last executing test programs: 6m40.986381967s ago: executing program 3 (id=4349): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000001280)) 6m40.829887736s ago: executing program 3 (id=4354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x14200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x44}}, 0x0) 6m40.555748701s ago: executing program 3 (id=4360): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0xfffffffd}, {0x5, 0x8, 0x20}, {0x5c, 0xffff}, {0x0, 0x59}, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}) 6m40.336431941s ago: executing program 3 (id=4367): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m40.145859547s ago: executing program 3 (id=4372): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6m40.033797637s ago: executing program 3 (id=4376): r0 = fsopen(&(0x7f0000000280)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='acl', &(0x7f0000001840)=']', 0x1) 6m24.779681542s ago: executing program 32 (id=4376): r0 = fsopen(&(0x7f0000000280)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='acl', &(0x7f0000001840)=']', 0x1) 5m7.290402227s ago: executing program 2 (id=5879): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 5m6.606363317s ago: executing program 2 (id=5896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 5m6.441430734s ago: executing program 2 (id=5900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m6.268241326s ago: executing program 2 (id=5905): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 5m6.107173505s ago: executing program 2 (id=5909): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5, 0x401, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f645dcde0a4f60ec"}}, 0x48}}, 0x0) 5m5.782207273s ago: executing program 2 (id=5915): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local}, {0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, r1}}, 0x48) 5m5.457554635s ago: executing program 33 (id=5915): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local}, {0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, r1}}, 0x48) 36.01430152s ago: executing program 1 (id=10900): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) 35.849314365s ago: executing program 1 (id=10903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2e8, 0x30, 0x300, 0x71bd23, 0x25dfdbff, {}, [{0x2d4, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0x5d, 0x8, {0x1, 0x3}}}}, @m_csum={0x30, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x170, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x143, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x104, 0xd, 0x0, 0x0, {{0xb}, {0x2, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2b08}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xfffffffd, 0x4, 0x9, 0x4}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa, 0x3d5, 0x1, 0x101, 0x3ff}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd06a, 0x3, 0x5, 0x0, 0x986}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x38, 0x6, "8c7537c88dc5f9f594de6d41eb6b1259fbc1655d0043e27dfc518abec9ff95e91f3f93aeed08d10775f527b7007c9e4aa8e5d6cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x345}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 35.631861067s ago: executing program 1 (id=10908): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 35.451103695s ago: executing program 1 (id=10912): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 35.29901345s ago: executing program 1 (id=10917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1c00}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 35.058587869s ago: executing program 1 (id=10922): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0xc, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000a40)) 34.848009356s ago: executing program 34 (id=10922): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0xc, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000a40)) 8.098695938s ago: executing program 6 (id=11299): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) 7.807326147s ago: executing program 6 (id=11303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x40}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 7.549780566s ago: executing program 6 (id=11305): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000001c00)=ANY=[@ANYBLOB='b *:4\t', @ANYRES32], 0xa) 7.348343007s ago: executing program 6 (id=11307): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r1}}, 0x20) 7.134054156s ago: executing program 6 (id=11309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009c02"]) 6.679835861s ago: executing program 6 (id=11312): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "94c408213d36be01d7000000000000e1100ad985544600", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.747238229s ago: executing program 0 (id=11342): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x3415, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 3.61398628s ago: executing program 0 (id=11345): r0 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}]}, 0x38}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.381519391s ago: executing program 0 (id=11349): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x4) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000240)=0x6) 3.182118805s ago: executing program 7 (id=11353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000000000008602"]) 2.857684463s ago: executing program 7 (id=11358): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x80fe) 2.782041718s ago: executing program 5 (id=11359): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.713240642s ago: executing program 5 (id=11361): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 2.552033657s ago: executing program 5 (id=11362): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.401860071s ago: executing program 7 (id=11364): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x79bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}}, 0x0) 1.938468577s ago: executing program 4 (id=11369): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e7, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close(r1) 1.81138817s ago: executing program 4 (id=11370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000380)=0x3, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) 1.723954853s ago: executing program 4 (id=11371): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000ed000000000000feffffff851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000002408000001b000001800000066e90000000000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) 1.570210982s ago: executing program 4 (id=11372): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 1.423684474s ago: executing program 5 (id=11373): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0xf8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xbc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa4, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x6c, 0x17, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x11, 0x6, "0c667158e5bd4f4c7258693ff7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 457.867239ms ago: executing program 7 (id=11374): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 354.974051ms ago: executing program 4 (id=11375): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 340.972484ms ago: executing program 5 (id=11376): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0, 0x8}, {@my=0x1, 0x7ffffd}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) 263.37587ms ago: executing program 0 (id=11377): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r1, 0x0, 0x8}) 262.964127ms ago: executing program 7 (id=11378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 188.212806ms ago: executing program 0 (id=11379): socket$inet_sctp(0x2, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 183.260534ms ago: executing program 5 (id=11380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x703d6000) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x597940, 0x8, 0x3}, 0x18) 166.001857ms ago: executing program 4 (id=11381): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 82.889437ms ago: executing program 7 (id=11382): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000f00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) umount2(&(0x7f0000000040)='.\x00', 0x1) 0s ago: executing program 0 (id=11383): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x80fe) kernel console output (not intermixed with test programs): ss `syz.4.9513'. [ 582.249803][T26519] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9513'. [ 582.272673][T26519] netlink: 'syz.4.9513': attribute type 6 has an invalid length. [ 582.281961][ T2150] kernel write not supported for file /stat (pid: 2150 comm: kworker/1:2) [ 582.296222][T26519] netlink: 'syz.4.9513': attribute type 5 has an invalid length. [ 582.309794][T26519] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9513'. [ 582.348866][ T5906] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 582.539452][ T5906] usb 2-1: config 0 has no interfaces? [ 582.547569][ T5906] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 582.575551][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.585568][ T5906] usb 2-1: Product: syz [ 582.596256][ T5906] usb 2-1: Manufacturer: syz [ 582.600979][ T5906] usb 2-1: SerialNumber: syz [ 582.615470][ T5906] usb 2-1: config 0 descriptor?? [ 582.623208][T26534] netlink: 209588 bytes leftover after parsing attributes in process `syz.6.9522'. [ 582.742097][ T30] audit: type=1326 audit(1752553364.804:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26537 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a378e929 code=0x7ffc0000 [ 582.821050][ T30] audit: type=1326 audit(1752553364.804:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26537 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a378e929 code=0x7ffc0000 [ 582.870458][ T30] audit: type=1326 audit(1752553364.804:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26537 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f00a378e929 code=0x7ffc0000 [ 582.897410][ T2150] usb 2-1: USB disconnect, device number 80 [ 582.928065][ T30] audit: type=1326 audit(1752553364.804:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26537 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a378e929 code=0x7ffc0000 [ 582.949722][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.043333][ T30] audit: type=1326 audit(1752553364.804:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26537 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a378e929 code=0x7ffc0000 [ 583.065052][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.915171][ T5906] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 584.075000][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 584.077596][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.077629][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.077665][ T5906] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 584.077687][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.080401][ T5906] usb 7-1: config 0 descriptor?? [ 584.510716][ T5906] greenasia 0003:0E8F:0012.005B: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.6-1/input0 [ 584.546447][ T5906] greenasia 0003:0E8F:0012.005B: no inputs found [ 584.604848][ T5891] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 584.653103][T26617] syz.4.9560 uses old SIOCAX25GETINFO [ 584.702398][ T5906] usb 7-1: USB disconnect, device number 28 [ 584.783967][T26621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9564'. [ 584.794677][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 584.798302][T26621] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 584.802134][ T5891] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.818676][T26621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.828990][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 584.845804][ T5891] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 584.860617][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.885556][ T5891] usb 2-1: config 0 descriptor?? [ 585.308115][ T5891] elecom 0003:056E:00FF.005C: item fetching failed at offset 5/8 [ 585.349921][ T5891] elecom 0003:056E:00FF.005C: probe with driver elecom failed with error -22 [ 585.514634][ T5891] usb 2-1: USB disconnect, device number 81 [ 585.674747][ T43] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 585.823971][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 585.835200][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 585.837176][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.870296][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.889682][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 585.909376][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 585.920483][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.941821][ T43] usb 5-1: config 0 descriptor?? [ 586.104251][ T5891] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 586.283979][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 586.293059][ T5891] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 586.312342][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.325469][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.353418][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 586.379403][ T5891] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 586.396248][ T43] lg-g15 0003:046D:C227.005D: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.4-1/input0 [ 586.419714][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.465803][ T5891] usb 7-1: config 0 descriptor?? [ 586.612129][ T978] usb 5-1: USB disconnect, device number 73 [ 586.700585][T26713] netlink: 'syz.1.9608': attribute type 1 has an invalid length. [ 586.724045][T26713] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9608'. [ 586.742052][T26713] netlink: 'syz.1.9608': attribute type 1 has an invalid length. [ 586.903306][ T5891] redragon 0003:0C45:760B.005E: unknown main item tag 0x6 [ 586.926593][ T5891] redragon 0003:0C45:760B.005E: item fetching failed at offset 7/133 [ 586.938942][ T5891] redragon 0003:0C45:760B.005E: probe with driver redragon failed with error -22 [ 587.127183][ T5891] usb 7-1: USB disconnect, device number 29 [ 587.755369][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 587.789350][T26772] blktrace: Concurrent blktraces are not allowed on sg0 [ 587.877201][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 588.182959][ T2150] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 588.327045][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9651'. [ 588.347514][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9651'. [ 588.362881][ T2150] usb 7-1: Using ep0 maxpacket: 32 [ 588.377102][ T2150] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.412822][ T2150] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.449680][ T2150] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 588.475739][ T2150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.503187][ T2150] usb 7-1: config 0 descriptor?? [ 588.683047][ T978] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 588.855572][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 588.863974][ T978] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.872005][ T978] usb 5-1: config 0 has no interface number 0 [ 588.885829][ T978] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 588.897750][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.906400][ T978] usb 5-1: Product: syz [ 588.910673][ T978] usb 5-1: Manufacturer: syz [ 588.920586][ T978] usb 5-1: SerialNumber: syz [ 588.927112][ T2150] aquacomputer_d5next 0003:0C70:F0B6.005F: unknown main item tag 0x0 [ 588.931944][ T978] usb 5-1: config 0 descriptor?? [ 588.948200][ T2150] aquacomputer_d5next 0003:0C70:F0B6.005F: unknown main item tag 0x0 [ 588.951246][ T978] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 588.959538][ T2150] aquacomputer_d5next 0003:0C70:F0B6.005F: unknown main item tag 0x0 [ 588.971995][ T978] usb 5-1: selecting invalid altsetting 