ 335.794570][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.948505][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.019873][ T8918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.086721][ T8918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.126617][ T8918] bond0 (unregistering): Released all slaves [ 336.186958][T10173] batadv_slave_1: entered promiscuous mode [ 336.189845][T10182] tipc: Started in network mode [ 336.189883][T10182] tipc: Node identity ac14142f, cluster identity 4711 [ 336.196723][T10182] tipc: New replicast peer: 0.0.0.0 [ 336.218282][T10182] tipc: Enabled bearer , priority 10 [ 336.254893][T10175] batadv_slave_1: left promiscuous mode [ 336.301339][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.356211][T10185] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 336.356634][T10047] chnl_net:caif_netlink_parms(): no params data found [ 336.750104][T10224] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 336.973144][T10232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.325043][ T5924] tipc: Node number set to 2886997039 [ 337.423297][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.677741][ T5848] Bluetooth: hci0: command tx timeout [ 337.677749][ T5152] Bluetooth: hci1: command 0x0406 tx timeout [ 337.855807][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.008500][T10260] loop7: detected capacity change from 0 to 16384 [ 338.074128][T10260] loop7: detected capacity change from 16384 to 16383 [ 338.340409][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.340800][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.341088][T10047] bridge_slave_0: entered allmulticast mode [ 338.429282][T10047] bridge_slave_0: entered promiscuous mode [ 338.470298][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.470455][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.470731][T10047] bridge_slave_1: entered allmulticast mode [ 338.489828][T10047] bridge_slave_1: entered promiscuous mode [ 338.692619][T10275] openvswitch: netlink: IPv4 tun info is not correct [ 338.758055][ T8581] kernel read not supported for file /sequencer (pid: 8581 comm: kworker/1:7) [ 339.011145][ T8918] hsr_slave_0: left promiscuous mode [ 339.047731][ T8918] hsr_slave_1: left promiscuous mode [ 339.048806][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.048838][ T8918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.125620][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.125679][ T8918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.334375][ T8918] veth1_macvtap: left promiscuous mode [ 339.334506][ T8918] veth0_macvtap: left promiscuous mode [ 339.334815][ T8918] veth1_vlan: left promiscuous mode [ 339.335027][ T8918] veth0_vlan: left promiscuous mode [ 339.757804][ T5152] Bluetooth: hci0: command 0x0401 tx timeout [ 340.148879][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.600312][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.704153][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.863266][ T6245] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 341.027696][ T6245] usb 6-1: Using ep0 maxpacket: 32 [ 341.030379][ T6245] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.030414][ T6245] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.030456][ T6245] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 341.030481][ T6245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.042092][ T6245] usb 6-1: config 0 descriptor?? [ 341.164431][T10321] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 341.177613][ T9] IPVS: starting estimator thread 0... [ 341.285007][T10323] IPVS: using max 6 ests per chain, 14400 per kthread [ 341.595394][ T6245] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 341.798726][ T6245] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 342.004262][ T6245] ft260 0003:0403:6030.0010: failed to retrieve system status [ 342.004781][ T6245] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -32 [ 342.011610][ T6245] usb 6-1: USB disconnect, device number 3 [ 343.114000][ T8918] team0 (unregistering): Port device team_slave_1 removed [ 343.372121][ T8918] team0 (unregistering): Port device team_slave_0 removed [ 343.487349][T10337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1755'. [ 343.488032][T10337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1755'. [ 346.063161][T10370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.263970][T10374] atomic_op ffff88803c20ca18 conn xmit_atomic 0000000000000000 [ 346.993769][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.209692][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.477929][ T8581] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 347.644306][T10047] team0: Port device team_slave_0 added [ 347.687356][T10047] team0: Port device team_slave_1 added [ 347.697609][ T8581] usb 6-1: Using ep0 maxpacket: 32 [ 347.699980][ T8581] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.700007][ T8581] usb 6-1: config 0 has no interface number 0 [ 347.703140][ T8581] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 347.703169][ T8581] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.703190][ T8581] usb 6-1: Product: syz [ 347.703206][ T8581] usb 6-1: Manufacturer: syz [ 347.703221][ T8581] usb 6-1: SerialNumber: syz [ 347.741023][ T8581] usb 6-1: config 0 descriptor?? [ 347.752879][ T8581] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 