last executing test programs: 2m59.954713923s ago: executing program 0 (id=1033): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x0, 0xa1ae, 0x2, 0x55}) 2m59.83295403s ago: executing program 0 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0xb4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2000}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 2m59.613914945s ago: executing program 0 (id=1040): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000040000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 2m59.493050861s ago: executing program 0 (id=1044): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000793000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503220581092403"], 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 2m58.063797055s ago: executing program 0 (id=1063): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m58.041818603s ago: executing program 0 (id=1064): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 2m42.965777513s ago: executing program 32 (id=1064): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 2m37.164890157s ago: executing program 2 (id=1316): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m36.090604829s ago: executing program 2 (id=1323): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x7fff, @loopback, 0x90}, 0x1c) 2m35.883505159s ago: executing program 2 (id=1327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2m35.624586548s ago: executing program 2 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 2m35.449359946s ago: executing program 2 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2m34.893762963s ago: executing program 2 (id=1337): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0x80005520, 0x0) 2m34.575403348s ago: executing program 33 (id=1337): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0x80005520, 0x0) 1m47.415160484s ago: executing program 1 (id=2035): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 1m47.258096351s ago: executing program 1 (id=2040): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "5a39ec3ec01dd69f183061721676d23442ee72690600ff0ea4eca97a59602b200faa2519606caaed6237fc19a5bff8146200", 0x39}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x300000) keyctl$revoke(0x3, r0) 1m47.12694695s ago: executing program 1 (id=2043): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000018000c80149e2180080009000000000008000a000000000028000880240007800800050000000000080006"], 0x68}}, 0x0) 1m46.921000376s ago: executing program 1 (id=2047): setuid(0xee00) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, &(0x7f00000002c0), 0x4) 1m46.808049733s ago: executing program 1 (id=2049): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 1m46.658061006s ago: executing program 1 (id=2053): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xe000, 0x1, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) 1m31.578336998s ago: executing program 34 (id=2053): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xe000, 0x1, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) 1m3.661227519s ago: executing program 4 (id=2670): io_setup(0x1, 0x0) r0 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffb}, 0x0) 1m3.415658763s ago: executing program 4 (id=2677): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0) 1m2.112927016s ago: executing program 4 (id=2696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m1.94770321s ago: executing program 4 (id=2698): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x2000, 0x0) 1m1.78369093s ago: executing program 4 (id=2702): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getcwd(0x0, 0x0) 1m1.291855653s ago: executing program 4 (id=2707): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) 1m0.958248635s ago: executing program 35 (id=2707): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) 5.08096699s ago: executing program 3 (id=3515): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) listen(r0, 0x798000) 4.123352216s ago: executing program 3 (id=3529): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 3.952629032s ago: executing program 7 (id=3532): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x46, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 3.9139904s ago: executing program 3 (id=3533): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) 3.858711041s ago: executing program 3 (id=3535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.551825345s ago: executing program 7 (id=3540): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/173, 0xad}, {0x0}], 0x2}}], 0x1, 0x40, 0x0) 3.496293494s ago: executing program 7 (id=3542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x54}}, 0x0) 3.326700266s ago: executing program 7 (id=3547): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000014c0)={0x14, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002980)={0x2c, 0x0, &(0x7f0000002840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, 0x0, 0x0, 0x0}, 0x0) 2.37811156s ago: executing program 6 (id=3564): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0xaf}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 2.292970448s ago: executing program 6 (id=3565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a01040000000000000000020000000900020073797a320000000009000100"], 0x2c}}, 0x0) 2.171714382s ago: executing program 6 (id=3567): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.153949485s ago: executing program 6 (id=3568): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setpgid(0x0, 0x0) 2.027681387s ago: executing program 3 (id=3570): r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x2000) lseek(r0, 0x0, 0x4) 1.991249428s ago: executing program 6 (id=3572): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 1.726686093s ago: executing program 6 (id=3574): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x20, 0x21, 0x7, {0x7, 0x1, "034c13494e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.643809821s ago: executing program 3 (id=3575): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0xfffffffffffffd4d, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_012={0x0, 0x0, 0x9, "d0"}]}}, 0x0}, 0x0) 542.105307ms ago: executing program 8 (id=3586): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x121800, 0x0) r1 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x0, 0x285}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x4000000000000, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 489.62516ms ago: executing program 5 (id=3587): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 395.915582ms ago: executing program 5 (id=3588): mkdir(&(0x7f0000000000)='./control\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) setresuid(0xee00, 0xee00, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 395.715034ms ago: executing program 8 (id=3589): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}, 0x9}], 0x3, 0x2000, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0xfffffffffffffcba, &(0x7f00000002c0)=[{&(0x7f0000002780)=""/4108, 0x100c}, {&(0x7f0000000200)=""/141, 0x8d}, {&(0x7f0000001480)=""/78, 0x6c}], 0x3}, 0xfff}], 0x1, 0x2100, 0x0) 364.622555ms ago: executing program 5 (id=3590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x0) 331.517217ms ago: executing program 8 (id=3591): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 273.365128ms ago: executing program 5 (id=3592): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfc}, 0x2) 199.856992ms ago: executing program 8 (id=3593): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x44}}, 0x0) 199.713587ms ago: executing program 7 (id=3594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000005000)="6dd1db989c3752f93e599ed835d7d459652a553619aefb357f1e505e91514c9bd298686b2ca98788f5d2902a5ab509c30e26a2df4351bf486a3090e7bd42a2fbe2615bcf46ff7ee71df7c45c389b333ae6b70674e5980ff15d53bf6f13f8d821bcde0191a2c03a558ee742141470df2a9d47f6bdcf8331efa0a262cb10fa8dd72070feb033cea7154ff628b217753dcb1f11dd69d06c1ada2dd49f11a06443809aff09749e0d0094bdeb5a20cb19dae930f0bb51ac4c0656df4762ff5c7617711724d34efd439e06dc9fc0f46d263abde7c3839a9835ec55c75c6ccead03dc330cf2c2420aeb20a98d32eca08eae", 0xee}, {&(0x7f0000005100)="93d8f0b1ff7d4ab83c2c6b60e06cde16b03cca5b6f3373a583f9bb273e6ad23bd0740c85891ef360863dc7386a4952d047b99f75b1d96f64e05361c09504a29431607c711b87aeae63af26c5c2563126cd7b748426afad8ead2f4864786a6dc8bf0bc98f16550a7537604134626bdf7edc1ed55c61dd4b602fe3e9fe4c452e87a98c95e9955572399d9fbb15a1e46337419c05bdd4dabda613166e5314f76e", 0x9f}, {&(0x7f00000051c0)="27581d1878e8107ca9fd31874e2097d57ec5133a1e245ee62d287c063b8738dc2abe3fbef1fcf25cc8e59d8274e526745d9fdf33de04f68b909691cf5b1787a594f0c2e91ef142a2a09390643f9925733a79a759a1511693cae4fe7dd038019b71d2e262dc08f074ef5c463e22591bf3638d3467ac2488becd8eac6d8722f56e668d9edfc893b4ca6bff035d9b51338c3870de337642d5d426c9ff655e0d15b5c3642f1f9e3dc3d174ac0423dc248fe236281a", 0xb3}], 0x3}}], 0x1, 0x0) 170.738979ms ago: executing program 5 (id=3595): r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x1ffffd, 0x10100, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x9, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0) 134.737611ms ago: executing program 8 (id=3596): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xa85}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0xffff, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 98.424188ms ago: executing program 7 (id=3597): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) recvfrom$inet(r0, &(0x7f0000000500)=""/33, 0xfffffffffffffcc0, 0x160, 0x0, 0x0) 60.950638ms ago: executing program 8 (id=3598): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 5 (id=3599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x0) kernel console output (not intermixed with test programs): 294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9395 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 172.169710][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.214399][ T29] audit: type=1326 audit(1738876534.177:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9395 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 172.235840][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.261572][ T29] audit: type=1326 audit(1738876534.177:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9395 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 172.291409][ T9394] veth3: entered promiscuous mode [ 172.316928][ T29] audit: type=1326 audit(1738876534.177:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9395 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 172.338323][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.396197][ T29] audit: type=1326 audit(1738876534.177:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9395 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 