last executing test programs: 5m14.932918665s ago: executing program 4 (id=15245): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x5, 0x1}, 0x6) 5m14.785896875s ago: executing program 4 (id=15247): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 5m14.714142567s ago: executing program 4 (id=15249): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/46, 0x8d) getdents64(r0, 0xfffffffffffffffe, 0x29) 5m14.597118832s ago: executing program 4 (id=15251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) 5m14.478069323s ago: executing program 4 (id=15252): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5m14.383933955s ago: executing program 4 (id=15253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5m0.24070495s ago: executing program 32 (id=15253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m21.395891214s ago: executing program 1 (id=17781): rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e24, 0x1000000080000, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x28}, 0x8840) 2m21.206280714s ago: executing program 1 (id=17784): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) 2m21.059413172s ago: executing program 1 (id=17787): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xffffffff, 0x4) 2m20.897478802s ago: executing program 1 (id=17793): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000), 0x0) 2m20.764285681s ago: executing program 1 (id=17795): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m20.54071534s ago: executing program 1 (id=17800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m6.472133538s ago: executing program 33 (id=17800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m49.788845172s ago: executing program 3 (id=18163): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x28020480) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000200)=ANY=[], 0x4) 1m49.591590363s ago: executing program 3 (id=18166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x3d, 0x0, 0x0) 1m49.00734914s ago: executing program 3 (id=18174): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1bc, 0x65, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x148, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x110, 0x3, [@m_skbmod={0x10c, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x18, 0xc, 0x8, 0xffff7f57, 0x80000000}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff9}]}, {0xaa, 0x6, "3bae8a77539cba3d519b8f53a0dd986b5e1c4f3ce300a7d7339580d4acb35069dbca70f25e3006684866b17805bdb7585832176befb2a2bda88f6587c6757f7c6ef66f9e9c75ba48f9257ae0d75d3754647fef2e162bfaec8823d868abccae15dce74220f3bb11eed90cdcd2db47c712f2469cc6e29ee56f2d1b175fd092c2d123d2805db079cfea0f23b87fa54a8f009e19194a673aab02771c4e2409fb457b0f8bc121219d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m48.800511275s ago: executing program 3 (id=18177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x50, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000004) 1m48.610249451s ago: executing program 3 (id=18181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/4296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9420a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883f53b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725e78400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e0808657393921a4902c5340690bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eea61f766664e5e9c678dd5e8f7f07368b317b0e09580380717188b22574dc2b50cfe0d4c3ce4628ef8b90c4179be593b31bb716525863c2044781e7d79c5fb015c1cdef274fd95c943f4a31bd248b122e4c10c3b8f57d63615df5a7a14cac878cb10dc96e27fd49bfb2b1e711e2b0715d263b0bba3f396ab238b4bdc3a372ae821b5494dd8954d5dd9c2d894833e652e58bf110e4c0f4e364c3b4fc1b8262cf8d9651bbd9fd9fac5f2831e965935239b60f72a0194262077f2ad9b4d2dc036b8d1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000001000000504"], 0x20) 1m48.274900397s ago: executing program 3 (id=18185): setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) 1m34.199266254s ago: executing program 34 (id=18185): setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) 30.948161323s ago: executing program 7 (id=19167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000480)={0x10000, 0x240, 0x380, 0x0}) 30.656430804s ago: executing program 7 (id=19171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 30.329986301s ago: executing program 7 (id=19176): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)) 29.006173245s ago: executing program 7 (id=19194): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r0, 0x0, 0x0) 28.853249559s ago: executing program 7 (id=19195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 28.699636461s ago: executing program 7 (id=19198): setrlimit(0xf, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x64000600) 14.620977503s ago: executing program 35 (id=19198): setrlimit(0xf, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x64000600) 2.629703595s ago: executing program 6 (id=19538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 2.449928827s ago: executing program 6 (id=19540): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$1(0x1, &(0x7f0000000000)='ocfs2\x00') 2.427626105s ago: executing program 0 (id=19541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000340)}, 0x20) 2.2477436s ago: executing program 0 (id=19543): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000240)={0x0, 0x0}, 0x2c) 2.000218078s ago: executing program 0 (id=19547): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x2, {0x400e802, 0x1, 0x2007, 0x1f}}) 1.754926273s ago: executing program 0 (id=19552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000000c0)) 1.593815508s ago: executing program 8 (id=19554): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 1.417611383s ago: executing program 0 (id=19557): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 1.320149682s ago: executing program 2 (id=19558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f00000002c0)) 1.193967212s ago: executing program 6 (id=19559): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.135271145s ago: executing program 5 (id=19560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) 1.097481036s ago: executing program 2 (id=19561): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}}, 0xc0000c0) 971.206283ms ago: executing program 5 (id=19562): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r1, &(0x7f0000002180)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xc, 0x2, 0x5, 0xf, 0x2, 0x3e, 0xe7d26f7, 0x65, 0x38, 0x212, 0x0, 0x7, 0x20, 0x1, 0x7, 0x4, 0x8001}, [{0x5, 0xfffffffe, 0x1, 0x3, 0x9, 0x9, 0x5}]}, 0x58) getpriority(0x2, r2) 811.178055ms ago: executing program 8 (id=19563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) 806.552312ms ago: executing program 2 (id=19564): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfec) 744.575464ms ago: executing program 5 (id=19565): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0xac, 0xa0}]}) 620.120294ms ago: executing program 8 (id=19566): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[]) 619.446815ms ago: executing program 2 (id=19567): r0 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) pipe2(&(0x7f0000001cc0), 0x800) 511.627017ms ago: executing program 5 (id=19568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 492.046696ms ago: executing program 8 (id=19569): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @empty, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 401.493658ms ago: executing program 2 (id=19570): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047453, 0x0) 295.242997ms ago: executing program 6 (id=19571): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) 294.658518ms ago: executing program 8 (id=19572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="2032b1a2d44464f0b7463f2e22dc8d94d7d42b60ed342edb4bfa43004a0d14694b042f6af769b9d41ace69ff6d0d313c9d10bb0c8b0654e6e118cd8fa3", 0x3d) 243.386585ms ago: executing program 2 (id=19573): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x135}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 199.48325ms ago: executing program 5 (id=19574): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1800) r1 = socket$kcm(0x29, 0x5, 0x0) dup3(r1, r0, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1}) 112.525616ms ago: executing program 0 (id=19575): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 91.586924ms ago: executing program 6 (id=19576): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x2, 0x2}}) 69.809461ms ago: executing program 8 (id=19577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000006fc0)=0xbd7, 0x4) 600.649µs ago: executing program 6 (id=19578): r0 = gettid() pause() r1 = syz_open_procfs(r0, &(0x7f0000000180)='stack\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 0s ago: executing program 5 (id=19579): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78) kernel console output (not intermixed with test programs): T883] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1125.390341][ T883] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1125.431021][ T883] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1125.456643][ T883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.500570][ T883] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1125.537148][ T883] usb 3-1: invalid MIDI out EP 0 [ 1125.840187][ T883] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1125.925174][ T883] usb 3-1: USB disconnect, device number 80 [ 1126.211625][T23429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17194'. [ 1126.684353][T23451] binder: Bad value for 'stats' [ 1126.900471][ T9506] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1127.067999][ T9506] usb 4-1: Using ep0 maxpacket: 16 [ 1127.075123][ T9506] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.123599][ T9506] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1127.143147][ T9506] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1127.162894][ T9506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.193105][ T9506] usb 4-1: config 0 descriptor?? [ 1127.453432][T23493] netlink: 996 bytes leftover after parsing attributes in process `syz.5.17217'. [ 1127.632245][ T9506] nzxt-smart2 0003:1E71:2009.005E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1127.833553][ T883] usb 4-1: USB disconnect, device number 93 [ 1127.864677][T23505] fido_id[23505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1128.311835][T23541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17229'. [ 1128.569234][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1128.717667][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1128.725751][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1128.745291][ T883] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1128.748843][ T24] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1128.771371][ T24] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1128.781657][ T24] usb 3-1: Product: syz [ 1128.791275][ T24] usb 3-1: Manufacturer: syz [ 1128.797291][ T24] usb 3-1: SerialNumber: syz [ 1128.908031][ T883] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1128.922304][ T883] usb 6-1: config 0 has no interface number 0 [ 1128.939794][ T883] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1128.969978][ T883] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1128.983895][ T883] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1128.993569][ T883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.008938][ T883] usb 6-1: config 0 descriptor?? [ 1129.014842][T23556] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1129.035059][ T24] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1129.044571][ T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1129.059497][ T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1129.076286][ T883] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1129.093584][ T24] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1129.214483][ T24] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1129.237718][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1129.290002][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1129.313232][ T5891] usb 6-1: USB disconnect, device number 15 [ 1129.476196][ T24] usb 3-1: USB disconnect, device number 81 [ 1129.519912][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1129.549061][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1129.564602][ T24] visor 3-1:1.0: device disconnected [ 1129.937051][T23648] netlink: 'syz.3.17256': attribute type 1 has an invalid length. [ 1130.071062][ T883] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 1130.275697][ T883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1130.289768][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1130.312891][ T883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1130.327506][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1130.339669][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1130.355339][ T883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1130.367163][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1130.378738][ T883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1130.391465][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1130.403098][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1130.451314][ T883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1130.459454][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1130.503504][ T883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1130.521164][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1130.534148][ T883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1130.550935][ T883] usb 2-1: string descriptor 0 read error: -22 [ 1130.559831][ T883] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1130.570893][ T883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.622116][ T883] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1132.572445][T23718] delete_channel: no stack [ 1132.810733][ T10] usb 2-1: USB disconnect, device number 91 [ 1132.986755][ T883] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1133.190220][ T883] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1133.230059][ T883] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1133.247504][ T883] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 1133.275901][ T883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.306816][ T883] usb 6-1: config 0 descriptor?? [ 1133.394260][T23751] pim6reg: entered allmulticast mode [ 1133.405864][T23755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17294'. [ 1133.417123][T23755] tipc: Invalid UDP bearer configuration [ 1133.417223][T23755] tipc: Enabling of bearer rejected, failed to enable media [ 1133.657603][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1133.774435][ T883] corsair-cpro 0003:1B1C:1D00.005F: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.5-1/input0 [ 1133.897922][ T883] corsair-cpro 0003:1B1C:1D00.005F: probe with driver corsair-cpro failed with error -38 [ 1133.956425][ T883] usb 6-1: USB disconnect, device number 16 [ 1134.005872][T23770] fido_id[23770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1134.869004][ T883] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1135.028279][ T883] usb 6-1: Using ep0 maxpacket: 32 [ 1135.045453][ T883] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1135.054683][ T883] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1135.085380][ T883] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1135.118849][ T883] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1135.142804][ T883] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1135.165547][ T883] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1135.186139][ T883] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1135.194950][ T883] usb 6-1: Product: syz [ 1135.199335][ T883] usb 6-1: Manufacturer: syz [ 1135.203969][ T883] usb 6-1: SerialNumber: syz [ 1135.223068][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1135.237265][ T883] usb 6-1: config 0 descriptor?? [ 1135.258186][ T883] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1135.283884][ T883] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1135.402474][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1135.417083][ T9] usb 3-1: config 64 has an invalid interface number: 219 but max is 1 [ 1135.428338][ T9] usb 3-1: config 64 has an invalid interface number: 145 but max is 1 [ 1135.470252][ T9] usb 3-1: config 64 has no interface number 0 [ 1135.479596][ T9] usb 3-1: config 64 has no interface number 1 [ 1135.490623][ T883] usb 6-1: USB disconnect, device number 17 [ 1135.496702][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1135.517947][ T9] usb 3-1: config 64 interface 145 has no altsetting 0 [ 1135.532586][T23845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17324'. [ 1135.542887][ T883] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1135.559759][T23850] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1135.661059][T23850] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 1135.693255][T23850] ALSA: mixer_oss: invalid OSS volume 'GJJ³, priority 0 [ 1140.415664][ T10] ryos 0003:1E7D:3138.0061: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 1140.613745][ T9506] usb 2-1: USB disconnect, device number 92 [ 1140.650445][T24082] fido_id[24082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1141.384885][T24141] netlink: 'syz.1.17409': attribute type 8 has an invalid length. [ 1141.535189][T24152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17413'. [ 1141.547289][T24152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17413'. [ 1141.558386][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17412'. [ 1141.626590][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1141.725797][T24157] bridge1: entered promiscuous mode [ 1141.731837][T24157] bridge1: entered allmulticast mode [ 1141.800881][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1141.823573][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.834717][T24157] team0: Port device bridge1 added [ 1141.840767][ T9] usb 4-1: Product: syz [ 1141.845157][ T9] usb 4-1: Manufacturer: syz [ 1141.849858][ T9] usb 4-1: SerialNumber: syz [ 1141.872942][ T9] usb 4-1: config 0 descriptor?? [ 1142.267365][T24188] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1142.449164][ T9] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 1142.467217][ T9] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1142.484153][ T9] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 1142.517162][ T9] usb 4-1: USB disconnect, device number 94 [ 1143.241448][ T5891] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1143.354270][T24248] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1143.358519][T24247] tmpfs: Cannot change global quota limit on remount [ 1143.360864][T24248] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1143.369704][T24248] vhci_hcd vhci_hcd.0: Device attached [ 1143.397670][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 1143.407831][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1143.422319][ T5891] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1143.439707][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.456669][ T5891] usb 6-1: Product: syz [ 1143.464803][ T5891] usb 6-1: Manufacturer: syz [ 1143.475440][ T5891] usb 6-1: SerialNumber: syz [ 1143.486871][ T5891] usb 6-1: config 0 descriptor?? [ 1143.495713][ T5891] hub 6-1:0.0: bad descriptor, ignoring hub [ 1143.505148][ T5891] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1143.517899][ T5891] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input125 [ 1143.539420][ T5891] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1143.578293][ T5891] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1143.589500][T24268] overlayfs: disabling nfs_export due to verity=on [ 1143.604974][T24268] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1143.612821][ T10] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 1143.863250][ T9506] usb 6-1: USB disconnect, device number 19 [ 1143.981647][T24289] hsr0: entered promiscuous mode [ 1144.112396][T24299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17466'. [ 1144.244034][T24310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1144.417477][ T883] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1144.599541][ T883] usb 2-1: Using ep0 maxpacket: 16 [ 1144.617437][ T883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.638391][ T883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.652970][ T883] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1144.662597][T24330] netlink: 'syz.2.17480': attribute type 25 has an invalid length. [ 1144.664968][ T883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.700216][ T883] usb 2-1: config 0 descriptor?? [ 1145.131727][ T883] hid-multitouch 0003:1FD2:6007.0062: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1145.301274][ T883] usb 2-1: USB disconnect, device number 93 [ 1145.338470][T24351] fido_id[24351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1146.227343][T24249] vhci_hcd: connection reset by peer [ 1146.250958][ T1003] vhci_hcd: stop threads [ 1146.259769][ T1003] vhci_hcd: release socket [ 1146.286983][ T1003] vhci_hcd: disconnect device [ 1146.688609][T24445] usb usb1: check_ctrlrecip: process 24445 (syz.3.17519) requesting ep 01 but needs 81 [ 1146.883523][ T9506] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1147.029817][ T9506] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 1147.046170][ T9506] usb 6-1: config 0 has no interface number 0 [ 1147.056026][ T9506] usb 6-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 1147.079577][ T9506] usb 6-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 1147.103546][ T9506] usb 6-1: config 0 interface 144 has no altsetting 0 [ 1147.126007][ T9506] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1147.147131][ T9506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.165870][ T9506] usb 6-1: config 0 descriptor?? [ 1147.183185][ T9506] cp210x 6-1:0.144: cp210x converter detected [ 1147.185245][T24451] netlink: 71 bytes leftover after parsing attributes in process `syz.2.17521'. [ 1147.557397][ T9506] cp210x 6-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 1147.608974][ T9506] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1147.642028][ T9506] usb 6-1: USB disconnect, device number 20 [ 1147.677721][ T9506] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1147.713356][ T9506] cp210x 6-1:0.144: device disconnected [ 1148.005128][T24498] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 1148.005128][T24498] program syz.3.17533 not setting count and/or reply_len properly [ 1148.148070][T24505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17537'. [ 1148.430646][ T10] vhci_hcd: vhci_device speed not set [ 1148.571038][T24526] CIFS mount error: No usable UNC path provided in device string! [ 1148.571038][T24526] [ 1148.591841][T24526] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1149.222708][ T30] audit: type=1800 audit(2000000082.607:3991): pid=24558 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.17564" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1149.291472][T24563] netlink: 'syz.2.17563': attribute type 58 has an invalid length. [ 1149.301084][T24563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17563'. [ 1149.819857][ T5891] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1149.968832][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 1149.988876][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1150.024495][ T5891] usb 3-1: config 168 has an invalid interface number: 95 but max is 0 [ 1150.033025][ T5891] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.082367][ T5891] usb 3-1: config 168 has no interface number 0 [ 1150.088847][ T5891] usb 3-1: config 168 interface 95 altsetting 8 endpoint 0x7 has invalid maxpacket 4055, setting to 1024 [ 1150.136972][ T5891] usb 3-1: config 168 interface 95 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1150.173732][ T5891] usb 3-1: config 168 interface 95 altsetting 8 endpoint 0x8 has invalid maxpacket 26232, setting to 64 [ 1150.207909][ T5891] usb 3-1: config 168 interface 95 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 1150.257620][ T5891] usb 3-1: config 168 interface 95 has no altsetting 0 [ 1150.296841][ T5891] usb 3-1: New USB device found, idVendor=53ee, idProduct=aa41, bcdDevice=37.61 [ 1150.307618][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.323931][ T5891] usb 3-1: Product: syz [ 1150.328442][ T5891] usb 3-1: Manufacturer: syz [ 1150.351258][ T5891] usb 3-1: SerialNumber: syz [ 1150.379420][T24583] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1150.625626][ T5891] usb 3-1: USB disconnect, device number 84 [ 1151.409630][T24651] netlink: 332 bytes leftover after parsing attributes in process `syz.2.17595'. [ 1151.422088][ T10] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1151.430453][T24651] netlink: 'syz.2.17595': attribute type 9 has an invalid length. [ 1151.445557][T24651] netlink: 108 bytes leftover after parsing attributes in process `syz.2.17595'. [ 1151.455804][T24651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17595'. [ 1151.573724][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1151.590311][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1151.621251][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.627547][ T9506] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1151.664248][ T10] usb 4-1: config 0 descriptor?? [ 1151.688380][T24639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1151.788648][ T9506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1151.811132][ T9506] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1151.846843][ T9506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1151.880368][ T9506] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1151.893145][ T9506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.916058][ T9506] usb 2-1: Product: syz [ 1151.920568][ T9506] usb 2-1: Manufacturer: syz [ 1151.944044][ T9506] usb 2-1: SerialNumber: syz [ 1151.973217][ T9506] usb 2-1: config 0 descriptor?? [ 1151.998540][T24652] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1152.007140][T24652] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1152.041912][ T9506] usb 2-1: ucan: probing device on interface #0 [ 1152.131261][ T10] elan 0003:04F3:0755.0063: unknown main item tag 0x0 [ 1152.144039][ T10] elan 0003:04F3:0755.0063: item fetching failed at offset 3/5 [ 1152.166974][ T10] elan 0003:04F3:0755.0063: Hid Parse failed [ 1152.177011][ T10] elan 0003:04F3:0755.0063: probe with driver elan failed with error -22 [ 1152.338516][ T10] usb 4-1: USB disconnect, device number 95 [ 1152.371552][T24690] netlink: 'syz.0.17607': attribute type 1 has an invalid length. [ 1152.434482][ T9506] usb 2-1: ucan: device reported invalid tx-fifo size [ 1152.455052][ T9506] usb 2-1: ucan: probe failed; try to update the device firmware [ 1152.642529][ T9506] usb 2-1: USB disconnect, device number 94 [ 1153.165594][T24739] macsec1: entered promiscuous mode [ 1153.186783][T24739] gretap0: entered promiscuous mode [ 1153.210399][T24744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17623'. [ 1153.221384][T24739] gretap0: left promiscuous mode [ 1153.490385][T24758] netlink: 211456 bytes leftover after parsing attributes in process `syz.1.17629'. [ 1153.507469][T24758] netlink: zone id is out of range [ 1153.527100][T24758] netlink: get zone limit has 8 unknown bytes [ 1154.763543][T24825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17660'. [ 1154.804807][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1154.918834][T24835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17663'. [ 1155.458238][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1155.642791][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.681737][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.709441][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1155.736885][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1155.751355][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.770624][ T10] usb 4-1: config 0 descriptor?? [ 1156.181924][ T10] plantronics 0003:047F:FFFF.0064: unbalanced collection at end of report description [ 1156.216204][ T10] plantronics 0003:047F:FFFF.0064: parse failed [ 1156.230597][ T10] plantronics 0003:047F:FFFF.0064: probe with driver plantronics failed with error -22 [ 1156.260803][T24903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1156.305322][T24907] devpts: Bad value for 'max' [ 1156.390231][ T10] usb 4-1: USB disconnect, device number 96 [ 1156.982453][T24949] trusted_key: encrypted_key: key user:syz not found [ 1156.997256][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1157.116230][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17711'. [ 1157.144783][T24958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17711'. [ 1157.168659][T24958] netlink: 'syz.1.17711': attribute type 15 has an invalid length. [ 1157.213085][ T10] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1157.237636][ T10] usb 6-1: config 0 has no interface number 0 [ 1157.260179][ T10] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1157.276242][ T9506] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1157.277301][ T10] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1157.315263][ T10] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1157.328951][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1157.348961][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.378951][ T10] usb 6-1: config 0 descriptor?? [ 1157.392168][ T10] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 1157.452777][ T9506] usb 4-1: Using ep0 maxpacket: 32 [ 1157.499290][ T9506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.521351][ T9506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.536236][ T9506] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1157.555067][ T9506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.564496][ T5891] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1157.596763][ T9506] usb 4-1: config 0 descriptor?? [ 1157.639363][ T24] usb 6-1: USB disconnect, device number 21 [ 1157.713641][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 1157.733734][ T5891] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.753495][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1157.765919][ T5891] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1157.785381][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.817898][ T5891] usb 2-1: config 0 descriptor?? [ 1158.000333][ T9506] greenasia 0003:0E8F:0012.0065: item fetching failed at offset 0/3 [ 1158.012970][ T9506] greenasia 0003:0E8F:0012.0065: parse failed [ 1158.019943][ T9506] greenasia 0003:0E8F:0012.0065: probe with driver greenasia failed with error -22 [ 1158.127629][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17727'. [ 1158.231037][ T9506] usb 4-1: USB disconnect, device number 97 [ 1158.263304][ T5891] aquacomputer_d5next 0003:0C70:F0BD.0066: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.1-1/input0 [ 1158.363534][ T30] audit: type=1326 audit(2000000092.424:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25029 comm="syz.2.17730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1158.437148][ T5891] usb 2-1: USB disconnect, device number 95 [ 1158.474914][ T30] audit: type=1326 audit(2000000092.424:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25029 comm="syz.2.17730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1158.535473][ T30] audit: type=1326 audit(2000000092.424:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25029 comm="syz.2.17730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1158.548050][T25033] fido_id[25033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1158.611595][ T30] audit: type=1326 audit(2000000092.424:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25029 comm="syz.2.17730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1158.640363][ T30] audit: type=1326 audit(2000000092.424:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25029 comm="syz.2.17730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1158.687572][T25056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17734'. [ 1158.956435][T25064] hub 9-0:1.0: USB hub found [ 1158.978868][T25064] hub 9-0:1.0: 1 port detected [ 1159.466365][ T9506] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1159.467041][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1159.624659][ T9506] usb 2-1: Using ep0 maxpacket: 8 [ 1159.641718][ T9506] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1159.656357][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1159.664179][ T9506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.677991][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1159.689735][ T9506] usb 2-1: Product: syz [ 1159.699047][ T9506] usb 2-1: Manufacturer: syz [ 1159.699449][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.716751][ T9506] usb 2-1: SerialNumber: syz [ 1159.719072][ T10] usb 4-1: Product: syz [ 1159.725911][ T10] usb 4-1: Manufacturer: syz [ 1159.746535][ T9506] usb 2-1: config 0 descriptor?? [ 1159.758546][ T10] usb 4-1: SerialNumber: syz [ 1159.772180][ T9506] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1159.799857][ T10] usb 4-1: config 0 descriptor?? [ 1159.811812][ T9506] usb 2-1: setting power ON [ 1159.816505][ T9506] dvb-usb: bulk message failed: -22 (2/0) [ 1159.831753][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1159.853405][ T9506] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1159.864135][ T10] usb 4-1: setting power ON [ 1159.864164][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1159.877927][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1159.907781][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1159.927705][ T9506] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1159.927727][ T10] usb 4-1: media controller created [ 1159.942523][ T9506] usb 2-1: media controller created [ 1160.047612][T25125] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.17754'. [ 1160.069862][T25125] openvswitch: netlink: Message has 5 unknown bytes. [ 1160.073021][ T9506] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1160.116363][ T9506] usb 2-1: selecting invalid altsetting 6 [ 1160.141757][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1160.155955][ T9506] usb 2-1: digital interface selection failed (-22) [ 1160.172898][ T9506] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1160.193973][T25129] netlink: 96 bytes leftover after parsing attributes in process `syz.0.17755'. [ 1160.211608][ T9506] usb 2-1: setting power OFF [ 1160.216285][ T9506] dvb-usb: bulk message failed: -22 (2/0) [ 1160.219179][T25129] vlan0: entered allmulticast mode [ 1160.242379][ T10] usb 4-1: selecting invalid altsetting 6 [ 1160.248958][ T10] usb 4-1: digital interface selection failed (-22) [ 1160.249019][ T9506] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1160.255666][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1160.257220][T25129] gretap0: entered allmulticast mode [ 1160.281460][ T10] usb 4-1: setting power OFF [ 1160.292374][ T9506] (NULL device *): no alternate interface [ 1160.294721][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1160.313883][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1160.334333][ T10] (NULL device *): no alternate interface [ 1160.411277][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1160.465491][ T9506] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1160.490312][ T10] usb 4-1: USB disconnect, device number 98 [ 1160.535408][ T9506] usb 2-1: USB disconnect, device number 96 [ 1160.591395][T25152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17759'. [ 1160.996165][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1161.003278][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1161.094171][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1161.104471][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1161.146996][T25185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17769'. [ 1161.258580][T25190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17771'. [ 1161.392013][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1161.413206][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1161.482073][T25198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17773'. [ 1161.630438][T25169] ceph: No mds server is up or the cluster is laggy [ 1162.376451][ T30] audit: type=1326 audit(2000000096.726:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25233 comm="syz.2.17792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1162.422634][ T30] audit: type=1326 audit(2000000096.726:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25233 comm="syz.2.17792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1162.455357][ T30] audit: type=1326 audit(2000000096.758:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25233 comm="syz.2.17792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1162.511911][ T30] audit: type=1326 audit(2000000096.758:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25233 comm="syz.2.17792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1162.584756][ T30] audit: type=1326 audit(2000000096.758:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25233 comm="syz.2.17792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd398e969 code=0x7ffc0000 [ 1164.274132][T25305] mkiss: ax0: crc mode is auto. [ 1164.462334][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1164.462352][ T30] audit: type=1326 audit(2000000098.969:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25316 comm="syz.0.17829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f917998e969 code=0x0 [ 1164.515330][T25320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17830'. [ 1164.682481][T25332] trusted_key: encrypted_key: key trusted:syz not found [ 1164.768881][ T883] kernel write not supported for file /vcs (pid: 883 comm: kworker/0:2) [ 1165.273165][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1166.784320][ T1003] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1166.805469][ T1003] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1166.813992][ T9506] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1166.948779][T25400] netlink: 'syz.0.17863': attribute type 2 has an invalid length. [ 1166.975543][T25400] ave_0: entered promiscuous mode [ 1167.165332][ T9506] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1167.341287][ T10] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1167.376079][ T10] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1167.633012][T25421] fido_id[25421]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1167.661158][ T9506] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1167.856044][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1168.027865][ T10] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1168.041154][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.059763][ T10] usb 4-1: Product: syz [ 1168.064095][ T10] usb 4-1: Manufacturer: syz [ 1168.068813][ T10] usb 4-1: SerialNumber: syz [ 1168.103356][ T10] usb 4-1: config 0 descriptor?? [ 1168.128291][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1168.190738][ T9506] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1168.348262][ T9506] usb 3-1: Using ep0 maxpacket: 8 [ 1168.364323][ T9506] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1168.382603][ T9506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.400920][ T9506] usb 3-1: config 0 descriptor?? [ 1168.617596][ T9506] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1168.694275][ T10] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1168.701940][ T10] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 1168.742932][ T10] usb 4-1: USB disconnect, device number 99 [ 1168.994256][ T9506] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1169.010733][ T9506] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1169.048839][ T9506] usb 3-1: USB disconnect, device number 85 [ 1170.073534][T25521] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1170.289370][T25530] smc: net device bond0 applied user defined pnetid SYZ2 [ 1170.477836][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17910'. [ 1170.492758][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1170.501622][T25536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17910'. [ 1171.049822][T25561] netlink: 'syz.5.17918': attribute type 4 has an invalid length. [ 1171.088583][T25561] netlink: 17 bytes leftover after parsing attributes in process `syz.5.17918'. [ 1171.976447][ T9506] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1172.134940][ T9506] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1172.156480][ T9506] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.182055][ T9506] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1172.211560][ T9506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.251805][ T9506] usb 6-1: config 0 descriptor?? [ 1172.678018][ T9506] isku 0003:1E7D:319C.0068: unknown main item tag 0x0 [ 1172.723396][ T9506] isku 0003:1E7D:319C.0068: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 1172.857029][ T9506] isku 0003:1E7D:319C.0068: couldn't init struct isku_device [ 1172.898668][ T9506] isku 0003:1E7D:319C.0068: couldn't install keyboard [ 1172.923941][ T9506] isku 0003:1E7D:319C.0068: probe with driver isku failed with error -71 [ 1172.974103][ T9506] usb 6-1: USB disconnect, device number 22 [ 1173.071591][T25636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17944'. [ 1173.108575][T25636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17944'. [ 1173.120670][T25636] netlink: 'syz.2.17944': attribute type 14 has an invalid length. [ 1173.128816][T25636] netlink: 'syz.2.17944': attribute type 13 has an invalid length. [ 1173.218154][T25639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17945'. [ 1173.712832][T25657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.108458][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1174.295506][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1174.315927][ T10] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.338211][ T10] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.351449][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1174.358995][ T10] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1174.376555][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.394140][ T10] usb 6-1: config 0 descriptor?? [ 1174.411150][T25682] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1174.824256][ T10] elecom 0003:056E:00E6.0069: item fetching failed at offset 0/2 [ 1174.855372][ T10] elecom 0003:056E:00E6.0069: probe with driver elecom failed with error -22 [ 1175.021385][ T10] usb 6-1: USB disconnect, device number 23 [ 1175.543710][ T9506] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1175.714302][ T9506] usb 3-1: Using ep0 maxpacket: 16 [ 1175.737138][ T9506] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.762331][ T9506] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.782038][ T9506] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1175.803941][ T9506] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1175.812417][ T9506] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1175.848023][ T9506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.876979][ T9506] usb 3-1: config 0 descriptor?? [ 1176.223884][T25761] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1176.248452][T25761] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1176.275393][T25761] overlayfs: missing 'lowerdir' [ 1176.327663][ T9506] hid-generic 0003:045E:05DA.006A: unknown main item tag 0x0 [ 1176.364783][ T9506] hid-generic 0003:045E:05DA.006A: unknown main item tag 0x0 [ 1176.383028][ T9506] hid-generic 0003:045E:05DA.006A: unknown main item tag 0x0 [ 1176.390522][ T9506] hid-generic 0003:045E:05DA.006A: ignoring exceeding usage max [ 1176.409959][ T9506] hid-generic 0003:045E:05DA.006A: unknown main item tag 0x0 [ 1176.431195][ T9506] hid-generic 0003:045E:05DA.006A: unknown main item tag 0x0 [ 1176.459099][ T9506] hid-generic 0003:045E:05DA.006A: unbalanced collection at end of report description [ 1176.486562][ T9506] hid-generic 0003:045E:05DA.006A: probe with driver hid-generic failed with error -22 [ 1176.533827][ T9506] usb 3-1: USB disconnect, device number 86 [ 1177.346421][T25802] netlink: 'syz.2.17998': attribute type 3 has an invalid length. [ 1177.590447][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1177.613384][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1177.623332][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1177.635142][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1177.646797][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1177.755119][ T1003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1177.766627][ T1003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.779339][ T1003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1177.941028][ T1003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1177.952932][ T1003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.978942][ T1003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1177.997439][T25833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18006'. [ 1178.073408][T25808] wg1 speed is unknown, defaulting to 1000 [ 1178.231899][ T1003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.274985][ T1003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.295169][ T1003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1178.395777][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1178.483696][ T1003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.512126][ T1003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.563766][ T1003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1178.599269][ T10] wg1 speed is unknown, defaulting to 1000 [ 1178.605454][ T10] syz: Port: 1 Link DOWN [ 1178.993196][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.315472][ T1003] veth0_to_bridge: left allmulticast mode [ 1179.332744][ T1003] veth0_to_bridge: left promiscuous mode [ 1179.344870][ T1003] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1179.365317][ T883] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1179.542520][ T883] usb 4-1: Using ep0 maxpacket: 16 [ 1179.551931][ T883] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1179.592611][ T883] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.612385][ T55] Bluetooth: hci1: command tx timeout [ 1179.626679][ T883] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.650095][ T883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1179.657229][ T883] usb 4-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 1179.667175][ T883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.683155][ T883] usb 4-1: config 0 descriptor?? [ 1180.210060][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1180.219338][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.312494][ T883] usb 4-1: USB disconnect, device number 100 [ 1181.077241][ T1003] bond0 (unregistering): Released all slaves [ 1181.315066][ T1003] bond1 (unregistering): Released all slaves [ 1181.329874][ T1003] bond2 (unregistering): Released all slaves [ 1181.530301][ T55] Bluetooth: hci1: command tx timeout [ 1181.544636][ T1003] tipc: Disabling bearer [ 1181.583942][ T1003] tipc: Left network mode [ 1181.645097][ T9506] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1181.802778][ T9506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.818570][ T9506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.830534][ T9506] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1181.835991][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1181.843954][ T9506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.924724][ T9506] usb 3-1: config 0 descriptor?? [ 1182.041776][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1182.051536][ T10] usb 4-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.077618][ T10] usb 4-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1182.152598][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1182.159335][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1182.191562][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.192610][T25808] chnl_net:caif_netlink_parms(): no params data found [ 1182.259586][ T10] usb 4-1: config 0 descriptor?? [ 1182.389231][ T9506] hid-led 0003:0FC5:B080.006C: unknown main item tag 0x0 [ 1182.550821][ T9506] hid-led 0003:0FC5:B080.006C: probe with driver hid-led failed with error -71 [ 1182.609457][T26049] syz.5.18038 (26049) used greatest stack depth: 18040 bytes left [ 1182.628022][ T9506] usb 3-1: USB disconnect, device number 87 [ 1182.695034][ T10] logitech 0003:046D:C298.006D: unbalanced collection at end of report description [ 1182.707136][ T10] logitech 0003:046D:C298.006D: parse failed [ 1182.713437][ T10] logitech 0003:046D:C298.006D: probe with driver logitech failed with error -22 [ 1182.913243][ T24] usb 4-1: USB disconnect, device number 101 [ 1183.019046][T25808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.026471][T25808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.052231][T25808] bridge_slave_0: entered allmulticast mode [ 1183.087737][T25808] bridge_slave_0: entered promiscuous mode [ 1183.125953][T26143] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 1183.205381][T25808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.212782][T25808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.264947][T25808] bridge_slave_1: entered allmulticast mode [ 1183.306436][T25808] bridge_slave_1: entered promiscuous mode [ 1183.480613][ T55] Bluetooth: hci1: command tx timeout [ 1183.583131][ T1003] hsr_slave_0: left promiscuous mode [ 1183.591377][ T1003] hsr_slave_1: left promiscuous mode [ 1183.670098][ T1003] veth1_macvtap: left promiscuous mode [ 1183.684230][ T1003] veth0_macvtap: left promiscuous mode [ 1183.701873][ T1003] veth1_vlan: left promiscuous mode [ 1184.067197][ T1003] pimreg3 (unregistering): left allmulticast mode [ 1184.281443][ T883] kernel write not supported for file /7617/attr/exec (pid: 883 comm: kworker/0:2) [ 1184.960372][ T50] kworker/1:1 (50) used greatest stack depth: 15144 bytes left [ 1185.410647][ T55] Bluetooth: hci1: command tx timeout [ 1185.681699][T26222] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.18065'. [ 1185.700383][T26222] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1185.711551][T26222] openvswitch: netlink: Message has 8454 unknown bytes. [ 1186.201981][T26233] tmpfs: Bad value for 'mpol' [ 1186.448619][T25808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.500078][T25808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.781235][T25808] team0: Port device team_slave_0 added [ 1186.893446][T25808] team0: Port device team_slave_1 added [ 1187.143931][T25808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.181535][T25808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.399315][T25808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.421222][T25808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.432965][T25808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.571167][T25808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.790898][T25808] hsr_slave_0: entered promiscuous mode [ 1187.806732][T25808] hsr_slave_1: entered promiscuous mode [ 1187.817903][T25808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1187.829154][T25808] Cannot create hsr debugfs directory [ 1188.700158][T25808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1188.747141][T25808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1188.786279][T25808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1188.832052][T25808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1189.131215][T25808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.234717][T25808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.280766][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.288117][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.297271][T26477] overlayfs: conflicting lowerdir path [ 1189.304738][ T9506] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1189.344513][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.351860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.459454][ T9506] usb 4-1: Using ep0 maxpacket: 8 [ 1189.496938][ T9506] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1189.512782][ T9506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.536420][ T9506] usb 4-1: Product: syz [ 1189.540722][ T9506] usb 4-1: Manufacturer: syz [ 1189.552927][ T9506] usb 4-1: SerialNumber: syz [ 1189.572105][ T9506] usb 4-1: config 0 descriptor?? [ 1189.680138][T25808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.807075][ T9506] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1190.186481][ T9506] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1190.226465][ T9506] usb 4-1: USB disconnect, device number 102 [ 1190.580310][T25808] veth0_vlan: entered promiscuous mode [ 1190.618398][T25808] veth1_vlan: entered promiscuous mode [ 1190.728752][T25808] veth0_macvtap: entered promiscuous mode [ 1190.786065][T25808] veth1_macvtap: entered promiscuous mode [ 1190.846153][T25808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.907035][T25808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.952310][T25808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.998549][T25808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.009101][T25808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.034553][T25808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.303558][T26534] mkiss: ax0: crc mode is auto. [ 1191.457173][T26546] netlink: 180 bytes leftover after parsing attributes in process `syz.2.18129'. [ 1191.484359][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.499995][T26552] netlink: 'syz.5.18131': attribute type 10 has an invalid length. [ 1191.521744][T26552] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18131'. [ 1191.529304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.685853][T26552] team0: Port device geneve0 added [ 1191.761274][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.787543][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.712586][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1193.683889][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18165'. [ 1193.885576][T26642] bond0 (unregistering): Released all slaves [ 1194.040738][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18170'. [ 1194.099323][T26711] sp0: Synchronizing with TNC [ 1194.455742][T26742] 9pnet_virtio: no channels available for device syz [ 1195.370413][T26764] sp0: Synchronizing with TNC [ 1196.462373][ T30] audit: type=1400 audit(2000000133.301:4006): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=26823 comm="syz.6.18198" dest=20002 [ 1196.979472][T26874] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1196.986036][T26874] syzkaller1: linktype set to 32 [ 1197.297191][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18209'. [ 1197.432301][T26896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18210'. [ 1197.600731][T26909] program syz.6.18213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1197.734918][T26916] netlink: 168 bytes leftover after parsing attributes in process `syz.6.18216'. [ 1197.929211][T26925] program syz.0.18218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1198.052844][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18222'. [ 1198.509538][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1198.658746][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1198.676029][ T24] usb 7-1: config 0 has no interfaces? [ 1198.693013][ T24] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1198.729847][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.738223][ T24] usb 7-1: Product: syz [ 1198.742449][ T24] usb 7-1: Manufacturer: syz [ 1198.760297][ T24] usb 7-1: SerialNumber: syz [ 1198.774958][ T24] usb 7-1: config 0 descriptor?? [ 1198.838300][T26971] binder: 26970:26971 ioctl c0306201 2000000003c0 returned -14 [ 1198.944535][ T10] hid-generic C990:0003:0000.006E: unknown main item tag 0x0 [ 1198.957348][ T10] hid-generic C990:0003:0000.006E: unknown main item tag 0x0 [ 1198.975380][ T10] hid-generic C990:0003:0000.006E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1199.001208][ T24] usb 7-1: USB disconnect, device number 2 [ 1199.111622][T26979] fido_id[26979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1199.274237][ T9506] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1199.432372][ T9506] usb 3-1: Using ep0 maxpacket: 32 [ 1199.441135][ T9506] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1199.463886][ T9506] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1199.474731][ T9506] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1199.484898][ T9506] usb 3-1: config 1 has no interface number 0 [ 1199.515644][ T9506] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1199.535993][ T9506] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1199.570921][ T9506] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1199.591382][ T9506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.646121][ T9506] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1199.847303][T27017] macvtap1: entered allmulticast mode [ 1199.847394][ T9506] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1199.864108][T27017] veth0_macvtap: entered allmulticast mode [ 1199.894373][T27024] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18248'. [ 1199.956656][T27024] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18248'. [ 1200.324040][ T24] usb 3-1: USB disconnect, device number 88 [ 1200.363908][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1200.671385][T27064] loop6: detected capacity change from 0 to 63 [ 1200.708837][T25156] buffer_io_error: 10 callbacks suppressed [ 1200.708857][T25156] Buffer I/O error on dev loop6, logical block 0, async page read [ 1200.752102][T25156] Buffer I/O error on dev loop6, logical block 0, async page read [ 1200.776249][T25156] Buffer I/O error on dev loop6, logical block 0, async page read [ 1200.791385][T25156] Buffer I/O error on dev loop6, logical block 0, async page read [ 1200.804488][T25156] Buffer I/O error on dev loop6, logical block 0, async page read [ 1200.828950][T25156] Buffer I/O error on dev loop6, logical block 0, async page read [ 1200.839472][T25156] Buffer I/O error on dev loop6, logical block 3, async page read [ 1201.487903][T27090] gtp0: entered promiscuous mode [ 1201.512184][T27090] gtp0: entered allmulticast mode [ 1202.163386][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1202.312260][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1202.334491][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1202.361133][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.374862][ T24] usb 3-1: Product: syz [ 1202.385978][ T24] usb 3-1: Manufacturer: syz [ 1202.398205][ T24] usb 3-1: SerialNumber: syz [ 1202.413047][ T24] usb 3-1: config 0 descriptor?? [ 1202.432723][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1202.624295][ T24] gspca_sn9c2028: read1 error -32 [ 1202.646676][ T24] gspca_sn9c2028: read1 error -32 [ 1202.849053][ T883] usb 3-1: USB disconnect, device number 89 [ 1204.270528][ T30] audit: type=1326 audit(2000000141.681:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27220 comm="syz.5.18307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54c98e969 code=0x0 [ 1204.316570][ T883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1204.498772][ T883] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1204.518284][ T883] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1204.528945][ T883] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1204.538512][ T883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.565653][T27209] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1204.592214][ T883] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1204.881361][ T24] usb 7-1: USB disconnect, device number 3 [ 1204.908699][T27255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.295453][ T30] audit: type=1326 audit(2000000142.775:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bd3985927 code=0x7ffc0000 [ 1205.348027][ T30] audit: type=1326 audit(2000000142.807:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bd392ab39 code=0x7ffc0000 [ 1205.419341][ T30] audit: type=1326 audit(2000000142.807:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bd3985927 code=0x7ffc0000 [ 1205.484823][ T30] audit: type=1326 audit(2000000142.807:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bd392ab39 code=0x7ffc0000 [ 1205.577823][ T30] audit: type=1326 audit(2000000142.807:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bd3985927 code=0x7ffc0000 [ 1205.632729][ T30] audit: type=1326 audit(2000000142.807:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bd392ab39 code=0x7ffc0000 [ 1205.679541][ T30] audit: type=1326 audit(2000000142.807:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bd3985927 code=0x7ffc0000 [ 1205.724890][ T30] audit: type=1326 audit(2000000142.807:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bd392ab39 code=0x7ffc0000 [ 1205.760477][ T30] audit: type=1326 audit(2000000142.807:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27287 comm="syz.2.18320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bd3985927 code=0x7ffc0000 [ 1209.027607][ T24] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 1209.046156][ T24] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1209.256416][ T9506] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1209.406218][ T9506] usb 3-1: Using ep0 maxpacket: 16 [ 1209.439894][ T9506] usb 3-1: config 0 has no interfaces? [ 1209.457599][ T9506] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1209.505365][ T9506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.531330][ T9506] usb 3-1: Product: syz [ 1209.541108][ T9506] usb 3-1: Manufacturer: syz [ 1209.546476][ T9506] usb 3-1: SerialNumber: syz [ 1209.589371][ T9506] usb 3-1: config 0 descriptor?? [ 1209.837829][ T9506] usb 3-1: USB disconnect, device number 90 [ 1209.916424][T22787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1209.929310][T22787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1209.939690][T22787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1209.949567][T22787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1209.960421][T22787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1210.276234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1210.299162][ C0] hrtimer: interrupt took 89818 ns [ 1211.875943][T22787] Bluetooth: hci5: command tx timeout [ 1211.921767][T27450] chnl_net:caif_netlink_parms(): no params data found [ 1212.511670][T27450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.546227][T27450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.553829][T27450] bridge_slave_0: entered allmulticast mode [ 1212.581184][T27450] bridge_slave_0: entered promiscuous mode [ 1212.597419][T27450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.612964][T27450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.638073][T27450] bridge_slave_1: entered allmulticast mode [ 1212.656237][T27450] bridge_slave_1: entered promiscuous mode [ 1212.917145][T27450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.958821][T27450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.988490][T27745] netlink: 'syz.2.18411': attribute type 1 has an invalid length. [ 1213.053696][T27745] netlink: 172 bytes leftover after parsing attributes in process `syz.2.18411'. [ 1213.165780][T27450] team0: Port device team_slave_0 added [ 1213.193951][T27450] team0: Port device team_slave_1 added [ 1213.310922][ T883] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1213.323000][T27450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.332399][T27450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.358867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1213.370251][T27450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.386281][T27450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.393828][T27450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.420989][ C0] vkms_vblank_simulate: vblank timer overrun [ 1213.488387][T27450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.503915][ T883] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1213.525932][ T883] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1213.535946][ T883] usb 7-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 1213.553635][ T883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.566155][ T883] usb 7-1: Product: syz [ 1213.582329][ T883] usb 7-1: Manufacturer: syz [ 1213.597626][ T883] usb 7-1: SerialNumber: syz [ 1213.628186][ T883] usb 7-1: config 0 descriptor?? [ 1213.832493][T22787] Bluetooth: hci5: command tx timeout [ 1213.882044][T27450] hsr_slave_0: entered promiscuous mode [ 1213.906159][T27450] hsr_slave_1: entered promiscuous mode [ 1213.945268][T27450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1213.953009][T27450] Cannot create hsr debugfs directory [ 1214.041744][ T883] snd_usb_podhd 7-1:0.0: Line 6 POD HDDESKTOP found [ 1214.228104][ T883] snd_usb_podhd 7-1:0.0: endpoint not available, using fallback values [ 1214.263040][ T883] snd_usb_podhd 7-1:0.0: invalid control EP [ 1214.269041][ T883] snd_usb_podhd 7-1:0.0: cannot start listening: -22 [ 1214.295249][ T883] snd_usb_podhd 7-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 1214.314263][ T883] snd_usb_podhd 7-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 1214.415318][ T883] usb 7-1: USB disconnect, device number 4 [ 1214.888407][T27450] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1214.984592][T27450] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1215.076599][T27450] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1215.143040][T27450] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1215.516040][T27450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.583417][T27450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.643207][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.650522][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.728443][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.735945][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.753121][T22787] Bluetooth: hci5: command tx timeout [ 1215.979497][T27450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1216.881690][T27450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.700667][T22787] Bluetooth: hci5: command tx timeout [ 1217.985307][T27450] veth0_vlan: entered promiscuous mode [ 1218.048671][T27450] veth1_vlan: entered promiscuous mode [ 1218.179518][T27450] veth0_macvtap: entered promiscuous mode [ 1218.207208][T27450] veth1_macvtap: entered promiscuous mode [ 1218.282720][T27450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.348116][T27450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.413690][T27450] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.436873][T27450] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.464961][T27450] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.483259][T27450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.800041][ T893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.836534][ T893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.965103][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.990391][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.676378][T28093] serio: Serial port ttyS3 [ 1220.152219][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1221.397190][ T5891] kernel read not supported for file /dsp (pid: 5891 comm: kworker/1:5) [ 1221.814050][T28189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18509'. [ 1221.838658][T28187] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1222.078975][T28201] vxcan1: tx address claim with dlc 0 [ 1222.133681][T28204] netlink: 312 bytes leftover after parsing attributes in process `syz.7.18515'. [ 1222.856202][T28229] program syz.2.18524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1222.997054][T28232] binder: 28231:28232 ioctl c0306201 200000000100 returned -14 [ 1223.199810][T28240] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1223.564705][T28256] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18535'. [ 1223.620452][T28256] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 1224.411405][T28294] program syz.6.18548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1224.748983][T28302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18551'. [ 1224.898295][T28299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.357934][T28319] netlink: 52 bytes leftover after parsing attributes in process `syz.7.18557'. [ 1225.405562][T28321] netlink: 'syz.0.18558': attribute type 12 has an invalid length. [ 1225.696944][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18562'. [ 1227.907061][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1229.128753][T28474] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18603'. [ 1231.146266][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18624'. [ 1231.155941][T28534] netlink: 'syz.2.18624': attribute type 20 has an invalid length. [ 1231.164579][T28534] netlink: 'syz.2.18624': attribute type 21 has an invalid length. [ 1231.756032][ T5891] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1231.766991][T28569] dlm: no local IP address has been set [ 1231.772823][T28569] dlm: cannot start dlm midcomms -107 [ 1231.884511][T28574] vcan1: entered promiscuous mode [ 1231.905468][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 1231.917863][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1231.930010][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1231.950698][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1231.966978][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.975916][ T5891] usb 3-1: Product: syz [ 1231.980727][ T5891] usb 3-1: Manufacturer: syz [ 1231.985676][ T5891] usb 3-1: SerialNumber: syz [ 1232.002021][ T5891] usb 3-1: config 0 descriptor?? [ 1232.024265][ T5891] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1232.041170][ T5891] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1232.616140][ T5891] em28xx 3-1:0.0: chip ID is em2870 [ 1232.691872][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1232.691896][ T30] audit: type=1326 audit(2000000172.151:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54c98e969 code=0x7ffc0000 [ 1232.836620][ T10] usb 3-1: USB disconnect, device number 91 [ 1232.843873][ T30] audit: type=1326 audit(2000000172.151:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54c98e969 code=0x7ffc0000 [ 1232.856924][T28616] wireguard: wg1: Could not create IPv4 socket [ 1232.865866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.886310][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 1232.928992][ T10] em28xx 3-1:0.0: Freeing device [ 1232.947636][ T30] audit: type=1326 audit(2000000172.215:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe54c98e969 code=0x7ffc0000 [ 1233.025339][ T30] audit: type=1326 audit(2000000172.215:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54c98e969 code=0x7ffc0000 [ 1233.055964][ T30] audit: type=1326 audit(2000000172.215:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54c98e969 code=0x7ffc0000 [ 1233.083652][ T30] audit: type=1326 audit(2000000172.226:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe54c98e969 code=0x7ffc0000 [ 1233.114655][ T30] audit: type=1326 audit(2000000172.226:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54c98e969 code=0x7ffc0000 [ 1233.163145][ T30] audit: type=1326 audit(2000000172.226:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe54c985927 code=0x7ffc0000 [ 1233.290173][ T30] audit: type=1326 audit(2000000172.226:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe54c92ab39 code=0x7ffc0000 [ 1233.357889][ T30] audit: type=1326 audit(2000000172.226:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.5.18649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe54c985927 code=0x7ffc0000 [ 1233.380725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1236.146117][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1236.350635][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.387737][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1236.412084][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1236.434952][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1236.449961][ T10] usb 7-1: SerialNumber: syz [ 1236.708798][ T10] usb 7-1: 0:2 : does not exist [ 1236.713830][ T10] usb 7-1: unit 255 not found! [ 1236.810650][ T10] usb 7-1: USB disconnect, device number 5 [ 1237.358148][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1237.465339][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1237.509154][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1237.537824][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1237.563530][ T24] usb 3-1: config 0 has no interface number 0 [ 1237.578774][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1237.608311][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.639712][ T24] usb 3-1: Product: syz [ 1237.643955][ T24] usb 3-1: Manufacturer: syz [ 1237.662774][ T24] usb 3-1: SerialNumber: syz [ 1237.687941][ T24] usb 3-1: config 0 descriptor?? [ 1237.712169][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1237.916051][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1237.961223][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1238.138533][T28833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18713'. [ 1238.296701][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1238.309748][ T24] usb 3-1: USB disconnect, device number 92 [ 1238.330676][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1238.351682][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1238.372909][ T24] quatech2 3-1:0.51: device disconnected [ 1238.958011][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18724'. [ 1239.058902][T28881] netlink: 'syz.6.18726': attribute type 9 has an invalid length. [ 1239.077287][T28881] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.18726'. [ 1239.186441][T28884] can0: slcan on ttyS3. [ 1239.306235][T28887] can0 (unregistered): slcan off ttyS3. [ 1239.326802][T28884] can0: slcan on ttyS3. [ 1239.391768][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 1239.441466][T28909] netlink: 'syz.5.18731': attribute type 1 has an invalid length. [ 1239.451496][T28909] netlink: 224 bytes leftover after parsing attributes in process `syz.5.18731'. [ 1239.475752][T28883] can0 (unregistered): slcan off ttyS3. [ 1239.655013][T28924] netlink: 'syz.2.18736': attribute type 9 has an invalid length. [ 1239.682440][T28924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18736'. [ 1239.780468][T28924] macvlan2: entered promiscuous mode [ 1239.799645][T28924] macvlan2: entered allmulticast mode [ 1239.837941][T28924] hsr0: entered allmulticast mode [ 1239.843303][T28924] hsr_slave_0: entered allmulticast mode [ 1239.863870][T28924] hsr_slave_1: entered allmulticast mode [ 1241.082418][T28978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18756'. [ 1241.120868][T28978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18756'. [ 1241.308299][T28983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18759'. [ 1241.549692][T29000] ALSA: mixer_oss: invalid index 40000 [ 1242.355440][T29027] binder: 29026:29027 ioctl c018620c 200000000640 returned -22 [ 1243.286350][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1243.314694][ T5891] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1243.443884][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1243.463890][ T24] usb 7-1: config 7 has an invalid interface number: 247 but max is 0 [ 1243.473101][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 1243.486097][ T24] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.509539][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.525952][ T24] usb 7-1: config 7 has no interface number 0 [ 1243.536406][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1243.547469][ T24] usb 7-1: config 7 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1243.562569][ T5891] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1243.573948][ T5891] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1243.590144][ T5891] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.606296][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1243.614649][ T5891] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1243.625479][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.635168][ T24] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 1243.651524][ T24] usb 7-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 1243.662360][ T24] usb 7-1: Product: syz [ 1243.669079][ T5891] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1243.676312][ T24] usb 7-1: Manufacturer: syz [ 1243.681915][ T24] usb 7-1: SerialNumber: syz [ 1243.702819][ T24] comedi comedi0: Wrong number of endpoints [ 1243.709896][ T24] ni6501 7-1:7.247: driver 'ni6501' failed to auto-configure device. [ 1243.890257][T29053] netlink: 71 bytes leftover after parsing attributes in process `syz.2.18784'. [ 1243.903646][T21621] usb 3-1: USB disconnect, device number 93 [ 1243.921868][ T24] usb 7-1: USB disconnect, device number 6 [ 1245.004685][T29148] mkiss: ax0: crc mode is auto. [ 1245.227978][T29158] mkiss: ax0: crc mode is auto. [ 1245.789735][T29198] netlink: 60 bytes leftover after parsing attributes in process `syz.6.18817'. [ 1246.326412][T29230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18825'. [ 1246.411872][T29227] ptrace attach of "./syz-executor exec"[29231] was attempted by "./syz-executor exec"[29227] [ 1246.680651][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18830'. [ 1247.125387][T21621] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1247.303817][T21621] usb 6-1: Using ep0 maxpacket: 16 [ 1247.332862][T21621] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1247.364698][T21621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.393102][T21621] usb 6-1: Product: syz [ 1247.408569][T21621] usb 6-1: Manufacturer: syz [ 1247.425057][T21621] usb 6-1: SerialNumber: syz [ 1247.442734][T21621] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1247.450093][T21621] r8152-cfgselector 6-1: config 0 descriptor?? [ 1247.508559][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18842'. [ 1247.681642][T21621] r8152-cfgselector 6-1: Needed 1 retries to read version [ 1247.708413][T21621] r8152-cfgselector 6-1: Unknown version 0x5cc0 [ 1247.717634][T21621] r8152-cfgselector 6-1: bad CDC descriptors [ 1247.844752][T29285] kvm: user requested TSC rate below hardware speed [ 1247.906774][T21621] r8152-cfgselector 6-1: USB disconnect, device number 24 [ 1248.535454][T29308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.864954][T29329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18860'. [ 1248.920134][T29308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.209781][T29308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.314893][T29335] macvlan3: entered promiscuous mode [ 1249.344478][T29335] bridge0: entered promiscuous mode [ 1249.502488][T29308] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.654613][T29359] pim6reg: entered allmulticast mode [ 1249.745766][T29358] pim6reg: left allmulticast mode [ 