1 [ 588.981349][ T978] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 588.983805][ T2150] aquacomputer_d5next 0003:0C70:F0B6.005F: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 589.011983][ T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 589.043807][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 589.052166][ T978] usb 5-1: media controller created [ 589.101045][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.150285][ T2150] usb 7-1: USB disconnect, device number 30 [ 589.195768][ T978] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 589.205848][ T978] zl10353_read_register: readreg error (reg=127, ret==-71) [ 589.218041][ T978] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 589.285285][T26836] xt_CT: No such helper "pptp" [ 589.312551][ T978] usb 5-1: USB disconnect, device number 74 [ 589.736798][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 589.932034][T26861] netlink: 'syz.0.9676': attribute type 1 has an invalid length. [ 589.938328][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 589.974209][T26861] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9676'. [ 590.017061][T26860] netlink: zone id is out of range [ 590.022724][T26861] netlink: 'syz.0.9676': attribute type 1 has an invalid length. [ 590.052351][T26860] netlink: zone id is out of range [ 590.053615][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 590.092164][T26860] netlink: zone id is out of range [ 590.097461][T26860] netlink: zone id is out of range [ 590.152185][T26860] netlink: zone id is out of range [ 590.157481][T26860] netlink: zone id is out of range [ 590.170777][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 590.174773][T26860] netlink: zone id is out of range [ 590.218166][T26869] netlink: 'syz.1.9681': attribute type 21 has an invalid length. [ 590.232632][T26860] netlink: zone id is out of range [ 590.238822][T26860] netlink: zone id is out of range [ 590.303049][T26860] netlink: zone id is out of range [ 590.381105][T26876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9684'. [ 590.701134][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 590.770298][T26894] netlink: 'syz.0.9692': attribute type 4 has an invalid length. [ 590.948634][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 591.226831][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 591.607610][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 591.688854][T26946] ptrace attach of "./syz-executor exec"[8886] was attempted by ""[26946] [ 591.906548][ T978] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 592.071292][ T978] usb 7-1: Using ep0 maxpacket: 16 [ 592.084250][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.112848][ T978] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 592.139950][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.163283][ T978] usb 7-1: config 0 descriptor?? [ 592.588369][ T978] apple 0003:05AC:024B.0060: fixing up MacBook JIS keyboard report descriptor [ 592.602002][ T978] apple 0003:05AC:024B.0060: item fetching failed at offset 2/69 [ 592.617209][ T978] apple 0003:05AC:024B.0060: parse failed [ 592.624926][ T978] apple 0003:05AC:024B.0060: probe with driver apple failed with error -22 [ 592.819764][ T43] usb 7-1: USB disconnect, device number 31 [ 592.837052][ T5891] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 592.974579][ T5906] kernel write not supported for file /2276/attr/exec (pid: 5906 comm: kworker/1:4) [ 593.014804][ T5891] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 593.028940][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.032104][ T2150] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 593.041080][ T5891] usb 2-1: Product: syz [ 593.049991][ T5891] usb 2-1: Manufacturer: syz [ 593.065565][ T5891] usb 2-1: SerialNumber: syz [ 593.074849][ T5891] usb 2-1: config 0 descriptor?? [ 593.092860][ T5891] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 593.202655][ T2150] usb 5-1: Using ep0 maxpacket: 16 [ 593.214235][ T2150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.236143][ T2150] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 593.246195][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.261376][ T2150] usb 5-1: config 0 descriptor?? [ 593.446016][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 593.526652][ T5891] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 593.695107][ T2150] apple 0003:05AC:024B.0061: item fetching failed at offset 2/69 [ 593.742731][ T2150] apple 0003:05AC:024B.0061: parse failed [ 593.748605][ T2150] apple 0003:05AC:024B.0061: probe with driver apple failed with error -22 [ 593.768303][T27042] syz.0.9760 (27042): /proc/27041/oom_adj is deprecated, please use /proc/27041/oom_score_adj instead. [ 593.780644][ T5960] usb 2-1: USB disconnect, device number 82 [ 593.887356][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 593.896752][ T2150] usb 5-1: USB disconnect, device number 75 [ 593.940981][T23963] Bluetooth: hci3: command 0x0405 tx timeout [ 594.063151][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 594.204769][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 594.298634][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 594.342646][T27065] futex_wake_op: syz.6.9771 tries to shift op by -1; fix this program [ 594.444096][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 594.528895][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 595.371172][T27119] Invalid ELF header magic: != ELF [ 595.384798][T27121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9797'. [ 595.829623][ T43] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 595.979170][ T2150] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 595.991305][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.002673][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.012797][ T43] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 596.022760][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.035139][ T43] usb 7-1: config 0 descriptor?? [ 596.129608][ T2150] usb 6-1: Using ep0 maxpacket: 8 [ 596.140695][ T2150] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.152020][ T2150] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 596.162634][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.176776][ T2150] usb 6-1: config 0 descriptor?? [ 596.209157][ T2150] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 596.427162][T27153] net_ratelimit: 6 callbacks suppressed [ 596.427177][T27153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.451995][ T5960] usb 6-1: USB disconnect, device number 38 [ 596.479724][ T43] stadia 0003:18D1:9400.0062: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.6-1/input0 [ 596.500408][ T43] stadia 0003:18D1:9400.0062: no inputs found [ 596.524025][ T43] stadia 0003:18D1:9400.0062: force feedback init failed [ 596.666476][ T43] usb 7-1: USB disconnect, device number 32 [ 596.835380][T27164] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 596.847295][T27164] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 597.287756][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 597.423824][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 597.501415][T27189] netlink: 'syz.0.9830': attribute type 16 has an invalid length. [ 597.540117][T27189] netlink: 'syz.0.9830': attribute type 3 has an invalid length. [ 597.558769][T27189] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.9830'. [ 597.641408][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 597.795331][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 597.902680][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 598.547997][ T5960] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 598.710869][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 598.737693][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 598.757643][ T5960] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 598.766756][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.800224][ T5960] usb 2-1: config 0 descriptor?? [ 598.806020][T27240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 598.886181][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 599.209900][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 599.251720][ T5960] cherry 0003:046A:0023.0063: unbalanced collection at end of report description [ 599.283174][ T5960] cherry 0003:046A:0023.0063: probe with driver cherry failed with error -22 [ 599.345843][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 599.458652][ T5960] usb 2-1: USB disconnect, device number 83 [ 599.683846][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 599.713226][T27280] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9872'. [ 599.753787][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 599.788614][ T978] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 599.950332][ T978] usb 6-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.961699][ T978] usb 6-1: config 0 interface 0 has no altsetting 0 [ 599.968827][ T978] usb 6-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 599.978415][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.990888][ T978] usb 6-1: config 0 descriptor?? [ 600.087032][ T5960] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 600.265919][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.286367][ T5960] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 600.307278][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.323261][ T5960] usb 7-1: config 0 descriptor?? [ 600.415022][ T978] semitek 0003:1EA7:0907.0064: unknown main item tag 0x0 [ 600.429478][ T978] semitek 0003:1EA7:0907.0064: unknown main item tag 0x0 [ 600.438826][ T978] semitek 0003:1EA7:0907.0064: unknown main item tag 0x0 [ 600.446471][ T978] semitek 0003:1EA7:0907.0064: unknown main item tag 0x0 [ 600.455266][ T978] semitek 0003:1EA7:0907.0064: unknown main item tag 0x0 [ 600.464820][ T978] semitek 0003:1EA7:0907.0064: unknown main item tag 0x0 [ 600.475824][ T978] semitek 0003:1EA7:0907.0064: unknown main item tag 0x0 [ 600.492958][ T978] semitek 0003:1EA7:0907.0064: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.5-1/input0 [ 600.619647][ T978] usb 6-1: USB disconnect, device number 39 [ 600.833326][T27317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9890'. [ 600.844076][T27317] netlink: 'syz.4.9890': attribute type 2 has an invalid length. [ 600.853289][T27317] netlink: 'syz.4.9890': attribute type 1 has an invalid length. [ 600.861669][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9890'. [ 600.959863][ T43] usb 7-1: USB disconnect, device number 33 [ 601.749151][T27352] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9907'. [ 601.821467][T27354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9908'. [ 602.169976][T27372] sp0: Synchronizing with TNC [ 602.303547][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 602.454175][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 602.599133][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 602.735919][T27392] @ÿ: renamed from bond_slave_0 [ 602.750752][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 602.936445][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 603.016205][ T43] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 603.179294][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 603.195069][ T43] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.217106][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 603.235623][ T43] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.278457][ T43] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 603.310810][ T43] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 603.341599][ T43] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 603.373521][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 603.412920][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 603.413878][ T43] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 603.473470][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.493325][ T43] usb 5-1: config 0 descriptor?? [ 603.580182][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 603.741069][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 603.891865][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 603.918126][ T43] hid-thrustmaster 0003:044F:B65D.0066: unknown main item tag 0x0 [ 603.950286][ T43] hid-thrustmaster 0003:044F:B65D.0066: unknown main item tag 0x0 [ 603.980817][ T43] hid-thrustmaster 0003:044F:B65D.0066: unknown main item tag 0x0 [ 604.001078][ T43] hid-thrustmaster 0003:044F:B65D.0066: unknown main item tag 0x0 [ 604.015942][ T43] hid-thrustmaster 0003:044F:B65D.0066: unknown main item tag 0x0 [ 604.028350][ T43] hid-thrustmaster 0003:044F:B65D.0066: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 604.046653][ T43] hid-thrustmaster 0003:044F:B65D.0066: setup data couldn't be sent [ 604.062151][T27445] libceph: resolve '4..' (ret=-3): failed [ 604.185508][ T5960] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 604.235781][ C1] hid-thrustmaster 0003:044F:B65D.0066: URB to get model id failed with error -71 [ 604.265480][ T43] usb 5-1: USB disconnect, device number 76 [ 604.360832][ T5960] usb 7-1: Using ep0 maxpacket: 16 [ 604.371553][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.396399][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.420483][ T5960] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 604.441935][ T5960] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 604.451777][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.486242][ T5960] usb 7-1: config 0 descriptor?? [ 604.864694][ T5891] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 604.924276][ T5960] microsoft 0003:045E:07DA.0067: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 604.953408][ T5960] microsoft 0003:045E:07DA.0067: no inputs found [ 604.977404][ T5960] microsoft 0003:045E:07DA.0067: could not initialize ff, continuing anyway [ 605.032277][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.050750][ T5891] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 605.061285][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.099373][ T5891] usb 2-1: config 0 descriptor?? [ 605.118591][ T978] usb 7-1: USB disconnect, device number 34 [ 605.545185][ T5891] elecom 0003:056E:00FC.0068: unknown main item tag 0x0 [ 605.552208][ T5891] elecom 0003:056E:00FC.0068: unknown main item tag 0x0 [ 605.567302][ T5891] elecom 0003:056E:00FC.0068: unknown main item tag 0x0 [ 605.580859][ T5891] elecom 0003:056E:00FC.0068: unknown main item tag 0x0 [ 605.588767][ T5891] elecom 0003:056E:00FC.0068: unknown main item tag 0x0 [ 605.603109][ T5891] elecom 0003:056E:00FC.0068: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 605.799386][ T978] usb 2-1: USB disconnect, device number 84 [ 606.024320][ T5891] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 606.100921][T27529] sp0: Synchronizing with TNC [ 606.184746][ T5891] usb 7-1: Using ep0 maxpacket: 16 [ 606.196316][ T5891] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 606.210771][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.219310][ T5891] usb 7-1: Product: syz [ 606.223491][ T5891] usb 7-1: Manufacturer: syz [ 606.229521][ T5891] usb 7-1: SerialNumber: syz [ 606.236450][ T5891] usb 7-1: config 0 descriptor?? [ 606.243577][ T5891] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 606.323934][ T978] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 606.367335][T27533] program syz.1.9995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.442443][ T24] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 606.476379][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 606.488515][ T978] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.504847][ T978] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.519767][ T978] usb 6-1: config 0 interface 0 has no altsetting 0 [ 606.526982][ T978] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 606.543093][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.555223][ T978] usb 