172.462032][ T25] lg-g15 0003:046D:C222.0025: unbalanced delimiter at end of report description [ 172.476556][ T25] lg-g15 0003:046D:C222.0025: probe with driver lg-g15 failed with error -22 [ 172.496029][ T29] audit: type=1326 audit(1738876534.177:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9395 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 172.517626][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.556211][ T29] audit: type=1326 audit(1738876534.177:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9395 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 172.566780][ T977] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.683037][ T25] usb 7-1: USB disconnect, device number 2 [ 172.788426][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.806777][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.834953][ T977] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 172.847200][ T5874] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.875142][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.902168][ T977] usb 4-1: config 0 descriptor?? [ 173.020849][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 173.045868][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.059137][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.102801][ T5874] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 173.123810][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.162537][ T5874] usb 2-1: config 0 descriptor?? [ 173.247459][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 173.343554][ T977] a4tech 0003:09DA:022B.0026: unknown main item tag 0x0 [ 173.357934][ T977] a4tech 0003:09DA:022B.0026: unknown main item tag 0x0 [ 173.386270][ T977] a4tech 0003:09DA:022B.0026: unknown main item tag 0x0 [ 173.415911][ T977] a4tech 0003:09DA:022B.0026: unknown main item tag 0x0 [ 173.426782][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 173.436460][ T977] a4tech 0003:09DA:022B.0026: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.3-1/input0 [ 173.450405][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.481885][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.521837][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.552569][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 173.570315][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.604201][ T5874] hid-multitouch 0003:1FD2:6007.0027: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 173.604877][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.644723][ T977] usb 4-1: USB disconnect, device number 11 [ 173.689952][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.707817][ T25] usb 5-1: Manufacturer: syz [ 173.730305][ T25] usb 5-1: config 0 descriptor?? [ 173.817419][ T5874] usb 2-1: USB disconnect, device number 15 [ 174.047109][ T25] rc_core: IR keymap rc-hauppauge not found [ 174.060430][ T25] Registered IR keymap rc-empty [ 174.068125][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.101002][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.139474][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 174.169764][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 174.202659][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.237054][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.250706][ T9469] syz.6.1493 uses obsolete (PF_INET,SOCK_PACKET) [ 174.287220][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.337406][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.358156][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.397638][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.427888][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.466811][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.489965][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.536966][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.573881][ T25] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 174.604240][ T25] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 174.647317][ T25] usb 5-1: USB disconnect, device number 16 [ 175.424105][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 175.439648][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 175.623729][ T5873] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 175.786926][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 175.812729][ T5873] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 175.845635][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.894760][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.930859][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 175.986489][ T5873] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 176.016184][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.054841][ T5873] usb 6-1: config 0 descriptor?? [ 176.213480][ T9557] netlink: 'syz.3.1524': attribute type 4 has an invalid length. [ 176.240538][ T9559] netlink: 'syz.4.1525': attribute type 46 has an invalid length. [ 176.286848][ T9557] netlink: 'syz.3.1524': attribute type 2 has an invalid length. [ 176.365890][ T9567] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.1526'. [ 176.392700][ T9561] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.1526'. [ 176.489625][ T5873] kye 0003:0458:0087.0028: report_id 0 is invalid [ 176.496111][ T5873] kye 0003:0458:0087.0028: item 0 1 1 8 parsing failed [ 176.557215][ T5873] kye 0003:0458:0087.0028: parse failed [ 176.562882][ T5873] kye 0003:0458:0087.0028: probe with driver kye failed with error -22 [ 176.653170][ T9578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.701478][ T5873] usb 6-1: USB disconnect, device number 3 [ 177.146976][ T5873] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 177.327027][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 177.335636][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.362268][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.387506][ T5873] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 177.416034][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.442126][ T5873] usb 5-1: config 0 descriptor?? [ 177.558616][ T9629] overlayfs: conflicting options: metacopy=off,verity=require [ 177.594810][ T9631] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1550'. [ 177.676777][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.860205][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.895513][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.917019][ T5873] wacom 0003:056A:00CC.0029: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.4-1/input0 [ 177.958513][ T46] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.979623][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.996721][ T46] usb 4-1: SerialNumber: syz [ 178.081452][ T9647] [U] Ù [ 178.092813][ T5873] usb 5-1: USB disconnect, device number 17 [ 178.225501][ T46] usb 4-1: 0:2 : does not exist [ 178.245890][ T46] usb 4-1: unit 20 not found! [ 178.263224][ T46] usb 4-1: unit 28 not found! [ 178.276195][ T46] usb 4-1: unit 44 not found! [ 178.313996][ T46] usb 4-1: USB disconnect, device number 12 [ 178.547101][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.033277][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1568'. [ 179.039570][ T9692] usb usb8: usbfs: process 9692 (syz.1.1570) did not claim interface 0 before use [ 179.200279][ T9698] overlayfs: workdir and upperdir must be separate subtrees [ 180.678250][ T9765] netlink: 'syz.5.1597': attribute type 4 has an invalid length. [ 181.467106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 181.487382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 181.525904][ T5873] IPVS: starting estimator thread 0... [ 181.634518][ T9794] IPVS: using max 27 ests per chain, 64800 per kthread [ 181.866977][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 182.056999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.520247][ T9826] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.1617'. [ 183.190708][ T9851] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1627'. [ 183.242224][ T9851] nbd: illegal input index 16744192 [ 183.706277][ T29] audit: type=1326 audit(1738876545.737:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9864 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 183.796735][ T29] audit: type=1326 audit(1738876545.747:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9864 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 183.876707][ T29] audit: type=1326 audit(1738876545.757:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9864 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 183.882801][ T9867] proc: Bad value for 'gid' [ 183.898108][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.910230][ T5905] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 183.941578][ T29] audit: type=1326 audit(1738876545.757:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9864 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 183.963044][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.006938][ T29] audit: type=1326 audit(1738876545.757:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9864 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 184.106835][ T5905] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.114887][ T5905] usb 6-1: config 0 has no interface number 0 [ 184.137227][ T9873] sp0: Synchronizing with TNC [ 184.147136][ T5905] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 184.166964][ T5905] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 184.187544][ T5905] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.216748][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.247905][ T5905] usb 6-1: config 0 descriptor?? [ 184.253736][ T9863] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 184.276777][ T5905] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 184.432603][ T9884] netlink: 'syz.1.1643': attribute type 9 has an invalid length. [ 184.483951][ T46] usb 6-1: USB disconnect, device number 4 [ 184.665909][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1647'. [ 185.576985][ T46] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 185.600453][ T9948] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 185.750506][ T46] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 185.773235][ T46] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 185.791854][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.802450][ T46] usb 2-1: Product: syz [ 185.808847][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 185.812402][ T46] usb 2-1: Manufacturer: syz [ 185.844720][ T46] usb 2-1: SerialNumber: syz [ 185.862023][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 186.056327][ T9968] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1671'. [ 186.075419][ T9968] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1671'. [ 186.081300][ T46] usb 2-1: selecting invalid altsetting 1 [ 186.121990][ T9971] bridge1: entered promiscuous mode [ 186.130133][ T9971] bridge1: entered allmulticast mode [ 186.282135][ T46] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 186.282181][ T46] usb 2-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 186.316774][ T46] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 186.339165][ T46] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 186.376888][ T46] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 186.389827][ T46] usb 2-1: media controller created [ 186.396089][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.514055][ T46] DVB: Unable to find symbol m88rs2000_attach() [ 186.530766][ T46] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 186.530804][ T46] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 186.602563][ T46] usb 2-1: USB disconnect, device number 16 [ 187.327031][ T5905] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 187.496817][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 187.508078][ T5905] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.529307][ T5905] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.559903][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 187.592497][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.621299][ T5905] hub 5-1:4.0: USB hub found [ 187.837568][ T5905] hub 5-1:4.0: 2 ports detected [ 187.854681][ T5905] usb 5-1: selecting invalid altsetting 1 [ 187.891179][ T5905] hub 5-1:4.0: Using single TT (err -22) [ 188.234926][T10067] sp0: Synchronizing with TNC [ 188.267650][T10066] [U] è [ 188.282127][ T5905] usb 5-1: USB disconnect, device number 18 [ 189.151678][T10113] netlink: 'syz.3.1736': attribute type 3 has an invalid length. [ 189.182168][ T5874] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 189.223311][ T5874] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 189.519967][T10131] futex_wake_op: syz.6.1745 tries to shift op by 32; fix this program [ 190.447126][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'. [ 190.503205][T10185] macvtap1: entered promiscuous mode [ 190.676915][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.846943][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 190.849757][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.849798][ T8] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 190.849821][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.857461][ T8] usb 6-1: config 0 descriptor?? [ 190.936811][ T5906] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 191.092254][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.126823][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.170602][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 191.200148][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.230324][ T5906] usb 2-1: config 0 descriptor?? [ 191.276988][ T8] lenovo 0003:17EF:60EE.002B: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0 [ 191.480758][ T5905] usb 6-1: USB disconnect, device number 5 [ 191.664456][ T5906] logitech-djreceiver 0003:046D:C71B.002C: unbalanced delimiter at end of report description [ 191.712618][ T5906] logitech-djreceiver 0003:046D:C71B.002C: logi_dj_probe: parse failed [ 191.736902][ T5906] logitech-djreceiver 0003:046D:C71B.002C: probe with driver logitech-djreceiver failed with error -22 [ 191.797061][T10246] »»»»»»XD_h3KI: renamed from lo (while UP) [ 191.873273][ T5906] usb 2-1: USB disconnect, device number 17 [ 192.181012][ T5906] kernel write not supported for file /snd/seq (pid: 5906 comm: kworker/1:6) [ 192.630961][T10286] mkiss: ax0: crc mode is auto. [ 192.987782][T10301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1814'. [ 193.295909][ T29] audit: type=1326 audit(1738876555.337:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.1.1821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42fd18cde9 code=0x0 [ 193.927729][ T5905] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 194.096855][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 194.116162][ T5905] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 194.146400][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.165743][ T5905] usb 4-1: Product: syz [ 194.171604][ T5905] usb 4-1: Manufacturer: syz [ 194.197228][ T5905] usb 4-1: SerialNumber: syz [ 194.217758][ T5905] usb 4-1: config 0 descriptor?? [ 194.227569][ T5905] gspca_main: se401-2.14.0 probing 047d:5003 [ 194.581982][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.588503][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.641716][ T5905] gspca_se401: Wrong descriptor type [ 194.844614][ T5905] usb 4-1: USB disconnect, device number 13 [ 196.537071][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 196.735182][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 196.737370][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 196.773871][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.833974][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.868477][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 196.893965][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.934299][ T8] usb 2-1: config 0 descriptor?? [ 197.046789][ T5873] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 197.249900][ T5873] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.276094][ T5873] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.309153][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.347255][ T5873] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 197.391558][ T5873] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 197.426749][ T5873] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.428771][ T8] konepure 0003:1E7D:2DB4.002D: item fetching failed at offset 3/4 [ 197.456426][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.478545][ T5873] usb 5-1: Product: syz [ 197.482961][ T8] konepure 0003:1E7D:2DB4.002D: parse failed [ 197.490226][ T8] konepure 0003:1E7D:2DB4.002D: probe with driver konepure failed with error -22 [ 197.498367][ T5873] usb 5-1: Manufacturer: syz [ 197.549161][ T5873] cdc_wdm 5-1:1.0: skipping garbage [ 197.554427][ T5873] cdc_wdm 5-1:1.0: skipping garbage [ 197.626929][ T5873] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 197.632912][ T5873] cdc_wdm 5-1:1.0: Unknown control protocol [ 197.717194][ T977] usb 2-1: USB disconnect, device number 18 [ 197.816328][ T5873] usb 5-1: USB disconnect, device number 19 [ 198.490134][T10579] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.532919][T10580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1895'. [ 198.686766][ T977] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 198.687169][ T46] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 198.846799][ T977] usb 6-1: Using ep0 maxpacket: 32 [ 198.848333][ T977] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 198.848364][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 198.848389][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 1024 [ 198.848415][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 198.848439][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 198.850259][ T977] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 198.850287][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.850305][ T977] usb 6-1: Product: syz [ 198.850321][ T977] usb 6-1: Manufacturer: syz [ 198.850335][ T977] usb 6-1: SerialNumber: syz [ 198.852441][ T977] usb 6-1: config 0 descriptor?? [ 198.854772][ T46] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 198.886844][ T46] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 199.181293][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.201547][ T46] usb 2-1: Product: syz [ 199.205763][ T46] usb 2-1: Manufacturer: syz [ 199.252478][ T46] usb 2-1: SerialNumber: syz [ 199.282179][ T977] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 199.303139][ T977] input input30: Device does not respond to id packet M [ 199.331265][ T977] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 199.355322][ T977] input input30: Device does not respond to id packet P [ 199.386792][ T977] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 199.392871][ T977] input input30: Device does not respond to id packet B [ 199.430966][ T977] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 199.458824][ T977] input input30: Device does not respond to id packet N [ 199.476256][ T977] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 199.496927][ T977] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 199.504052][ T46] usb 2-1: selecting invalid altsetting 1 [ 199.521576][ T977] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 199.532014][ T977] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 199.563081][ T977] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 199.637914][ T977] usb 6-1: USB disconnect, device number 6 [ 199.638032][ C1] iforce 6-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 199.698304][ T46] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 199.698390][ T46] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 199.800315][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'. [ 200.036772][ T5905] usb 2-1: USB disconnect, device number 19 [ 200.257105][ T5827] Bluetooth: hci1: command tx timeout [ 200.808862][ T977] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 200.998386][ T977] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 201.013569][ T977] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 201.042464][ T5874] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 201.056895][ T977] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 201.093659][ T977] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 201.137600][ T977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.166443][ T977] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 201.185708][ T977] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 201.216744][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 201.223565][ T977] usb 6-1: Product: syz [ 201.232472][ T5874] usb 4-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 201.246208][ T977] usb 6-1: Manufacturer: syz [ 201.258737][ T977] usb 6-1: SerialNumber: syz [ 201.264593][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.289549][ T977] usb 6-1: config 0 descriptor?? [ 201.311034][ T977] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 201.322306][ T5874] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 201.337777][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.345824][ T5874] usb 4-1: Product: syz [ 201.362640][ T977] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 201.409078][ T5874] usb 4-1: Manufacturer: syz [ 201.413741][ T5874] usb 