last executing test programs: 2.15670848s ago: executing program 4 (id=38183): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 1.821994931s ago: executing program 4 (id=38187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 1.777411671s ago: executing program 3 (id=38188): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 1.486445s ago: executing program 3 (id=38191): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r0, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000100)='\x00:', 0x2}], 0x1) 1.396475392s ago: executing program 1 (id=38192): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r1}}, 0x18) 1.365636769s ago: executing program 0 (id=38193): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0xfffffffd}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1.244345798s ago: executing program 1 (id=38196): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000006140)="3c3fbfd8ec27c0ea", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) 1.174926145s ago: executing program 3 (id=38197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009e02"]) 1.164694245s ago: executing program 0 (id=38198): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 1.120954077s ago: executing program 1 (id=38199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x3c, r1, 0xe17131a1c005744d, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x40010) 990.752049ms ago: executing program 1 (id=38200): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x6, 0x2, 0x100, 0x606c, 0x180107}) 987.658462ms ago: executing program 0 (id=38201): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x89, r1, 0x0, 0x0, 0x1}]) 850.797272ms ago: executing program 2 (id=38203): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8, {0x2, 0x0, @empty}, 'veth1_to_team\x00'}) 850.660423ms ago: executing program 3 (id=38204): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 745.564132ms ago: executing program 4 (id=38205): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@local, 0x2800, 0x2, 0x1, 0x0, 0x7fd, 0x100}, 0x20) 724.446706ms ago: executing program 2 (id=38206): init_module(&(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000ffff000000000000000000000040000000000000000000000000000000000009"], 0x40, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)) 714.200146ms ago: executing program 0 (id=38207): r0 = socket$inet(0x2, 0x801, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xb, @loopback, 0x80000000}, 0x1c) 675.084236ms ago: executing program 1 (id=38208): r0 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) 620.691884ms ago: executing program 3 (id=38209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x4001b) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 583.994826ms ago: executing program 4 (id=38210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4, 0x20}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 546.940547ms ago: executing program 2 (id=38211): openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) eventfd(0x80000001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 515.269028ms ago: executing program 0 (id=38212): socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x410d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@getchain={0x34, 0x66, 0x3523ad93bb3d228b, 0x0, 0x0, {}, [{0x8}, {0x7}]}, 0x34}}, 0x0) 419.005317ms ago: executing program 4 (id=38213): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x4}, 0x7}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xdd5, 0x0, 0x38fa8b00d923ddd5}, 0x9c) 316.639479ms ago: executing program 2 (id=38214): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) 280.980596ms ago: executing program 0 (id=38215): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010003958aeeffffffcdbdf250000ef6d", @ANYRES32=r1, @ANYBLOB="216100000000000014001400726f7365300000000000000000000000280016802400018014000b"], 0x5c}}, 0x4000000) 270.14332ms ago: executing program 3 (id=38216): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b010203010902"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0}) 188.911701ms ago: executing program 2 (id=38217): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096}) 180.396637ms ago: executing program 1 (id=38218): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x10) 139.068284ms ago: executing program 4 (id=38219): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) 0s ago: executing program 2 (id=38220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x20000b) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) kernel console output (not intermixed with test programs): 8][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35658'. [ 2087.546309][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35662'. [ 2088.066696][T12238] netlink: 72 bytes leftover after parsing attributes in process `syz.4.35670'. [ 2088.578481][T12255] kvm: kvm [12254]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x3 [ 2089.088050][T12275] cifs: Unknown parameter 'f' [ 2090.784322][T12330] sctp: [Deprecated]: syz.4.35700 (pid 12330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2090.784322][T12330] Use struct sctp_sack_info instead [ 2091.103416][T26204] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 2091.274636][T26204] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2091.297791][T26204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2091.328470][T26204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2091.355293][T26204] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2091.414874][T26204] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2091.428899][T26204] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2091.447981][T26204] usb 4-1: Manufacturer: syz [ 2091.461068][T26204] usb 4-1: config 0 descriptor?? [ 2091.763129][T26204] rc_core: IR keymap rc-hauppauge not found [ 2091.771006][T26204] Registered IR keymap rc-empty [ 2091.783411][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2091.803382][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2091.825305][T26204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2091.840336][T26204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input301 [ 2091.858223][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2091.887204][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2091.913780][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2091.933076][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2091.953365][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2091.973097][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2091.992963][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2092.013349][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2092.032949][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2092.053083][T26204] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2092.075648][T26204] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2092.084826][T26204] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2092.175446][T26204] usb 4-1: USB disconnect, device number 6 [ 2094.030750][T12403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2094.037338][T12403] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2094.064625][T12403] vhci_hcd vhci_hcd.0: Device attached [ 2094.100924][T12405] vhci_hcd: connection closed [ 2094.101239][ T9765] vhci_hcd: stop threads [ 2094.120788][ T9765] vhci_hcd: release socket [ 2094.130033][ T9765] vhci_hcd: disconnect device [ 2095.416595][T12470] sctp: [Deprecated]: syz.4.35739 (pid 12470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2095.416595][T12470] Use struct sctp_sack_info instead [ 2096.811656][T12544] __nla_validate_parse: 1 callbacks suppressed [ 2096.811674][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35758'. [ 2097.711253][T12576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2098.827180][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.845301][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.130990][T12625] kvm: kvm [12624]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 2099.373143][T26204] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2099.546312][T26204] usb 3-1: Using ep0 maxpacket: 8 [ 2099.561749][T26204] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2099.577503][T26204] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2099.603168][T26204] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2099.623314][T26204] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2099.668540][T26204] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2099.696572][T26204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.948471][T26204] usb 3-1: GET_CAPABILITIES returned 0 [ 2099.948514][T26204] usbtmc 3-1:16.0: can't read capabilities [ 2100.169300][T26204] usb 3-1: USB disconnect, device number 108 [ 2100.588516][T12678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.35797'. [ 2101.187417][ T30] audit: type=1326 audit(1752001817.463:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.241547][ T30] audit: type=1326 audit(1752001817.463:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.263871][ C1] vkms_vblank_simulate: vblank timer overrun [ 2101.322539][ T30] audit: type=1326 audit(1752001817.493:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.344827][ C1] vkms_vblank_simulate: vblank timer overrun [ 2101.391928][ T30] audit: type=1326 audit(1752001817.493:10173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.414210][ C1] vkms_vblank_simulate: vblank timer overrun [ 2101.420920][T12013] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2101.453782][ T30] audit: type=1326 audit(1752001817.493:10174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.502958][ T30] audit: type=1326 audit(1752001817.493:10175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.570966][ T30] audit: type=1326 audit(1752001817.493:10176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.623047][T12013] usb 2-1: Using ep0 maxpacket: 16 [ 2101.643718][T12013] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2101.662925][T12013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.673802][ T30] audit: type=1326 audit(1752001817.493:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.696040][ C1] vkms_vblank_simulate: vblank timer overrun [ 2101.703088][T12013] usb 2-1: Product: syz [ 2101.707273][T12013] usb 2-1: Manufacturer: syz [ 2101.711906][T12013] usb 2-1: SerialNumber: syz [ 2101.750196][T12013] usb 2-1: config 0 descriptor?? [ 2101.762865][ T30] audit: type=1326 audit(1752001817.503:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.797248][T12013] as10x_usb: device has been detected [ 2101.813852][T12013] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2101.832622][ T30] audit: type=1326 audit(1752001817.503:10179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.4.35807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2101.885203][T12013] usb 2-1: DVB: registering adapter 5 frontend 0 (Sky IT Digital Key (green led))... [ 2101.935056][T12013] as10x_usb: error during firmware upload part1 [ 2101.977603][T12013] Registered device Sky IT Digital Key (green led) [ 2102.080457][T12706] random: crng reseeded on system resumption [ 2102.193536][T26201] usb 2-1: USB disconnect, device number 4 [ 2102.247301][T26201] Unregistered device Sky IT Digital Key (green led) [ 2102.249174][T26201] as10x_usb: device has been disconnected [ 2103.098401][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35823'. [ 2103.128218][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35823'. [ 2103.972906][T26201] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 2104.137639][T26201] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.150193][T26201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2104.207210][T26201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2104.237358][T26201] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2104.274978][T26201] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2104.296255][T26201] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2104.323271][T26201] usb 3-1: Manufacturer: syz [ 2104.330787][T26201] usb 3-1: config 0 descriptor?? [ 2104.722921][T26201] rc_core: IR keymap rc-hauppauge not found [ 2104.749228][T26201] Registered IR keymap rc-empty [ 2104.759537][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2104.813518][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2104.843367][T12557] Set syz1 is full, maxelem 65536 reached [ 2104.864361][T26201] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2104.914002][T26201] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input302 [ 2104.987763][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.047303][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.092977][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.096941][T12833] kvm: kvm [12831]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 2105.113086][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.135472][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.174186][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.215437][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.234885][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.282496][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.316397][T26201] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2105.361118][T26201] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2105.387223][T26201] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2105.432685][T26201] usb 3-1: USB disconnect, device number 109 [ 2105.570626][T12858] cgroup: fork rejected by pids controller in /syz3 [ 2106.653430][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2106.653447][ T30] audit: type=1326 audit(1752001822.933:10181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.4.35852" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f14539 code=0x0 [ 2106.681155][ C1] vkms_vblank_simulate: vblank timer overrun [ 2107.616093][T12927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2107.648861][T16230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2107.673264][T16230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2107.681380][T16230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2107.691196][T16230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2107.719929][T16230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2108.648963][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2108.661915][ T13] bond0 (unregistering): Released all slaves [ 2108.677667][ T13] bond1 (unregistering): Released all slaves [ 2108.798837][ T13] bond2 (unregistering): Released all slaves [ 2108.915173][ T13] bond3 (unregistering): Released all slaves [ 2108.929019][ T13] bond4 (unregistering): Released all slaves [ 2108.943274][ T13] bond5 (unregistering): Released all slaves [ 2109.064360][ T13] bond6 (unregistering): Released all slaves [ 2109.077969][ T13] bond7 (unregistering): Released all slaves [ 2109.090602][T12924] netlink: 'syz.2.35858': attribute type 49 has an invalid length. [ 2109.311236][T12970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35866'. [ 2109.338773][ T13] _Z`Ԁ@: left promiscuous mode [ 2109.371872][T12974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35866'. [ 2109.500574][ T13] : left