347.752934][ T8581] usb 6-1: selecting invalid altsetting 1 [ 347.752954][ T8581] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 347.785886][ T8581] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 347.786372][ T8581] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 347.786448][ T8581] usb 6-1: media controller created [ 347.906044][ T8581] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.975583][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'. [ 348.098445][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.136533][T10403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1783'. [ 348.247049][T10404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1783'. [ 348.251852][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.251875][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.252126][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.319192][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.319213][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.320253][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.042730][T10383] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 349.059733][ T8581] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 349.059908][ T8581] zl10353_read_register: readreg error (reg=127, ret==-71) [ 349.068706][ T8581] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 349.139221][T10047] hsr_slave_0: entered promiscuous mode [ 349.140658][T10047] hsr_slave_1: entered promiscuous mode [ 349.141596][T10047] debugfs: 'hsr0' already exists in 'hsr' [ 349.141622][T10047] Cannot create hsr debugfs directory [ 349.243901][ T8581] usb 6-1: USB disconnect, device number 4 [ 349.900184][T10431] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.948162][ T8581] psmouse serio3: Failed to reset mouse on : -5 [ 350.106166][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1798'. [ 350.131347][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.134158][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.215802][T10439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.474130][T10047] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 350.518908][T10047] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 350.581955][T10047] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 350.660686][T10047] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 351.005170][T10464] netlink: 'syz.5.1808': attribute type 1 has an invalid length. [ 351.055836][ T5152] Bluetooth: hci2: unexpected cc 0x040d length: 63 > 7 [ 351.067691][ T5152] Bluetooth: hci2: unexpected event for opcode 0x040d [ 351.151939][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.204889][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.262534][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.267922][ T8911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.304860][T10470] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1811'. [ 351.315178][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.316308][ T8911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.479925][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'. [ 352.115868][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.227580][ T6245] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 352.328347][ T8597] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 352.380297][ T6245] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.382716][ T6245] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 352.382751][ T6245] usb 6-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 352.382773][ T6245] usb 6-1: Manufacturer: syz [ 352.382788][ T6245] usb 6-1: SerialNumber: syz [ 352.439185][ T6245] usb 6-1: config 0 descriptor?? [ 352.460505][ T6245] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 352.532840][ T8597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.532878][ T8597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.532921][ T8597] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 352.532946][ T8597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.562210][ T8597] usb 1-1: config 0 descriptor?? [ 352.752540][T10047] veth0_vlan: entered promiscuous mode [ 352.782650][T10047] veth1_vlan: entered promiscuous mode [ 352.897303][T10047] veth0_macvtap: entered promiscuous mode [ 352.938000][T10047] veth1_macvtap: entered promiscuous mode [ 353.006529][T10047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.046042][T10047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.075816][ T8918] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.083966][ T8597] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 353.093687][ T8597] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 353.101283][ T8918] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.103354][ T8918] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.103861][ T8918] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.298897][ T8597] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 353.362138][ T6245] usb 6-1: USB disconnect, device number 5 [ 353.711785][ T8581] misc userio: Buffer overflowed, userio client isn't keeping up [ 353.727156][ T8597] cp2112 0003:10C4:EA90.0011: error setting SMBus config [ 353.755759][ T8597] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 353.781223][ T8914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.781249][ T8914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.820250][ T8597] usb 1-1: USB disconnect, device number 23 [ 353.925743][ T8915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.925766][ T8915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.355406][T10525] netlink: 'syz.7.1831': attribute type 1 has an invalid length. [ 354.494945][T10525] bond1 (unregistering): Released all slaves [ 354.761935][ T8581] input: PS/2 Generic Mouse as /devices/serio3/input/input28 [ 355.027632][ T8581] psmouse serio3: Failed to enable mouse on [ 355.122324][ T5152] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 355.122459][ T5152] Bluetooth: hci2: Injecting HCI hardware error event [ 355.131013][ T5848] Bluetooth: hci2: hardware error 0x00 [ 355.698946][T10551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.493521][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1849'. [ 356.571522][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1849'. [ 357.289727][ T5848] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 358.958515][T10609] input input29: cannot allocate more than FF_MAX_EFFECTS effects [ 360.294038][ T5924] kernel write not supported for file /919/net/ip_vs_stats (pid: 5924 comm: kworker/0:4) [ 361.602492][T10633] Bluetooth: MGMT ver 1.23 [ 361.884728][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.907861][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.914697][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.937632][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.950782][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.047552][ T8622] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 363.197738][ T8622] usb 8-1: Using ep0 maxpacket: 8 [ 363.205716][ T8622] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 363.205749][ T8622] usb 8-1: config 179 has no interface number 0 [ 363.205809][ T8622] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 363.205838][ T8622] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 363.205867][ T8622] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 363.205904][ T8622] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 363.205951][ T8622] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 363.205975][ T8622] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.304676][T10662] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 363.676719][ T8581] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 363.677760][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 363.677893][ T59] Bluetooth: hci0: command 0x0401 tx timeout [ 363.885642][ T8581] usb 1-1: Using ep0 maxpacket: 16 [ 363.969269][ T8581] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 363.969303][ T8581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.969325][ T8581] usb 1-1: Product: syz [ 363.969339][ T8581] usb 1-1: Manufacturer: syz [ 363.969355][ T8581] usb 1-1: SerialNumber: syz [ 364.029003][ T8581] usb 1-1: config 0 descriptor?? [ 364.052737][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 364.052816][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 364.052873][ T8622] usb 8-1: USB disconnect, device number 2 [ 364.078142][ T59] Bluetooth: hci3: command tx timeout [ 364.092235][ T8581] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 364.276923][ T8581] usb 1-1: USB disconnect, device number 24 [ 364.426481][T10635] chnl_net:caif_netlink_parms(): no params data found [ 364.576231][T10679] loop2: detected capacity change from 0 to 7 [ 364.596185][T10679] Dev loop2: unable to read RDB block 7 [ 364.596250][T10679] loop2: unable to read partition table [ 364.596491][T10679] loop2: partition table beyond EOD, truncated [ 364.596511][T10679] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 364.727527][ T8919] bridge_slave_1: left allmulticast mode [ 364.727562][ T8919] bridge_slave_1: left promiscuous mode [ 364.732634][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.809269][ T8919] bridge_slave_0: left allmulticast mode [ 364.809306][ T8919] bridge_slave_0: left promiscuous mode [ 364.809690][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.987676][ T5924] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 365.153287][ T5924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.153319][ T5924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.156947][ T5924] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 365.156974][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 365.156992][ T5924] usb 6-1: SerialNumber: syz [ 365.428220][ T5924] usb 6-1: 0:2 : does not exist [ 365.539507][ T5924] usb 6-1: USB disconnect, device number 6 [ 365.837908][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 366.163825][ T5848] Bluetooth: hci3: command tx timeout [ 367.469375][ T8919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.541495][ T8919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.589001][ T8919] bond0 (unregistering): Released all slaves [ 367.742650][T10708] bridge0: port 2(gretap0) entered blocking state [ 367.764013][T10708] bridge0: port 2(gretap0) entered disabled state [ 367.831161][T10708] gretap0: entered allmulticast mode [ 367.836650][T10708] gretap0: entered promiscuous mode [ 368.104332][T10716] loop8: detected capacity change from 0 to 8 [ 368.105354][T10716] Dev loop8: unable to read RDB block 8 [ 368.105386][T10716] loop8: unable to read partition table [ 368.105559][T10716] loop8: partition table beyond EOD, truncated [ 368.105573][T10716] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 