4-1: SerialNumber: syz [ 201.429194][ T5874] usb 4-1: config 0 descriptor?? [ 201.574904][ T977] usb 6-1: USB disconnect, device number 7 [ 201.580889][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 201.642444][ T977] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 201.653488][ T5874] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 201.707081][ T5874] usb 4-1: USB disconnect, device number 14 [ 201.912655][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1930'. [ 202.746986][ T5905] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 202.907400][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 202.909054][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 202.911949][ T5905] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 202.911979][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 202.911999][ T5905] usb 2-1: Product: syz [ 202.912013][ T5905] usb 2-1: Manufacturer: syz [ 202.912028][ T5905] usb 2-1: SerialNumber: syz [ 202.914067][ T5905] usb 2-1: config 0 descriptor?? [ 202.915317][T10737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.144393][ T5905] usb 2-1: USB disconnect, device number 20 [ 203.167959][T10765] lo speed is unknown, defaulting to 1000 [ 203.170887][T10765] lo speed is unknown, defaulting to 1000 [ 203.179740][T10765] lo speed is unknown, defaulting to 1000 [ 203.232585][T10765] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 203.263735][T10765] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 203.322479][T10765] lo speed is unknown, defaulting to 1000 [ 203.335121][T10765] lo speed is unknown, defaulting to 1000 [ 203.342288][T10765] lo speed is unknown, defaulting to 1000 [ 203.377116][ T46] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 203.379893][T10765] lo speed is unknown, defaulting to 1000 [ 203.393588][T10765] lo speed is unknown, defaulting to 1000 [ 203.546834][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 203.565071][ T46] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 203.576740][ T46] usb 6-1: config 0 has no interface number 0 [ 203.590013][ T46] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.606715][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.640682][ T46] usb 6-1: Product: syz [ 203.652360][ T46] usb 6-1: Manufacturer: syz [ 203.664044][ T46] usb 6-1: SerialNumber: syz [ 203.673601][ T46] usb 6-1: config 0 descriptor?? [ 203.694171][ T46] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.906781][ T5873] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 203.924516][ T46] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.946967][ T46] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 204.087076][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 204.098666][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.105754][ T5873] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 204.139671][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.159370][ T5873] usb 4-1: config 0 descriptor?? [ 204.221205][T10813] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1965'. [ 204.349603][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 204.357808][ T46] usb 6-1: USB disconnect, device number 8 [ 204.386107][ T46] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 204.411301][ T46] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 204.431172][ T46] quatech2 6-1:0.51: device disconnected [ 204.435797][T10822] program syz.4.1970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.620213][ T5873] corsair-psu 0003:1B1C:1C07.002E: unexpected long global item [ 204.628762][ T5873] corsair-psu 0003:1B1C:1C07.002E: probe with driver corsair-psu failed with error -22 [ 204.802273][ T5905] usb 4-1: USB disconnect, device number 15 [ 204.935513][T10841] autofs4:pid:10841:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 205.279160][T10859] [U] ùÿ [ 205.586939][ T5873] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 205.756775][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 205.766477][ T5873] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 205.774362][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.814489][ T5873] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.838430][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.863049][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.889530][ T5873] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 205.897668][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.922474][ T5873] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.968264][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.994497][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.028096][ T5873] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 206.036794][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.065455][ T5873] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.082720][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.142963][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.152315][T10889] tipc: Bearer : already 2 bearers with priority 0 [ 206.178130][ T5873] usb 5-1: string descriptor 0 read error: -22 [ 206.184437][ T5873] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 206.198934][T10889] tipc: Enabling of bearer rejected, cannot adjust to lower [ 206.213272][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.237909][ T5873] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 206.522827][ T25] usb 5-1: USB disconnect, device number 20 [ 206.576044][T10906] netlink: 'syz.6.2010': attribute type 2 has an invalid length. [ 206.952771][ T29] audit: type=1326 audit(1738876568.997:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 206.978341][T10927] No buffer was provided with the request [ 207.011045][ T29] audit: type=1326 audit(1738876569.017:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 207.088179][ T29] audit: type=1326 audit(1738876569.027:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 207.142359][ T29] audit: type=1326 audit(1738876569.027:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 207.222750][ T29] audit: type=1326 audit(1738876569.027:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 207.263168][ T29] audit: type=1326 audit(1738876569.027:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 207.878455][ T8] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 207.896044][ T8] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 207.932345][ T8] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 207.980958][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2043'. [ 208.003991][T10977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2043'. [ 209.406821][ T5873] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 209.567558][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 209.574428][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.590327][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.611764][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.642517][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.665822][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.712160][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.733047][ T5873] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.752274][ T5873] usb 5-1: Manufacturer: syz [ 209.772551][ T5873] usb 5-1: config 0 descriptor?? [ 210.066321][ T25] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 210.098868][ T25] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.146784][ T5873] rc_core: IR keymap rc-hauppauge not found [ 210.163005][ T5873] Registered IR keymap rc-empty [ 210.173614][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.234028][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.267378][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 210.299607][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 210.345131][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.376867][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.407212][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.439381][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.486931][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.507036][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.535283][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.552592][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.567786][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.576344][T11064] pim6reg527: entered allmulticast mode [ 210.596927][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.618846][ T5873] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 210.618875][ T5873] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.625105][ T5873] usb 5-1: USB disconnect, device number 21 [ 210.846496][T11070] trusted_key: encrypted_key: key trusted:syz not found [ 211.362859][ T29] audit: type=1326 audit(1738876573.407:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 211.510131][ T29] audit: type=1326 audit(1738876573.477:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 211.531615][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.539225][ T5873] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 211.562498][ T29] audit: type=1326 audit(1738876573.477:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 211.596672][ T29] audit: type=1326 audit(1738876573.477:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11087 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 211.664306][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2104'. [ 211.725526][ T5873] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.736949][ T5873] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.773564][ T5873] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.803573][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.839988][T11082] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 211.876260][ T5873] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.161033][ T5873] usb 6-1: USB disconnect, device number 9 [ 212.419526][T11118] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2113'. [ 212.428940][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 212.588164][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 212.607829][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.635652][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.646071][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.687505][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 212.696592][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.745077][ T8] usb 5-1: config 0 descriptor?? [ 213.081205][T11136] netlink: 'syz.3.2122': attribute type 14 has an invalid length. [ 213.093517][T11136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2122'. [ 213.194168][ T8] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 