6-1: config 0 descriptor?? [ 606.614434][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 606.621959][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.633532][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.645873][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 606.657924][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.673120][ T5891] usb 7-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 606.673552][ T24] usb 5-1: config 0 descriptor?? [ 606.838851][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 606.838868][ T30] audit: type=1400 audit(1752553388.916:3690): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=27544 comm="syz.1.10001" daddr=::ffff:172.20.20.170 dest=20005 [ 606.861607][ T43] usb 7-1: USB disconnect, device number 35 [ 606.886985][ T43] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 606.897497][ T43] visor 7-1:0.0: device disconnected [ 606.980958][ T978] kye 0003:0458:0138.0069: unknown main item tag 0x4 [ 606.988402][ T978] kye 0003:0458:0138.0069: unexpected long global item [ 606.999830][ T978] kye 0003:0458:0138.0069: parse failed [ 607.005639][ T978] kye 0003:0458:0138.0069: probe with driver kye failed with error -22 [ 607.124652][ T24] savu 0003:1E7D:2D5A.006A: unknown main item tag 0x0 [ 607.131539][ T24] savu 0003:1E7D:2D5A.006A: unknown main item tag 0x0 [ 607.139015][ T24] savu 0003:1E7D:2D5A.006A: unknown main item tag 0x0 [ 607.146100][ T24] savu 0003:1E7D:2D5A.006A: unknown main item tag 0x0 [ 607.153000][ T24] savu 0003:1E7D:2D5A.006A: unknown main item tag 0x0 [ 607.160613][ T24] savu 0003:1E7D:2D5A.006A: unbalanced collection at end of report description [ 607.170750][ T24] savu 0003:1E7D:2D5A.006A: parse failed [ 607.178478][ T24] savu 0003:1E7D:2D5A.006A: probe with driver savu failed with error -22 [ 607.181614][ T978] usb 6-1: USB disconnect, device number 40 [ 607.324662][ T5891] usb 5-1: USB disconnect, device number 77 [ 607.421493][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 607.511231][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 607.569512][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 607.641320][T27560] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 607.647886][T27560] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 607.649793][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 607.656139][T27560] vhci_hcd vhci_hcd.0: Device attached [ 607.681261][T27562] vhci_hcd: connection closed [ 607.681444][ T13] vhci_hcd: stop threads [ 607.691178][ T13] vhci_hcd: release socket [ 607.696471][ T13] vhci_hcd: disconnect device [ 607.746857][T27565] tipc: Invalid UDP bearer configuration [ 607.746893][T27565] tipc: Enabling of bearer rejected, failed to enable media [ 608.265502][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 608.312967][ T5891] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 608.423389][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 608.466717][ T5891] usb 2-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 608.491896][ T5891] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.537437][ T5891] usb 2-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 608.577533][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 608.595951][ T5891] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 608.615169][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 608.626430][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.644867][ T5891] usb 2-1: config 0 descriptor?? [ 609.103071][ T5891] pantherlord 0003:0810:0001.006B: hidraw0: USB HID v8.00 Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 609.125790][ T5891] pantherlord 0003:0810:0001.006B: no output reports found [ 609.349129][ T10] usb 2-1: USB disconnect, device number 85 [ 609.421702][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 609.475370][T27648] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10047'. [ 609.593360][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 609.741576][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 610.552213][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 610.612070][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 610.641939][ T43] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 610.714195][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.725731][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.736075][ T24] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 610.745214][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.757966][ T24] usb 6-1: config 0 descriptor?? [ 610.771895][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 610.780567][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.793601][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 610.796288][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.803389][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.821932][ T43] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 610.831220][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.833874][ T10] usb 7-1: config 0 descriptor?? [ 610.843221][ T43] usb 2-1: config 0 descriptor?? [ 610.931812][ T5891] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 611.094778][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 611.111403][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.126155][ T5891] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 611.138020][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.155459][ T5891] usb 5-1: config 0 descriptor?? [ 611.191857][ T24] steelseries 0003:1038:12B6.006C: reserved main item tag 0xe [ 611.224724][ T24] steelseries 0003:1038:12B6.006C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 611.266738][ T43] nintendo 0003:057E:200E.006D: unbalanced delimiter at end of report description [ 611.280274][ T43] nintendo 0003:057E:200E.006D: HID parse failed [ 611.285595][ T10] mcp2200 0003:04D8:00DF.006E: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.6-1/input0 [ 611.294701][ T43] nintendo 0003:057E:200E.006D: probe - fail = -22 [ 611.318043][ T43] nintendo 0003:057E:200E.006D: probe with driver nintendo failed with error -22 [ 611.377783][ T24] steelseries 0003:1038:12B6.006C: hid_hw_raw_request() failed with -71 [ 611.421066][ T24] usb 6-1: USB disconnect, device number 41 [ 611.475228][ T10] usb 7-1: USB disconnect, device number 36 [ 611.556460][ T43] usb 2-1: USB disconnect, device number 86 [ 611.619915][ T5891] glorious 0003:258A:0036.006F: unknown main item tag 0x1 [ 611.648245][ T5891] glorious 0003:258A:0036.006F: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 611.800875][ T43] usb 5-1: USB disconnect, device number 78 [ 612.111393][ T30] audit: type=1400 audit(1752553394.189:3691): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=27728 comm="syz.5.10085" [ 612.245803][T27737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10089'. [ 612.301977][T27739] tracefs: Bad value for 'gid' [ 612.306802][T27739] tracefs: Bad value for 'gid' [ 612.342102][T27741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10091'. [ 612.400904][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 612.433775][T27743] dvmrp5: entered allmulticast mode [ 612.447436][T27743] dvmrp5: left allmulticast mode [ 612.573325][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 612.582887][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 612.587557][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.619092][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.630511][ T10] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 612.640210][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.654427][ T10] usb 6-1: config 0 descriptor?? [ 612.725795][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 612.778223][T27759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10100'. [ 612.848465][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 612.944716][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 613.053509][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 613.089960][ T10] hid_mf 0003:0079:1801.0070: item fetching failed at offset 0/2 [ 613.104295][ T10] hid_mf 0003:0079:1801.0070: HID parse failed. [ 613.112993][ T10] hid_mf 0003:0079:1801.0070: probe with driver hid_mf failed with error -22 [ 613.204763][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 613.317560][ T43] usb 6-1: USB disconnect, device number 42 [ 613.388946][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 613.468476][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 613.750362][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 613.914986][ T10] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 613.915018][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.915038][ T10] usb 2-1: Product: syz [ 613.915052][ T10] usb 2-1: Manufacturer: syz [ 613.915109][ T10] usb 2-1: SerialNumber: syz [ 613.919106][ T10] usb 2-1: config 0 descriptor?? [ 614.165581][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 614.167000][T27808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10122'. [ 614.188865][T27808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10122'. [ 614.262472][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 614.323852][T27812] netlink: 'syz.6.10124': attribute type 25 has an invalid length. [ 614.339082][T27812] netlink: 'syz.6.10124': attribute type 25 has an invalid length. [ 614.539237][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 614.572674][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 614.605822][ T10] usb 2-1: USB disconnect, device number 87 [ 614.731144][ T30] audit: type=1400 audit(1752553396.820:3692): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=27823 comm="syz.4.10130" daddr=::ffff:172.20.20.187 [ 614.863292][T27831] netlink: 'syz.0.10133': attribute type 1 has an invalid length. [ 614.916891][T27833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10134'. [ 615.060332][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 615.236429][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.247669][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 615.265254][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 615.282907][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.310841][T27829] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 615.323224][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.417545][T27857] netlink: 108 bytes leftover after parsing attributes in process `syz.5.10146'. [ 615.436989][T27857] block nbd1: Unsupported socket: shutdown callout must be supported. [ 615.592840][T27861] netlink: 'syz.5.10148': attribute type 1 has an invalid length. [ 615.657643][ T5891] usb 5-1: USB disconnect, device number 79 [ 616.174709][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10160'. [ 616.209098][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10160'. [ 616.234948][T27885] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10160'. [ 616.548011][T27904] netlink: 'syz.5.10167': attribute type 2 has an invalid length. [ 616.588791][T27904] netlink: 1184 bytes leftover after parsing attributes in process `syz.5.10167'. [ 616.669179][ T2150] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 616.774962][T27912] usb usb8: usbfs: process 27912 (syz.6.10171) did not claim interface 0 before use [ 616.826583][ T2150] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 616.855692][ T2150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.868329][ T2150] usb 5-1: config 0 has no interface number 0 [ 616.880010][ T2150] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 616.906027][ T2150] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.940510][ T2150] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 616.950874][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.963503][ T2150] usb 5-1: Product: syz [ 616.967810][ T2150] usb 5-1: Manufacturer: syz [ 616.973331][ T2150] usb 5-1: SerialNumber: syz [ 616.981761][ T2150] usb 5-1: config 0 descriptor?? [ 617.031634][T27919] nbd: couldn't find device at index 16 [ 617.112870][T27923] netlink: 716 bytes leftover after parsing attributes in process `syz.5.10176'. [ 617.269090][ T5891] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 617.429052][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 617.457551][ T5891] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 617.472453][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.482165][ T5891] usb 7-1: Product: syz [ 617.487437][ T5891] usb 7-1: Manufacturer: syz [ 617.494419][ T5891] usb 7-1: SerialNumber: syz [ 617.524740][ T5891] usb 7-1: config 0 descriptor?? [ 617.600209][ T2150] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 617.648915][ T2150] usb 5-1: USB disconnect, device number 80 [ 617.667025][ T6264] udevd[6264]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 617.751566][ T5891] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 617.807267][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 617.881328][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 617.985966][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 618.075125][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 618.154772][ T5891] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 618.211263][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 618.237050][ T5891] usb 7-1: USB disconnect, device number 37 [ 618.264814][T27962] smc: net device bond0 applied user defined pnetid SYZ2 [ 618.278786][T27962] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 618.348576][ T2150] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 618.385482][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 618.505964][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 618.551709][ T2150] usb 2-1: Using ep0 maxpacket: 8 [ 618.563754][ T2150] usb 2-1: unable to get BOS descriptor or descriptor too short [ 618.579975][ T2150] usb 2-1: config 4 interface 0 has no altsetting 0 [ 618.590007][ T2150] usb 2-1: string descriptor 0 read error: -22 [ 618.596297][ T2150] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 618.615626][ T2150] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 618.659704][ T2150] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 618.676496][ T9517] udevd[9517]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 618.713752][ T2150] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 618.765052][ T2150] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 618.784995][ T2150] usb 2-1: media controller created [ 618.824115][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 618.846687][T27988] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10208'. [ 618.864453][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.953723][ T2150] zl10353_read_register: readreg error (reg=127, ret==0) [ 619.056860][T27992] mkiss: ax0: crc mode is auto. [ 619.167008][ T2150] usb 2-1: USB disconnect, device number 88 [ 619.295589][T28003] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.10214'. [ 619.343169][T28005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10216'. [ 619.364535][T28005] openvswitch: netlink: Unknown nsh attribute 0 [ 619.387942][T28005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.505195][ T30] audit: type=1326 audit(1752553401.583:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28010 comm="syz.5.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885778e929 code=0x7ffc0000 [ 619.589641][ T30] audit: type=1326 audit(1752553401.583:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28010 comm="syz.5.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885778e929 code=0x7ffc0000 [ 619.682164][ T30] audit: type=1326 audit(1752553401.583:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28010 comm="syz.5.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f885778e929 code=0x7ffc0000 [ 619.780389][ T30] audit: type=1326 audit(1752553401.583:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28010 comm="syz.5.