368.242355][ T5848] Bluetooth: hci3: command tx timeout [ 368.427762][ T8919] tipc: Disabling bearer [ 368.435221][ T8919] tipc: Left network mode [ 368.441587][T10709] gretap0: left allmulticast mode [ 368.441641][T10709] gretap0: left promiscuous mode [ 368.447308][T10709] bridge0: port 2(gretap0) entered disabled state [ 368.977914][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.978066][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.978340][T10635] bridge_slave_0: entered allmulticast mode [ 368.981529][T10635] bridge_slave_0: entered promiscuous mode [ 369.000953][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.001184][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.001427][T10635] bridge_slave_1: entered allmulticast mode [ 369.024362][T10635] bridge_slave_1: entered promiscuous mode [ 369.177548][ T8597] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 369.340429][ T8597] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 369.340555][ T8597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.340585][ T8597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.340607][ T8597] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 369.345858][ T8597] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 369.345889][ T8597] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 369.345910][ T8597] usb 6-1: Manufacturer: syz [ 369.429840][ T8597] usb 6-1: config 0 descriptor?? [ 369.795499][T10635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.878814][ T8597] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 369.946791][T10635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.973788][ T8597] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 370.166518][ T8597] usb 6-1: USB disconnect, device number 7 [ 370.328187][ T5848] Bluetooth: hci3: command tx timeout [ 370.989184][ T8919] hsr_slave_0: left promiscuous mode [ 371.069394][ T8919] hsr_slave_1: left promiscuous mode [ 371.070517][ T8919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.151897][ T8919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.998010][ T8592] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 372.177609][ T8592] usb 1-1: Using ep0 maxpacket: 32 [ 372.184272][ T8592] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 372.184306][ T8592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.193423][ T8592] usb 1-1: config 0 descriptor?? [ 372.296170][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1938'. [ 372.397691][ T5848] Bluetooth: hci3: command tx timeout [ 372.439187][ T8592] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 372.443926][ T8592] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.445173][ T8592] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 372.445238][ T8592] usb 1-1: media controller created [ 372.480018][ T8592] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.649640][ T8592] az6027: usb out operation failed. (-71) [ 372.650077][ T8592] az6027: usb out operation failed. (-71) [ 372.650092][ T8592] stb0899_attach: Driver disabled by Kconfig [ 372.650180][ T8592] az6027: no front-end attached [ 372.650180][ T8592] [ 372.651834][ T8592] az6027: usb out operation failed. (-71) [ 372.651852][ T8592] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 372.655756][ T8592] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 372.665124][ T8592] dvb-usb: schedule remote query interval to 400 msecs. [ 372.665147][ T8592] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 372.682000][ T8592] usb 1-1: USB disconnect, device number 25 [ 372.931421][ T8592] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 374.229440][ T8919] team0 (unregistering): Port device team_slave_1 removed [ 374.520091][ T8919] team0 (unregistering): Port device team_slave_0 removed [ 377.448101][T10635] team0: Port device team_slave_0 added [ 377.513304][T10794] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1938'. [ 377.517361][T10635] team0: Port device team_slave_1 added [ 377.940442][T10635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.940464][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.940495][T10635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.017770][T10635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.017790][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.017822][T10635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.804956][T10635] hsr_slave_0: entered promiscuous mode [ 378.806442][T10635] hsr_slave_1: entered promiscuous mode [ 378.832014][T10635] debugfs: 'hsr0' already exists in 'hsr' [ 378.832049][T10635] Cannot create hsr debugfs directory [ 379.295272][T10850] loop7: detected capacity change from 0 to 7 [ 379.310547][T10850] Dev loop7: unable to read RDB block 7 [ 379.310598][T10850] loop7: unable to read partition table [ 379.310847][T10850] loop7: partition table beyond EOD, truncated [ 379.310867][T10850] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 379.578444][T10858] loop8: detected capacity change from 0 to 8 [ 379.585725][T10858] Dev loop8: unable to read RDB block 8 [ 379.585775][T10858] loop8: unable to read partition table [ 379.586029][T10858] loop8: partition table beyond EOD, truncated [ 379.586049][T10858] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 379.622608][T10854] vlan2: entered allmulticast mode [ 379.622632][T10854] team0: entered allmulticast mode [ 