promiscuous mode [ 2109.672592][ T13] tipc: Disabling bearer [ 2109.719444][ T13] tipc: Disabling bearer [ 2109.738757][ T13] tipc: Left network mode [ 2109.783478][ T51] Bluetooth: hci2: command tx timeout [ 2110.113204][ T13] IPVS: stopping master sync thread 21345 ... [ 2110.304129][T13095] kvm: kvm [13092]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 2110.374175][T12936] chnl_net:caif_netlink_parms(): no params data found [ 2111.158651][T12936] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.177255][T12936] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.207213][T12936] bridge_slave_0: entered allmulticast mode [ 2111.227072][T12936] bridge_slave_0: entered promiscuous mode [ 2111.265039][T12936] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.306580][T12936] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.325888][T12936] bridge_slave_1: entered allmulticast mode [ 2111.341012][T12936] bridge_slave_1: entered promiscuous mode [ 2111.578476][T12936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2111.621209][T12936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2111.873023][ T51] Bluetooth: hci2: command tx timeout [ 2112.058842][T12936] team0: Port device team_slave_0 added [ 2112.072531][T12936] team0: Port device team_slave_1 added [ 2112.449116][T12936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2112.477220][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2112.591607][T12936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2112.606654][T12936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2112.613724][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2112.640838][T12936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2112.802971][T26201] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2112.938938][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35899'. [ 2112.953071][T26201] usb 2-1: Using ep0 maxpacket: 32 [ 2112.978528][T26201] usb 2-1: config 3 has an invalid interface number: 171 but max is 0 [ 2112.999464][T26201] usb 2-1: config 3 has no interface number 0 [ 2113.018129][T26201] usb 2-1: config 3 interface 171 has no altsetting 0 [ 2113.047943][T26201] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 2113.061758][T26201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.097144][T26201] usb 2-1: Product: syz [ 2113.101352][T26201] usb 2-1: Manufacturer: syz [ 2113.118841][T26201] usb 2-1: SerialNumber: syz [ 2113.369694][T26201] as10x_usb: device has been detected [ 2113.381022][T26201] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2113.415737][T26201] usb 2-1: DVB: registering adapter 5 frontend 0 (Sky IT Digital Key (green led))... [ 2113.430196][T26201] as10x_usb: error during firmware upload part1 [ 2113.437448][T26201] Registered device Sky IT Digital Key (green led) [ 2113.450151][T26201] usb 2-1: USB disconnect, device number 5 [ 2113.500066][T26201] Unregistered device Sky IT Digital Key (green led) [ 2113.501907][T26201] as10x_usb: device has been disconnected [ 2113.943438][ T51] Bluetooth: hci2: command tx timeout [ 2114.819884][T13357] netlink: 'syz.2.35901': attribute type 10 has an invalid length. [ 2114.845974][T13384] vxcan5: entered promiscuous mode [ 2114.851538][T13384] vxcan5: entered allmulticast mode [ 2115.017445][T12936] hsr_slave_0: entered promiscuous mode [ 2115.045490][T12936] hsr_slave_1: entered promiscuous mode [ 2115.055351][T12936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2115.063562][T12936] Cannot create hsr debugfs directory [ 2115.798107][T13537] netlink: 152 bytes leftover after parsing attributes in process `syz.4.35919'. [ 2115.829424][ T13] IPVS: stop unused estimator thread 0... [ 2116.023383][ T51] Bluetooth: hci2: command tx timeout [ 2117.252400][T12936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2117.299929][T12936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2117.317660][T12936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2117.328732][T12936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2117.528207][T12936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2117.575545][T13657] ptrace attach of "./syz-executor exec"[13658] was attempted by "./syz-executor exec"[13657] [ 2117.638405][T12936] 8021q: adding VLAN 0 to HW filter on device team0 [ 2117.699740][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 2117.707001][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2117.769949][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.772929][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35942'. [ 2117.777141][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2118.092621][T12936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2118.247054][T12936] veth0_vlan: entered promiscuous mode [ 2118.316685][T12936] veth1_vlan: entered promiscuous mode [ 2118.487798][T12936] veth0_macvtap: entered promiscuous mode [ 2118.518429][T12936] veth1_macvtap: entered promiscuous mode [ 2118.577190][T12936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2118.629297][T12936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2118.659382][T12936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.709693][T12936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.748762][T12936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.769047][T12936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.106004][ T9765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.153539][ T9765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.302999][ T9765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.310974][ T9765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2121.159221][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35979'. [ 2122.415228][T13872] netlink: 'syz.4.35988': attribute type 11 has an invalid length. [ 2122.465203][T13872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.35988'. [ 2122.485123][ T30] audit: type=1804 audit(1752001838.753:10182): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.35990" name="/" dev="pidfs" ino=110418 res=1 errno=0 [ 2122.930810][T13894] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2122.961851][T13894] syzkaller0: linktype set to 774 [ 2123.575327][T13940] macsec2: entered allmulticast mode [ 2125.339546][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36031'. [ 2125.351612][T14020] netlink: 'syz.1.36031': attribute type 30 has an invalid length. [ 2125.655147][T14040] : renamed from bond0 [ 2126.003208][T26200] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2126.188730][T26200] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2126.210816][T26200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.236985][T26200] usb 4-1: config 0 descriptor?? [ 2126.249232][T26200] cp210x 4-1:0.0: cp210x converter detected [ 2126.870428][T26200] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2126.884454][T26200] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 2126.920286][T26200] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2126.977548][T26200] usb 4-1: USB disconnect, device number 7 [ 2127.002782][T26200] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2127.015200][T26200] cp210x 4-1:0.0: device disconnected [ 2127.145647][T26201] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2127.303465][T26201] usb 2-1: Using ep0 maxpacket: 8 [ 2127.317031][T26201] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2127.334490][T26201] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2127.348396][T26201] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2127.360146][T26201] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2127.378378][T26201] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2127.389542][T26201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.617426][T26201] usb 2-1: GET_CAPABILITIES returned 0 [ 2127.623569][T26201] usbtmc 2-1:16.0: can't read capabilities [ 2127.851458][T14081] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 2127.870541][T12013] usb 2-1: USB disconnect, device number 6 [ 2128.371519][ T30] audit: type=1804 audit(1752001844.643:10183): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.36066" name="/" dev="pidfs" ino=110714 res=1 errno=0 [ 2129.603800][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36083'. [ 2130.828333][ T30] audit: type=1326 audit(1752001847.103:10184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.2.36099" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 2131.558806][T14291] netlink: 37 bytes leftover after parsing attributes in process `syz.0.36106'. [ 2132.382761][T14332] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2132.822897][T12013] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2132.983048][T12013] usb 4-1: Using ep0 maxpacket: 8 [ 2132.995551][T12013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2133.018069][T12013] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2133.045359][T12013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.066007][T12013] usb 4-1: config 0 descriptor?? [ 2133.293294][T12013] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2133.541373][T12013] usb 4-1: USB disconnect, device number 8 [ 2133.541395][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36135'. [ 2134.264285][T14435] tmpfs: Unknown parameter '' [ 2134.421016][T14442] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 2134.443401][ T30] audit: type=1326 audit(1752001850.713:10185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.0.36157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2134.487482][ T30] audit: type=1326 audit(1752001850.713:10186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.0.36157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2134.540282][T14451] openvswitch: netlink: IP tunnel TTL not specified. [ 2134.556956][ T30] audit: type=1326 audit(1752001850.713:10187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.0.36157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2134.586571][ T30] audit: type=1326 audit(1752001850.713:10188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.0.36157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2134.623060][ T30] audit: type=1326 audit(1752001850.713:10189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.0.36157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2134.835618][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36165'. [ 2136.668744][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36206'. [ 2137.129845][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36215'. [ 2137.217227][T14614] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 2137.254441][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36215'. [ 2137.495319][ T30] audit: type=1326 audit(1752001853.773:10190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14624 comm="syz.2.36222" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x0 [ 2137.964413][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36231'. [ 2139.915022][T14718] tipc: New replicast peer: 255.255.255.255 [ 2139.938123][T14718] tipc: Enabled bearer , priority 20 [ 2140.157200][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36257'. [ 2140.213695][T26201] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2140.232185][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36258'. [ 2140.251372][T14736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36258'. [ 2140.393046][T26201] usb 3-1: Using ep0 maxpacket: 16 [ 2140.400131][T26201] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2140.446055][T26201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2140.487887][T26201] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2140.503083][T26201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.511110][T26201] usb 3-1: Product: syz [ 2140.524351][T26201] usb 3-1: Manufacturer: syz [ 2140.546773][T26201] usb 3-1: SerialNumber: syz [ 2140.564398][T26201] usb 3-1: config 0 descriptor?? [ 2140.575711][T26201] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2140.605966][T26201] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 2140.642723][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36265'. [ 2140.683142][T14755] netlink: 452 bytes leftover after parsing attributes in process `syz.0.36265'. [ 2140.692310][T14755] netlink: 452 bytes leftover after parsing attributes in process `syz.0.36265'. [ 2141.063867][T12013] tipc: Node number set to 20905985 [ 2141.187290][T26201] em28xx 3-1:0.0: chip ID is em2860 [ 2141.389552][T26201] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 2141.423531][T26201] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 2141.451028][T26201] em28xx 3-1:0.0: No AC97 audio processor [ 2141.486947][T26201] usb 3-1: USB disconnect, device number 110 [ 2141.511355][T26201] em28xx 3-1:0.0: Disconnecting em28xx [ 2141.556612][T26201] em28xx 3-1:0.0: Freeing device [ 2143.016891][T14878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2143.183996][T14886] erspan0: entered promiscuous mode [ 2143.865535][ T5856] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2144.038261][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 2144.055801][ T5856] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2144.077563][ T5856] usb 3-1: config 0 has no interface number 0 [ 2144.086163][ T5856] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2144.103251][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.111513][ T5856] usb 3-1: Product: syz [ 2144.121466][ T5856] usb 3-1: Manufacturer: syz [ 2144.136306][ T5856] usb 3-1: SerialNumber: syz [ 2144.151842][ T5856] usb 3-1: config 0 descriptor?? [ 2144.172485][ T5856] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2144.392128][ T5856] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2144.433341][ T5856] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2144.446546][T14955] tap0: tun_chr_ioctl cmd 1074025677 [ 2144.494940][T14955] tap0: linktype set to 0 [ 2144.852544][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2144.882225][T26204] usb 3-1: USB disconnect, device number 111 [ 2144.927831][T26204] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2144.981423][T26204] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2145.049228][T26204] quatech2 3-1:0.51: device disconnected [ 2145.675657][T15032] netlink: 44 bytes leftover after parsing attributes in process `syz.3.36356'. [ 2145.991206][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36360'. [ 2146.036845][T15038] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2146.062077][T15038] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2146.144212][T15038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2146.175923][T15038] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2146.203891][T15038] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2146.683146][T26204] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 2146.847923][T26204] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.872310][T26204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2146.892885][T26204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2146.929290][T26204] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2146.962137][T26204] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2146.971548][ T30] audit: type=1326 