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885778e929 code=0x7ffc0000 [ 619.852681][ T30] audit: type=1326 audit(1752553401.583:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28010 comm="syz.5.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885778e929 code=0x7ffc0000 [ 619.888890][ T30] audit: type=1326 audit(1752553401.583:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28010 comm="syz.5.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f885778e929 code=0x7ffc0000 [ 619.971029][ T30] audit: type=1326 audit(1752553401.583:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28010 comm="syz.5.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885778e929 code=0x7ffc0000 [ 620.037488][ T30] audit: type=1326 audit(1752553401.583:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28010 comm="syz.5.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885778e929 code=0x7ffc0000 [ 620.101978][T28038] netlink: 140 bytes leftover after parsing attributes in process `syz.5.10232'. [ 620.111955][T28036] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 620.120793][T28038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10232'. [ 620.131883][T28036] team0: Device ipvlan2 is already an upper device of the team interface [ 620.140491][T28038] netlink: 5 bytes leftover after parsing attributes in process `syz.5.10232'. [ 620.537508][T28057] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.10241'. [ 620.634372][T28063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10244'. [ 621.222160][T28093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10259'. [ 621.593626][T28113] tipc: Enabling of bearer rejected, already enabled [ 622.158495][T28144] delete_channel: no stack [ 622.656663][ T2150] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 622.729679][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 622.830327][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 622.836117][ T2150] usb 6-1: Using ep0 maxpacket: 16 [ 622.871665][ T2150] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.910067][ T2150] usb 6-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 622.934640][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.978582][ T2150] usb 6-1: config 0 descriptor?? [ 623.150441][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 623.436303][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 623.607223][ T2150] usb 6-1: USB disconnect, device number 43 [ 623.731603][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 623.831439][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 623.891758][T28227] netlink: 47 bytes leftover after parsing attributes in process `syz.6.10325'. [ 624.010870][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 624.059939][T28237] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10328'. [ 624.144560][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 624.246695][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 624.369098][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 624.383804][T28252] usb usb1: usbfs: process 28252 (syz.4.10336) did not claim interface 0 before use [ 624.407321][T28252] usb usb1: selecting invalid altsetting 15 [ 624.449144][T28258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10338'. [ 624.474798][T28258] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10338'. [ 624.728632][T28272] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 624.891630][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.233674][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10354'. [ 625.413583][T28299] Failed to get privilege flags for destination (handle=0x2:0x4) [ 625.749886][T28321] batadv_slave_0: entered promiscuous mode [ 625.781341][T28320] batadv_slave_0: left promiscuous mode [ 625.934566][T28326] block nbd3: server does not support multiple connections per device. [ 625.967475][T28326] block nbd3: shutting down sockets [ 625.988655][T28332] binder: 28329:28332 ioctl c00c620f 200000000040 returned -22 [ 626.203382][T28342] QAT: Invalid ioctl 21531 [ 626.673437][T28368] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10390'. [ 626.697311][T28368] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10390'. [ 626.886301][T28377] netlink: 'syz.6.10394': attribute type 1 has an invalid length. [ 626.905990][T28377] netlink: 140 bytes leftover after parsing attributes in process `syz.6.10394'. [ 626.917572][T28377] netlink: 'syz.6.10394': attribute type 1 has an invalid length. [ 627.216262][T28389] tap0: tun_chr_ioctl cmd 1074025677 [ 627.221825][T28389] tap0: linktype set to 774 [ 627.371433][T28393] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10402'. [ 627.760435][ T30] audit: type=1400 audit(1752553409.847:3701): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=28412 comm="syz.5.10412" [ 627.822800][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 627.880562][ T9517] udevd[9517]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 628.026004][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 628.064970][ T6264] udevd[6264]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 628.226497][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 628.268579][ T9517] udevd[9517]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 628.378091][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 628.421187][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 628.433980][T28442] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10427'. [ 628.598310][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 628.647336][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 629.690294][ T30] audit: type=1400 audit(1752553411.778:3702): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=28503 comm="syz.4.10457" dest=20004 [ 629.915683][ T30] audit: type=1326 audit(1752553412.008:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24c78e929 code=0x7ffc0000 [ 629.953993][ T978] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 629.964155][ T30] audit: type=1326 audit(1752553412.018:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe24c78e929 code=0x7ffc0000 [ 630.001210][ T30] audit: type=1326 audit(1752553412.018:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24c78e929 code=0x7ffc0000 [ 630.003987][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.032882][ T30] audit: type=1326 audit(1752553412.018:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24c78e929 code=0x7ffc0000 [ 630.068826][ T30] audit: type=1326 audit(1752553412.018:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24c78e929 code=0x7ffc0000 [ 630.098445][ T5891] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 630.108877][ T30] audit: type=1326 audit(1752553412.018:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24c78e929 code=0x7ffc0000 [ 630.130477][ T30] audit: type=1326 audit(1752553412.018:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24c78e929 code=0x7ffc0000 [ 630.152517][ T30] audit: type=1326 audit(1752553412.028:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28519 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24c78e929 code=0x7ffc0000 [ 630.175404][ T978] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 630.188182][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.219379][ T978] usb 6-1: config 0 descriptor?? [ 630.252110][ T10] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 630.273364][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 630.281366][ T5891] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.300418][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 630.308702][ T5891] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 630.326538][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.341977][ T5891] usb 2-1: config 0 descriptor?? [ 630.412857][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 630.422039][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 630.438290][ T10] usb 7-1: config 179 has no interface number 0 [ 630.445188][ T978] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 630.457265][ T5928] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 630.465158][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 630.481825][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 630.499731][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 630.512195][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 630.524163][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 630.537644][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 630.546822][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.565896][T28522] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 630.646637][ T978] [drm:udl_init] *ERROR* Selecting channel failed [ 630.673375][ T5928] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 630.692438][ T5928] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 630.724272][ T978] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 630.742056][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 630.755760][ T978] [drm] Initialized udl on minor 2 [ 630.765752][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 630.766880][ T978] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 630.786874][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 630.830355][ T5928] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 630.846214][ T978] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 630.854600][ T5940] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input50 [ 630.865505][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 630.875422][ T5891] nzxt-smart2 0003:1E71:2009.0072: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 630.893767][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 630.901851][ T5928] usb 5-1: Product: syz [ 630.906170][ T5928] usb 5-1: Manufacturer: syz [ 630.922315][ T978] usb 6-1: USB disconnect, device number 44 [ 630.929923][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 631.005344][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 631.022388][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 631.049493][ T10] usb 7-1: USB disconnect, device number 38 [ 631.049551][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 631.063788][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 631.110880][ T5928] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 631.124910][ T5928] cdc_wdm 5-1:1.0: Unknown control protocol [ 631.238081][ T2150] usb 2-1: USB disconnect, device number 89 [ 631.470136][T28552] kvm: apic: phys broadcast and lowest prio [ 632.598349][T28583] netlink: 'syz.5.10494': attribute type 13 has an invalid length. [ 632.618032][T28583] macvtap0: entered promiscuous mode [ 632.628422][T28583] macvtap0: refused to change device tx_queue_len [ 632.681288][T28587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10496'. [ 632.837518][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 632.877948][T28595] netlink: 'syz.5.10500': attribute type 14 has an invalid length. [ 632.893319][ T6264] udevd[6264]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 632.967771][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 633.036303][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 633.067963][T28601] mkiss: ax0: crc mode is auto. [ 633.133788][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 633.200434][ T5906] usb 5-1: USB disconnect, device number 81 [ 633.263891][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 633.317746][ T6264] udevd[6264]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 633.502574][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 633.635044][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 633.744350][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 634.033435][T28641] sp0: Synchronizing with TNC [ 634.120489][T28641] Falling back ldisc for ttyS3. [ 634.210075][ T978] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 634.380922][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 634.391402][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.417868][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.448066][ T978] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 634.459842][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.481514][ T978] usb 6-1: config 0 descriptor?? [ 634.779976][T28661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.910178][ T978] corsair 0003:1B1C:1B02.0073: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 635.145426][T28670] netlink: 'syz.1.10532': attribute type 1 has an invalid length. [ 635.170212][T28670] netlink: 'syz.1.10532': attribute type 2 has an invalid length. [ 635.204062][T28670] netlink: 'syz.1.10532': attribute type 1 has an invalid length. [ 635.219945][T28670] netlink: 'syz.1.10532': attribute type 2 has an invalid length. [ 635.319922][ T5928] usb 6-1: USB disconnect, device number 45 [ 635.377267][T28675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10534'. [ 635.549753][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 635.549771][ T30] audit: type=1400 audit(1752553417.641:3713): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=28676 comm="syz.1.10535" dest=20259 [ 636.840059][T28726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10558'. [ 636.941720][T28729] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 636.991771][T28729] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 637.597665][T28757] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10572'. [ 637.658579][ T5906] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 637.838370][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 637.864724][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 637.886747][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 637.886999][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 637.948140][ T5906] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 637.957689][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.991024][ T5906] usb 6-1: Product: syz [ 637.995344][ T5906] usb 6-1: Manufacturer: syz [ 638.002870][ T5906] usb 6-1: SerialNumber: syz [ 638.043262][ T5906] usb 6-1: config 0 descriptor?? [ 638.053451][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 638.076727][ T5906] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 638.094186][ T5906] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 638.304728][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 638.422003][ T6264] udevd[6264]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 638.438325][ T30] audit: type=1400 audit(1752553420.532:3714): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=28783 comm="syz.6.10584" dest=24101 [ 638.662504][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 638.702021][ T5906] em28xx 6-1:0.0: chip ID is em2874 [ 638.863511][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 638.994717][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 639.017267][ T5906] usb 6-1: USB disconnect, device number 46 [ 639.028752][ T5906] em28xx 6-1:0.0: Disconnecting em28xx [ 639.051215][ T5906] em28xx 6-1:0.0: Freeing device [ 639.162983][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 639.311833][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 639.358390][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.614782][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 640.052242][T28852] netlink: 'syz.5.10615': attribute type 1 has an invalid length. [ 640.107075][T28852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10615'. [ 640.238330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.402408][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.479001][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.646245][T28879] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10628'. [ 640.663755][T28881] gfs2: gfs2 mount does not exist [ 640.850429][T28889] netlink: 120 bytes leftover after parsing attributes in process `syz.5.10633'. [ 641.451639][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.731210][T28921] sp0: Synchronizing with TNC [ 642.248754][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 