213.216928][ T8] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 213.236765][ T8] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 213.251057][ T8] microsoft 0003:045E:07DA.0031: No inputs registered, leaving [ 213.263269][ T8] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 213.281342][ T8] microsoft 0003:045E:07DA.0031: no inputs found [ 213.296931][ T8] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 213.415363][ T8] usb 5-1: USB disconnect, device number 22 [ 214.001761][T11155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2130'. [ 215.357802][T11197] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2150'. [ 215.378441][T11197] netlink: 'syz.4.2150': attribute type 1 has an invalid length. [ 215.386397][T11197] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2150'. [ 215.700019][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2158'. [ 215.824438][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 215.824456][ T29] audit: type=1326 audit(1738876577.867:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11214 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0358cde9 code=0x7ffc0000 [ 215.926792][ T5906] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 215.936428][ T29] audit: type=1326 audit(1738876577.897:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11214 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fdf0358cde9 code=0x7ffc0000 [ 215.976151][ T29] audit: type=1326 audit(1738876577.897:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11214 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0358cde9 code=0x7ffc0000 [ 216.107520][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 216.123583][ T5906] usb 6-1: unable to get BOS descriptor or descriptor too short [ 216.133317][ T5906] usb 6-1: config 1 interface 0 altsetting 202 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.154745][T11226] random: crng reseeded on system resumption [ 216.164325][ T5906] usb 6-1: config 1 interface 0 has no altsetting 0 [ 216.174280][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 216.193976][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.206711][ T5906] usb 6-1: Product: syz [ 216.211008][ T5906] usb 6-1: Manufacturer: syz [ 216.228440][ T5906] usb 6-1: SerialNumber: syz [ 216.471204][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input34 [ 216.505038][ T5184] bcm5974 6-1:1.0: could not read from device [ 216.534746][ T5184] bcm5974 6-1:1.0: could not read from device [ 216.562585][ T5184] bcm5974 6-1:1.0: could not read from device [ 216.576418][ T5906] usb 6-1: USB disconnect, device number 10 [ 217.227508][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 217.388457][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.415136][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.442088][ T8] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 217.466787][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.491299][ T8] usb 5-1: config 0 descriptor?? [ 217.664406][T11259] netlink: 'syz.3.2180': attribute type 2 has an invalid length. [ 217.687933][T11259] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 217.695823][T11259] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2180'. [ 217.913981][ T8] petalynx 0003:18B1:0037.0032: item fetching failed at offset 1/5 [ 217.932998][ T8] petalynx 0003:18B1:0037.0032: parse failed [ 217.952856][ T8] petalynx 0003:18B1:0037.0032: probe with driver petalynx failed with error -22 [ 218.117513][ T5874] usb 5-1: USB disconnect, device number 23 [ 218.268550][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 218.333540][ T5874] IPVS: starting estimator thread 0... [ 218.426772][T11279] IPVS: using max 24 ests per chain, 57600 per kthread [ 218.436806][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 218.461820][ T8] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 218.476722][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 218.485069][ T8] usb 6-1: Product: syz [ 218.506726][ T8] usb 6-1: Manufacturer: syz [ 218.511366][ T8] usb 6-1: SerialNumber: syz [ 218.529235][ T8] usb 6-1: config 0 descriptor?? [ 218.539397][ T8] gspca_main: sq905-2.14.0 probing 2770:9120 [ 219.150917][ T8] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 219.172800][ T8] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 219.204489][ T8] usb 6-1: USB disconnect, device number 11 [ 219.630868][T11312] tmpfs: Cannot retroactively limit inodes [ 219.876841][ T29] audit: type=1326 audit(1738876581.907:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.3.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 219.956808][ T29] audit: type=1326 audit(1738876581.907:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.3.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 220.035472][ T29] audit: type=1326 audit(1738876581.917:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.3.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 220.096781][ T29] audit: type=1326 audit(1738876581.917:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.3.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 220.118288][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.186795][ T29] audit: type=1326 audit(1738876581.917:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.3.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 220.226934][ T29] audit: type=1326 audit(1738876581.917:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.3.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 220.297244][ T29] audit: type=1326 audit(1738876581.917:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.3.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7ffc0000 [ 220.318724][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.084502][T11371] netlink: 'syz.4.2233': attribute type 2 has an invalid length. [ 221.206718][ T5906] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 221.411869][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.447241][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.488016][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.522072][ T5906] usb 6-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 221.544140][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.578769][ T5906] usb 6-1: config 0 descriptor?? [ 222.010368][ T5906] wacom 0003:056A:00F0.0033: ignoring exceeding usage max [ 222.036959][ T5906] wacom 0003:056A:00F0.0033: hidraw0: USB HID v0.04 Device [HID 056a:00f0] on usb-dummy_hcd.5-1/input0 [ 222.215465][ T5906] usb 6-1: USB disconnect, device number 12 [ 222.578705][T11412] usb usb8: usbfs: process 11412 (syz.4.2253) did not claim interface 2 before use [ 222.878817][T11422] netlink: 'syz.3.2258': attribute type 3 has an invalid length. [ 223.660739][T11454] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.670087][T11454] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.679057][T11454] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.687854][T11454] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.284050][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.293895][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.303842][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.312096][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.320737][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.328390][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.471623][ T5824] syz-executor (5824) used greatest stack depth: 18448 bytes left [ 224.501990][T11475] lo speed is unknown, defaulting to 1000 [ 224.820714][T11475] chnl_net:caif_netlink_parms(): no params data found [ 224.897184][T11500] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2293'. [ 224.985099][T11475] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.992926][T11475] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.000903][T11475] bridge_slave_0: entered allmulticast mode [ 225.010175][T11475] bridge_slave_0: entered promiscuous mode [ 225.018123][T11475] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.025449][T11475] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.033285][T11475] bridge_slave_1: entered allmulticast mode [ 225.040465][T11475] bridge_slave_1: entered promiscuous mode [ 225.179899][T11475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.219288][T11475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.335299][T11475] team0: Port device team_slave_0 added [ 225.345467][T11475] team0: Port device team_slave_1 added [ 225.421243][T11475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.435209][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.473468][T11475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.507093][T11475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.514395][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.567117][T11475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.717922][T11475] hsr_slave_0: entered promiscuous mode [ 225.731223][T11475] hsr_slave_1: entered promiscuous mode [ 225.754032][T11475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.764667][T11475] Cannot create hsr debugfs directory [ 226.124996][T11475] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 226.141751][T11475] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 226.188145][T11475] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 226.254992][T11475] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 226.354801][T11556] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2318'. [ 226.416963][ T5833] Bluetooth: hci2: command tx timeout [ 226.491980][T11475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.615415][T11475] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.662191][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.669401][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.734575][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.741798][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.319906][T11475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.871691][T11475] veth0_vlan: entered promiscuous mode [ 227.900429][T11475] veth1_vlan: entered promiscuous mode [ 227.961438][T11475] veth0_macvtap: entered promiscuous mode [ 227.989722][T11475] veth1_macvtap: entered promiscuous mode [ 