audit(1752001863.233:10191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15087 comm="syz.4.36376" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f14539 code=0x0 [ 2147.012071][T26204] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2147.030824][T26204] usb 2-1: Manufacturer: syz [ 2147.051174][T26204] usb 2-1: config 0 descriptor?? [ 2147.483373][T26204] rc_core: IR keymap rc-hauppauge not found [ 2147.512131][T26204] Registered IR keymap rc-empty [ 2147.527111][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.563422][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.587564][T15111] tap0: tun_chr_ioctl cmd 2147767520 [ 2147.609346][T26204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2147.641879][T26204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input306 [ 2147.680151][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.733216][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.775187][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.819515][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.830615][T15122] loop6: detected capacity change from 0 to 524287999 [ 2147.860419][T15122] buffer_io_error: 28 callbacks suppressed [ 2147.860438][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2147.877313][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.898318][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2147.917268][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2147.925326][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.943317][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.981954][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2147.993575][T15127] Invalid logical block size (3) [ 2147.999493][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2148.016988][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2148.023099][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2148.053308][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2148.064844][T26204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2148.081656][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2148.100646][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2148.104416][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 2148.117977][T26204] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2148.127115][T26204] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2148.143125][T26204] usb 2-1: USB disconnect, device number 7 [ 2148.149539][T15122] ldm_validate_partition_table(): Disk read failed. [ 2148.182957][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 2148.188244][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2148.223378][T15122] Buffer I/O error on dev loop6, logical block 0, async page read [ 2148.231544][T15122] Dev loop6: unable to read RDB block 0 [ 2148.239765][T15122] loop6: unable to read partition table [ 2148.245861][T15122] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 2148.281840][ T5215] ldm_validate_partition_table(): Disk read failed. [ 2148.293332][ T5215] Dev loop6: unable to read RDB block 0 [ 2148.299318][ T5215] loop6: unable to read partition table [ 2148.673663][T15157] GUP no longer grows the stack in syz.0.36386 (15157): 80009000-8000a000 (80005000) [ 2148.713608][T15157] CPU: 0 UID: 0 PID: 15157 Comm: syz.0.36386 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2148.713638][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2148.713652][T15157] Call Trace: [ 2148.713661][T15157] [ 2148.713670][T15157] dump_stack_lvl+0x189/0x250 [ 2148.713706][T15157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2148.713732][T15157] ? __pfx__printk+0x10/0x10 [ 2148.713758][T15157] ? find_vma+0xe7/0x160 [ 2148.713796][T15157] __get_user_pages+0x2a60/0x30b0 [ 2148.713854][T15157] ? __pfx___get_user_pages+0x10/0x10 [ 2148.713875][T15157] ? __gup_longterm_locked+0xbf7/0x15b0 [ 2148.713899][T15157] ? down_read_killable+0x1d1/0x350 [ 2148.713921][T15157] ? try_get_folio+0x633/0x660 [ 2148.713949][T15157] __gup_longterm_locked+0xd66/0x15b0 [ 2148.713977][T15157] ? try_grab_folio_fast+0x1be/0x4f0 [ 2148.714012][T15157] ? gup_fast_fallback+0x1afc/0x2260 [ 2148.714039][T15157] gup_fast_fallback+0x1cd4/0x2260 [ 2148.714109][T15157] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2148.714130][T15157] ? trace_contention_end+0x39/0x120 [ 2148.714159][T15157] ? __mutex_lock+0x330/0xe80 [ 2148.714185][T15157] ? is_valid_gup_args+0x11f/0x200 [ 2148.714210][T15157] ? get_user_pages_fast+0x4d/0xb0 [ 2148.714235][T15157] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 2148.714266][T15157] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 2148.714296][T15157] ? wait_for_space+0x24d/0x2d0 [ 2148.714326][T15157] iov_iter_get_pages2+0x5e/0xa0 [ 2148.714355][T15157] __se_sys_vmsplice+0x548/0x10d0 [ 2148.714403][T15157] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 2148.714431][T15157] ? __pfx_futex_wait+0x10/0x10 [ 2148.714513][T15157] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2148.714559][T15157] ? lockdep_hardirqs_on+0x9c/0x150 [ 2148.714591][T15157] __do_fast_syscall_32+0xb6/0x2b0 [ 2148.714612][T15157] ? lockdep_hardirqs_on+0x9c/0x150 [ 2148.714646][T15157] do_fast_syscall_32+0x34/0x80 [ 2148.714665][T15157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2148.714689][T15157] RIP: 0023:0xf7f94539 [ 2148.714706][T15157] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2148.714723][T15157] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 2148.714744][T15157] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 2148.714758][T15157] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2148.714770][T15157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2148.714782][T15157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2148.714794][T15157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2148.714822][T15157] [ 2149.710249][ T30] audit: type=1804 audit(1752001865.983:10192): pid=15191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.36397" name="/newroot/2694/file0" dev="tmpfs" ino=13612 res=1 errno=0 [ 2149.784889][ T30] audit: type=1804 audit(1752001866.013:10193): pid=15191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.36397" name="/newroot/2694/file0" dev="tmpfs" ino=13612 res=1 errno=0 [ 2150.063888][T15206] vlan2: entered allmulticast mode [ 2150.069502][T15206] veth1: entered allmulticast mode [ 2150.183159][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 2150.263403][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 2150.704552][T15257] netlink: 'syz.1.36417': attribute type 2 has an invalid length. [ 2150.716975][T15260] program syz.3.36418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2151.081529][T15274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.36424'. [ 2151.113711][T15277] netlink: 71 bytes leftover after parsing attributes in process `syz.1.36425'. [ 2151.259875][T15284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36427'. [ 2151.743804][T15314] vivid-006: disconnect [ 2151.761168][T15313] vivid-006: reconnect [ 2152.343401][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 2152.433528][T15354] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.36455'. [ 2152.605251][T15364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36458'. [ 2152.621053][T15364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36458'. [ 2153.593871][T15390] tipc: Started in network mode [ 2153.598954][T15390] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2153.615148][T15390] tipc: Enabling of bearer rejected, failed to enable media [ 2153.733477][T26204] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2153.909025][T26204] usb 2-1: Using ep0 maxpacket: 16 [ 2153.929378][T26204] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2153.949129][T26204] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2153.968289][T26204] usb 2-1: Product: syz [ 2153.978435][T26204] usb 2-1: Manufacturer: syz [ 2153.984564][T26204] usb 2-1: SerialNumber: syz [ 2153.997100][T26204] usb 2-1: config 0 descriptor?? [ 2154.228223][T26204] usb 2-1: USB disconnect, device number 8 [ 2155.157361][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36486'. [ 2155.810483][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36500'. [ 2156.322989][ T5944] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 2156.444862][ T30] audit: type=1326 audit(1752001872.713:10194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2156.500279][ T5944] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2156.512320][ T5944] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2156.519395][ T30] audit: type=1326 audit(1752001872.743:10195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2156.542144][ T5944] usb 3-1: can't read configurations, error -71 [ 2156.634041][ T30] audit: type=1326 audit(1752001872.743:10196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2156.666993][ T30] audit: type=1326 audit(1752001872.743:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2156.696365][ T30] audit: type=1326 audit(1752001872.743:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2156.726026][ T30] audit: type=1326 audit(1752001872.743:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2156.757092][ T30] audit: type=1326 audit(1752001872.743:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2156.888820][ T30] audit: type=1326 audit(1752001872.743:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2156.953416][ T30] audit: type=1326 audit(1752001872.743:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2157.033316][ T30] audit: type=1326 audit(1752001872.743:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.4.36512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2157.775790][T15621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36537'. [ 2158.243079][T26200] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2158.406831][T26200] usb 4-1: Using ep0 maxpacket: 8 [ 2158.447598][T26200] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2158.463036][T26200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.473900][T26200] usb 4-1: Product: syz [ 2158.478104][T26200] usb 4-1: Manufacturer: syz [ 2158.496981][T26200] usb 4-1: SerialNumber: syz [ 2158.524355][T26200] usb 4-1: config 0 descriptor?? [ 2158.546184][T26200] gspca_main: se401-2.14.0 probing 047d:5003 [ 2158.977450][T26200] gspca_se401: Frame size: 31091x12922 bayer [ 2158.993428][T26200] gspca_se401: Frame size: 0x0 1/16th janggu [ 2159.010060][T26200] gspca_se401: Frame size: 20x0 bayer [ 2159.189219][T26200] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input307 [ 2159.242755][T26200] usb 4-1: USB disconnect, device number 9 [ 2159.588206][T15714] delete_channel: no stack [ 2160.276456][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.283236][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.553008][T15760] tap0: tun_chr_ioctl cmd 1074025681 [ 2161.636189][T15824] netlink: 108 bytes leftover after parsing attributes in process `syz.4.36597'. [ 2161.773083][T15830] openvswitch: netlink: Multiple metadata blocks provided [ 2162.603008][ T5944] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2162.764867][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 2162.782083][ T5944] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2162.813070][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.831330][ T5944] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2162.852978][ T5944] pvrusb2: ********** [ 2162.863195][ T5944] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2162.903518][ T5944] pvrusb2: Important functionality might not be entirely working. [ 2162.911381][ T5944] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2162.942854][ T5944] pvrusb2: ********** [ 2163.035676][ T2342] pvrusb2: Invalid write control endpoint [ 2163.142938][ T5856] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2163.151029][ T2342] pvrusb2: Invalid write control endpoint [ 2163.157232][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2163.176250][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2163.193071][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2163.213449][ T2342] pvrusb2: Device being rendered inoperable [ 2163.219544][ T2342] cx25840 5-0044: Unable to detect h/w, assuming cx23887 [ 2163.227138][ T2342] cx25840 5-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2163.240015][ T2342] pvrusb2: Attached sub-driver cx25840 [ 2163.251563][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2163.262623][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2163.269883][T26200] usb 3-1: USB disconnect, device number 114 [ 2163.322847][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 2163.340192][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2163.374561][ T5856] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2163.384796][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.393140][ T5856] usb 4-1: Product: syz [ 2163.397425][ T5856] usb 4-1: Manufacturer: syz [ 2163.402047][ T5856] usb 4-1: SerialNumber: syz [ 2163.410042][ T5856] usb 4-1: config 0 descriptor?? [ 2163.423355][ T5856] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2163.452858][ T5856] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2163.695827][ T5856] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2163.777106][ T5856] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2163.808872][ T5856] em28xx 4-1:0.0: board has no eeprom [ 2163.885377][ T5856] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2163.919468][ T5856] em28xx 4-1:0.0: dvb set to bulk mode. [ 2163.938133][ T5944] em28xx 4-1:0.0: Binding DVB extension [ 2163.976745][ T5856] usb 4-1: USB disconnect, device number 10 [ 2163.994924][ T5856] em28xx 4-1:0.0: Disconnecting em28xx [ 2164.081128][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36621'. [ 2164.098615][ T5944] em28xx 4-1:0.0: Registering input extension [ 2164.120196][ T5856] em28xx 4-1:0.0: Closing input extension [ 2164.162604][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36621'. [ 2164.168752][ T5856] em28xx 4-1:0.0: Freeing device [ 2164.492956][T26200] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2164.643018][T26200] usb 3-1: Using ep0 maxpacket: 8 [ 2164.684671][T26200] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2164.700624][T26200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.738439][T26200] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2164.756615][T26200] pvrusb2: ********** [ 2164.761707][T26200] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2164.822083][T26200] pvrusb2: Important functionality might not be entirely working. [ 2164.840275][T26200] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2164.863458][T26200] pvrusb2: ********** [ 2164.938101][ T2342] pvrusb2: Invalid write control endpoint [ 2165.032967][ T5856] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2165.088831][ T2342] pvrusb2: Invalid write control endpoint [ 2165.121547][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2165.144256][T12013] usb 3-1: USB disconnect, device number 115 [ 2165.151014][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2165.182544][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2165.204455][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 2165.207770][ T2342] pvrusb2: Device being