642.427031][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.450915][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.476555][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.487396][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 642.507868][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.538703][ T10] usb 6-1: config 0 descriptor?? [ 642.886673][ T9517] udevd[9517]: setting mode of /dev/vcsa2 to 020660 failed: Read-only file system [ 642.901288][ T9517] udevd[9517]: setting owner of /dev/vcsa2 to uid=0, gid=5 failed: Read-only file system [ 642.929819][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 642.970862][ T10] pyra 0003:1E7D:2CF6.0074: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 643.090084][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 643.154028][ T10] pyra 0003:1E7D:2CF6.0074: couldn't init struct pyra_device [ 643.186208][ T10] pyra 0003:1E7D:2CF6.0074: couldn't install mouse [ 643.212327][ T10] pyra 0003:1E7D:2CF6.0074: probe with driver pyra failed with error -71 [ 643.262486][ T10] usb 6-1: USB disconnect, device number 47 [ 643.307372][ T9517] udevd[9517]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 643.436958][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 643.518834][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.531310][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.546673][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 643.623314][T28995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10680'. [ 643.655628][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 643.809939][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 643.878389][ T6034] udevd[6034]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 643.920734][T29006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10682'. [ 644.110372][T29015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.155532][T29015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.557846][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.234485][ T43] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 645.406432][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 645.425770][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 645.452014][ T43] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 645.461676][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.470533][ T43] usb 7-1: Product: syz [ 645.475067][ T43] usb 7-1: Manufacturer: syz [ 645.480157][ T43] usb 7-1: SerialNumber: syz [ 645.496220][ T43] usb 7-1: config 0 descriptor?? [ 645.510308][ T43] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 645.594707][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.880862][ T43] usb 7-1: USB disconnect, device number 39 [ 646.309995][T29089] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 646.356523][T29089] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 646.375128][T29089] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 646.382993][T29089] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 646.420250][T29090] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 646.472257][T29090] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 646.526290][T29090] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 646.546435][T29090] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 646.568506][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.634402][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.921003][T29118] netlink: 27 bytes leftover after parsing attributes in process `syz.4.10735'. [ 647.211563][T29130] netlink: 108 bytes leftover after parsing attributes in process `syz.5.10738'. [ 647.674498][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.995668][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 648.023403][ T5906] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 648.034951][T29162] batman_adv: batadv0: Adding interface: ipvlan2 [ 648.045069][T29162] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.070361][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.096729][T29162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.118885][T29162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.132590][T29162] batman_adv: batadv0: Interface activated: ipvlan2 [ 648.148276][T29167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10756'. [ 648.183507][T29167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10756'. [ 648.199499][ T6034] udevd[6034]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 648.210661][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 648.234662][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.274544][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.301598][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 648.315534][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 648.325402][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.344741][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 648.362133][ T5906] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 648.382586][ T5906] usb 2-1: Manufacturer: syz [ 648.395653][ T5906] usb 2-1: config 0 descriptor?? [ 648.713228][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.714130][ T5906] rc_core: IR keymap rc-hauppauge not found [ 648.727485][T29185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.747258][ T5906] Registered IR keymap rc-empty [ 648.751847][T29186] input: syz1 as /devices/virtual/input/input52 [ 648.759017][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 648.798388][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 648.846174][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 648.875565][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51 [ 648.889645][T29189] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10766'. [ 648.925140][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 648.957112][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 648.994653][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.033456][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.052574][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.082842][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.100562][T29201] mkiss: ax0: crc mode is auto. [ 649.123181][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.158076][ T6264] udevd[6264]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 649.169438][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.198213][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.222936][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.255167][ T5906] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 649.295362][ T5906] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 649.329855][ T6264] udevd[6264]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 649.339295][ T5906] usb 2-1: USB disconnect, device number 90 [ 649.488556][ T30] audit: type=1400 audit(1752553431.588:3715): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=29210 comm="syz.4.10776" name="2177" dev="tmpfs" ino=10993 [ 649.592800][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.613765][ T43] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 649.651414][T29219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10779'. [ 649.752635][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.772709][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 649.784489][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.816533][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 649.842576][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.867571][ T43] usb 6-1: config 0 descriptor?? [ 649.898028][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 650.232997][T29241] netlink: 'syz.0.10791': attribute type 10 has an invalid length. [ 650.250355][T29241] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10791'. [ 650.701855][ T43] gspca_vc032x: reg_w err -71 [ 650.706673][ T43] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 650.740721][ T43] usb 6-1: USB disconnect, device number 48 [ 650.792758][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.846585][ T30] audit: type=1326 audit(1752553432.948:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 650.888619][ T30] audit: type=1326 audit(1752553432.948:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 650.919747][ T30] audit: type=1326 audit(1752553432.948:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 650.945147][ T30] audit: type=1326 audit(1752553432.948:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 650.970379][ T30] audit: type=1326 audit(1752553432.948:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 651.053248][T29268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.080068][ T30] audit: type=1326 audit(1752553432.958:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 651.091464][T29268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.101866][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.148939][ T30] audit: type=1326 audit(1752553432.968:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 651.170788][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.195346][ T30] audit: type=1326 audit(1752553432.978:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ace9858e7 code=0x7ffc0000 [ 651.212085][ T5907] printk: udevd: 302 output lines suppressed due to ratelimiting [ 651.219309][ T30] audit: type=1326 audit(1752553432.978:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29265 comm="syz.0.10803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ace92ab19 code=0x7ffc0000 [ 651.352478][T29268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.368856][T29268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.496089][T29268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.512233][T29268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.548277][T29280] netlink: 'syz.5.10810': attribute type 21 has an invalid length. [ 651.563952][T29280] netlink: 'syz.5.10810': attribute type 1 has an invalid length. [ 651.585345][T29280] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10810'. [ 651.703755][T29268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.781169][T29268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.841713][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.873455][T29292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10816'. [ 651.997627][T29268] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.033015][T29268] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.098939][T29268] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.122200][T29268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.177663][T29268] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.201268][T29268] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.240726][T29268] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.264727][T29268] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.278363][T29314] bpf: Bad value for 'uid' [ 652.289775][T29310] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10825'. [ 652.315484][T29312] netlink: 'syz.5.10826': attribute type 25 has an invalid length. [ 652.331132][T29312] netlink: 'syz.5.10826': attribute type 7 has an invalid length. [ 652.631132][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.800634][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 652.881809][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.961213][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 652.969417][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 652.980906][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 652.993417][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 653.004370][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.017575][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 653.030462][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.255359][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 653.269325][T29361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10849'. [ 653.283580][T29361] netlink: 'syz.6.10849': attribute type 20 has an invalid length. [ 653.292402][ T10] usbtmc 6-1:16.0: can't read capabilities [ 653.310747][T29361] netlink: 'syz.6.10849': attribute type 21 has an invalid length. [ 653.464642][ T10] usb 6-1: USB disconnect, device number 49 [ 653.750115][ T43] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 653.758825][T29383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10859'. [ 653.914648][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.921946][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 653.946702][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 653.960125][ T43] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 653.969527][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.979469][ T43] usb 2-1: Product: syz [ 653.989594][ T43] usb 2-1: Manufacturer: syz [ 654.020035][ T43] usb 2-1: SerialNumber: syz [ 654.031928][ T43] usb 2-1: config 0 descriptor?? [ 654.037882][T29368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.046940][T29368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.265487][T29368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.273835][T29368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.685718][T29416] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 654.697326][ T43] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 654.898456][ T43] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 654.930072][ T43] usb 2-1: USB disconnect, device number 91 [ 654.962447][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.027744][T29433] can0: slcan on ttyS3. [ 655.092025][T29433] can0 (unregistered): slcan off ttyS3. [ 655.318363][T29451] Falling back ldisc for ptm0. [ 655.672707][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.850833][T29471] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 656.000065][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.129480][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 656.129501][ T30] audit: type=1400 audit(1752553438.221:3803): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=29483 comm="syz.1.10908" name="1857" dev="tmpfs" ino=9390 [ 656.350272][T29499] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10915'. [ 656.372522][T29499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.039162][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.102409][ T30] audit: type=1400 audit(1752553439.211:3804): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=29526 comm="syz.5.10931" daddr=::ffff:172.20.20.170 dest=20005 [ 657.490147][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 657.518801][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 657.528944][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 657.538065][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 657.552707][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 657.616557][T29541] vxcan1 speed is unknown, defaulting to 1000 [ 658.068416][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.168494][T29560] block nbd3: server does not support multiple connections per device. [ 658.193200][T29560] block nbd3: shutting down sockets [ 658.316018][T29541] lo speed is unknown, defaulting to 1000 [ 658.677883][T29541] chnl_net:caif_netlink_parms(): no params data found [ 658.717322][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.864560][T29599] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10960'. [ 658.875192][T29541] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.887130][T29541] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.897886][T29541] bridge_slave_0: entered allmulticast mode [ 658.906876][T29541] bridge_slave_0: entered promiscuous mode [ 658.915877][T29541] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.923376][T29541] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.930683][T29541] bridge_slave_1: entered allmulticast mode [ 658.941637][T29541] bridge_slave_1: entered promiscuous mode [ 