228.024168][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.037578][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.081448][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.117618][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.132641][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.143352][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.153646][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.164365][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.197588][T11475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.226403][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.257220][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.267255][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.287545][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.305004][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.327066][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.347252][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.366342][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.391265][T11475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.427990][T11475] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.454105][T11475] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.478160][T11475] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.497473][ T5827] Bluetooth: hci2: command tx timeout [ 228.503664][T11475] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.693094][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.712970][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.755077][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.787046][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.385009][ T5874] kernel write not supported for file /media0 (pid: 5874 comm: kworker/0:5) [ 229.544054][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2359'. [ 230.237625][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2374'. [ 230.576955][ T5827] Bluetooth: hci2: command 0x040f tx timeout [ 231.480952][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2390'. [ 231.496842][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 231.496871][ T29] audit: type=1326 audit(1738876593.527:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 231.576450][ T29] audit: type=1326 audit(1738876593.577:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 231.651679][ T29] audit: type=1326 audit(1738876593.577:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 231.708622][T11737] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2395'. [ 231.763719][ T29] audit: type=1326 audit(1738876593.577:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 231.846785][ T29] audit: type=1326 audit(1738876593.577:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 231.929326][ T29] audit: type=1326 audit(1738876593.577:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 231.989021][ T5906] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 231.999019][ T29] audit: type=1326 audit(1738876593.577:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 232.177125][ T5906] usb 8-1: Using ep0 maxpacket: 32 [ 232.208066][ T5906] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 232.217803][ T5906] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 232.233874][ T5906] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 232.245726][ T5906] usb 8-1: config 1 has no interface number 0 [ 232.284987][ T5906] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.301808][ T5906] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 232.316397][ T5906] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 232.334539][ T5906] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.405150][ T5906] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 232.600442][ T5906] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 232.657674][ T5833] Bluetooth: hci2: command 0x040f tx timeout [ 232.794185][T11780] team0: Device gtp0 is of different type [ 232.836949][ T5905] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 232.996773][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 233.003892][ T5905] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 233.034885][ T5905] usb 4-1: config 0 has no interface number 0 [ 233.042241][ T977] usb 8-1: USB disconnect, device number 2 [ 233.053636][ T977] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 233.062088][ T5905] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.074780][ T5905] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.090210][ T5905] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 233.104705][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 233.114300][ T5905] usb 4-1: Product: syz [ 233.125175][ T5905] usb 4-1: SerialNumber: syz [ 233.134263][ T5905] usb 4-1: config 0 descriptor?? [ 233.145516][ T5905] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 233.169337][ T5905] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input38 [ 233.387785][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.387839][ T5873] usb 4-1: USB disconnect, device number 16 [ 233.395078][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 233.427774][ T5873] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 234.224718][T11827] pim6reg: entered allmulticast mode [ 234.234150][T11827] pim6reg: left allmulticast mode [ 234.757803][ T5827] Bluetooth: hci2: command 0x040f tx timeout [ 235.539451][T11875] pimreg: entered allmulticast mode [ 236.106700][ T5906] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 236.276767][ T5906] usb 8-1: Using ep0 maxpacket: 8 [ 236.305484][ T5906] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.326754][ T5906] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 236.349205][ T5906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.374522][ T5906] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.427283][ T5906] usb 8-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 236.436378][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.456785][ T5906] usb 8-1: Product: syz [ 236.460998][ T5906] usb 8-1: Manufacturer: syz [ 236.465619][ T5906] usb 8-1: SerialNumber: syz [ 236.505662][ T5906] usb 8-1: config 0 descriptor?? [ 236.549233][ T5906] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input39 [ 236.679256][T11908] process 'syz.4.2477' launched './file0' with NULL argv: empty string added [ 236.779761][ T5906] imon:send_packet: packet tx failed (-71) [ 236.807196][ T5906] imon 8-1:0.0: panel buttons/knobs setup failed [ 236.817349][ T5833] Bluetooth: hci2: command 0x040f tx timeout [ 236.938279][ T5906] rc_core: IR keymap rc-imon-pad not found [ 236.967014][ T5906] Registered IR keymap rc-empty [ 236.996910][ T5906] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 237.016055][ T5906] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 237.030675][ T5906] imon:send_packet: packet tx failed (-71) [ 237.067647][ T5906] imon 8-1:0.0: remote input dev register failed [ 237.077493][T11917] program syz.5.2481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.084770][ T5906] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 237.247314][ T5906] imon 8-1:0.0: unable to initialize intf0, err 0 [ 237.279077][ T5906] imon:imon_probe: failed to initialize context! [ 237.326745][ T5906] imon 8-1:0.0: unable to register, err -19 [ 237.368244][ T5906] usb 8-1: USB disconnect, device number 3 [ 237.556695][ T977] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 237.726835][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 237.745978][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.796769][ T29] audit: type=1800 audit(1738876599.837:102): pid=11937 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2491" name="[kvm-gmem]" dev="anon_inodefs" ino=30959 res=0 errno=0 [ 237.818076][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.840522][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.865151][ T977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 237.895437][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.927239][ T977] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.996708][ T977] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.016210][ T977] usb 5-1: Manufacturer: syz [ 238.034702][ T977] usb 5-1: config 0 descriptor?? [ 238.441451][ T977] rc_core: IR keymap rc-hauppauge not found [ 238.457165][ T977] Registered IR keymap rc-empty [ 238.462168][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.517257][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.557891][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 238.595306][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input41 [ 238.635270][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.676846][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.703491][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.726801][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.747171][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.766864][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.816900][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.837312][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.865884][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.926753][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.959583][ T977] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.004990][ T977] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.005172][T11972] netlink: 'syz.3.2507': attribute type 9 has an invalid length. [ 239.044989][ T977] usb 5-1: USB disconnect, device number 24 [ 241.246931][ T977] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 241.408357][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 241.417786][ T977] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 241.426982][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.444685][ T977] usb 4-1: config 0 descriptor?? [ 241.452807][ T977] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 241.656938][ T977] usb 4-1: qt2_attach - failed to power on unit: -71 [ 241.671526][ T977] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 241.708175][ T977] usb 4-1: USB disconnect, device number 17 [ 241.766555][T12056] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.350157][T12117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2571'. [ 243.512445][T12120] IPVS: length: 131 != 8 [ 244.276913][ T977] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 244.424483][ T29] audit: type=1326 audit(1738876606.467:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12135 comm="syz.5.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 244.446089][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.452975][ T29] audit: type=1326 audit(1738876606.467:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12135 comm="syz.5.