379.622646][T10854] team_slave_0: entered allmulticast mode [ 379.622668][T10854] team_slave_1: entered allmulticast mode [ 380.169771][T10874] netlink: 'syz.7.1970': attribute type 1 has an invalid length. [ 380.511714][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1974'. [ 381.015151][T10889] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1976'. [ 381.031753][T10886] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1976'. [ 381.048716][T10890] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.087174][T10635] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 381.154454][T10635] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 381.241108][T10635] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 381.315557][T10892] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 381.322651][T10635] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 381.392904][T10890] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.729733][T10890] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.761937][T10890] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.906171][T10635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.981640][T10635] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.010404][ T8915] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.017687][ T8915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.059954][ T8915] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.060114][ T8915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.232980][T10635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.243984][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.244066][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.397724][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 384.578891][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.671260][T10635] veth0_vlan: entered promiscuous mode [ 384.710210][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.748450][T10635] veth1_vlan: entered promiscuous mode [ 384.836221][T10635] veth0_macvtap: entered promiscuous mode [ 384.863537][T10635] veth1_macvtap: entered promiscuous mode [ 384.940919][T10635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.021960][T10635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.089632][ T8915] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.106372][ T8915] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.132366][ T8915] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.132643][ T8915] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.000846][ T8911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.000872][ T8911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.138519][T10990] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2012'. [ 386.343164][ T8911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.343184][ T8911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.696607][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.897879][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.009980][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.261223][T11071] dummy0: entered promiscuous mode [ 389.264040][T11071] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 389.290650][T11071] hsr1: entered allmulticast mode [ 389.290678][T11071] dummy0: entered allmulticast mode [ 389.290711][T11071] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 389.935273][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.992452][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.654153][T11119] bridge0: entered promiscuous mode [ 391.702616][T11119] bridge0: left promiscuous mode [ 392.274264][T11148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2074'. [ 392.274303][T11148] netlink: 'syz.2.2074': attribute type 7 has an invalid length. [ 392.274318][T11148] netlink: 'syz.2.2074': attribute type 8 has an invalid length. [ 392.274331][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'. [ 392.444070][T11148] gretap0: entered promiscuous mode [ 392.455895][T11148] batadv_slave_1: entered promiscuous mode [ 392.498176][T11148] gretap0: left promiscuous mode [ 392.576785][T11148] batadv_slave_1: left promiscuous mode [ 393.032633][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.865929][T11197] netlink: 'syz.8.2093': attribute type 3 has an invalid length. [ 393.865956][T11197] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2093'. [ 393.899667][T11194] netlink: 'syz.0.2094': attribute type 29 has an invalid length. [ 393.901173][T11198] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2094'. [ 393.911017][T11195] netlink: 'syz.0.2094': attribute type 29 has an invalid length. [ 395.623103][T11235] netlink: 'syz.8.2111': attribute type 3 has an invalid length. [ 395.875594][T11243] input: syz1 as /devices/virtual/input/input31 [ 395.875634][T11243] input: failed to attach handler leds to device input31, error: -6 [ 396.332218][ T37] audit: type=1326 audit(1756219228.191:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.332366][ T37] audit: type=1326 audit(1756219228.191:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.332824][ T37] audit: type=1326 audit(1756219228.191:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.333436][ T37] audit: type=1326 audit(1756219228.191:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.333651][ T37] audit: type=1326 audit(1756219228.191:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.334030][ T37] audit: type=1326 