659.011826][T29541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.034075][T29541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.110781][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.136310][T29541] team0: Port device team_slave_0 added [ 659.171352][T29541] team0: Port device team_slave_1 added [ 659.245141][T29541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.255567][T29541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.287789][T29541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.304842][T29541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.313043][T29541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.344398][T29541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.397879][T29617] program syz.6.10968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.459310][T29541] hsr_slave_0: entered promiscuous mode [ 659.466097][T29541] hsr_slave_1: entered promiscuous mode [ 659.473470][T29541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.482617][T29541] Cannot create hsr debugfs directory [ 659.594202][T23963] Bluetooth: hci2: command tx timeout [ 659.698207][T29620] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.795120][T29631] hsr0: entered promiscuous mode [ 659.810324][T29631] macsec1: entered allmulticast mode [ 659.815808][T29631] hsr0: entered allmulticast mode [ 659.822184][T29631] hsr_slave_0: entered allmulticast mode [ 659.828698][T29631] hsr_slave_1: entered allmulticast mode [ 659.837593][T29631] hsr0: left allmulticast mode [ 659.842880][T29631] hsr_slave_0: left allmulticast mode [ 659.848770][T29631] hsr_slave_1: left allmulticast mode [ 659.903447][T29620] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.069337][T29620] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.147820][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.201640][T29620] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.309638][T29541] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 660.341321][T29541] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 660.360122][T29541] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 660.402912][T29541] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 660.406584][T29649] io-wq is not configured for unbound workers [ 660.466382][T29620] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.530201][T29620] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.551787][T29620] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.663073][T29620] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.808387][T29541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.834773][T29541] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.862690][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.869898][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.903884][T29667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.932772][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.941411][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.188381][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.199532][T29678] netlink: 152 bytes leftover after parsing attributes in process `syz.6.10994'. [ 661.333157][T29541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.466530][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 661.636427][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 661.649299][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 661.672989][T23963] Bluetooth: hci2: command tx timeout [ 661.675133][ T10] usb 6-1: config 0 has no interface number 0 [ 661.711660][T29541] veth0_vlan: entered promiscuous mode [ 661.721696][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 661.747514][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.755948][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.770066][T29541] veth1_vlan: entered promiscuous mode [ 661.786353][ T10] usb 6-1: Product: syz [ 661.793111][ T10] usb 6-1: Manufacturer: syz [ 661.799335][ T10] usb 6-1: SerialNumber: syz [ 661.807648][ T10] usb 6-1: config 0 descriptor?? [ 661.818780][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 661.856708][T29541] veth0_macvtap: entered promiscuous mode [ 661.873677][T29541] veth1_macvtap: entered promiscuous mode [ 661.921934][T29541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.939054][T29541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.952085][T29541] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.962911][T29541] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.971754][T29541] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.980713][T29541] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.064806][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 662.089535][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 662.111143][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.123492][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.158940][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.168363][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.226737][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.378639][T29698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.491003][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 662.491408][ T2150] usb 6-1: USB disconnect, device number 50 [ 662.520065][ T2150] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 662.556941][ T2150] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 662.594290][ T2150] quatech2 6-1:0.51: device disconnected [ 662.778902][T29709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.267906][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.541617][T29746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11021'. [ 663.565211][T29746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11021'. [ 663.672591][ T30] audit: type=1326 audit(1752553445.765:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29751 comm="syz.6.11024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a378e929 code=0x7ffc0000 [ 663.694370][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.757445][T23963] Bluetooth: hci2: command tx timeout [ 663.764257][ T30] audit: type=1326 audit(1752553445.775:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29751 comm="syz.6.11024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f00a378e929 code=0x7ffc0000 [ 663.773883][T29756] tun0: tun_chr_ioctl cmd 1074812117 [ 663.787367][ T30] audit: type=1326 audit(1752553445.775:3807): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=29751 comm="syz.6.11024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a378e929 code=0x7ffc0000 [ 663.813857][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.866987][ T978] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 664.055008][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 664.072061][ T978] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 664.101545][T29763] input: syz0 as /devices/virtual/input/input55 [ 664.108169][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.152374][ T978] usb 5-1: config 0 descriptor?? [ 664.325082][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.391752][T29775] input: syz1 as /devices/virtual/input/input56 [ 664.394401][ T978] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 664.412416][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 664.431649][ T978] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 664.447041][T29779] netlink: 212296 bytes leftover after parsing attributes in process `syz.5.11036'. [ 664.456075][ T978] usb 5-1: media controller created [ 664.512828][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.572696][T29785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11040'. [ 664.596502][ T978] az6027: usb out operation failed. (-71) [ 664.605337][ T978] az6027: usb out operation failed. (-71) [ 664.611100][ T978] stb0899_attach: Driver disabled by Kconfig [ 664.634711][ T978] az6027: no front-end attached [ 664.634711][ T978] [ 664.655443][ T978] az6027: usb out operation failed. (-71) [ 664.661213][ T978] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 664.705731][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 664.753048][ T978] dvb-usb: schedule remote query interval to 400 msecs. [ 664.774625][ T978] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 664.797114][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.803400][ T978] usb 5-1: USB disconnect, device number 82 [ 664.895544][ T978] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 665.074750][ T10] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 665.252870][ T10] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 665.277992][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.310084][ T10] usb 6-1: Product: syz [ 665.320194][ T10] usb 6-1: Manufacturer: syz [ 665.330302][ T10] usb 6-1: SerialNumber: syz [ 665.344819][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.366386][ T10] usb 6-1: config 0 descriptor?? [ 665.612459][ T10] usb_8dev 6-1:0.0 can0: sending command message failed [ 665.635726][ T10] usb_8dev 6-1:0.0 can0: can't get firmware version [ 665.640275][T29811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.673672][T29811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.736485][ T10] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 665.779253][ T10] usb 6-1: USB disconnect, device number 51 [ 665.829374][T23963] Bluetooth: hci2: command tx timeout [ 666.230644][ T30] audit: type=1326 audit(1752553448.336:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29829 comm="syz.0.11061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 666.290308][ T30] audit: type=1326 audit(1752553448.336:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29829 comm="syz.0.11061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 666.312089][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.354655][ T30] audit: type=1326 audit(1752553448.366:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29829 comm="syz.0.11061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 666.388856][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.431347][ T30] audit: type=1326 audit(1752553448.446:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29829 comm="syz.0.11061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 666.519046][ T30] audit: type=1326 audit(1752553448.446:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29829 comm="syz.0.11061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 666.576309][ T30] audit: type=1326 audit(1752553448.446:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29835 comm="syz.0.11061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ace9c11e5 code=0x7ffc0000 [ 666.627520][ T30] audit: type=1326 audit(1752553448.606:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29835 comm="syz.0.11061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6ace98e929 code=0x7ffc0000 [ 666.702848][T29846] netlink: 'syz.5.11067': attribute type 1 has an invalid length. [ 666.964165][T29856] input: syz1 as /devices/virtual/input/input58 [ 667.245089][T29870] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11077'. [ 667.264332][T29870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11077'. [ 667.378570][T29877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11080'. [ 667.420167][T29877] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11080'. [ 667.430782][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.457198][T29877] gretap1: entered promiscuous mode [ 667.823418][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.925615][T29898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11089'. [ 668.463305][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.482614][T29921] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 668.543223][T29921] overlayfs: overlapping lowerdir path [ 668.810140][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 668.810159][ T30] audit: type=1400 audit(1752553450.917:3820): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=29938 comm="syz.7.11108" dest=20004 [ 669.504954][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.797254][T29973] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 669.852096][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 669.865669][T29975] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11125'. [ 670.034741][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 670.054427][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 670.084426][ T10] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 670.106846][ T10] usb 6-1: Product: syz [ 670.119095][ T10] usb 6-1: Manufacturer: syz [ 670.125604][ T10] usb 6-1: SerialNumber: syz [ 670.134928][ T10] usb 6-1: config 0 descriptor?? [ 670.158182][T29992] netlink: 72 bytes leftover after parsing attributes in process `syz.7.11134'. [ 670.358835][T30004] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11140'. [ 670.384274][ T5906] usb 6-1: USB disconnect, device number 52 [ 670.542317][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.862486][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.582044][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.598226][T30058] loop2: detected capacity change from 0 to 63 [ 671.642523][T30058] buffer_io_error: 7 callbacks suppressed [ 671.642541][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.693284][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.705545][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.714909][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.723673][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.734014][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.742615][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.790837][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.816960][T30058] ldm_validate_partition_table(): Disk read failed. [ 671.837383][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.871313][T30058] Buffer I/O error on dev loop2, logical block 0, async page read [ 671.886448][T30058] Dev loop2: unable to read RDB block 0 [ 671.897738][T30058] loop2: unable to read partition table [ 671.930016][T30058] loop_reread_partitions: partition scan of loop2 (3Ÿ ¾‚³˜) failed (rc=-5) [ 672.543584][T30087] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11179'. [ 672.626970][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.691813][ T3032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.859614][ T3032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.022788][ T3032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.302981][ T3032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.544191][ T10] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 673.660822][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.693689][ T3032] bridge_slave_0: left allmulticast mode [ 673.705853][ T10] usb 6-1: config 0 has no interfaces? [ 673.717565][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.721184][ T3032] bridge_slave_0: left promiscuous mode [ 673.732996][ T5906] kernel write not supported for file /input/event2 (pid: 5906 comm: kworker/1:4) [ 673.736462][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.751738][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.792004][ T10] usb 6-1: Product: syz [ 673.800271][ T10] usb 6-1: Manufacturer: syz [ 673.813300][ T10] usb 6-1: SerialNumber: syz [ 673.819309][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 673.830664][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 673.839453][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 673.839681][ T10] usb 6-1: config 0 descriptor?? [ 673.857396][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 673.871999][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 673.889599][T30118] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 673.900999][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.209145][ T10] usb 6-1: USB disconnect, device number 53 [ 674.708040][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.791369][T23963] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 674.803676][T23963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 