rendered inoperable [ 2165.216071][ T2342] cx25840 5-0044: Unable to detect h/w, assuming cx23887 [ 2165.217791][ T5856] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 2165.225406][ T2342] cx25840 5-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2165.239850][ T5856] usb 2-1: config 0 has no interface number 0 [ 2165.239907][ T5856] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2165.239938][ T5856] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 2165.239966][ T5856] usb 2-1: config 0 interface 126 has no altsetting 0 [ 2165.244706][ T5856] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2165.284758][ T2342] pvrusb2: Attached sub-driver cx25840 [ 2165.289324][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.298300][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2165.298315][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2165.321653][ T5856] usb 2-1: Product: syz [ 2165.339726][ T5856] usb 2-1: Manufacturer: syz [ 2165.344493][ T5856] usb 2-1: SerialNumber: syz [ 2165.352998][ T5856] usb 2-1: config 0 descriptor?? [ 2165.358792][T15986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2165.367297][T15986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2165.813426][ T5856] ir_usb 2-1:0.126: IR Dongle converter detected [ 2166.018875][ T5856] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 2166.032320][T16043] macsec3: entered promiscuous mode [ 2166.057409][T16043] team0: entered promiscuous mode [ 2166.080710][T16043] team0: Device macsec3 is already an upper device of the team interface [ 2166.126652][T16043] team0: left promiscuous mode [ 2166.242716][T16058] bridge0: port 1(vlan6) entered blocking state [ 2166.267296][T26204] usb 2-1: USB disconnect, device number 9 [ 2166.291798][T16058] bridge0: port 1(vlan6) entered disabled state [ 2166.304086][T26204] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 2166.321493][T16058] vlan6: entered allmulticast mode [ 2166.340570][T26204] ir_usb 2-1:0.126: device disconnected [ 2166.343552][T16058] bridge0: entered allmulticast mode [ 2166.375012][T16058] vlan6: left allmulticast mode [ 2166.392976][T16058] bridge0: left allmulticast mode [ 2166.980073][T16100] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 2167.063365][ T5856] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2167.223129][ T5856] usb 3-1: Using ep0 maxpacket: 16 [ 2167.248169][ T5856] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2167.272865][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2167.291239][ T5856] usb 3-1: Product: syz [ 2167.300127][ T5856] usb 3-1: Manufacturer: syz [ 2167.316880][ T5856] usb 3-1: SerialNumber: syz [ 2167.349463][ T5856] usb 3-1: config 0 descriptor?? [ 2167.620477][ T5856] usb 3-1: USB disconnect, device number 116 [ 2168.438984][T16184] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.36674'. [ 2168.479335][T16184] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 2168.508615][T16184] openvswitch: netlink: Duplicate key (type 0). [ 2170.103379][ T5856] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2170.262860][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 2170.271752][ T5856] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2170.288555][ T5856] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2170.301470][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.312119][ T5856] usb 4-1: Product: syz [ 2170.316615][ T5856] usb 4-1: Manufacturer: syz [ 2170.321374][ T5856] usb 4-1: SerialNumber: syz [ 2170.343409][ T5856] usb 4-1: config 0 descriptor?? [ 2170.758241][ T5856] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 2171.163131][ T5856] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 2171.183625][ T5856] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 2171.203430][ T5856] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 2171.229409][ T5856] usb 4-1: USB disconnect, device number 11 [ 2171.533700][T26200] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2171.683721][T26200] usb 3-1: Using ep0 maxpacket: 16 [ 2171.696573][T26200] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 2171.713899][T26200] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.736413][T26200] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 2171.746447][T26200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.754612][T26200] usb 3-1: Product: syz [ 2171.759049][T26200] usb 3-1: Manufacturer: syz [ 2171.763863][T26200] usb 3-1: SerialNumber: syz [ 2171.775060][T26200] usb 3-1: config 0 descriptor?? [ 2171.787791][T26200] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 2172.535843][T16309] bridge0: port 1(vlan3) entered blocking state [ 2172.558769][T16309] bridge0: port 1(vlan3) entered disabled state [ 2172.566981][T16309] vlan3: entered allmulticast mode [ 2172.578558][T16309] bridge0: entered allmulticast mode [ 2172.593266][T16309] vlan3: left allmulticast mode [ 2172.599498][T26200] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 2172.608858][T16309] bridge0: left allmulticast mode [ 2172.621218][T26200] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 2172.648137][T26200] usb 3-1: USB disconnect, device number 117 [ 2173.043003][T16334] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2173.078356][T16334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2173.531293][ T30] audit: type=1326 audit(1752001889.803:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.2.36731" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 2173.590042][T16377] loop6: detected capacity change from 0 to 524287999 [ 2173.610462][T16377] buffer_io_error: 23 callbacks suppressed [ 2173.610479][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.645251][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.662674][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.733291][T16383] Invalid logical block size (3) [ 2173.740479][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.758519][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.770538][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.781716][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.797277][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.807360][T16377] ldm_validate_partition_table(): Disk read failed. [ 2173.819338][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.827639][T16377] Buffer I/O error on dev loop6, logical block 0, async page read [ 2173.837780][T16377] Dev loop6: unable to read RDB block 0 [ 2173.843969][T16377] loop6: unable to read partition table [ 2173.850306][T16377] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 2173.885520][ T5215] ldm_validate_partition_table(): Disk read failed. [ 2173.898391][ T5215] Dev loop6: unable to read RDB block 0 [ 2173.905714][ T5215] loop6: unable to read partition table [ 2173.963619][T26200] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 2174.115049][T26200] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2174.123899][T26200] usb 4-1: config 0 has no interface number 0 [ 2174.130761][T26200] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2174.151954][T26200] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2174.172853][T26200] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2174.181948][T26200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.206192][T26200] usb 4-1: config 0 descriptor?? [ 2174.213206][T16386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2174.237162][T26200] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2174.464678][T26204] usb 4-1: USB disconnect, device number 12 [ 2174.470697][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2174.691737][T16408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2174.701317][T16408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2174.763302][T12013] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2174.855594][T16421] input: syz0 as /devices/virtual/input/input309 [ 2174.935440][T12013] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2174.950224][T12013] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2174.972138][T12013] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2175.007861][T12013] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2175.104692][T12013] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2175.118909][T12013] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2175.132946][T12013] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2175.141056][T12013] usb 2-1: Product: syz [ 2175.150248][T12013] usb 2-1: Manufacturer: syz [ 2175.178221][T12013] cdc_wdm 2-1:1.0: skipping garbage [ 2175.207428][T12013] cdc_wdm 2-1:1.0: skipping garbage [ 2175.216117][T12013] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2175.232887][T12013] cdc_wdm 2-1:1.0: Unknown control protocol [ 2176.334063][T16458] netlink: 'syz.3.36751': attribute type 14 has an invalid length. [ 2176.409986][T16461] random: crng reseeded on system resumption [ 2176.655617][T12013] usb 2-1: USB disconnect, device number 10 [ 2176.671900][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 2176.742920][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 2177.685831][T16555] netlink: 'syz.3.36772': attribute type 8 has an invalid length. [ 2178.211789][T16586] kvm: kvm [16584]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x9 [ 2178.293060][ T5856] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2178.423314][T12013] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2178.463828][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 2178.470608][ T5856] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 2178.479182][ T5856] usb 4-1: config 0 has no interface number 0 [ 2178.485515][ T5856] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2178.496874][ T5856] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2178.510344][ T5856] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2178.519671][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.527781][ T5856] usb 4-1: Product: syz [ 2178.532092][ T5856] usb 4-1: Manufacturer: syz [ 2178.536817][ T5856] usb 4-1: SerialNumber: syz [ 2178.547915][ T5856] usb 4-1: config 0 descriptor?? [ 2178.558340][T16577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2178.571588][T16577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2178.579021][T12013] usb 2-1: Using ep0 maxpacket: 8 [ 2178.593787][T12013] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2178.603481][T12013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.626523][T12013] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2178.636770][T12013] pvrusb2: ********** [ 2178.641344][T12013] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2178.651941][T12013] pvrusb2: Important functionality might not be entirely working. [ 2178.660763][T12013] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2178.690357][T12013] pvrusb2: ********** [ 2178.709301][T16611] sctp: [Deprecated]: syz.2.36790 (pid 16611) Use of int in max_burst socket option. [ 2178.709301][T16611] Use struct sctp_assoc_value instead [ 2178.806098][T16577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2178.823537][T16577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2178.824405][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 2178.841983][ T2342] pvrusb2: Invalid write control endpoint [ 2178.907325][ T2342] pvrusb2: Invalid write control endpoint [ 2178.920026][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2178.932906][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2178.941261][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2178.952708][ T2342] pvrusb2: Device being rendered inoperable [ 2178.958781][ T2342] cx25840 5-0044: Unable to detect h/w, assuming cx23887 [ 2178.966030][ T2342] cx25840 5-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2178.977296][ T2342] pvrusb2: Attached sub-driver cx25840 [ 2178.987094][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2178.999231][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2179.070073][T12013] usb 2-1: USB disconnect, device number 11 [ 2179.264001][ T5856] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 2179.278082][ T5856] asix 4-1:0.251: probe with driver asix failed with error -524 [ 2179.475383][T26204] usb 4-1: USB disconnect, device number 13 [ 2179.647471][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36798'. [ 2179.700412][T16654] kvm: kvm [16653]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x9 [ 2179.835360][T16664] netlink: 'syz.1.36801': attribute type 14 has an invalid length. [ 2180.045751][T16672] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 2180.687935][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36810'. [ 2180.710277][T16701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36812'. [ 2180.728791][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36810'. [ 2181.214392][T16723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36821'. [ 2181.595818][ T5856] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2181.754884][ T5856] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2181.773572][T16741] Context (ID=0x1) not attached to queue pair (handle=0x1:0x40) [ 2181.792352][ T5856] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2181.812914][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2181.822135][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2181.840158][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2181.854549][ T5856] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2181.864115][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2181.877425][ T5856] usb 3-1: Product: syz [ 2181.881688][ T5856] usb 3-1: Manufacturer: syz [ 2181.902423][ T5856] cdc_wdm 3-1:1.0: skipping garbage [ 2181.930562][ T5856] cdc_wdm 3-1:1.0: skipping garbage [ 2181.957278][ T5856] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2181.983184][ T5856] cdc_wdm 3-1:1.0: Unknown control protocol [ 2183.350789][T12013] usb 3-1: USB disconnect, device number 118 [ 2184.844997][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36875'. [ 2185.482667][T16917] loop3: detected capacity change from 0 to 524287999 [ 2185.503579][T16917] buffer_io_error: 23 callbacks suppressed [ 2185.503596][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.521779][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.531025][T16922] Buffer I/O error on dev loop3, logical block 1048575, async page read [ 2185.540598][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.549502][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.559447][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.568531][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.613061][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.641409][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.666854][T16917] ldm_validate_partition_table(): Disk read failed. [ 2185.673916][T16917] Buffer I/O error on dev loop3, logical block 0, async page read [ 2185.682455][T16917] Dev loop3: unable to read RDB block 0 [ 2185.689037][T16917] loop3: unable to read partition table [ 2185.720815][T16917] loop_reread_partitions: partition scan of loop3 (3 xC) failed (rc=-5) [ 2185.794795][ T5215] ldm_validate_partition_table(): Disk read failed. [ 2185.819971][ T5215] Dev loop3: unable to read RDB block 0 [ 2185.826427][ T5215] loop3: unable to read partition table [ 2186.183265][T12013] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2186.355195][T12013] usb 2-1: Using ep0 maxpacket: 32 [ 2186.365220][T12013] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 2186.384489][T12013] usb 2-1: config 0 has no interface number 0 [ 2186.401478][T12013] usb 2-1: config 0 interface 219 has no altsetting 0 [ 2186.418791][T12013] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 2186.441598][T12013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.455363][T12013] usb 2-1: config 0 descriptor?? [ 2186.749220][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36894'. [ 2186.775281][T12013] usb 2-1: string descriptor 0 read error: -71 [ 2186.816607][T12013] usb 2-1: USB disconnect, device number 12 [ 2187.661941][ T30] audit: type=1326 audit(1752001903.933:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2187.762180][ T30] audit: type=1326 audit(1752001903.933:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2187.837395][ T30] audit: type=1326 audit(1752001904.003:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2187.942609][ T30] audit: type=1326 audit(1752001904.003:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2188.049708][ T30] audit: type=1326 audit(1752001904.003:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2188.132318][ T30] audit: type=1326 audit(1752001904.013:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2188.222917][ T30] audit: type=1326 audit(1752001904.013:10211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2188.328196][ T30] audit: type=1326 audit(1752001904.013:10212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2188.422505][ T30] audit: type=1326 audit(1752001904.013:10213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.1.36911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2188.653177][T12013] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2188.743140][T26200] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2188.813194][T12013] usb 4-1: Using ep0 maxpacket: 8 [ 2188.822620][T12013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2188.842437][T12013] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 2188.891687][T12013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.904056][T26200] usb 3-1: Using ep0 maxpacket: 32 [ 2188.911904][T26200] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 2188.914533][T12013] usb 4-1: config 0 descriptor?? [ 2188.933473][T26200] usb 3-1: config 0 has no interface number 0 [ 2188.939617][T26200] usb 3-1: config 0 interface 219 has no altsetting 0 [ 2188.950107][T26200] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 2188.959714][T26200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.969166][T17100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36932'. [ 2188.972339][T26200] usb 3-1: config 0 descriptor?? [ 2189.279758][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36921'. [ 2189.310249][T26200] usb 3-1: string descriptor 0 read error: -71 [ 2189.344196][T26200] usb 3-1: USB disconnect, device number 119 [ 2189.351643][T12013] hid-multitouch 0003:0EEF:72C4.00EE: unknown main item tag 0x0 [ 2189.384582][T12013] hid-multitouch 0003:0EEF:72C4.00EE: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 2189.386945][T17120] netem: unknown loss type 0 [ 2189.412849][T17120] netem: change failed [ 2189.567392][T26200] usb 4-1: USB disconnect, device number 14 [ 2189.678741][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36938'. [ 2190.792295][T17188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36957'. [ 2190.805969][T17187] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2192.412477][ T30] audit: type=1326 audit(1752001908.683:10214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17229 comm="syz.0.36972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2192.496910][T17234] input: syz0 as /devices/virtual/input/input310 [ 2193.988771][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36996'. [ 2194.006152][T17306] netlink: 'syz.2.36997': attribute type 2 has an invalid length. [ 2194.131453][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36998'. [ 2194.755281][T17336] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2195.419483][T17373] netlink: 'syz.0.37021': attribute type 4 has an invalid length. [ 2195.431297][T17373] netlink: 17 bytes leftover after parsing attributes in process `syz.0.37021'. [ 2196.307965][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37031'. [ 2197.318588][T17433] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2197.327690][T17433] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2197.337366][T17433] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2197.342106][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37043'. [ 2197.346216][T17433] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2197.673947][T26200] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2197.843112][T26200] usb 2-1: Using ep0 maxpacket: 16 [ 2197.851416][T26200] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2197.875628][T26200] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2197.877576][T17453] netlink: ct family unspecified [ 2197.891179][T17453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2197.912135][T26200] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2197.927469][T26200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.945919][T26200] usb 2-1: Product: syz [ 2197.950124][T26200] usb 2-1: Manufacturer: syz [ 2197.964453][T26200] usb 2-1: SerialNumber: syz [ 2198.395615][T26200] usb 2-1: 0:2 : does not exist [ 2198.800709][T26200] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2198.855072][T26200] usb 2-1: USB disconnect, device number 13 [ 2198.911749][ T3642] udevd[3642]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2201.492987][T17597] netlink: 'syz.2.37095': attribute type 5 has an invalid length. [ 2201.521879][T17597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37095'. [ 2201.806677][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2201.806696][ T30] audit: type=1326 audit(1752001918.073:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.37099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2201.907216][ T30] audit: type=1326 audit(1752001918.073:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.37099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2201.971599][ T30] audit: type=1326 audit(1752001918.113:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.37099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2202.032729][ T30] audit: type=1326 audit(1752001918.113:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.37099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2202.055340][ C1] vkms_vblank_simulate: vblank timer overrun [ 2202.090699][ T30] audit: type=1326 audit(1752001918.113:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.37099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2202.140704][ T30] audit: type=1326 audit(1752001918.113:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.37099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2202.205845][ T30] audit: type=1326 audit(1752001918.113:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.37099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2202.283225][ T30] audit: type=1326 audit(1752001918.113:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.37099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2202.305508][ C1] vkms_vblank_simulate: vblank timer overrun [ 2202.645516][T17634] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2202.684335][T17633] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2202.694375][ T30] audit: type=1326 audit(1752001918.963:10233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17635 comm="syz.1.37109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2202.813683][ T30] audit: type=1326 audit(1752001918.963:10234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17635 comm="syz.1.37109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2203.358488][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37113'. [ 2203.468915][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37114'. [ 2203.605517][T17656] netpci0: tun_chr_ioctl cmd 1074812118 [ 2203.913860][T17672] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 2204.697830][T17722] netlink: 27 bytes leftover after parsing attributes in process `syz.2.37134'. [ 2205.303602][T17752] netlink: 44 bytes leftover after parsing attributes in process `syz.1.37143'. [ 2205.317634][T17752] netlink: 43 bytes leftover after parsing attributes in process `syz.1.37143'. [ 2205.345038][T17752] netlink: 'syz.1.37143': attribute type 6 has an invalid length. [ 2205.373498][T17752] netlink: 'syz.1.37143': attribute type 5 has an invalid length. [ 2205.392856][T17752] netlink: 43 bytes leftover after parsing attributes in process `syz.1.37143'. [ 2205.864592][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37156'. [ 2206.053714][T26204] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2206.214805][T26204] usb 4-1: Using ep0 maxpacket: 16 [ 2206.227306][T26204] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 2206.242827][T26204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.250859][T26204] usb 4-1: Product: syz [ 2206.263385][T26204] usb 4-1: Manufacturer: syz [ 2206.268022][T26204] usb 4-1: SerialNumber: syz [ 2206.294023][T26204] usb 4-1: config 0 descriptor?? [ 2206.314323][T26204] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 2206.543100][T26204] gp8psk: usb in 128 operation failed. [ 2206.559909][T26204] gp8psk: usb in 137 operation failed. [ 2206.583916][T26204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2206.615751][T26204] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 2206.643094][T26204] usb 4-1: media controller created [ 2206.723844][T26204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2206.793947][T26204] gp8psk_fe: Frontend revision 1 attached [ 2206.799762][T26204] usb 4-1: DVB: registering adapter 5 frontend 0 (Genpix DVB-S)... [ 2206.823470][T12013] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2206.825164][T26204] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2206.996395][T12013] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2207.014649][T12013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.047657][T12013] usb 3-1: config 0 descriptor?? [ 2207.070657][T12013] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2207.166286][T26204] gp8psk: usb in 137 operation failed. [ 2207.171799][T26204] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 2207.190447][T26204] gp8psk: found Genpix USB device pID = 201 (hex) [ 2207.212167][T26204] usb 4-1: USB disconnect, device number 15 [ 2207.306878][T12013] gspca_spca508: reg_read err -32 [ 2207.322452][T12013] gspca_spca508: reg_read err -32 [ 2207.373431][T26204] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 2207.553475][T12013] gspca_spca508: reg_read err -71 [ 2207.564416][T12013] gspca_spca508: reg_read err -71 [ 2207.574315][T12013] gspca_spca508: reg write: error -71 [ 2207.579798][T12013] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 2207.611492][T12013] usb 3-1: USB disconnect, device number 120 [ 2207.633026][T26200] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2207.793393][T26200] usb 2-1: Using ep0 maxpacket: 32 [ 2207.810368][T26200] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2207.822814][T26200] usb 2-1: config 0 has no interface number 0 [ 2207.835768][T26200] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2207.852975][T26200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.861024][T26200] usb 2-1: Product: syz [ 2207.881667][T26200] usb 2-1: Manufacturer: syz [ 2207.886917][T26200] usb 2-1: SerialNumber: syz [ 2207.906517][T26200] usb 2-1: config 0 descriptor?? [ 2207.918818][T26200] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2208.146705][T26200] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2208.183665][T26200] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2208.603583][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2208.604941][T12013] usb 2-1: USB disconnect, device number 14 [ 2208.641408][T12013] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2208.697763][T12013] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2208.748780][T12013] quatech2 2-1:0.51: device disconnected [ 2209.769713][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2209.769730][ T30] audit: type=1800 audit(1752001926.043:10243): pid=17997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.37198" name="file0" dev="tmpfs" ino=36889 res=0 errno=0 [ 2210.595904][ T30] audit: type=1800 audit(1752001926.873:10244): pid=18041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37214" name="file0" dev="tmpfs" ino=1314 res=0 errno=0 [ 2211.063706][T26200] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2211.224006][T26200] usb 4-1: config 0 has no interfaces? [ 2211.231856][T26200] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2211.258806][T26200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.273534][T26200] usb 4-1: Product: syz [ 2211.277723][T26200] usb 4-1: Manufacturer: syz [ 2211.282339][T26200] usb 4-1: SerialNumber: syz [ 2211.312669][T26200] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2211.327537][T26200] r8152-cfgselector 4-1: config 0 descriptor?? [ 2211.572324][T12013] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 2212.073210][T12013] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2212.252947][T12013] usb 2-1: Using ep0 maxpacket: 8 [ 2212.264641][T12013] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.282209][T12013] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2212.304235][T12013] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2212.330225][T12013] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2212.349704][T12013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.376295][T12013] usb 2-1: Product: syz [ 2212.383596][T12013] usb 2-1: Manufacturer: syz [ 2212.391047][T12013] usb 2-1: SerialNumber: syz [ 2212.614134][T12013] cdc_ncm 2-1:1.0: bind() failure [ 2212.648595][T12013] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2212.665190][T12013] cdc_ncm 2-1:1.1: bind() failure [ 2212.701606][T12013] usb 2-1: USB disconnect, device number 15 [ 2213.230912][T18160] IPVS: Scheduler module ip_vs_ not found [ 2213.512920][T26200] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2213.687319][T26200] usb 2-1: Using ep0 maxpacket: 16 [ 2213.695663][T26200] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.716313][T26200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2213.735332][T26200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2213.747160][T26200] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2213.761672][T26200] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2213.779366][T26200] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2213.795443][T26200] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2213.810120][T26200] usb 2-1: Manufacturer: syz [ 2213.828246][T26200] usb 2-1: config 0 descriptor?? [ 2214.129712][T26200] rc_core: IR keymap rc-hauppauge not found [ 2214.130398][ T30] audit: type=1800 