1249.808078][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1249.979329][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1249.987067][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.019937][T29308] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.022198][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.083456][T29308] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.092796][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1250.140236][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1250.182547][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.206538][T29308] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.227557][ T10] usb 3-1: config 0 descriptor?? [ 1250.277625][T29308] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.629181][ T10] microsoft 0003:045E:07DA.0070: ignoring exceeding usage max [ 1250.658224][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.686966][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.694311][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.732937][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.742314][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1250.742334][ T30] audit: type=1800 audit(2000000191.538:4065): pid=29406 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.18884" name="[kvm-gmem]" dev="anon_inodefs" ino=147102 res=0 errno=0 [ 1250.788785][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.810794][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.830068][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.849521][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.863533][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1250.881207][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1251.019297][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0070/input/input126 [ 1251.071258][ T10] microsoft 0003:045E:07DA.0070: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1251.121631][ T10] usb 3-1: USB disconnect, device number 94 [ 1251.143634][T29433] bridge_slave_0: invalid flags given to default FDB implementation [ 1252.167847][ T9506] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1252.329364][ T9506] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1252.354780][ T9506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.406351][ T9506] usb 3-1: config 0 descriptor?? [ 1252.427947][ T9506] cp210x 3-1:0.0: cp210x converter detected [ 1252.562134][T29477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1252.590429][T29477] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1253.019213][ T9506] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1253.041526][ T9506] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1253.049583][T29477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1253.076042][ T9506] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1253.090757][T29477] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1253.134220][ T9506] usb 3-1: USB disconnect, device number 95 [ 1253.165402][ T9506] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1253.186665][ T9506] cp210x 3-1:0.0: device disconnected [ 1253.410442][T29477] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1253.417610][T29477] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1253.746753][T29577] Failed to get privilege flags for destination (handle=0x2:0x9) [ 1254.880853][T21621] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1255.041366][T21621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.057392][T21621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.076033][T21621] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1255.094660][T21621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.110743][T21621] usb 3-1: config 0 descriptor?? [ 1255.522455][T21621] hid-steam 0003:28DE:1142.0071: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1255.598340][T21621] hid-steam 0003:28DE:1142.0071: Steam wireless receiver connected [ 1255.637300][T21621] hid-steam 0003:28DE:1142.0072: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1255.721427][T21621] usb 3-1: USB disconnect, device number 96 [ 1255.759440][T21621] hid-steam 0003:28DE:1142.0071: Steam wireless receiver disconnected [ 1256.639922][T29688] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.904833][T29688] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.166362][T29688] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.482116][T29688] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.709992][T27460] kernel write not supported for file bpf-prog (pid: 27460 comm: kworker/1:1) [ 1257.791436][T29688] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.909641][T29688] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.006534][T29688] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.093665][T29688] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.683227][T29775] input: syz1 as /devices/virtual/input/input127 [ 1259.396343][T29797] ucma_write: process 8085 (syz.2.18989) changed security contexts after opening file descriptor, this is not allowed. [ 1259.464616][T29801] input: syz0 as /devices/virtual/input/input128 [ 1260.556893][T29842] tap0: tun_chr_ioctl cmd 35108 [ 1260.677247][T29853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.19012'. [ 1260.724835][T29853] netlink: 'syz.7.19012': attribute type 7 has an invalid length. [ 1260.761284][T29853] netlink: 'syz.7.19012': attribute type 8 has an invalid length. [ 1260.769299][T29853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19012'. [ 1261.019514][T29868] xt_hashlimit: max too large, truncated to 1048576 [ 1261.036041][T29868] xt_hashlimit: overflow, try lower: 0/0 [ 1261.142654][T29876] tap0: tun_chr_ioctl cmd 1074025677 [ 1261.153869][T29876] tap0: linktype set to 773 [ 1261.452910][T29889] netlink: 'syz.7.19027': attribute type 2 has an invalid length. [ 1261.476175][T29889] netlink: 'syz.7.19027': attribute type 2 has an invalid length. [ 1261.784946][T29905] kvm: kvm [29904]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 1263.111969][T29947] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1263.229691][T29942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.256834][T29942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.475193][T29942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.496503][T29942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.639501][T29942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.669955][T29942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.757445][T29970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.008007][T29942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.035697][T29942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.290166][T29987] netlink: 830 bytes leftover after parsing attributes in process `syz.7.19059'. [ 1264.390974][T29942] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.448510][T29942] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.491873][T29942] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.515696][T29942] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.594759][T29942] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.628442][T29942] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.729400][T29942] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.768363][T29942] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.819241][T30024] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1264.920497][T30029] sctp: [Deprecated]: syz.0.19072 (pid 30029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1264.920497][T30029] Use struct sctp_sack_info instead [ 1265.852620][T21621] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1266.036967][T21621] usb 6-1: Using ep0 maxpacket: 8 [ 1266.048981][T21621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1266.073038][T21621] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1266.120730][T21621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.135604][T21621] usb 6-1: config 0 descriptor?? [ 1266.373706][T21621] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1266.421924][T30087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19091'. [ 1266.441688][T30087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19091'. [ 1266.574866][T21621] usb 6-1: USB disconnect, device number 25 [ 1267.740513][T30147] bond0: entered promiscuous mode [ 1267.753416][T30147] bond_slave_0: entered promiscuous mode [ 1267.769603][T30147] bond_slave_1: entered promiscuous mode [ 1267.940828][T30147] bond0: left promiscuous mode [ 1267.945886][T30147] bond_slave_0: left promiscuous mode [ 1267.976376][T30147] bond_slave_1: left promiscuous mode [ 1268.332464][T30159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19115'. [ 1268.905275][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19124'. [ 1269.439513][ T24] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1269.597377][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1269.635879][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1269.651094][ T24] usb 3-1: config 0 has no interface number 0 [ 1269.683797][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1269.704284][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.719519][ T24] usb 3-1: Product: syz [ 1269.723863][ T24] usb 3-1: Manufacturer: syz [ 1269.746089][ T24] usb 3-1: SerialNumber: syz [ 1269.764237][ T24] usb 3-1: config 0 descriptor?? [ 1269.786674][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1269.999600][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1270.072177][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1270.198840][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 21 [ 1270.396283][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1270.397399][T21621] usb 3-1: USB disconnect, device number 97 [ 1270.456239][T21621] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1270.505330][T21621] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1270.544259][T21621] quatech2 3-1:0.51: device disconnected [ 1271.140519][T30284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19148'. [ 1271.417476][T30292] tipc: Resetting bearer [ 1271.737611][T30305] block device autoloading is deprecated and will be removed. [ 1272.171143][ T10] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1272.342493][ T10] usb 3-1: config 0 has no interfaces? [ 1272.362031][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1272.385083][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.400956][ T10] usb 3-1: Product: syz [ 1272.405838][ T10] usb 3-1: Manufacturer: syz [ 1272.410745][ T10] usb 3-1: SerialNumber: syz [ 1272.427774][ T10] usb 3-1: config 0 descriptor?? [ 1272.655013][T21621] usb 3-1: USB disconnect, device number 98 [ 1273.141451][T30375] netlink: 'syz.6.19178': attribute type 10 has an invalid length. [ 1273.399122][T30381] netlink: 'syz.0.19180': attribute type 29 has an invalid length. [ 1273.456727][T30384] netlink: 'syz.0.19180': attribute type 29 has an invalid length. [ 1273.533705][T30381] netlink: 'syz.0.19180': attribute type 29 has an invalid length. [ 1274.444139][T21621] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1274.621350][T21621] usb 6-1: Using ep0 maxpacket: 32 [ 1274.631265][T21621] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.644722][T21621] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.655245][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1274.687457][T21621] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1274.705359][T21621] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1274.725302][T21621] usb 6-1: Product: syz [ 1274.729853][T21621] usb 6-1: Manufacturer: syz [ 1274.768179][T21621] hub 6-1:4.0: USB hub found [ 1274.811521][ T10] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1274.832271][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.863093][ T10] usb 7-1: config 0 descriptor?? [ 1274.866680][T30434] binder: 30430:30434 ioctl 6611 0 returned -22 [ 1274.967301][T21621] hub 6-1:4.0: 2 ports detected [ 1275.099495][ T10] kaweth 7-1:0.0: Firmware present in device. [ 1275.163899][T21621] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 1275.191560][T21621] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 1275.261193][ T10] kaweth 7-1:0.0: Statistics collection: 0 [ 1275.269476][T21621] usb 6-1: USB disconnect, device number 26 [ 1275.283247][ T10] kaweth 7-1:0.0: Multicast filter limit: 0 [ 1275.289618][ T10] kaweth 7-1:0.0: MTU: 0 [ 1275.311540][ T10] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1275.628098][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1275.636615][ T10] kaweth 7-1:0.0: Error setting SOFS wait [ 1275.647214][ T10] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 1275.672869][ T10] usb 7-1: USB disconnect, device number 7 [ 1276.232874][T30523] bridge0: port 3(syz_tun) entered blocking state [ 1276.252702][T30523] bridge0: port 3(syz_tun) entered disabled state [ 1276.272865][T30523] syz_tun: entered allmulticast mode [ 1276.292961][T30523] syz_tun: entered promiscuous mode [ 1276.325480][T30523] bridge0: port 3(syz_tun) entered blocking state [ 1276.332748][T30523] bridge0: port 3(syz_tun) entered forwarding state [ 1277.023235][T30546] netlink: 60 bytes leftover after parsing attributes in process `syz.6.19222'. [ 1277.096448][T30550] tun0: tun_chr_ioctl cmd 1074025672 [ 1277.114614][T30550] tun0: ignored: set checksum disabled [ 1277.491838][ T5806] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1277.697141][ T5806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.716021][ T5806] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1277.734696][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.746572][ T5806] usb 7-1: config 0 descriptor?? [ 1278.158410][ T5806] zeroplus 0003:0C12:0005.0073: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.6-1/input0 [ 1278.187858][ T5806] zeroplus 0003:0C12:0005.0073: no inputs found [ 1278.356400][ T5806] usb 7-1: USB disconnect, device number 8 [ 1278.442269][T30608] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.630057][T30608] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.801024][T30608] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.951474][T30608] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.169766][T30608] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.197260][T30608] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.239609][T30608] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.264537][T30666] overlay: filesystem on ./bus not supported [ 1279.276235][T30608] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.413054][T30675] netlink: 136 bytes leftover after parsing attributes in process `syz.0.19255'. [ 1279.536973][ T30] audit: type=1326 audit(2000000222.438:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb192b8e969 code=0x7ffc0000 [ 1279.559055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.653773][ T30] audit: type=1326 audit(2000000222.438:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb192b8e969 code=0x7ffc0000 [ 1279.749941][ T30] audit: type=1326 audit(2000000222.459:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb192b8e969 code=0x7ffc0000 [ 1279.773526][ T30] audit: type=1326 audit(2000000222.459:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb192b85927 code=0x7ffc0000 [ 1279.797353][ T30] audit: type=1326 audit(2000000222.459:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb192b2ab39 code=0x7ffc0000 [ 1279.820357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.879150][ T30] audit: type=1326 audit(2000000222.459:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb192b85927 code=0x7ffc0000 [ 1279.900839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.907882][ T30] audit: type=1326 audit(2000000222.459:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb192b2ab39 code=0x7ffc0000 [ 1279.930164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.991056][ T30] audit: type=1326 audit(2000000222.459:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb192b85927 code=0x7ffc0000 [ 