audit(1756219228.191:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.334344][ T37] audit: type=1326 audit(1756219228.191:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.334630][ T37] audit: type=1326 audit(1756219228.191:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.492635][ T37] audit: type=1326 audit(1756219228.351:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.554894][ T37] audit: type=1326 audit(1756219228.411:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11259 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe7adebe9 code=0x7ffc0000 [ 396.795025][T11273] 9pnet: p9_errstr2errno: server reported unknown error [ 396.938573][T11265] syzkaller1: entered promiscuous mode [ 396.938762][T11265] syzkaller1: entered allmulticast mode [ 396.943086][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2126'. [ 396.987510][ T8581] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 397.142800][ T8581] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 397.142866][ T8581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.144413][ T8581] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 397.144443][ T8581] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 397.144465][ T8581] usb 1-1: Manufacturer: syz [ 397.191059][ T8581] usb 1-1: config 0 descriptor?? [ 397.277639][ T8581] rc_core: IR keymap rc-hauppauge not found [ 397.277662][ T8581] Registered IR keymap rc-empty [ 397.279327][ T8581] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 397.282100][ T8581] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 397.475954][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 397.548403][ T8581] usb 1-1: USB disconnect, device number 26 [ 398.107825][ T8622] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 398.275532][ T8622] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 398.275566][ T8622] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.316848][ T8622] usb 8-1: config 0 descriptor?? [ 398.334660][ T8622] cp210x 8-1:0.0: cp210x converter detected [ 398.681172][T11311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.742789][ T8622] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 398.767915][ T8622] usb 8-1: cp210x converter now attached to ttyUSB0 [ 398.957139][ T8581] usb 8-1: USB disconnect, device number 3 [ 398.987578][ T8597] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 399.002509][ T8581] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 399.120126][ T8581] cp210x 8-1:0.0: device disconnected [ 399.149333][ T8597] usb 6-1: Using ep0 maxpacket: 16 [ 399.160620][ T8597] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 399.160660][ T8597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.160683][ T8597] usb 6-1: Product: syz [ 399.160700][ T8597] usb 6-1: Manufacturer: syz [ 399.160718][ T8597] usb 6-1: SerialNumber: syz [ 399.191691][ T8597] usb 6-1: config 0 descriptor?? [ 399.219504][ T8597] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 399.421036][ T8597] gp8psk: usb in 128 operation failed. [ 399.428654][ T8597] gp8psk: usb in 137 operation failed. [ 399.428686][ T8597] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.429736][ T8597] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 399.429806][ T8597] usb 6-1: media controller created [ 399.653946][ T8597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.794340][ T8597] gp8psk_fe: Frontend revision 1 attached [ 399.795647][ T8597] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 399.805921][ T8597] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 400.182244][ T8597] gp8psk: usb in 138 operation failed. [ 400.182271][ T8597] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 400.182286][ T8597] gp8psk: found Genpix USB device pID = 201 (hex) [ 400.382462][ T8601] usb 6-1: USB disconnect, device number 8 [ 400.786548][ T8601] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 400.948535][T11363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.948651][T11363] IPv6: NLM_F_CREATE should be set when creating new route [ 400.948688][T11363] IPv6: NLM_F_CREATE should be set when creating new route [ 401.346837][T11367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.678269][T11381] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 401.678318][T11381] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 401.744555][T11381] overlayfs: conflicting lowerdir path [ 402.997762][ T8601] IPVS: starting estimator thread 0... [ 403.097623][T11418] IPVS: using max 7 ests per chain, 16800 per kthread [ 404.740867][T11467] geneve2: entered promiscuous mode [ 404.741282][T11467] geneve2: entered allmulticast mode [ 405.247831][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2211'. [ 405.305034][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2212'. [ 406.186151][T11514] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2227'. [ 406.743145][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 406.743166][ T37] audit: type=1326 audit(1756219238.601:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11527 comm="syz.2.2234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff904b6ebe9 code=0x0 [ 406.985210][ T6245] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 407.075486][ T6245] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 407.417056][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2244'. [ 407.639199][ T37] audit: type=1326 