674.814550][T23963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 674.823040][T23963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 674.834592][T23963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 675.213241][ T3032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.223937][ T3032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.234993][ T3032] bond0 (unregistering): Released all slaves [ 675.248267][ T3032] bond1 (unregistering): Released all slaves [ 675.405116][T30146] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.433111][ T3032] tipc: Disabling bearer [ 675.443176][ T3032] tipc: Disabling bearer [ 675.462656][ T3032] tipc: Left network mode [ 675.468122][T30141] vxcan1 speed is unknown, defaulting to 1000 [ 675.533323][T30151] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11207'. [ 675.558725][T30146] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.560220][ T3032] IPVS: stopping backup sync thread 17068 ... [ 675.744646][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.766599][T30146] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.914839][T30146] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.105828][T30146] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.134466][T30146] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.175805][T30146] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.224575][T30146] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.305116][T30141] lo speed is unknown, defaulting to 1000 [ 676.509014][T30159] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 676.552498][T30162] sp0: Synchronizing with TNC [ 676.685264][T30167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.695482][T30167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.708004][T30167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.717924][T30167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.759614][T30167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.778951][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.859291][ T5850] Bluetooth: hci1: command tx timeout [ 676.895701][T30174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11215'. [ 677.081269][ T3032] hsr_slave_0: left promiscuous mode [ 677.090753][ T3032] hsr_slave_1: left promiscuous mode [ 677.096620][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.112628][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.122757][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.133394][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.144494][T30181] misc userio: Begin command sent, but we're already running [ 677.144930][ T3032] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 677.164120][ T3032] batman_adv: batadv0: Removing interface: ipvlan2 [ 677.187345][ T3032] veth1_macvtap: left promiscuous mode [ 677.193174][ T3032] veth0_macvtap: left promiscuous mode [ 677.199164][ T3032] veth1_vlan: left promiscuous mode [ 677.204552][ T3032] veth0_vlan: left promiscuous mode [ 678.074476][ T3032] team0 (unregistering): Port device team_slave_1 removed [ 678.151095][ T3032] team0 (unregistering): Port device team_slave_0 removed [ 678.751440][T30179] netlink: 'syz.7.11218': attribute type 2 has an invalid length. [ 678.848681][T30141] chnl_net:caif_netlink_parms(): no params data found [ 678.857896][ T5891] net_ratelimit: 3 callbacks suppressed [ 678.857913][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.930483][T30208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11231'. [ 678.940380][ T5850] Bluetooth: hci1: command tx timeout [ 678.995660][T30208] netlink: 'syz.6.11231': attribute type 1 has an invalid length. [ 679.021149][T30208] netlink: 'syz.6.11231': attribute type 2 has an invalid length. [ 679.269632][T30141] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.276983][T30141] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.284659][T30141] bridge_slave_0: entered allmulticast mode [ 679.293316][T30141] bridge_slave_0: entered promiscuous mode [ 679.303551][T30141] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.312020][T30141] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.319381][T30141] bridge_slave_1: entered allmulticast mode [ 679.354354][T30141] bridge_slave_1: entered promiscuous mode [ 679.437458][ T2150] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 679.462647][ T3032] IPVS: stop unused estimator thread 0... [ 679.479369][T30141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.502836][T30141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.598625][T30141] team0: Port device team_slave_0 added [ 679.608607][ T2150] usb 7-1: Using ep0 maxpacket: 16 [ 679.621556][T30141] team0: Port device team_slave_1 added [ 679.630013][ T2150] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.642770][T30227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.643344][ T2150] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.680470][ T2150] usb 7-1: config 0 interface 0 has no altsetting 0 [ 679.691164][ T2150] usb 7-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 679.720000][ T2150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.732561][ T2150] usb 7-1: config 0 descriptor?? [ 679.750091][T30141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.757735][T30141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.815150][T30141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.878699][T30141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.897505][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.917199][T30141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.943119][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.959758][T30141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.977260][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.080569][T30242] netlink: 'syz.0.11245': attribute type 2 has an invalid length. [ 680.093149][T30242] netlink: 'syz.0.11245': attribute type 8 has an invalid length. [ 680.101548][T30242] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.11245'. [ 680.170549][ T2150] wacom 0003:056A:00B3.0075: unknown main item tag 0x0 [ 680.185630][T30141] hsr_slave_0: entered promiscuous mode [ 680.191595][ T2150] wacom 0003:056A:00B3.0075: unknown main item tag 0x0 [ 680.198752][ T2150] wacom 0003:056A:00B3.0075: collection stack underflow [ 680.205845][ T2150] wacom 0003:056A:00B3.0075: item 0 0 0 12 parsing failed [ 680.214946][T30141] hsr_slave_1: entered promiscuous mode [ 680.222595][T30141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.231122][ T2150] wacom 0003:056A:00B3.0075: parse failed [ 680.247128][T30141] Cannot create hsr debugfs directory [ 680.257280][ T2150] wacom 0003:056A:00B3.0075: probe with driver wacom failed with error -22 [ 680.416378][ T2150] usb 7-1: USB disconnect, device number 41 [ 680.939533][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.016890][ T5850] Bluetooth: hci1: command tx timeout [ 681.138479][T30268] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11258'. [ 681.449822][T30282] macvlan0: entered promiscuous mode [ 681.460788][T30282] macvlan1: entered promiscuous mode [ 681.469038][T30282] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 681.495018][T30282] hsr1: entered promiscuous mode [ 681.594873][T30141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 681.613467][T30141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 681.641589][T30141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 681.675711][T30141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 681.786066][T30306] netlink: 1036 bytes leftover after parsing attributes in process `syz.6.11271'. [ 681.816793][T30306] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 681.977529][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.999528][T30141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.011912][T30313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11274'. [ 682.074668][T30141] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.111889][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.119130][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.175470][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.182725][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.843988][T30141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.015754][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.023936][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.096403][ T5850] Bluetooth: hci1: command tx timeout [ 683.159787][T30362] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11293'. [ 683.475266][ T5891] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 683.611590][T30141] veth0_vlan: entered promiscuous mode [ 683.633903][ T5891] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 683.649686][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.673669][T30141] veth1_vlan: entered promiscuous mode [ 683.683143][ T5891] usb 6-1: Product: syz [ 683.696414][ T5891] usb 6-1: Manufacturer: syz [ 683.701163][ T5891] usb 6-1: SerialNumber: syz [ 683.733314][ T5891] usb 6-1: config 0 descriptor?? [ 683.781986][T30141] veth0_macvtap: entered promiscuous mode [ 683.800237][T30141] veth1_macvtap: entered promiscuous mode [ 683.843838][T30141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.872138][T30141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.908679][T30141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.925020][T30141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.944992][T30141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.984186][T30141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.057894][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.185244][ T5891] usb 6-1: Firmware: major: 217, minor: 21, hardware type: ATUSB (2) [ 684.254993][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.275474][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.326674][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.345456][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.359199][T30379] vxcan1 speed is unknown, defaulting to 1000 [ 684.381655][ T5891] usb 6-1: failed to fetch extended address, random address set [ 684.457703][ T5891] usb 6-1: USB disconnect, device number 54 [ 685.056724][ T43] kernel write not supported for file /bluetooth/6lowpan_control (pid: 43 comm: kworker/1:1) [ 685.075663][ T154] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.175247][ T5850] Bluetooth: hci1: command tx timeout [ 685.245907][ T154] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.363672][ T154] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.446869][ T154] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.518067][T30379] lo speed is unknown, defaulting to 1000 [ 685.534619][T30414] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11315'. [ 686.092657][ T154] bridge_slave_1: left allmulticast mode [ 686.118325][T23963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.119202][ T154] bridge_slave_1: left promiscuous mode [ 686.135100][T23963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.142230][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.152742][T23963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.171725][T23963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.182005][T23963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 686.203078][ T154] bridge_slave_0: left allmulticast mode [ 686.231946][ T154] bridge_slave_0: left promiscuous mode [ 686.267313][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.309154][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.445929][T30442] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11327'. [ 687.278978][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.290174][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.302378][ T154] bond0 (unregistering): Released all slaves [ 687.407222][T30433] vxcan1 speed is unknown, defaulting to 1000 [ 687.549678][ T154] IPVS: stopping master sync thread 25809 ... [ 688.079683][T30478] netlink: 822 bytes leftover after parsing attributes in process `syz.0.11345'. [ 688.229174][ T5850] Bluetooth: hci3: command tx timeout [ 688.492523][T30433] lo speed is unknown, defaulting to 1000 [ 689.353658][T30522] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11365'. [ 689.373249][ T154] hsr_slave_0: left promiscuous mode [ 689.392592][ T154] hsr_slave_1: left promiscuous mode [ 689.401803][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.423868][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.442356][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.449845][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.513481][ T154] veth1_macvtap: left promiscuous mode [ 689.532015][ T154] veth0_macvtap: left promiscuous mode [ 689.537793][ T154] veth1_vlan: left promiscuous mode [ 689.550163][ T154] veth0_vlan: left promiscuous mode [ 689.868541][ T30] audit: type=1400 audit(1752553471.988:3821): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=30532 comm="syz.4.11370" dest=2 [ 690.298875][ T5850] Bluetooth: hci3: command tx timeout [ 690.511174][ T154] team0 (unregistering): Port device team_slave_1 removed [ 690.569466][ T154] team0 (unregistering): Port device team_slave_0 removed [ 691.186292][T30537] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 691.219412][T30537] macsec1: entered promiscuous mode [ 691.225144][T30537] macsec1: entered allmulticast mode [ 691.230599][T30537] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 691.368941][T30433] chnl_net:caif_netlink_parms(): no params data found [ 691.625384][T30557] sp0: Synchronizing with TNC [ 691.641855][ T13] [ 691.644186][ T13] ===================================================== [ 691.651101][ T13] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 691.658551][ T13] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted [ 691.665633][ T13] ----------------------------------------------------- [ 691.672554][ T13] kworker/u8:1/13 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 691.680163][ T13] ffffffff8ece0ab8 (disc_data_lock){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 [ 691.689650][ T13] [ 691.689650][ T13] and this task is already holding: [ 691.697000][ T13] ffffffff99dcafd8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 691.706288][ T13] which would create a new lock dependency: [ 691.712150][ T13] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 691.719792][ T13] [ 691.719792][ T13] but this new dependency connects a HARDIRQ-irq-safe lock: [ 691.729220][ T13] (&port_lock_key){-.-.}-{3:3} [ 691.729236][ T13] [ 691.729236][ T13] ... which became HARDIRQ-irq-safe at: [ 691.741735][ T13] lock_acquire+0x120/0x360 [ 691.746302][ T13] _raw_spin_lock_irqsave+0xa7/0xf0 [ 691.751566][ T13] serial8250_handle_irq+0x6b/0xbb0 [ 691.756841][ T13] serial8250_default_handle_irq+0xbf/0x1b0 [ 691.762798][ T13] serial8250_interrupt+0xa5/0x1d0 [ 691.767972][ T13] __handle_irq_event_percpu+0x28c/0x980 [ 691.773671][ T13] handle_irq_event+0x8b/0x1e0 [ 691.778498][ T13] handle_edge_irq+0x267/0x9c0 [ 691.783324][ T13] __common_interrupt+0x140/0x250 [ 691.788414][ T13] common_interrupt+0xb6/0xe0 [ 691.793156][ T13] asm_common_interrupt+0x26/0x40 [ 691.798243][ T13] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 691.804030][ T13] uart_port_unlock_deref+0x111/0x2f0 [ 691.809466][ T13] uart_write+0xe8/0x130 [ 691.813771][ T13] n_tty_write+0xd32/0x11d0 [ 691.818338][ T13] file_tty_write+0x503/0x990 [ 691.823078][ T13] vfs_write+0x54b/0xa90 [ 691.827387][ T13] ksys_write+0x145/0x250 [ 691.831873][ T13] do_syscall_64+0xfa/0x3b0 [ 691.836440][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.842395][ T13] [ 691.842395][ T13] to a HARDIRQ-irq-unsafe lock: [ 691.849407][ T13] (disc_data_lock){.+.