1280.051688][ T30] audit: type=1326 audit(2000000222.459:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb192b2ab39 code=0x7ffc0000 [ 1280.074284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1280.088209][ T30] audit: type=1326 audit(2000000222.459:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30678 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb192b85927 code=0x7ffc0000 [ 1280.456729][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1280.616287][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1280.635141][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.653426][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.681288][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1280.699743][T30723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19275'. [ 1280.702359][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.720209][T30723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19275'. [ 1280.726833][ T10] usb 6-1: config 0 descriptor?? [ 1280.901812][T30735] tc_dump_action: action bad kind [ 1281.142733][ T10] lua 0003:1E7D:2C2E.0074: report_id 0 is invalid [ 1281.163344][ T10] lua 0003:1E7D:2C2E.0074: item 0 4 1 8 parsing failed [ 1281.174826][ T10] lua 0003:1E7D:2C2E.0074: parse failed [ 1281.180709][ T10] lua 0003:1E7D:2C2E.0074: probe with driver lua failed with error -22 [ 1281.373239][ T10] usb 6-1: USB disconnect, device number 27 [ 1281.620042][T30780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19292'. [ 1281.702024][T30782] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1281.713760][T30784] /dev/nullb0: Can't lookup blockdev [ 1281.928156][T30794] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19299'. [ 1282.011204][T30796] bridge_slave_0: left allmulticast mode [ 1282.021304][T30796] bridge_slave_0: left promiscuous mode [ 1282.037990][T30796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.062581][T30796] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1282.141255][T30804] program syz.5.19304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1283.662252][ T24] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1283.823005][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1283.851639][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1283.914337][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1283.957596][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1283.971998][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.025962][ T24] usb 3-1: Product: syz [ 1284.035283][ T24] usb 3-1: Manufacturer: syz [ 1284.050253][ T24] usb 3-1: SerialNumber: syz [ 1284.065985][ T24] usb 3-1: config 0 descriptor?? [ 1284.083131][T30860] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1284.121601][T30860] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1284.170885][ T24] usb 3-1: ucan: probing device on interface #0 [ 1284.806606][ T24] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 1284.851653][ T24] usb 3-1: USB disconnect, device number 99 [ 1287.875101][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1288.026371][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1288.053625][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.075097][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.095600][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1288.115382][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.136218][ T24] usb 7-1: config 0 descriptor?? [ 1288.529855][ T24] lua 0003:1E7D:2C2E.0075: report_id 0 is invalid [ 1288.560574][ T24] lua 0003:1E7D:2C2E.0075: item 0 4 1 8 parsing failed [ 1288.584852][ T24] lua 0003:1E7D:2C2E.0075: parse failed [ 1288.606228][ T24] lua 0003:1E7D:2C2E.0075: probe with driver lua failed with error -22 [ 1288.746033][ T24] usb 7-1: USB disconnect, device number 9 [ 1289.111942][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1289.132483][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1289.144969][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1289.161348][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1289.172434][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1289.205285][T22787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1289.213981][T22787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1289.227637][T22787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1289.240869][T22787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1289.251663][T22787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1290.249035][T31076] chnl_net:caif_netlink_parms(): no params data found [ 1290.685293][T31076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.711282][T31076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.727644][T31076] bridge_slave_0: entered allmulticast mode [ 1290.755535][T31076] bridge_slave_0: entered promiscuous mode [ 1290.776112][T31076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.784554][T31076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.794428][T31076] bridge_slave_1: entered allmulticast mode [ 1290.803843][T31076] bridge_slave_1: entered promiscuous mode [ 1290.830015][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1290.960109][T31076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.976194][T31076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.988466][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1291.003595][ T24] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1291.032146][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.058457][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1291.098074][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1291.110693][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.118763][ T24] usb 7-1: Product: syz [ 1291.124812][ T24] usb 7-1: Manufacturer: syz [ 1291.156377][ T24] usb 7-1: SerialNumber: syz [ 1291.186914][T31076] team0: Port device team_slave_0 added [ 1291.212263][T22787] Bluetooth: hci6: command tx timeout [ 1291.252245][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 1291.252265][ T30] audit: type=1326 audit(2000000235.001:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31373 comm="syz.5.19423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54c98e969 code=0x0 [ 1291.285587][T31076] team0: Port device team_slave_1 added [ 1291.300902][T31377] IPv6: NLM_F_CREATE should be specified when creating new route [ 1291.471208][T31076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.493279][T31076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.520993][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.529205][T31076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.545044][T31076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.554887][T31076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.582873][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.590577][T31076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.612910][ T24] usb 7-1: 0:2 : does not exist [ 1291.803440][T31076] hsr_slave_0: entered promiscuous mode [ 1291.811640][T31076] hsr_slave_1: entered promiscuous mode [ 1291.821166][T31076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.830879][T31076] Cannot create hsr debugfs directory [ 1291.991669][ T24] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1292.101611][ T24] usb 7-1: USB disconnect, device number 10 [ 1292.695539][T31076] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1292.734734][T31076] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1292.793105][T31076] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1292.847515][T31076] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1292.862994][T31561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19444'. [ 1292.898174][T31561] netlink: 'syz.0.19444': attribute type 21 has an invalid length. [ 1293.160850][T22787] Bluetooth: hci6: command tx timeout [ 1293.242109][T31076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.336155][T31076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.364419][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.372416][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.444688][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.452180][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.350063][T31607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19462'. [ 1294.365273][T31076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.386297][T31607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19462'. [ 1294.422415][T31610] netlink: 'syz.5.19463': attribute type 10 has an invalid length. [ 1294.468142][T31610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.515064][T31610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.587360][T31610] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1294.647533][T31613] macvlan0: entered promiscuous mode [ 1294.686954][T31613] netlink: 'syz.6.19464': attribute type 1 has an invalid length. [ 1294.725623][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1294.747386][T31613] netlink: 'syz.6.19464': attribute type 2 has an invalid length. [ 1295.006792][T31624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1295.054418][T31634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19470'. [ 1295.077460][T31634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19470'. [ 1295.101206][T22787] Bluetooth: hci6: command tx timeout [ 1295.219789][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1295.330000][T31076] veth0_vlan: entered promiscuous mode [ 1295.365275][T31076] veth1_vlan: entered promiscuous mode [ 1295.415373][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1295.458208][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1295.465868][T31076] veth0_macvtap: entered promiscuous mode [ 1295.477276][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1295.495231][T31076] veth1_macvtap: entered promiscuous mode [ 1295.501381][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.525557][ T10] usb 6-1: Product: syz [ 1295.540408][ T10] usb 6-1: Manufacturer: syz [ 1295.545267][ T10] usb 6-1: SerialNumber: syz [ 1295.578573][ T10] usb 6-1: config 0 descriptor?? [ 1295.595230][T31076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.646838][T31076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.726864][T31076] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.757689][T31076] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.767816][T31076] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.777771][T31076] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.003373][ T10] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1296.090310][T27583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.108074][T27583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.258423][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.290774][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.382942][ T10] usb 6-1: USB disconnect, device number 28 [ 1297.037928][T22787] Bluetooth: hci6: command tx timeout [ 1297.208841][T31722] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1297.298372][ T9005] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1297.299893][T31728] macvlan2: entered promiscuous mode [ 1297.329152][T31728] bridge0: entered promiscuous mode [ 1297.476236][ T9005] usb 9-1: Using ep0 maxpacket: 16 [ 1297.497516][ T9005] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.518339][ T9005] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1297.560178][ T9005] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1297.580461][T31741] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[31741] [ 1297.602688][ T9005] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.636630][ T9005] usb 9-1: Product: syz [ 1297.640908][ T9005] usb 9-1: Manufacturer: syz [ 1297.642300][T31745] random: crng reseeded on system resumption [ 1297.672856][ T9005] usb 9-1: SerialNumber: syz [ 1298.077630][ T9005] usb 9-1: cannot find UAC_HEADER [ 1298.143350][ T9005] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1298.167949][ T9005] usb 9-1: USB disconnect, device number 2 [ 1298.230932][T31774] veth0_to_bridge: entered promiscuous mode [ 1298.256846][T31772] veth0_to_bridge: left promiscuous mode [ 1298.267332][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1298.435491][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1298.443062][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1298.461732][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.477847][ T24] usb 6-1: config 0 descriptor?? [ 1298.709673][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1298.744402][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1298.772220][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1298.793529][ T30] audit: type=1326 audit(2000000243.091:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31787 comm="syz.8.19513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f209358e969 code=0x0 [ 1298.800334][ T24] usb 6-1: media controller created [ 1298.967678][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1299.029042][ T24] az6027: usb out operation failed. (-71) [ 1299.048497][ T24] az6027: usb out operation failed. (-71) [ 1299.065514][ T24] stb0899_attach: Driver disabled by Kconfig [ 1299.086714][ T24] az6027: no front-end attached [ 1299.086714][ T24] [ 1299.129189][ T24] az6027: usb out operation failed. (-71) [ 1299.141607][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1299.164736][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input129 [ 1299.199733][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1299.217649][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1299.248305][ T24] usb 6-1: USB disconnect, device number 29 [ 1299.381657][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1301.794843][ T30] audit: type=1400 audit(2000000246.299:4186): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=31913 comm="syz.2.19555" name="4096" dev="tmpfs" ino=20623 [ 1302.604692][T31949] program syz.8.19566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1302.753892][T31953] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1302.770839][T31953] syzkaller0: linktype set to 769 [ 1303.059728][T31967] macsec1: entered promiscuous mode [ 1303.078793][T31967] macvlan1: entered promiscuous mode [ 1303.164072][T31967] macvlan1: left promiscuous mode [ 1303.260713][T31983] [ 1303.263130][T31983] ===================================================== [ 1303.270214][T31983] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1303.278061][T31983] 6.15.0-syzkaller #0 Not tainted [ 1303.283568][T31983] ----------------------------------------------------- [ 1303.290703][T31983] syz.5.19579/31983 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1303.298552][T31983] ffff88805aaf5360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1303.307474][T31983] [ 1303.307474][T31983] and this task is already holding: [ 1303.315053][T31983] ffff888029b6a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1303.325319][T31983] which would create a new lock dependency: [ 1303.331441][T31983] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1303.339575][T31983] [ 1303.339575][T31983] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1303.349394][T31983] (&dev->event_lock#2){..-.}-{3:3} [ 1303.349432][T31983] [ 1303.349432][T31983] ... which became SOFTIRQ-irq-safe at: [ 1303.363804][T31983] lock_acquire+0x120/0x360 [ 1303.368675][T31983] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1303.374626][T31983] input_event+0x7a/0xc0 [ 1303.379368][T31983] xpad360_process_packet+0xda/0xb30 [ 1303.385381][T31983] xpad_irq_in+0x184/0x25a0 [ 1303.391029][T31983] __usb_hcd_giveback_urb+0x417/0x690 [ 1303.396787][T31983] dummy_timer+0x862/0x4550 [ 1303.401435][T31983] __hrtimer_run_queues+0x52c/0xc60 [ 1303.407118][T31983] hrtimer_run_softirq+0x187/0x2b0 [ 1303.412797][T31983] handle_softirqs+0x283/0x870 [ 1303.417902][T31983] __irq_exit_rcu+0xca/0x1f0 [ 1303.423104][T31983] irq_exit_rcu+0x9/0x30 [ 1303.427921][T31983] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1303.434512][T31983] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1303.441070][T31983] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1303.447217][T31983] dummy_queue+0x573/0x8e0 [ 1303.452014][T31983] usb_ep_queue+0xf0/0x390 [ 1303.457007][T31983] raw_process_ep_io+0x599/0xbc0 [ 1303.462328][T31983] raw_ioctl+0x23d1/0x3c90 [ 1303.466864][T31983] __se_sys_ioctl+0xfc/0x170 [ 1303.471663][T31983] do_syscall_64+0xf6/0x210 [ 1303.476483][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.482499][T31983] [ 1303.482499][T31983] to a SOFTIRQ-irq-unsafe lock: [ 1303.489829][T31983] (tasklist_lock){.