audit(1752001930.403:10245): pid=18208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37263" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=294102 res=0 errno=0 [ 2214.145868][T26200] Registered IR keymap rc-empty [ 2214.167807][ C1] vkms_vblank_simulate: vblank timer overrun [ 2214.217933][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.283929][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.313725][T26200] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2214.331450][T26200] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input311 [ 2214.347719][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.413554][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.462909][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.492887][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.526081][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.552975][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.587999][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.613103][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.654551][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.698777][T26200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2214.727626][T26200] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2214.752235][T26200] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2214.763358][ T5944] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 2214.796596][T26200] usb 2-1: USB disconnect, device number 16 [ 2214.927582][ T5944] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2214.952040][ T5944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2214.977074][ T5944] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2214.988029][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.001248][ T5944] usb 3-1: Product: syz [ 2215.009076][ T5944] usb 3-1: Manufacturer: syz [ 2215.017750][ T5944] usb 3-1: SerialNumber: syz [ 2215.442474][ T5944] usb 3-1: 0:2 : does not exist [ 2215.853828][ T5944] usb 3-1: USB disconnect, device number 121 [ 2216.088256][T18331] loop6: detected capacity change from 0 to 524287999 [ 2216.098625][T18331] buffer_io_error: 24 callbacks suppressed [ 2216.098641][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.119955][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.129188][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.143037][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.159158][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.167911][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.182222][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.200896][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.209201][T18331] ldm_validate_partition_table(): Disk read failed. [ 2216.222675][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.230957][T18331] Buffer I/O error on dev loop6, logical block 0, async page read [ 2216.244842][T18331] Dev loop6: unable to read RDB block 0 [ 2216.251388][T18331] loop6: unable to read partition table [ 2216.261826][T18331] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 2216.723809][T26200] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2216.949529][T18360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37301'. [ 2216.963539][T26200] usb 3-1: Using ep0 maxpacket: 16 [ 2216.972206][T26200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2216.999173][T18360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37301'. [ 2217.002478][T26200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2217.025409][T26200] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2217.041074][T26200] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 2217.050336][T26200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.101725][T26200] usb 3-1: config 0 descriptor?? [ 2217.360182][T18380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37308'. [ 2217.546971][T26200] hid-multitouch 0003:045E:9994.00EF: unknown main item tag 0x2 [ 2217.573172][T26200] hid-multitouch 0003:045E:9994.00EF: unknown main item tag 0x0 [ 2217.580884][T26200] hid-multitouch 0003:045E:9994.00EF: unknown main item tag 0x0 [ 2217.615427][T26200] hid-multitouch 0003:045E:9994.00EF: unknown main item tag 0x0 [ 2217.628243][T26200] hid-multitouch 0003:045E:9994.00EF: item fetching failed at offset 30/34 [ 2217.649361][T26200] hid-multitouch 0003:045E:9994.00EF: probe with driver hid-multitouch failed with error -22 [ 2217.800367][T26200] usb 3-1: USB disconnect, device number 122 [ 2219.581897][T18472] netlink: 48 bytes leftover after parsing attributes in process `syz.3.37335'. [ 2220.123318][T12013] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2220.308569][T12013] usb 2-1: Using ep0 maxpacket: 8 [ 2220.317349][T12013] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2220.341846][T12013] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2220.368446][T12013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2220.396652][T12013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2220.427590][T12013] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2220.444400][T12013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.462845][T12013] usb 2-1: Product: syz [ 2220.467906][T12013] usb 2-1: Manufacturer: syz [ 2220.477249][T12013] usb 2-1: SerialNumber: syz [ 2220.490073][T12013] usb 2-1: config 0 descriptor?? [ 2220.512682][T18491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2220.527622][T26200] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2220.692875][T26200] usb 4-1: Using ep0 maxpacket: 16 [ 2220.707281][T26200] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2220.719099][T26200] usb 4-1: config 0 has no interface number 0 [ 2220.725896][T26200] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2220.743181][T26200] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2220.755571][T26200] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2220.755961][T12013] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 2220.765000][T26200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.791909][T26200] usb 4-1: config 0 descriptor?? [ 2220.816480][T12013] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input313 [ 2221.054315][ C1] powermate: config urb returned -71 [ 2221.061886][ C1] powermate: config urb returned -71 [ 2221.068036][ C1] powermate: config urb returned -71 [ 2221.076042][ C1] powermate: config urb returned -71 [ 2221.089548][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2221.098342][T12013] usb 2-1: USB disconnect, device number 17 [ 2221.109386][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37364'. [ 2221.411157][T26200] uclogic 0003:28BD:0071.00F0: pen parameters not found [ 2221.431693][T26200] uclogic 0003:28BD:0071.00F0: interface is invalid, ignoring [ 2221.482217][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37360'. [ 2221.491686][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37360'. [ 2221.513973][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37360'. [ 2221.536388][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37360'. [ 2221.623227][T26200] usb 4-1: USB disconnect, device number 17 [ 2221.708056][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.714690][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.420580][T18666] loop6: detected capacity change from 0 to 524287999 [ 2223.443455][T18666] buffer_io_error: 7 callbacks suppressed [ 2223.443470][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.473427][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.532676][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.556025][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.570212][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.578886][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.606454][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.621460][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.637826][T18666] ldm_validate_partition_table(): Disk read failed. [ 2223.646018][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.661941][T18666] Buffer I/O error on dev loop6, logical block 0, async page read [ 2223.670482][T18666] Dev loop6: unable to read RDB block 0 [ 2223.681694][T18666] loop6: unable to read partition table [ 2223.698964][T18666] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 2224.997481][T18731] netlink: 112 bytes leftover after parsing attributes in process `syz.0.37416'. [ 2225.241513][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37420'. [ 2226.386549][T18798] netlink: 2124 bytes leftover after parsing attributes in process `syz.2.37441'. [ 2229.448639][ T30] audit: type=1326 audit(1752001945.723:10246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18898 comm="syz.3.37473" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 2229.470399][ C1] vkms_vblank_simulate: vblank timer overrun [ 2230.602544][T18939] sctp: [Deprecated]: syz.0.37489 (pid 18939) Use of int in max_burst socket option deprecated. [ 2230.602544][T18939] Use struct sctp_assoc_value instead [ 2231.552233][T18974] tmpfs: Unknown parameter 'fd' [ 2232.045933][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.37507'. [ 2232.223997][T19002] netlink: 68 bytes leftover after parsing attributes in process `syz.2.37509'. [ 2232.960109][T19044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.37523'. [ 2233.034927][T19048] loop6: detected capacity change from 0 to 524287999 [ 2233.078329][T19053] netlink: 'syz.3.37526': attribute type 1 has an invalid length. [ 2233.087891][T19053] netlink: 'syz.3.37526': attribute type 2 has an invalid length. [ 2233.101588][T19053] netlink: 'syz.3.37526': attribute type 8 has an invalid length. [ 2233.115876][T19053] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.37526'. [ 2236.593880][ T30] audit: type=1326 audit(1752001952.863:10247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.1.37588" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 2237.488959][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37593'. [ 2237.533002][T19235] netlink: 9 bytes leftover after parsing attributes in process `syz.4.37593'. [ 2238.577435][T19274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.37612'. [ 2238.595297][ T30] audit: type=1326 audit(1752001954.863:10248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2238.657842][ T30] audit: type=1326 audit(1752001954.873:10249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2238.731546][ T30] audit: type=1326 audit(1752001954.873:10250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2238.753855][ C1] vkms_vblank_simulate: vblank timer overrun [ 2238.813123][ T30] audit: type=1326 audit(1752001954.873:10251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2238.835391][ C1] vkms_vblank_simulate: vblank timer overrun [ 2238.885023][ T30] audit: type=1326 audit(1752001954.873:10252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2238.929148][ T30] audit: type=1326 audit(1752001954.873:10253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2238.951446][ C1] vkms_vblank_simulate: vblank timer overrun [ 2238.994593][ T30] audit: type=1326 audit(1752001954.873:10254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2239.112995][ T30] audit: type=1326 audit(1752001954.873:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2239.135254][ C1] vkms_vblank_simulate: vblank timer overrun [ 2239.182131][ T30] audit: type=1326 audit(1752001954.873:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.37610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=398 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2239.204426][ C1] vkms_vblank_simulate: vblank timer overrun [ 2239.489809][T19320] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 2239.700979][T19334] netlink: 'syz.3.37634': attribute type 2 has an invalid length. [ 2239.833590][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37635'. [ 2239.988964][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37640'. [ 2240.371980][T19364] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 2240.899772][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37660'. [ 2240.993566][T12013] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2241.164412][T12013] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.199549][T12013] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2241.234840][T12013] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2241.255850][T12013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2241.264158][T12013] usb 2-1: SerialNumber: syz [ 2241.519291][T12013] usb 2-1: 0:2 : does not exist [ 2241.573046][T12013] usb 2-1: USB disconnect, device number 18 [ 2242.050208][T19487] io-wq is not configured for unbound workers [ 2242.290351][T19496] vivid-000: disconnect [ 2242.302300][T19495] vivid-000: reconnect [ 2242.341386][T19500] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 2242.471770][T19506] netlink: 748 bytes leftover after parsing attributes in process `syz.4.37681'. [ 2242.498859][T19506] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 2243.123630][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37696'. [ 2244.537124][T19599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37716'. [ 2244.729960][T19612] netlink: 'syz.3.37721': attribute type 21 has an invalid length. [ 2244.738966][T19612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.37721'. [ 2244.748566][T19612] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 2246.261674][T19652] ALSA: mixer_oss: invalid index 40000 [ 2247.006660][T19683] netlink: 200 bytes leftover after parsing attributes in process `syz.1.37749'. [ 2247.779032][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37764'. [ 2248.914126][T19796] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2250.361524][T19830] netlink: 100 bytes leftover after parsing attributes in process `syz.3.37791'. [ 2250.521133][T19834] cifs: Unknown parameter 'f,' [ 2251.737183][T19877] input: syz1 as /devices/virtual/input/input315 [ 2252.993102][ T5856] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 2253.171915][ T5856] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 2253.182910][ T5856] usb 2-1: config 0 has no interface number 0 [ 2253.193646][T19959] netlink: 'syz.4.37829': attribute type 1 has an invalid length. [ 2253.194599][ T5856] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2253.201493][T19959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2253.234927][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.257846][ T5856] usb 2-1: Product: syz [ 2253.265976][ T5856] usb 2-1: Manufacturer: syz [ 2253.281006][ T5856] usb 2-1: SerialNumber: syz [ 2253.304507][ T5856] usb 2-1: config 0 descriptor?? [ 2253.721194][ T5856] usb 2-1: Firmware: major: 79, minor: 230, hardware type: UNKNOWN (84) [ 2253.937704][ T5856] usb 2-1: failed to fetch extended address, random address set [ 2253.954676][ T5856] usb 2-1: atusb_probe: initialization failed, error = -524 [ 2253.971416][ T5856] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 2253.994053][T20000] pim6reg: entered allmulticast mode [ 2254.005531][ T5856] usb 2-1: USB disconnect, device number 19 [ 2254.013854][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2254.013868][ T30] audit: type=1326 audit(1752001970.283:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2254.054523][T19998] pim6reg: left allmulticast mode [ 2254.091081][ T30] audit: type=1326 audit(1752001970.323:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2254.137675][ T30] audit: type=1326 audit(1752001970.323:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2254.169207][ T30] audit: type=1326 audit(1752001970.323:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2254.198131][ T30] audit: type=1326 audit(1752001970.323:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2254.227592][ T30] audit: type=1326 audit(1752001970.323:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2254.256282][ T30] audit: type=1326 audit(1752001970.333:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2254.311080][ T30] audit: type=1326 audit(1752001970.333:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2254.340426][ T30] audit: type=1326 audit(1752001970.333:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2254.372055][ T30] audit: type=1326 audit(1752001970.333:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.2.37841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2258.880554][T20201] usb usb8: usbfs: process 20201 (syz.2.37905) did not claim interface 0 before use [ 2260.175838][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37915'. [ 2260.213048][T20257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37915'. [ 2260.318347][T20263] fuse: Unknown parameter ' 0 [ 2260.318347][T20263] tunl0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 2260.318347][T20263] gre0: 298 4 0 1 0 0 0 4 0 0 0 0 0 0 0 0 [ 2260.318347][T20263] gretap0: 68 1 0 1 0 0 0 0 0 0 14 0 0 0 0 0 [ 2260.318347][T20263] erspan0: 0 0 0 0 0 0 0 0 0 0 17 0 0 0 0 0 [ 2260.318347][T20263] ip_vti0: 0 0 16 16 0 0 0 0 0 0 0 0 0 0 0 0 [ 2260.318347][T20263] ip6_vti0: 0 0 0 2 0 0 0 0 0 0 8 8 0 0 8 0 [ 2260.318347][T20263] sit0: 0 0 0 0 0 0 0 0 0 0 7 1 0 0 0 0 [ 2260.318347][T20263] ip6tnl0: 0 0 0 0 0 0 0 0 0 0 8 8 0 0 8 0 [ 2260.318347][T20263] ip6 [ 2260.553757][T20276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.37923'. [ 2260.663803][ C1] vkms_vblank_simulate: vblank timer overrun [ 2260.711243][T20276] netem: unknown loss type 13 [ 2260.717404][T20276] netem: change failed [ 2261.553968][T20308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37936'. [ 2261.634915][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37936'. [ 2262.554730][T20371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37949'. [ 2262.574638][T20371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37949'. [ 2263.177623][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37958'. [ 2263.202939][T12013] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 2263.365050][T12013] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.377705][T12013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2263.403451][T12013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2263.417257][T12013] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2263.432666][T12013] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2263.442351][T12013] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2263.552868][T12013] usb 2-1: Manufacturer: syz [ 2263.573834][T12013] usb 2-1: config 0 descriptor?? [ 2263.773543][T20423] netlink: 4756 bytes leftover after parsing attributes in process `syz.4.37966'. [ 2263.888997][T12013] rc_core: IR keymap rc-hauppauge not found [ 2263.897558][T12013] Registered IR keymap rc-empty [ 2263.913290][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2263.943105][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2263.974280][T12013] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2263.998420][T12013] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input316 [ 2264.038946][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.073005][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.093763][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.123440][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.142907][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.163165][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.193038][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.212965][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.244189][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.277969][T12013] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2264.318385][T12013] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2264.353930][T12013] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2264.386598][T12013] usb 2-1: USB disconnect, device number 20 [ 2264.799183][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37980'. [ 2265.232936][T26204] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2265.377833][T20526] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2265.388344][T26204] usb 4-1: Using ep0 maxpacket: 16 [ 2265.396720][T26204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.412821][T26204] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 2265.425329][T20528] __nla_validate_parse: 2 callbacks suppressed [ 2265.425346][T20528] netlink: 340 bytes leftover after parsing attributes in process `syz.4.37992'. [ 2265.432201][T26204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.458693][T26204] usb 4-1: config 0 descriptor?? [ 2265.887530][T26204] pantherlord 0003:0E8F:0003.00F1: unknown main item tag 0x0 [ 2265.915830][T26204] pantherlord 0003:0E8F:0003.00F1: unknown main item tag 0x0 [ 2265.934102][T26204] pantherlord 0003:0E8F:0003.00F1: report_id 0 is invalid [ 2265.951506][T26204] pantherlord 0003:0E8F:0003.00F1: item 0 1 1 8 parsing failed [ 2265.962054][T26204] pantherlord 0003:0E8F:0003.00F1: parse failed [ 2265.969930][T26204] pantherlord 0003:0E8F:0003.00F1: probe with driver pantherlord failed with error -22 [ 2266.130742][T26204] usb 4-1: USB disconnect, device number 18 [ 2266.314202][T20566] netlink: 428 bytes leftover after parsing attributes in process `syz.2.38003'. [ 2266.358405][T20566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.38003'. [ 2267.011674][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38017'. [ 2267.283565][T20610] loop6: detected capacity change from 0 to 524287999 [ 2267.337587][T20619] netlink: 88 bytes leftover after parsing attributes in process `syz.4.38025'. [ 2267.816449][ T30] kauditd_printk_skb: 3784 callbacks suppressed [ 2267.816466][ T30] audit: type=1326 audit(1752001984.093:14053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.38032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2267.907443][ T30] audit: type=1326 audit(1752001984.093:14054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.38032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2267.945112][ T30] audit: type=1326 audit(1752001984.093:14055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.38032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2267.967380][ C1] vkms_vblank_simulate: vblank timer overrun [ 2267.985912][ T30] audit: type=1326 audit(1752001984.093:14056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.38032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2268.047730][ T30] audit: type=1326 audit(1752001984.093:14057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.38032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2268.070022][ C1] vkms_vblank_simulate: vblank timer overrun [ 2268.168915][ T30] audit: type=1326 audit(1752001984.093:14058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.38032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2268.317079][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38036'. [ 2268.564084][T20654] netlink: 'syz.0.38040': attribute type 1 has an invalid length. [ 2268.571976][T20654] netlink: 'syz.0.38040': attribute type 2 has an invalid length. [ 2269.170763][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.199120][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.212985][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.232910][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.247989][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.263104][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.283448][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.290877][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.342010][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.350636][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.361164][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.368757][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.377293][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.385136][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.392542][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.400041][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.408272][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.416078][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.423787][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.431894][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.440021][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.448329][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.455882][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.464756][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.472309][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.479869][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.490859][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.500247][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.508484][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.516409][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.524902][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.532316][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.539807][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.547486][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.555573][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.576858][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.587311][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.597774][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.607687][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.617365][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.629353][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.638603][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.647062][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.654842][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.662281][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.671395][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.679564][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.687056][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.694821][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.702233][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.710489][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.726561][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.734845][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.742267][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.755070][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.762487][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.779325][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.788510][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.800813][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.809197][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.821149][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.831378][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.844727][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.852139][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.854083][T20700] netlink: 'syz.1.38058': attribute type 9 has an invalid length. [ 2269.864149][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.880984][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.889241][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.901725][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.909498][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.923016][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.930456][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.941828][T20702] sch_fq: defrate 2048 ignored. [ 2269.942840][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.957326][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.970734][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.980059][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2269.993004][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2270.000424][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2270.012792][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2270.020222][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2270.033715][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2270.041149][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2270.055204][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2270.062620][T26205] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 2270.093615][T26205] hid-generic 0000:0000:0000.00F2: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2270.329891][T12013] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2270.374935][T20707] fido_id[20707]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2270.503302][T12013] usb 2-1: Using ep0 maxpacket: 32 [ 2270.517994][T12013] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2270.537016][T12013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.563412][T12013] usb 2-1: config 0 descriptor?? [ 2270.775431][T20750] gtp0: entered promiscuous mode [ 2270.789819][T20750] gtp0: entered allmulticast mode [ 2270.790094][T12013] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2270.834600][T12013] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2270.873851][T12013] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2270.888953][T12013] usb 2-1: media controller created [ 2270.943416][T12013] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2270.994345][T12013] az6027: usb out operation failed. (-71) [ 2271.011081][T12013] az6027: usb out operation failed. (-71) [ 2271.027245][T12013] stb0899_attach: Driver disabled by Kconfig [ 2271.043659][T12013] az6027: no front-end attached [ 2271.043659][T12013] [ 2271.055202][T12013] az6027: usb out operation failed. (-71) [ 2271.069194][T12013] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2271.088688][T12013] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input317 [ 2271.142191][T12013] dvb-usb: schedule remote query interval to 400 msecs. [ 2271.171809][T12013] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2271.196900][T12013] usb 2-1: USB disconnect, device number 21 [ 2271.304149][T12013] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2272.642859][T26205] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2272.822958][T26205] usb 3-1: Using ep0 maxpacket: 16 [ 2272.835058][T26205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.863396][T26205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.892780][T26205] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2272.899511][T26205] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2272.929983][T26205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.953753][T26205] usb 