+}-{3:3} [ 691.849429][ T13] [ 691.849429][ T13] ... which became HARDIRQ-irq-unsafe at: [ 691.862109][ T13] ... [ 691.862115][ T13] lock_acquire+0x120/0x360 [ 691.869244][ T13] _raw_read_lock+0x36/0x50 [ 691.873819][ T13] sixpack_receive_buf+0x5c/0x1450 [ 691.879015][ T13] tty_ldisc_receive_buf+0x119/0x160 [ 691.884380][ T13] tty_port_default_receive_buf+0x6e/0xa0 [ 691.890168][ T13] flush_to_ldisc+0x247/0x720 [ 691.894909][ T13] process_scheduled_works+0xade/0x17b0 [ 691.900550][ T13] worker_thread+0x8a0/0xda0 [ 691.905205][ T13] kthread+0x711/0x8a0 [ 691.909354][ T13] ret_from_fork+0x3fc/0x770 [ 691.914023][ T13] ret_from_fork_asm+0x1a/0x30 [ 691.919912][ T13] [ 691.919912][ T13] other info that might help us debug this: [ 691.919912][ T13] [ 691.930224][ T13] Possible interrupt unsafe locking scenario: [ 691.930224][ T13] [ 691.938522][ T13] CPU0 CPU1 [ 691.943868][ T13] ---- ---- [ 691.949210][ T13] lock(disc_data_lock); [ 691.953519][ T13] local_irq_disable(); [ 691.960271][ T13] lock(&port_lock_key); [ 691.967100][ T13] lock(disc_data_lock); [ 691.973928][ T13] [ 691.977362][ T13] lock(&port_lock_key); [ 691.981844][ T13] [ 691.981844][ T13] *** DEADLOCK *** [ 691.981844][ T13] [ 691.989967][ T13] 6 locks held by kworker/u8:1/13: [ 691.995058][ T13] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 692.006693][ T13] #1: ffffc90000127bc0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 692.018345][ T13] #2: ffff888024890ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x720 [ 692.027381][ T13] #3: ffff88805396f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 692.036680][ T13] #4: ffffffff99dcafd8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 692.046431][ T13] #5: ffff88805396f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 692.055718][ T13] [ 692.055718][ T13] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 692.066120][ T13] -> (&port_lock_key){-.-.}-{3:3} { [ 692.071312][ T13] IN-HARDIRQ-W at: [ 692.075272][ T13] lock_acquire+0x120/0x360 [ 692.081406][ T13] _raw_spin_lock_irqsave+0xa7/0xf0 [ 692.088234][ T13] serial8250_handle_irq+0x6b/0xbb0 [ 692.095059][ T13] serial8250_default_handle_irq+0xbf/0x1b0 [ 692.102596][ T13] serial8250_interrupt+0xa5/0x1d0 [ 692.109352][ T13] __handle_irq_event_percpu+0x28c/0x980 [ 692.116625][ T13] handle_irq_event+0x8b/0x1e0 [ 692.123021][ T13] handle_edge_irq+0x267/0x9c0 [ 692.129419][ T13] __common_interrupt+0x140/0x250 [ 692.136249][ T13] common_interrupt+0xb6/0xe0 [ 692.142550][ T13] asm_common_interrupt+0x26/0x40 [ 692.149199][ T13] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 692.156549][ T13] uart_port_unlock_deref+0x111/0x2f0 [ 692.163554][ T13] uart_write+0xe8/0x130 [ 692.169436][ T13] n_tty_write+0xd32/0x11d0 [ 692.175581][ T13] file_tty_write+0x503/0x990 [ 692.181895][ T13] vfs_write+0x54b/0xa90 [ 692.187777][ T13] ksys_write+0x145/0x250 [ 692.193735][ T13] do_syscall_64+0xfa/0x3b0 [ 692.199876][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.207396][ T13] IN-SOFTIRQ-W at: [ 692.211354][ T13] lock_acquire+0x120/0x360 [ 692.217486][ T13] _raw_spin_lock_irqsave+0xa7/0xf0 [ 692.224314][ T13] serial8250_handle_irq+0x6b/0xbb0 [ 692.231144][ T13] serial8250_default_handle_irq+0xbf/0x1b0 [ 692.238662][ T13] serial8250_interrupt+0xa5/0x1d0 [ 692.245395][ T13] __handle_irq_event_percpu+0x28c/0x980 [ 692.252671][ T13] handle_irq_event+0x8b/0x1e0 [ 692.259121][ T13] handle_edge_irq+0x267/0x9c0 [ 692.265533][ T13] __common_interrupt+0x140/0x250 [ 692.272202][ T13] common_interrupt+0x5e/0xe0 [ 692.278512][ T13] asm_common_interrupt+0x26/0x40 [ 692.285169][ T13] rcu_is_watching+0x10/0xb0 [ 692.291386][ T13] lock_acquire+0x5f/0x360 [ 692.297427][ T13] unwind_next_frame+0xc2/0x2390 [ 692.303993][ T13] arch_stack_walk+0x11c/0x150 [ 692.310385][ T13] stack_trace_save+0x9c/0xe0 [ 692.316691][ T13] kasan_save_track+0x3e/0x80 [ 692.322998][ T13] kasan_save_free_info+0x46/0x50 [ 692.329647][ T13] __kasan_slab_free+0x62/0x70 [ 692.336036][ T13] kfree+0x18e/0x440 [ 692.341556][ T13] slab_free_after_rcu_debug+0x60/0x2a0 [ 692.348730][ T13] rcu_core+0xca8/0x1710 [ 692.354607][ T13] handle_softirqs+0x283/0x870 [ 692.360998][ T13] __irq_exit_rcu+0xca/0x1f0 [ 692.367214][ T13] irq_exit_rcu+0x9/0x30 [ 692.373095][ T13] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 692.380383][ T13] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 692.388010][ T13] pv_native_safe_halt+0x13/0x20 [ 692.394602][ T13] default_idle+0x13/0x20 [ 692.400581][ T13] default_idle_call+0x74/0xb0 [ 692.407059][ T13] do_idle+0x1e8/0x510 [ 692.412757][ T13] cpu_startup_entry+0x44/0x60 [ 692.419160][ T13] rest_init+0x2de/0x300 [ 692.425052][ T13] start_kernel+0x47d/0x500 [ 692.431212][ T13] x86_64_start_reservations+0x24/0x30 [ 692.438313][ T13] x86_64_start_kernel+0x143/0x1c0 [ 692.445057][ T13] common_startup_64+0x13e/0x147 [ 692.451655][ T13] INITIAL USE at: [ 692.455566][ T13] lock_acquire+0x120/0x360 [ 692.461614][ T13] _raw_spin_lock_irqsave+0xa7/0xf0 [ 692.468376][ T13] serial8250_do_set_termios+0x4bb/0x1c20 [ 692.475668][ T13] uart_set_options+0x3c2/0x5b0 [ 692.482080][ T13] serial8250_console_setup+0x2f4/0x3c0 [ 692.489179][ T13] univ8250_console_setup+0x43a/0x540 [ 692.496094][ T13] try_enable_preferred_console+0x4e4/0x650 [ 692.503601][ T13] register_console+0x551/0xf90 [ 692.510031][ T13] univ8250_console_init+0x52/0x90 [ 692.516701][ T13] console_init+0x1a1/0x670 [ 692.522759][ T13] start_kernel+0x2cc/0x500 [ 692.528809][ T13] x86_64_start_reservations+0x24/0x30 [ 692.535808][ T13] x86_64_start_kernel+0x143/0x1c0 [ 692.542459][ T13] common_startup_64+0x13e/0x147 [ 692.548940][ T13] } [ 692.551418][ T13] ... key at: [] port_lock_key+0x0/0x20 [ 692.559041][ T13] [ 692.559041][ T13] the dependencies between the lock to be acquired [ 692.559052][ T13] and HARDIRQ-irq-unsafe lock: [ 692.572546][ T13] -> (disc_data_lock){.+.+}-{3:3} { [ 692.577738][ T13] HARDIRQ-ON-R at: [ 692.581702][ T13] lock_acquire+0x120/0x360 [ 692.587839][ T13] _raw_read_lock+0x36/0x50 [ 692.593973][ T13] sixpack_receive_buf+0x5c/0x1450 [ 692.600724][ T13] tty_ldisc_receive_buf+0x119/0x160 [ 692.607658][ T13] tty_port_default_receive_buf+0x6e/0xa0 [ 692.615050][ T13] flush_to_ldisc+0x247/0x720 [ 692.621356][ T13] process_scheduled_works+0xade/0x17b0 [ 692.628530][ T13] worker_thread+0x8a0/0xda0 [ 692.634772][ T13] kthread+0x711/0x8a0 [ 692.640479][ T13] ret_from_fork+0x3fc/0x770 [ 692.646705][ T13] ret_from_fork_asm+0x1a/0x30 [ 692.653282][ T13] SOFTIRQ-ON-R at: [ 692.657330][ T13] lock_acquire+0x120/0x360 [ 692.663636][ T13] _raw_read_lock+0x36/0x50 [ 692.669858][ T13] sixpack_receive_buf+0x5c/0x1450 [ 692.676595][ T13] tty_ldisc_receive_buf+0x119/0x160 [ 692.683612][ T13] tty_port_default_receive_buf+0x6e/0xa0 [ 692.690976][ T13] flush_to_ldisc+0x247/0x720 [ 692.697284][ T13] process_scheduled_works+0xade/0x17b0 [ 692.704457][ T13] worker_thread+0x8a0/0xda0 [ 692.710692][ T13] kthread+0x711/0x8a0 [ 692.716387][ T13] ret_from_fork+0x3fc/0x770 [ 692.722601][ T13] ret_from_fork_asm+0x1a/0x30 [ 692.728993][ T13] INITIAL USE at: [ 692.732871][ T13] lock_acquire+0x120/0x360 [ 692.738927][ T13] _raw_write_lock_irq+0xa2/0xf0 [ 692.745408][ T13] sixpack_close+0x2c/0x280 [ 692.751452][ T13] tty_ldisc_kill+0xa3/0x1a0 [ 692.757581][ T13] tty_ldisc_release+0x1a4/0x200 [ 692.764055][ T13] tty_release_struct+0x2a/0xd0 [ 692.770442][ T13] tty_release+0xcb0/0x1640 [ 692.776481][ T13] __fput+0x449/0xa70 [ 692.782003][ T13] task_work_run+0x1d4/0x260 [ 692.788133][ T13] exit_to_user_mode_loop+0xec/0x110 [ 692.794956][ T13] do_syscall_64+0x2bd/0x3b0 [ 692.801084][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.808516][ T13] INITIAL READ USE at: [ 692.812819][ T13] lock_acquire+0x120/0x360 [ 692.819301][ T13] _raw_read_lock+0x36/0x50 [ 692.825803][ T13] sixpack_receive_buf+0x5c/0x1450 [ 692.832896][ T13] tty_ldisc_receive_buf+0x119/0x160 [ 692.840155][ T13] tty_port_default_receive_buf+0x6e/0xa0 [ 692.847847][ T13] flush_to_ldisc+0x247/0x720 [ 692.854497][ T13] process_scheduled_works+0xade/0x17b0 [ 692.862037][ T13] worker_thread+0x8a0/0xda0 [ 692.868599][ T13] kthread+0x711/0x8a0 [ 692.874642][ T13] ret_from_fork+0x3fc/0x770 [ 692.881204][ T13] ret_from_fork_asm+0x1a/0x30 [ 692.887947][ T13] } [ 692.890423][ T13] ... key at: [] disc_data_lock+0x18/0x100 [ 692.898296][ T13] ... acquired at: [ 692.902074][ T13] lock_acquire+0x120/0x360 [ 692.906727][ T13] _raw_read_lock+0x36/0x50 [ 692.911426][ T13] sixpack_write_wakeup+0x30/0x480 [ 692.916688][ T13] tty_wakeup+0xbe/0x100 [ 692.921081][ T13] tty_port_default_wakeup+0xa2/0xf0 [ 692.926521][ T13] serial8250_tx_chars+0x72e/0x970 [ 692.931790][ T13] __start_tx+0x33b/0x480 [ 692.936272][ T13] __uart_start+0x23c/0x440 [ 692.940942][ T13] uart_write+0xdc/0x130 [ 692.945340][ T13] sixpack_receive_buf+0x447/0x1450 [ 692.950724][ T13] tty_ldisc_receive_buf+0x119/0x160 [ 692.956179][ T13] tty_port_default_receive_buf+0x6e/0xa0 [ 692.962080][ T13] flush_to_ldisc+0x247/0x720 [ 692.966910][ T13] process_scheduled_works+0xade/0x17b0 [ 692.972630][ T13] worker_thread+0x8a0/0xda0 [ 692.977388][ T13] kthread+0x711/0x8a0 [ 692.981609][ T13] ret_from_fork+0x3fc/0x770 [ 692.986349][ T13] ret_from_fork_asm+0x1a/0x30 [ 692.991265][ T13] [ 692.993566][ T13] [ 692.993566][ T13] stack backtrace: [ 692.999446][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 692.999461][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.999469][ T13] Workqueue: events_unbound flush_to_ldisc [ 692.999486][ T13] Call Trace: [ 692.999497][ T13] [ 692.999503][ T13] dump_stack_lvl+0x189/0x250 [ 692.999515][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.999525][ T13] ? __pfx__printk+0x10/0x10 [ 692.999539][ T13] validate_chain+0x1f05/0x2140 [ 692.999556][ T13] __lock_acquire+0xab9/0xd20 [ 692.999566][ T13] ? sixpack_write_wakeup+0x30/0x480 [ 692.999578][ T13] lock_acquire+0x120/0x360 [ 692.999587][ T13] ? sixpack_write_wakeup+0x30/0x480 [ 692.999598][ T13] ? ldsem_down_read_trylock+0x137/0x1a0 [ 692.999615][ T13] ? tty_ldisc_ref+0x1c/0x90 [ 692.999627][ T13] _raw_read_lock+0x36/0x50 [ 692.999654][ T13] ? sixpack_write_wakeup+0x30/0x480 [ 692.999665][ T13] sixpack_write_wakeup+0x30/0x480 [ 692.999676][ T13] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 692.999687][ T13] tty_wakeup+0xbe/0x100 [ 692.999696][ T13] tty_port_default_wakeup+0xa2/0xf0 [ 692.999708][ T13] serial8250_tx_chars+0x72e/0x970 [ 692.999723][ T13] __start_tx+0x33b/0x480 [ 692.999735][ T13] __uart_start+0x23c/0x440 [ 692.999749][ T13] uart_write+0xdc/0x130 [ 692.999760][ T13] sixpack_receive_buf+0x447/0x1450 [ 692.999776][ T13] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 692.999786][ T13] tty_ldisc_receive_buf+0x119/0x160 [ 692.999799][ T13] tty_port_default_receive_buf+0x6e/0xa0 [ 692.999811][ T13] flush_to_ldisc+0x247/0x720 [ 692.999823][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 692.999834][ T13] process_scheduled_works+0xade/0x17b0 [ 692.999849][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 692.999861][ T13] worker_thread+0x8a0/0xda0 [ 692.999876][ T13] kthread+0x711/0x8a0 [ 692.999888][ T13] ? __pfx_worker_thread+0x10/0x10 [ 692.999898][ T13] ? __pfx_kthread+0x10/0x10 [ 692.999909][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 692.999921][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.999934][ T13] ? __pfx_kthread+0x10/0x10 [ 692.999945][ T13] ret_from_fork+0x3fc/0x770 [ 692.999955][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 692.999965][ T13] ? __switch_to_asm+0x39/0x70 [ 692.999976][ T13] ? __switch_to_asm+0x33/0x70 [ 692.999986][ T13] ? __pfx_kthread+0x10/0x10 [ 692.999997][ T13] ret_from_fork_asm+0x1a/0x30 [ 693.000011][ T13] [ 693.000057][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.246222][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.266495][ T5850] Bluetooth: hci3: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 693.821864][ T154] IPVS: stop unused estimator thread 0... [ 693.964727][ T154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.006861][ T154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.133992][ T154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.204607][ T154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.451299][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 694.460109][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 694.468578][ T154] bridge0: port 2(netdevsim0) entered disabled state [ 694.524420][ T154] bridge_slave_1: left allmulticast mode [ 694.530301][ T154] bridge_slave_1: left promiscuous mode [ 694.535936][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.544061][ T154] bridge_slave_0: left allmulticast mode [ 694.551284][ T154] bridge_slave_0: left promiscuous mode [ 694.557363][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.566289][ T154] ip6gretap0: left allmulticast mode [ 694.571813][ T154] ip6gretap0: left promiscuous mode [ 694.577116][ T154] bridge0: port 1(ip6gretap0) entered disabled state [ 694.670950][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.681486][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.691504][ T154] bond0 (unregistering): Released all slaves [ 694.761731][ T154] tipc: Disabling bearer [ 695.142645][ T154] bond0 (unregistering): Released all slaves [ 695.151521][ T154] bond1 (unregistering): Released all slaves [ 695.214307][ T154] tipc: Disabling bearer [ 695.230847][ T154] tipc: Left network mode [ 695.694895][ T154] macvlan0: left promiscuous mode [ 695.704986][ T154] macvlan1: left promiscuous mode [ 695.720561][ T154] hsr_slave_0: left promiscuous mode [ 695.726671][ T154] hsr_slave_1: left promiscuous mode [ 695.732664][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.740359][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.747942][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.755540][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.765016][ T154] hsr_slave_0: left promiscuous mode [ 695.770674][ T154] hsr_slave_1: left promiscuous mode [ 695.778126][ T154] veth1_macvtap: left promiscuous mode [ 695.784019][ T154] veth0_macvtap: left promiscuous mode [ 695.789549][ T154] veth1_vlan: left promiscuous mode [ 695.794789][ T154] veth0_vlan: left promiscuous mode [ 695.956304][ T154] team0 (unregistering): Port device team_slave_1 removed [ 695.986076][ T154] team0 (unregistering): Port device team_slave_0 removed [ 696.141650][ T154] pim6reg (unregistering): left allmulticast mode [ 697.422647][ T36] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.460737][ T36] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.501535][ T36] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.550175][ T36] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.622986][ T36] bridge_slave_1: left allmulticast mode [ 697.628789][ T36] bridge_slave_1: left promiscuous mode [ 697.634431][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.642463][ T36] bridge_slave_0: left allmulticast mode [ 697.648642][ T36] bridge_slave_0: left promiscuous mode [ 697.654376][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.773548][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.783402][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.792871][ T36] bond0 (unregistering): Released all slaves [ 697.841190][ T36] bond0 (unregistering): Released all slaves [ 697.893857][ T36] tipc: Disabling bearer [ 697.899004][ T36] tipc: Left network mode [ 697.914683][ T36] IPVS: stopping master sync thread 26076 ... [ 697.920919][ T36] IPVS: stopping master sync thread 26075 ... [ 697.927057][ T36] IPVS: stopping master sync thread 26074 ... [ 697.933858][ T36] IPVS: stopping master sync thread 26073 ... [ 698.206110][ T36] hsr_slave_0: left promiscuous mode [ 698.220806][ T36] hsr_slave_1: left promiscuous mode [ 698.233266][ T36] veth1_macvtap: left promiscuous mode [ 698.240228][ T36] veth0_macvtap: left promiscuous mode [ 698.245843][ T36] veth1_vlan: left promiscuous mode [ 698.251517][ T36] veth0_vlan: left promiscuous mode [ 698.294052][ T36] pim6reg527 (unregistering): left allmulticast mode [ 698.304477][ T36] pim6reg (unregistering): left allmulticast mode [ 698.373033][ T36] team0 (unregistering): Port device team_slave_1 removed [ 698.387620][ T36] team0 (unregistering): Port device team_slave_0 removed