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 244.487702][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 244.553260][ T977] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=64.02 [ 244.562737][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.581677][ T977] usb 4-1: Product: syz [ 244.585897][ T977] usb 4-1: Manufacturer: syz [ 244.602497][ T977] usb 4-1: SerialNumber: syz [ 244.618770][ T977] usb 4-1: config 0 descriptor?? [ 244.833008][ T977] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 244.878133][ T977] usb 4-1: USB disconnect, device number 18 [ 245.130519][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.309513][ T5873] hid-generic 0000:0003:0000.0034: unknown main item tag 0x0 [ 245.322694][ T5873] hid-generic 0000:0003:0000.0034: unknown main item tag 0x0 [ 245.335836][ T5873] hid-generic 0000:0003:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz1 [ 245.353572][T12176] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2596'. [ 246.233841][T12196] lo speed is unknown, defaulting to 1000 [ 246.716834][ T977] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 246.906692][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 246.937277][ T977] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 246.955717][ T977] usb 4-1: config 0 has no interface number 0 [ 247.006207][ T977] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.018046][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.026140][ T977] usb 4-1: Product: syz [ 247.062452][ T977] usb 4-1: Manufacturer: syz [ 247.079239][ T977] usb 4-1: SerialNumber: syz [ 247.103519][ T977] usb 4-1: config 0 descriptor?? [ 247.136340][ T977] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.274895][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2620'. [ 247.697490][ C0] usb-serial ttyUSB0: qt2_process_read_urb - unsupported command 99 [ 247.717342][ T977] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 247.747012][ T977] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 247.909639][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 247.924783][ T977] usb 4-1: USB disconnect, device number 19 [ 247.937009][ T5873] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 247.948501][ T977] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 247.992309][ T977] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 248.011962][ T977] quatech2 4-1:0.51: device disconnected [ 248.157872][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 248.160273][T12264] netlink: 'syz.7.2633': attribute type 11 has an invalid length. [ 248.165630][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.171737][T12264] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2633'. [ 248.215712][ T5873] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 248.245066][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.268773][ T5873] usb 6-1: config 0 descriptor?? [ 248.524720][T12271] batman_adv: batadv0: Adding interface: vlan0 [ 248.535320][T12271] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.560528][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.573288][T12271] batman_adv: batadv0: Interface activated: vlan0 [ 248.704789][ T5873] mcp2221 0003:04D8:00DD.0035: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 249.120919][ T977] usb 6-1: USB disconnect, device number 13 [ 249.536342][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 250.290856][T12327] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 250.315126][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'. [ 250.858148][T12285] kexec: Could not allocate control_code_buffer [ 251.626946][T12362] tap0: tun_chr_ioctl cmd 1074025673 [ 252.087231][T12382] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2682'. [ 252.282305][T12390] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2686'. [ 252.312308][T12390] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2686'. [ 254.543155][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.555036][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.564578][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.582573][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.592739][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.601894][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.689886][T12450] lo speed is unknown, defaulting to 1000 [ 254.929314][T12463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.052013][T12463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.107453][T12450] chnl_net:caif_netlink_parms(): no params data found [ 255.237770][ T29] audit: type=1326 audit(1738876617.277:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12445 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6958cde9 code=0x7fc00000 [ 255.259382][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.384238][T12450] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.415002][T12450] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.422569][T12450] bridge_slave_0: entered allmulticast mode [ 255.430172][T12450] bridge_slave_0: entered promiscuous mode [ 255.456513][T12450] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.475957][T12450] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.483607][T12450] bridge_slave_1: entered allmulticast mode [ 255.496165][T12450] bridge_slave_1: entered promiscuous mode [ 255.589930][T12450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.625691][T12450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.704315][T12450] team0: Port device team_slave_0 added [ 255.728197][T12450] team0: Port device team_slave_1 added [ 255.827076][T12450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.834081][T12450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.926954][T12450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.005553][T12450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.023824][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.030390][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.043572][T12450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.096460][T12494] trusted_key: syz.3.2731 sent an empty control message without MSG_MORE. [ 256.102686][T12450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.252866][T12450] hsr_slave_0: entered promiscuous mode [ 256.282708][T12450] hsr_slave_1: entered promiscuous mode [ 256.300228][T12450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.320209][T12450] Cannot create hsr debugfs directory [ 256.613131][T12450] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.630314][T12450] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.658451][ T5833] Bluetooth: hci0: command tx timeout [ 256.689771][T12450] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.703437][T12450] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.808833][T12450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.835880][T12450] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.862318][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.869605][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.933068][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.940264][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.343159][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2743'. [ 257.458307][T12450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.023253][T12450] veth0_vlan: entered promiscuous mode [ 258.054725][T12450] veth1_vlan: entered promiscuous mode [ 258.131143][T12450] veth0_macvtap: entered promiscuous mode [ 258.168661][T12450] veth1_macvtap: entered promiscuous mode [ 258.205359][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.223755][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.256854][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.273223][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.295583][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.315837][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.336928][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.354640][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.368303][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.380615][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.408003][T12450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.430141][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.457031][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.476831][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.506705][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.519916][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.536289][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.556695][T12450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.577526][T12450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.589088][T12450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.672192][T12450] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.717097][T12450] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.737196][ T5833] Bluetooth: hci0: command tx timeout [ 258.755139][T12450] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.774660][T12450] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.999877][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.022858][ T5905] IPVS: starting estimator thread 0... [ 259.057650][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.157533][T12581] IPVS: using max 26 ests per chain, 62400 per kthread [ 259.194802][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.218933][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.237331][T12587] sctp: [Deprecated]: syz.7.2768 (pid 12587) Use of int in maxseg socket option. [ 259.237331][T12587] Use struct sctp_assoc_value instead [ 260.039007][T12620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input42 [ 260.251509][T12625] bond0: entered promiscuous mode [ 260.263146][T12625] bond_slave_0: entered promiscuous mode [ 260.269840][T12625] bond_slave_1: entered promiscuous mode [ 260.278273][T12625] bond0: left promiscuous mode [ 260.283825][T12625] bond_slave_0: left promiscuous mode [ 260.295091][T12625] bond_slave_1: left promiscuous mode [ 260.533600][T12631] kvm: kvm [12630]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 260.782590][T12644] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 260.816983][ T5833] Bluetooth: hci0: command tx timeout [ 261.516812][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 261.686857][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 261.708549][ T25] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.734354][T12665] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2801'. [ 261.737801][ T25] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.777637][ T25] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.797931][ T25] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.816056][ T25] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.846551][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.089365][ T25] usb 9-1: GET_CAPABILITIES returned 0 [ 262.094980][ T25] usbtmc 9-1:16.0: can't read capabilities [ 262.198531][T12678] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2807'. [ 262.325012][ T5873] usb 9-1: USB disconnect, device number 2 [ 262.532878][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 