3-1: config 0 descriptor?? [ 2273.617797][T26205] usb 3-1: USB disconnect, device number 123 [ 2274.096515][T20894] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.38116'. [ 2274.109357][T20894] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 2274.142801][T20894] openvswitch: netlink: Message has 8454 unknown bytes. [ 2275.638835][T20958] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 2276.611533][ T30] audit: type=1326 audit(1752001992.883:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20992 comm="syz.3.38153" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 2276.633432][ C1] vkms_vblank_simulate: vblank timer overrun [ 2277.532023][T21026] loop4: detected capacity change from 0 to 524255232 [ 2278.746500][T21093] binder: 21091:21093 ioctl c0306201 80000040 returned -14 [ 2278.906770][T21103] netlink: 'syz.0.38186': attribute type 6 has an invalid length. [ 2279.179535][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38189'. [ 2279.639748][T21141] openvswitch: netlink: Multiple metadata blocks provided [ 2280.265462][T21170] kvm: user requested TSC rate below hardware speed [ 2280.298511][T21176] netlink: 'syz.0.38212': attribute type 11 has an invalid length. [ 2280.589061][T21190] lo: entered promiscuous mode [ 2280.621449][T21190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38215'. [ 2280.671466][T21190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2280.726319][T21196] macsec0: entered promiscuous mode [ 2280.732509][T21196] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 2280.741911][T21196] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 21196, name: syz.1.38218 [ 2280.751205][T21196] preempt_count: 201, expected: 0 [ 2280.756318][T21196] RCU nest depth: 0, expected: 0 [ 2280.761307][T21196] 3 locks held by syz.1.38218/21196: [ 2280.766665][T21196] #0: ffffffff8fa22bb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2280.776269][T21196] #1: ffffffff8f51d7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 2280.785454][T21196] #2: ffff88804ebd0368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 2280.796035][T21196] Preemption disabled at: [ 2280.796049][T21196] [] dev_uc_add+0x56/0x120 [ 2280.804093][T26200] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2280.806462][T21196] CPU: 1 UID: 0 PID: 21196 Comm: syz.1.38218 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2280.806489][T21196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2280.806506][T21196] Call Trace: [ 2280.806516][T21196] [ 2280.806526][T21196] dump_stack_lvl+0x189/0x250 [ 2280.806562][T21196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2280.806590][T21196] ? __pfx__printk+0x10/0x10 [ 2280.806621][T21196] ? print_lock_name+0xde/0x100 [ 2280.806650][T21196] ? dev_uc_add+0x56/0x120 [ 2280.806683][T21196] __might_resched+0x495/0x610 [ 2280.806709][T21196] ? stack_depot_save_flags+0x40/0x900 [ 2280.806746][T21196] ? dev_uc_add+0x56/0x120 [ 2280.806772][T21196] ? __pfx___might_resched+0x10/0x10 [ 2280.806799][T21196] ? kasan_save_track+0x4f/0x80 [ 2280.806838][T21196] __mutex_lock+0x106/0xe80 [ 2280.806969][T21196] ? dev_set_promiscuity+0x10e/0x260 [ 2280.807008][T21196] ? __pfx___mutex_lock+0x10/0x10 [ 2280.807030][T21196] ? netdev_info+0x10a/0x160 [ 2280.807071][T21196] ? __pfx_netdev_info+0x10/0x10 [ 2280.807116][T21196] dev_set_promiscuity+0x10e/0x260 [ 2280.807147][T21196] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 2280.807174][T21196] __dev_set_promiscuity+0x534/0x740 [ 2280.807205][T21196] ? __hw_addr_add_ex+0x3c5/0x770 [ 2280.807237][T21196] __dev_set_rx_mode+0x17c/0x260 [ 2280.807268][T21196] dev_uc_add+0xc8/0x120 [ 2280.807299][T21196] macsec_dev_open+0xd9/0x530 [ 2280.807324][T21196] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 2280.807346][T21196] ? __pfx_macsec_dev_open+0x10/0x10 [ 2280.807371][T21196] ? ib_device_get_by_netdev+0x84/0x4d0 [ 2280.807389][T21196] ? hsr_netdev_notify+0x29e/0xcf0 [ 2280.807416][T21196] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 2280.807454][T21196] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 2280.807488][T21196] ? ip6_route_dev_notify+0x9a/0x5b0 [ 2280.807516][T21196] ? notifier_call_chain+0x3bf/0x3e0 [ 2280.807552][T21196] __dev_open+0x470/0x880 [ 2280.807582][T21196] ? __pfx___dev_open+0x10/0x10 [ 2280.807604][T21196] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 2280.807632][T21196] __dev_change_flags+0x1ea/0x6d0 [ 2280.807662][T21196] ? validate_linkmsg+0x765/0x950 [ 2280.807698][T21196] ? __pfx___dev_change_flags+0x10/0x10 [ 2280.807735][T21196] rtnl_newlink_create+0x555/0xb00 [ 2280.807778][T21196] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2280.807803][T21196] ? rtnl_newlink+0x8db/0x1c70 [ 2280.807829][T21196] ? __pfx___mutex_lock+0x10/0x10 [ 2280.807878][T21196] ? ns_capable+0x8a/0xf0 [ 2280.807910][T21196] rtnl_newlink+0x16d6/0x1c70 [ 2280.807953][T21196] ? __pfx_rtnl_newlink+0x10/0x10 [ 2280.807987][T21196] ? __lock_acquire+0xab9/0xd20 [ 2280.808024][T21196] ? __lock_acquire+0xab9/0xd20 [ 2280.808069][T21196] ? is_bpf_text_address+0x26/0x2b0 [ 2280.808100][T21196] ? is_bpf_text_address+0x292/0x2b0 [ 2280.808124][T21196] ? is_bpf_text_address+0x26/0x2b0 [ 2280.808152][T21196] ? kernel_text_address+0xa5/0xe0 [ 2280.808187][T21196] ? __lock_acquire+0xab9/0xd20 [ 2280.808237][T21196] ? __pfx_rtnl_newlink+0x10/0x10 [ 2280.808260][T21196] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2280.808288][T21196] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2280.808311][T21196] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2280.808372][T21196] netlink_rcv_skb+0x205/0x470 [ 2280.808401][T21196] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2280.808428][T21196] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2280.808470][T21196] ? netlink_deliver_tap+0x2e/0x1b0 [ 2280.808498][T21196] ? netlink_deliver_tap+0x2e/0x1b0 [ 2280.808533][T21196] netlink_unicast+0x758/0x8d0 [ 2280.808571][T21196] netlink_sendmsg+0x805/0xb30 [ 2280.808628][T21196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2280.808663][T21196] ? __import_iovec+0x5d4/0x7f0 [ 2280.808690][T21196] ? aa_sock_msg_perm+0x94/0x160 [ 2280.808730][T21196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2280.808769][T21196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2280.808802][T21196] __sock_sendmsg+0x219/0x270 [ 2280.808860][T21196] ____sys_sendmsg+0x505/0x830 [ 2280.808902][T21196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2280.808945][T21196] ? __pfx_futex_wake_mark+0x10/0x10 [ 2280.808979][T21196] ___sys_sendmsg+0x21f/0x2a0 [ 2280.809015][T21196] ? __pfx____sys_sendmsg+0x10/0x10 [ 2280.809093][T21196] ? __fget_files+0x2a/0x420 [ 2280.809124][T21196] ? __fget_files+0x3a0/0x420 [ 2280.809182][T21196] __sys_sendmsg+0x164/0x220 [ 2280.809215][T21196] ? __pfx___sys_sendmsg+0x10/0x10 [ 2280.809255][T21196] ? rcu_is_watching+0x15/0xb0 [ 2280.809287][T21196] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2280.809329][T21196] ? lockdep_hardirqs_on+0x9c/0x150 [ 2280.809367][T21196] __do_fast_syscall_32+0xb6/0x2b0 [ 2280.809392][T21196] ? lockdep_hardirqs_on+0x9c/0x150 [ 2280.809432][T21196] do_fast_syscall_32+0x34/0x80 [ 2280.809456][T21196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2280.809485][T21196] RIP: 0023:0xf70ae539 [ 2280.809507][T21196] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2280.809528][T21196] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2280.809553][T21196] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2280.809571][T21196] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2280.809585][T21196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2280.809600][T21196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2280.809613][T21196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2280.809647][T21196] [ 2280.809658][T21196] [ 2281.340876][T21196] ============================= [ 2281.345735][T21196] [ BUG: Invalid wait context ] [ 2281.350585][T21196] 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 Tainted: G W [ 2281.359286][T21196] ----------------------------- [ 2281.364157][T21196] syz.1.38218/21196 is trying to lock: [ 2281.369616][T21196] ffff88807a110d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 2281.380012][T21196] other info that might help us debug this: [ 2281.385903][T21196] context-{5:5} [ 2281.389376][T21196] 3 locks held by syz.1.38218/21196: [ 2281.394658][T21196] #0: ffffffff8fa22bb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2281.404158][T21196] #1: ffffffff8f51d7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 2281.413224][T21196] #2: ffff88804ebd0368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 2281.423728][T21196] stack backtrace: [ 2281.427445][T21196] CPU: 1 UID: 0 PID: 21196 Comm: syz.1.38218 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 2281.427467][T21196] Tainted: [W]=WARN [ 2281.427473][T21196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2281.427483][T21196] Call Trace: [ 2281.427489][T21196] [ 2281.427496][T21196] dump_stack_lvl+0x189/0x250 [ 2281.427517][T21196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2281.427536][T21196] ? __pfx__printk+0x10/0x10 [ 2281.427559][T21196] ? print_lock_name+0xde/0x100 [ 2281.427581][T21196] __lock_acquire+0xbcb/0xd20 [ 2281.427599][T21196] ? dev_set_promiscuity+0x10e/0x260 [ 2281.427618][T21196] lock_acquire+0x120/0x360 [ 2281.427632][T21196] ? dev_set_promiscuity+0x10e/0x260 [ 2281.427655][T21196] __mutex_lock+0x182/0xe80 [ 2281.427670][T21196] ? dev_set_promiscuity+0x10e/0x260 [ 2281.427691][T21196] ? dev_set_promiscuity+0x10e/0x260 [ 2281.427710][T21196] ? __pfx___mutex_lock+0x10/0x10 [ 2281.427724][T21196] ? netdev_info+0x10a/0x160 [ 2281.427748][T21196] ? __pfx_netdev_info+0x10/0x10 [ 2281.427775][T21196] dev_set_promiscuity+0x10e/0x260 [ 2281.427794][T21196] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 2281.427817][T21196] __dev_set_promiscuity+0x534/0x740 [ 2281.427837][T21196] ? __hw_addr_add_ex+0x3c5/0x770 [ 2281.427858][T21196] __dev_set_rx_mode+0x17c/0x260 [ 2281.427877][T21196] dev_uc_add+0xc8/0x120 [ 2281.427897][T21196] macsec_dev_open+0xd9/0x530 [ 2281.427913][T21196] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 2281.427927][T21196] ? __pfx_macsec_dev_open+0x10/0x10 [ 2281.427943][T21196] ? ib_device_get_by_netdev+0x84/0x4d0 [ 2281.427956][T21196] ? hsr_netdev_notify+0x29e/0xcf0 [ 2281.427974][T21196] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 2281.428000][T21196] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 2281.428020][T21196] ? ip6_route_dev_notify+0x9a/0x5b0 [ 2281.428038][T21196] ? notifier_call_chain+0x3bf/0x3e0 [ 2281.428060][T21196] __dev_open+0x470/0x880 [ 2281.428077][T21196] ? __pfx___dev_open+0x10/0x10 [ 2281.428092][T21196] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 2281.428112][T21196] __dev_change_flags+0x1ea/0x6d0 [ 2281.428131][T21196] ? validate_linkmsg+0x765/0x950 [ 2281.428155][T21196] ? __pfx___dev_change_flags+0x10/0x10 [ 2281.428177][T21196] rtnl_newlink_create+0x555/0xb00 [ 2281.428200][T21196] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2281.428218][T21196] ? rtnl_newlink+0x8db/0x1c70 [ 2281.428234][T21196] ? __pfx___mutex_lock+0x10/0x10 [ 2281.428252][T21196] ? ns_capable+0x8a/0xf0 [ 2281.428270][T21196] rtnl_newlink+0x16d6/0x1c70 [ 2281.428291][T21196] ? __pfx_rtnl_newlink+0x10/0x10 [ 2281.428310][T21196] ? __lock_acquire+0xab9/0xd20 [ 2281.428329][T21196] ? __lock_acquire+0xab9/0xd20 [ 2281.428350][T21196] ? is_bpf_text_address+0x26/0x2b0 [ 2281.428368][T21196] ? is_bpf_text_address+0x292/0x2b0 [ 2281.428384][T21196] ? is_bpf_text_address+0x26/0x2b0 [ 2281.428401][T21196] ? kernel_text_address+0xa5/0xe0 [ 2281.428419][T21196] ? __lock_acquire+0xab9/0xd20 [ 2281.428442][T21196] ? __pfx_rtnl_newlink+0x10/0x10 [ 2281.428457][T21196] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2281.428474][T21196] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2281.428490][T21196] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2281.428511][T21196] netlink_rcv_skb+0x205/0x470 [ 2281.428529][T21196] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2281.428545][T21196] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2281.428568][T21196] ? netlink_deliver_tap+0x2e/0x1b0 [ 2281.428586][T21196] ? netlink_deliver_tap+0x2e/0x1b0 [ 2281.428605][T21196] netlink_unicast+0x758/0x8d0 [ 2281.428625][T21196] netlink_sendmsg+0x805/0xb30 [ 2281.428646][T21196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2281.428665][T21196] ? __import_iovec+0x5d4/0x7f0 [ 2281.428682][T21196] ? aa_sock_msg_perm+0x94/0x160 [ 2281.428705][T21196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2281.428729][T21196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2281.428748][T21196] __sock_sendmsg+0x219/0x270 [ 2281.428773][T21196] ____sys_sendmsg+0x505/0x830 [ 2281.428795][T21196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2281.428820][T21196] ? __pfx_futex_wake_mark+0x10/0x10 [ 2281.428836][T21196] ___sys_sendmsg+0x21f/0x2a0 [ 2281.428856][T21196] ? __pfx____sys_sendmsg+0x10/0x10 [ 2281.428888][T21196] ? __fget_files+0x2a/0x420 [ 2281.428908][T21196] ? __fget_files+0x3a0/0x420 [ 2281.428932][T21196] __sys_sendmsg+0x164/0x220 [ 2281.428951][T21196] ? __pfx___sys_sendmsg+0x10/0x10 [ 2281.428973][T21196] ? rcu_is_watching+0x15/0xb0 [ 2281.428992][T21196] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2281.429018][T21196] ? lockdep_hardirqs_on+0x9c/0x150 [ 2281.429042][T21196] __do_fast_syscall_32+0xb6/0x2b0 [ 2281.429057][T21196] ? lockdep_hardirqs_on+0x9c/0x150 [ 2281.429081][T21196] do_fast_syscall_32+0x34/0x80 [ 2281.429097][T21196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2281.429115][T21196] RIP: 0023:0xf70ae539 [ 2281.429129][T21196] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2281.429142][T21196] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2281.429157][T21196] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2281.429168][T21196] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2281.429177][T21196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2281.429186][T21196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2281.429195][T21196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2281.429209][T21196] [ 2281.955425][ C1] vkms_vblank_simulate: vblank timer overrun [ 2281.961483][T21196] dummy0: entered promiscuous mode [ 2282.009771][T21196] macsec2: entered allmulticast mode [ 2282.017272][T21196] macsec0: entered allmulticast mode [ 2282.024733][T21196] dummy0: entered allmulticast mode [ 2282.043274][T26200] usb 4-1: Using ep0 maxpacket: 16 [ 2282.050067][T26200] usb 4-1: config 0 has no interfaces? [ 2282.060288][T26200] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 2282.070823][T26200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.081455][T26200] usb 4-1: Product: syz [ 2282.086327][T26200] usb 4-1: Manufacturer: syz [ 2282.091096][T26200] usb 4-1: SerialNumber: syz [ 2282.165443][T26200] usb 4-1: config 0 descriptor?? [ 2282.386324][ T5856] usb 4-1: USB disconnect, device number 19 [ 2283.144591][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.150943][ T1301] ieee802154 phy1 wpan1: encryption failed: -22