audit(1756219239.501:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 407.639259][ T37] audit: type=1326 audit(1756219239.501:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 407.647581][ T37] audit: type=1326 audit(1756219239.501:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 407.648328][ T37] audit: type=1326 audit(1756219239.501:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 407.648383][ T37] audit: type=1326 audit(1756219239.511:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 407.668924][ T37] audit: type=1326 audit(1756219239.531:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 407.668985][ T37] audit: type=1326 audit(1756219239.531:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 407.680065][ T37] audit: type=1326 audit(1756219239.531:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 407.680148][ T37] audit: type=1326 audit(1756219239.531:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11556 comm="syz.5.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f8d587debe9 code=0x7ffc0000 [ 408.011061][T11561] netlink: 'syz.0.2248': attribute type 34 has an invalid length. [ 408.536600][T11569] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 [#1] SMP KASAN PTI [ 408.536629][T11569] KASAN: null-ptr-deref in range [0x0000000000000438-0x000000000000043f] [ 408.536666][T11569] CPU: 1 UID: 0 PID: 11569 Comm: syz.0.2251 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.536692][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.536708][T11569] RIP: 0010:h5_recv+0x146/0x910 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 408.536731][T11569] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 dc 84 35 fa 4d 8b 65 00 31 ff 4c 89 [ 408.536751][T11569] RSP: 0018:ffffc900041cfc40 EFLAGS: 00010202 [ 408.536772][T11569] RAX: dffffc0000000000 RBX: 0000000000000428 RCX: 0000000000000087 [ 408.536787][T11569] RDX: 0000000000000086 RSI: 0000000000000001 RDI: 0000000000000000 [ 408.536800][T11569] RBP: ffffc900041cfd60 R08: 0000000000000000 R09: 0000000000000000 [ 408.536814][T11569] R10: dffffc0000000000 R11: ffffffff87e80d00 R12: 0000000000000001 [ 408.536830][T11569] R13: 0000000000000438 R14: ffff88801de91810 R15: ffffc900041cfe00 [ 408.536848][T11569] FS: 00007fcfe5d256c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 408.536875][T11569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.536891][T11569] CR2: 00007fcfe5d24f98 CR3: 0000000026958000 CR4: 00000000003526f0 [ 408.536910][T11569] Call Trace: [ 408.536918][T11569] [ 408.536934][T11569] ? __pfx_h5_recv+0x10/0x10 [ 408.536952][T11569] ? rcu_read_lock_any_held+0xb3/0x120 [ 408.536974][T11569] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 408.536995][T[ 408.536995][T11569] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 408.537025][T11569] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 408.537060][T11569] hci_uart_tty_receive+0x191/0x220 [ 408.537090][T11569] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 408.537119][T11569] tiocsti+0x23c/0x2c0 [ 408.537152][T11569] ? __pfx_tiocsti+0x10/0x10 [ 408.537184][T11569] ? __fget_files+0x2a/0x420 [ 408.537216][T11569] ? __fget_files+0x3a6/0x420 [ 408.537247][T11569] ? __fget_files+0x2a/0x420 [ 408.537279][T11569] tty_ioctl+0x62c/0xde0 [ 408.537308][T11569] ? __pfx_tty_ioctl+0x10/0x10 [ 408.537338][T11569] __se_sys_ioctl+0xfc/0x170 [ 408.537368][T11569] do_syscall_64+0xfa/0x3b0 [ 408.537394][T11569] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.537421][T11569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.537442][T11569] ? clear_bhb_loop+0x60/0xb0 [ 408.537465][T11569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.537485][T11569] RIP: 0033:0x7fcfe7adebe9 [ 408.537503][T11569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.537521][T11569] RSP: 002b:00007fcfe5d25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.537543][T11569] RAX: ffffffffffffffda RBX: 00007fcfe7d06090 RCX: 00007fcfe7adebe9 [ 408.537559][T11569] RDX: 00002000000001c0 RSI: 0000000000005412 RDI: 0000000000000004 [ 408.537582][T11569] RBP: 00007fcfe7b61e19 R08: 0000000000000000 R09: 0000000000000000 [ 408.537596][T11569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.537610][T11569] R13: 00007fcfe7d06128 R14: 00007fcfe7d06090 R15: 00007fff13014188 [ 408.537637][T11569] [ 408.537646][T11569] Modules linked in: [ 408.537723][T11569] ---[ end trace 0000000000000000 ]--- [ 408.710161][T11569] RIP: 0010:h5_recv+0x146/0x910 [ 408.710199][T11569] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 dc 84 35 fa 4d 8b 65 00 31 ff 4c 89 [ 408.710223][T11569] RSP: 0018:ffffc900041cfc40 EFLAGS: 00010202 [ 408.710248][T11569] RAX: dffffc0000000000 RBX: 0000000000000428 RCX: 0000000000000087 [ 408.710267][T11569] RDX: 0000000000000086 RSI: 0000000000000001 RDI: 0000000000000000 [ 408.710283][T11569] RBP: ffffc900041cfd60 R08: 0000000000000000 R09: 0000000000000000 [ 408.710302][T11569] R10: dffffc0000000000 R11: ffffffff87e80d00 R12: 0000000000000001 [ 408.710321][T11569] R13: 0000000000000438 R14: ffff88801de91810 R15: ffffc900041cfe00 [ 408.710340][T11569] FS: 00007fcfe5d256c0(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 408.710362][T11569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.710380][T11569] CR2: 00007ffe21d56cdc CR3: 0000000026958000 CR4: 00000000003526f0 [ 408.710405][T11569] Kernel panic - not syncing: Fatal exception [ 408.710754][T11569] Kernel Offset: disabled