+.+}-{3:3} [ 1303.489863][T31983] [ 1303.489863][T31983] ... which became SOFTIRQ-irq-unsafe at: [ 1303.502650][T31983] ... [ 1303.502670][T31983] lock_acquire+0x120/0x360 [ 1303.510207][T31983] _raw_read_lock+0x36/0x50 [ 1303.515012][T31983] __do_wait+0xde/0x740 [ 1303.519340][T31983] do_wait+0x1f8/0x520 [ 1303.523765][T31983] kernel_wait+0xab/0x170 [ 1303.528767][T31983] call_usermodehelper_exec_work+0xbe/0x230 [ 1303.535829][T31983] process_scheduled_works+0xade/0x17a0 [ 1303.541868][T31983] worker_thread+0x8a0/0xda0 [ 1303.546650][T31983] kthread+0x711/0x8a0 [ 1303.550987][T31983] ret_from_fork+0x4b/0x80 [ 1303.555647][T31983] ret_from_fork_asm+0x1a/0x30 [ 1303.561325][T31983] [ 1303.561325][T31983] other info that might help us debug this: [ 1303.561325][T31983] [ 1303.571796][T31983] Chain exists of: [ 1303.571796][T31983] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1303.571796][T31983] [ 1303.585333][T31983] Possible interrupt unsafe locking scenario: [ 1303.585333][T31983] [ 1303.594232][T31983] CPU0 CPU1 [ 1303.599958][T31983] ---- ---- [ 1303.605821][T31983] lock(tasklist_lock); [ 1303.610512][T31983] local_irq_disable(); [ 1303.617311][T31983] lock(&dev->event_lock#2); [ 1303.624799][T31983] lock(&new->fa_lock); [ 1303.631862][T31983] [ 1303.635318][T31983] lock(&dev->event_lock#2); [ 1303.640296][T31983] [ 1303.640296][T31983] *** DEADLOCK *** [ 1303.640296][T31983] [ 1303.648576][T31983] 6 locks held by syz.5.19579/31983: [ 1303.653889][T31983] #0: ffff888029b6c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1303.663428][T31983] #1: ffff888029b6a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1303.673726][T31983] #2: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1303.683671][T31983] #3: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1303.693375][T31983] #4: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 1303.703977][T31983] #5: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1303.713162][T31983] [ 1303.713162][T31983] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1303.724588][T31983] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1303.731429][T31983] IN-SOFTIRQ-W at: [ 1303.735579][T31983] lock_acquire+0x120/0x360 [ 1303.742269][T31983] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1303.749326][T31983] input_event+0x7a/0xc0 [ 1303.755458][T31983] xpad360_process_packet+0xda/0xb30 [ 1303.762434][T31983] xpad_irq_in+0x184/0x25a0 [ 1303.768762][T31983] __usb_hcd_giveback_urb+0x417/0x690 [ 1303.776052][T31983] dummy_timer+0x862/0x4550 [ 1303.782304][T31983] __hrtimer_run_queues+0x52c/0xc60 [ 1303.789198][T31983] hrtimer_run_softirq+0x187/0x2b0 [ 1303.796247][T31983] handle_softirqs+0x283/0x870 [ 1303.802890][T31983] __irq_exit_rcu+0xca/0x1f0 [ 1303.809368][T31983] irq_exit_rcu+0x9/0x30 [ 1303.815324][T31983] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1303.822731][T31983] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1303.830398][T31983] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1303.837785][T31983] dummy_queue+0x573/0x8e0 [ 1303.843891][T31983] usb_ep_queue+0xf0/0x390 [ 1303.850155][T31983] raw_process_ep_io+0x599/0xbc0 [ 1303.856793][T31983] raw_ioctl+0x23d1/0x3c90 [ 1303.863054][T31983] __se_sys_ioctl+0xfc/0x170 [ 1303.869375][T31983] do_syscall_64+0xf6/0x210 [ 1303.875546][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.883301][T31983] INITIAL USE at: [ 1303.887330][T31983] lock_acquire+0x120/0x360 [ 1303.893460][T31983] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1303.900363][T31983] input_inject_event+0xab/0x320 [ 1303.906992][T31983] kbd_led_trigger_activate+0xbc/0x100 [ 1303.914235][T31983] led_trigger_set+0x52d/0x950 [ 1303.920975][T31983] led_trigger_set_default+0x215/0x250 [ 1303.928018][T31983] led_classdev_register_ext+0x73d/0x930 [ 1303.935220][T31983] input_leds_connect+0x517/0x790 [ 1303.941999][T31983] input_register_device+0xceb/0x10b0 [ 1303.949040][T31983] atkbd_connect+0x70e/0x9c0 [ 1303.955347][T31983] serio_driver_probe+0x7f/0xa0 [ 1303.961806][T31983] really_probe+0x26d/0x9a0 [ 1303.967919][T31983] __driver_probe_device+0x18c/0x2f0 [ 1303.975232][T31983] driver_probe_device+0x4f/0x430 [ 1303.982045][T31983] __driver_attach+0x452/0x700 [ 1303.988398][T31983] bus_for_each_dev+0x233/0x2b0 [ 1303.994903][T31983] serio_handle_event+0x1a2/0x860 [ 1304.001768][T31983] process_scheduled_works+0xade/0x17a0 [ 1304.009457][T31983] worker_thread+0x8a0/0xda0 [ 1304.015823][T31983] kthread+0x711/0x8a0 [ 1304.021491][T31983] ret_from_fork+0x4b/0x80 [ 1304.027491][T31983] ret_from_fork_asm+0x1a/0x30 [ 1304.033921][T31983] } [ 1304.036435][T31983] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1304.046003][T31983] [ 1304.046003][T31983] the dependencies between the lock to be acquired [ 1304.046013][T31983] and SOFTIRQ-irq-unsafe lock: [ 1304.059739][T31983] -> (tasklist_lock){.+.+}-{3:3} { [ 1304.065232][T31983] HARDIRQ-ON-R at: [ 1304.069397][T31983] lock_acquire+0x120/0x360 [ 1304.076179][T31983] _raw_read_lock+0x36/0x50 [ 1304.082686][T31983] __do_wait+0xde/0x740 [ 1304.088984][T31983] do_wait+0x1f8/0x520 [ 1304.095062][T31983] kernel_wait+0xab/0x170 [ 1304.101394][T31983] call_usermodehelper_exec_work+0xbe/0x230 [ 1304.109429][T31983] process_scheduled_works+0xade/0x17a0 [ 1304.117000][T31983] worker_thread+0x8a0/0xda0 [ 1304.123702][T31983] kthread+0x711/0x8a0 [ 1304.130580][T31983] ret_from_fork+0x4b/0x80 [ 1304.137020][T31983] ret_from_fork_asm+0x1a/0x30 [ 1304.143981][T31983] SOFTIRQ-ON-R at: [ 1304.148336][T31983] lock_acquire+0x120/0x360 [ 1304.155128][T31983] _raw_read_lock+0x36/0x50 [ 1304.161986][T31983] __do_wait+0xde/0x740 [ 1304.168147][T31983] do_wait+0x1f8/0x520 [ 1304.174246][T31983] kernel_wait+0xab/0x170 [ 1304.180962][T31983] call_usermodehelper_exec_work+0xbe/0x230 [ 1304.189064][T31983] process_scheduled_works+0xade/0x17a0 [ 1304.196809][T31983] worker_thread+0x8a0/0xda0 [ 1304.203407][T31983] kthread+0x711/0x8a0 [ 1304.209483][T31983] ret_from_fork+0x4b/0x80 [ 1304.215910][T31983] ret_from_fork_asm+0x1a/0x30 [ 1304.222772][T31983] INITIAL USE at: [ 1304.226940][T31983] lock_acquire+0x120/0x360 [ 1304.233463][T31983] _raw_write_lock_irq+0xa2/0xf0 [ 1304.240355][T31983] copy_process+0x21d5/0x3b80 [ 1304.247240][T31983] kernel_clone+0x224/0x7f0 [ 1304.253805][T31983] user_mode_thread+0xdd/0x140 [ 1304.260531][T31983] rest_init+0x23/0x300 [ 1304.266710][T31983] start_kernel+0x470/0x4f0 [ 1304.273221][T31983] x86_64_start_reservations+0x2a/0x30 [ 1304.280773][T31983] x86_64_start_kernel+0x66/0x70 [ 1304.287633][T31983] common_startup_64+0x13e/0x147 [ 1304.294964][T31983] INITIAL READ USE at: [ 1304.299569][T31983] lock_acquire+0x120/0x360 [ 1304.306806][T31983] _raw_read_lock+0x36/0x50 [ 1304.313850][T31983] __do_wait+0xde/0x740 [ 1304.320448][T31983] do_wait+0x1f8/0x520 [ 1304.327474][T31983] kernel_wait+0xab/0x170 [ 1304.334543][T31983] call_usermodehelper_exec_work+0xbe/0x230 [ 1304.343440][T31983] process_scheduled_works+0xade/0x17a0 [ 1304.351730][T31983] worker_thread+0x8a0/0xda0 [ 1304.359154][T31983] kthread+0x711/0x8a0 [ 1304.365942][T31983] ret_from_fork+0x4b/0x80 [ 1304.373803][T31983] ret_from_fork_asm+0x1a/0x30 [ 1304.381129][T31983] } [ 1304.383828][T31983] ... key at: [] tasklist_lock+0x18/0x40 [ 1304.391944][T31983] ... acquired at: [ 1304.396217][T31983] lock_acquire+0x120/0x360 [ 1304.401109][T31983] _raw_read_lock+0x36/0x50 [ 1304.405904][T31983] send_sigurg+0x12b/0x420 [ 1304.410596][T31983] sk_send_sigurg+0x6c/0x2e0 [ 1304.415451][T31983] queue_oob+0x3d9/0x4e0 [ 1304.420020][T31983] unix_stream_sendmsg+0xa41/0xb60 [ 1304.425777][T31983] __sock_sendmsg+0x21c/0x270 [ 1304.430844][T31983] ____sys_sendmsg+0x52d/0x830 [ 1304.435833][T31983] ___sys_sendmsg+0x21f/0x2a0 [ 1304.440715][T31983] __sys_sendmmsg+0x227/0x430 [ 1304.445592][T31983] __x64_sys_sendmmsg+0xa0/0xc0 [ 1304.450914][T31983] do_syscall_64+0xf6/0x210 [ 1304.455615][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.461795][T31983] [ 1304.464137][T31983] -> (&f_owner->lock){....}-{3:3} { [ 1304.469471][T31983] INITIAL USE at: [ 1304.473481][T31983] lock_acquire+0x120/0x360 [ 1304.479770][T31983] _raw_write_lock_irq+0xa2/0xf0 [ 1304.486584][T31983] __f_setown+0x67/0x370 [ 1304.492895][T31983] generic_setlease+0xd60/0x1240 [ 1304.500062][T31983] fcntl_setlease+0x3a2/0x4c0 [ 1304.506572][T31983] do_fcntl+0x6a0/0x1910 [ 1304.512773][T31983] __se_sys_fcntl+0xc8/0x150 [ 1304.519304][T31983] do_syscall_64+0xf6/0x210 [ 1304.525600][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.533293][T31983] INITIAL READ USE at: [ 1304.537802][T31983] lock_acquire+0x120/0x360 [ 1304.544927][T31983] _raw_read_lock_irqsave+0xaf/0x100 [ 1304.552412][T31983] send_sigio+0x38/0x370 [ 1304.559099][T31983] dnotify_handle_event+0x169/0x440 [ 1304.566501][T31983] fsnotify+0x1814/0x1a80 [ 1304.573015][T31983] vfs_readv+0x6f9/0x840 [ 1304.579461][T31983] __x64_sys_preadv+0x197/0x2a0 [ 1304.586580][T31983] do_syscall_64+0xf6/0x210 [ 1304.593290][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.601473][T31983] } [ 1304.604090][T31983] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1304.613339][T31983] ... acquired at: [ 1304.617251][T31983] lock_acquire+0x120/0x360 [ 1304.621948][T31983] _raw_read_lock_irqsave+0xaf/0x100 [ 1304.627695][T31983] send_sigio+0x38/0x370 [ 1304.632240][T31983] kill_fasync+0x24d/0x4d0 [ 1304.636854][T31983] n_tty_receive_buf_common+0x9a4/0x12f0 [ 1304.642709][T31983] tiocsti+0x239/0x2c0 [ 1304.646978][T31983] tty_ioctl+0x626/0xde0 [ 1304.651403][T31983] __se_sys_ioctl+0xfc/0x170 [ 1304.656264][T31983] do_syscall_64+0xf6/0x210 [ 1304.661038][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.667200][T31983] [ 1304.669523][T31983] -> (&new->fa_lock){....}-{3:3} { [ 1304.674671][T31983] INITIAL USE at: [ 1304.678682][T31983] lock_acquire+0x120/0x360 [ 1304.684762][T31983] _raw_write_lock_irq+0xa2/0xf0 [ 1304.691571][T31983] fasync_remove_entry+0xf1/0x1c0 [ 1304.698175][T31983] __fput+0x89f/0xa70 [ 1304.703987][T31983] task_work_run+0x1d4/0x260 [ 1304.710866][T31983] resume_user_mode_work+0x5e/0x80 [ 1304.717677][T31983] syscall_exit_to_user_mode+0x9a/0x120 [ 1304.725273][T31983] do_syscall_64+0x103/0x210 [ 1304.731752][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.739754][T31983] INITIAL READ USE at: [ 1304.744353][T31983] lock_acquire+0x120/0x360 [ 1304.751146][T31983] _raw_read_lock_irqsave+0xaf/0x100 [ 1304.758449][T31983] kill_fasync+0x199/0x4d0 [ 1304.764898][T31983] n_tty_receive_buf_common+0x9a4/0x12f0 [ 1304.772640][T31983] tiocsti+0x239/0x2c0 [ 1304.778816][T31983] tty_ioctl+0x626/0xde0 [ 1304.785432][T31983] __se_sys_ioctl+0xfc/0x170 [ 1304.792675][T31983] do_syscall_64+0xf6/0x210 [ 1304.800789][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.809474][T31983] } [ 1304.812276][T31983] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1304.821808][T31983] ... acquired at: [ 1304.826000][T31983] lock_acquire+0x120/0x360 [ 1304.831297][T31983] _raw_read_lock_irqsave+0xaf/0x100 [ 1304.837155][T31983] kill_fasync+0x199/0x4d0 [ 1304.842295][T31983] mousedev_notify_readers+0x6f1/0xc00 [ 1304.848122][T31983] mousedev_event+0x602/0x1320 [ 1304.853447][T31983] input_handle_events_default+0xd4/0x1a0 [ 1304.861073][T31983] input_pass_values+0x285/0x890 [ 1304.866381][T31983] input_event_dispose+0x330/0x6b0 [ 1304.871888][T31983] input_inject_event+0x1fe/0x320 [ 1304.877598][T31983] evdev_write+0x2fc/0x480 [ 1304.882516][T31983] vfs_write+0x27e/0xa90 [ 1304.887305][T31983] ksys_write+0x145/0x250 [ 1304.891835][T31983] do_syscall_64+0xf6/0x210 [ 1304.896737][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.902829][T31983] [ 1304.905165][T31983] [ 1304.905165][T31983] stack backtrace: [ 1304.911154][T31983] CPU: 1 UID: 0 PID: 31983 Comm: syz.5.19579 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1304.911175][T31983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1304.911184][T31983] Call Trace: [ 1304.911195][T31983] [ 1304.911204][T31983] dump_stack_lvl+0x189/0x250 [ 1304.911228][T31983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1304.911246][T31983] ? __pfx__printk+0x10/0x10 [ 1304.911271][T31983] validate_chain+0x1f05/0x2140 [ 1304.911303][T31983] __lock_acquire+0xaac/0xd20 [ 1304.911323][T31983] ? kill_fasync+0x199/0x4d0 [ 1304.911339][T31983] lock_acquire+0x120/0x360 [ 1304.911357][T31983] ? kill_fasync+0x199/0x4d0 [ 1304.911374][T31983] ? __lock_acquire+0xaac/0xd20 [ 1304.911394][T31983] _raw_read_lock_irqsave+0xaf/0x100 [ 1304.911411][T31983] ? kill_fasync+0x199/0x4d0 [ 1304.911427][T31983] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1304.911446][T31983] kill_fasync+0x199/0x4d0 [ 1304.911462][T31983] ? kill_fasync+0x53/0x4d0 [ 1304.911478][T31983] mousedev_notify_readers+0x6f1/0xc00 [ 1304.911503][T31983] ? mousedev_notify_readers+0x2c/0xc00 [ 1304.911523][T31983] mousedev_event+0x602/0x1320 [ 1304.911544][T31983] input_handle_events_default+0xd4/0x1a0 [ 1304.911560][T31983] ? input_pass_values+0x8d/0x890 [ 1304.911579][T31983] input_pass_values+0x285/0x890 [ 1304.911602][T31983] ? input_handle_event+0x70c/0xf30 [ 1304.911619][T31983] input_event_dispose+0x330/0x6b0 [ 1304.911638][T31983] input_inject_event+0x1fe/0x320 [ 1304.911661][T31983] ? input_inject_event+0xbc/0x320 [ 1304.911679][T31983] evdev_write+0x2fc/0x480 [ 1304.911693][T31983] ? __pfx_evdev_write+0x10/0x10 [ 1304.911714][T31983] ? bpf_lsm_file_permission+0x9/0x20 [ 1304.911731][T31983] ? security_file_permission+0x75/0x290 [ 1304.911748][T31983] ? rw_verify_area+0x258/0x650 [ 1304.911766][T31983] ? __pfx_evdev_write+0x10/0x10 [ 1304.911787][T31983] vfs_write+0x27e/0xa90 [ 1304.911809][T31983] ? __pfx_vfs_write+0x10/0x10 [ 1304.911828][T31983] ? __fget_files+0x2a/0x420 [ 1304.911842][T31983] ? __fget_files+0x2a/0x420 [ 1304.911854][T31983] ? __fget_files+0x3a0/0x420 [ 1304.911866][T31983] ? __fget_files+0x2a/0x420 [ 1304.911882][T31983] ksys_write+0x145/0x250 [ 1304.911900][T31983] ? rcu_is_watching+0x15/0xb0 [ 1304.911920][T31983] ? __pfx_ksys_write+0x10/0x10 [ 1304.911940][T31983] ? do_syscall_64+0xba/0x210 [ 1304.911959][T31983] do_syscall_64+0xf6/0x210 [ 1304.911977][T31983] ? clear_bhb_loop+0x60/0xb0 [ 1304.911992][T31983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.912007][T31983] RIP: 0033:0x7fe54c98e969 [ 1304.912021][T31983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.912034][T31983] RSP: 002b:00007fe54a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1304.912052][T31983] RAX: ffffffffffffffda RBX: 00007fe54cbb5fa0 RCX: 00007fe54c98e969 [ 1304.912063][T31983] RDX: 0000000000000078 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1304.912073][T31983] RBP: 00007fe54ca10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1304.912082][T31983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.912092][T31983] R13: 0000000000000000 R14: 00007fe54cbb5fa0 R15: 00007ffc38f9cf98 [ 1304.912108][T31983] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1305.651461][T27849] : (slave syz_tun): Releasing backup interface [ 1306.193102][T27133] bridge0: port 3(syz_tun) entered disabled state [ 1306.209852][T27133] syz_tun (unregistering): left allmulticast mode [ 1306.216415][T27133] syz_tun (unregistering): left promiscuous mode [ 1306.223258][T27133] bridge0: port 3(syz_tun) entered disabled state