262.697007][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 262.720807][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.736833][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.751801][ T25] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 262.761921][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.789456][ T25] usb 4-1: config 0 descriptor?? [ 262.897222][ T5833] Bluetooth: hci0: command tx timeout [ 263.244715][ T25] bigben 0003:146B:0902.0036: unexpected rdesc, please submit for review [ 263.284494][ T25] bigben 0003:146B:0902.0036: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 263.297673][ T25] bigben 0003:146B:0902.0036: missing HID_OUTPUT_REPORT 0 [ 263.304839][ T25] bigben 0003:146B:0902.0036: no output report found [ 263.452547][ T25] usb 4-1: USB disconnect, device number 20 [ 263.644259][T12720] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2827'. [ 264.367652][ T977] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 264.526933][ T977] usb 6-1: Using ep0 maxpacket: 8 [ 264.534099][ T977] usb 6-1: config 0 has no interfaces? [ 264.555565][ T977] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 264.578436][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.592903][ T977] usb 6-1: Product: syz [ 264.604994][ T977] usb 6-1: Manufacturer: syz [ 264.615109][ T977] usb 6-1: SerialNumber: syz [ 264.629096][ T977] usb 6-1: config 0 descriptor?? [ 264.877655][ T25] usb 6-1: USB disconnect, device number 14 [ 265.971284][T12801] tun0: tun_chr_ioctl cmd 2147767506 [ 268.334036][T12901] vlan0: entered promiscuous mode [ 268.339708][T12901] vlan0: entered allmulticast mode [ 268.666850][ T977] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 268.826866][ T977] usb 9-1: Using ep0 maxpacket: 16 [ 268.840595][ T977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.851693][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.863414][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.873665][ T977] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 268.886193][ T977] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.924928][ T977] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 268.947459][ T977] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.966317][ T977] usb 9-1: Manufacturer: syz [ 268.976154][ T977] usb 9-1: config 0 descriptor?? [ 269.277434][ T977] rc_core: IR keymap rc-hauppauge not found [ 269.283387][ T977] Registered IR keymap rc-empty [ 269.295921][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.316853][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.337571][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 269.377501][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input43 [ 269.409120][T12933] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2920'. [ 269.422663][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.432143][ C0] mceusb 9-1:0.0: long-range (0xfc) receiver active [ 269.467252][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.486840][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.506819][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.546898][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.576963][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.617098][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.636849][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.656858][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.677201][ T977] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 269.721391][ T977] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 269.743289][ T977] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0xfc active) [ 269.779680][ T977] usb 9-1: USB disconnect, device number 3 [ 271.383825][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.393734][T12981] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.422703][T12984] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2944'. [ 271.574292][T12988] netlink: 'syz.8.2945': attribute type 8 has an invalid length. [ 271.927288][T13001] ?: renamed from vlan0 (while UP) [ 273.260226][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2983'. [ 273.277301][T13065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.403717][T13074] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 274.081920][T13090] lo speed is unknown, defaulting to 1000 [ 274.209123][T13098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2998'. [ 274.480574][T13112] program syz.3.3004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.084778][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 275.376778][T13149] vlan2: entered promiscuous mode [ 275.381863][T13149] vlan2: entered allmulticast mode [ 275.398222][T13149] syz_tun: entered allmulticast mode [ 275.404019][T13149] syz_tun: entered promiscuous mode [ 275.420103][T13149] team0: Port device vlan2 added [ 276.048059][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3027'. [ 276.433617][T13180] CUSE: unknown device info "" [ 276.449136][T13180] CUSE: unknown device info "" [ 276.481158][T13180] CUSE: unknown device info "," [ 276.486064][T13180] CUSE: unknown device info "@" [ 276.535494][T13180] CUSE: unknown device info "(" [ 276.570007][T13180] CUSE: DEVNAME unspecified [ 276.932350][T13201] nbd: socks must be embedded in a SOCK_ITEM attr [ 277.589210][ T46] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 277.653899][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3059'. [ 277.770249][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.791366][ T46] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 277.836739][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.871060][ T46] usb 6-1: config 0 descriptor?? [ 278.517075][ T46] razer 0003:1532:010E.0037: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 278.517811][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3071'. [ 278.580364][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 278.721301][ T58] usb 6-1: USB disconnect, device number 15 [ 279.252266][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'. [ 279.395401][ T29] audit: type=1326 audit(1738876641.437:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.7.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd218cde9 code=0x7ffc0000 [ 279.446810][ T29] audit: type=1326 audit(1738876641.437:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.7.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd218cde9 code=0x7ffc0000 [ 279.493178][ T29] audit: type=1326 audit(1738876641.437:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.7.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6bd218cde9 code=0x7ffc0000 [ 279.525942][ T29] audit: type=1326 audit(1738876641.437:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.7.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd218cde9 code=0x7ffc0000 [ 279.552126][ T29] audit: type=1326 audit(1738876641.437:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.7.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd218cde9 code=0x7ffc0000 [ 279.574670][ T29] audit: type=1326 audit(1738876641.437:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.7.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f6bd218cde9 code=0x7ffc0000 [ 279.598283][ T29] audit: type=1326 audit(1738876641.437:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.7.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd218cde9 code=0x7ffc0000 [ 279.632619][ T29] audit: type=1326 audit(1738876641.467:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.7.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd218cde9 code=0x7ffc0000 [ 280.030554][T13321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.667962][ T5873] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 280.816972][ T5873] usb 9-1: Using ep0 maxpacket: 32 [ 280.848903][ T5873] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 280.860098][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.871079][ T5873] usb 9-1: Product: syz [ 280.875284][ T5873] usb 9-1: Manufacturer: syz [ 280.885771][ T5873] usb 9-1: SerialNumber: syz [ 280.897798][ T5873] usb 9-1: config 0 descriptor?? [ 280.913384][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3111'. [ 280.942244][T13352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3111'. [ 281.272015][T13362] program syz.3.3116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.450071][T13372] pim6reg: left allmulticast mode [ 281.522472][ T5873] peak_usb 9-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 281.541574][ T5873] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 281.556298][ T5873] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 281.637455][ T5873] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22 [ 281.751093][T13376] can0: slcan on ttyS3. [ 281.773627][ T5905] usb 9-1: USB disconnect, device number 4 [ 281.817862][T13376] can0 (unregistered): slcan off ttyS3. [ 281.824006][T13376] Falling back ldisc for ttyS3. [ 282.660057][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3136'. [ 282.693598][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3136'. [ 283.081344][T13426] Bluetooth: MGMT ver 1.23 [ 283.746830][ T29] audit: type=1326 audit(1738876645.787:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13448 comm="syz.6.3155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf0358cde9 code=0x0 [ 284.248689][T13466] netlink: 'syz.7.3163': attribute type 18 has an invalid length. [ 284.287618][T13466] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.296441][T13466] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.305550][T13466] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.314665][T13466] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.444825][T13474] sctp: [Deprecated]: syz.8.3166 (pid 13474) Use of int in max_burst socket option deprecated. [ 284.444825][T13474] Use struct sctp_assoc_value instead [ 285.463652][T13512] vlan2: entered allmulticast mode [ 285.479146][T13512] bridge0: entered allmulticast mode [ 285.498348][T13512] bridge0: port 3(vlan2) entered blocking state [ 285.510616][T13512] bridge0: port 3(vlan2) entered disabled state [ 285.558895][T13512] bridge0: left allmulticast mode [ 286.561686][T13544] netlink: 'syz.5.3199': attribute type 11 has an invalid length. [ 286.864404][ T5873] kernel read not supported for file /video7 (pid: 5873 comm: kworker/1:4) [ 287.055914][T13566] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3207'. [ 287.213580][ T5873] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 287.368583][ T5873] usb 9-1: Using ep0 maxpacket: 16 [ 287.378041][ T5873] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 287.388473][ T5873] usb 9-1: config 0 has no interface number 0 [ 287.394745][ T5873] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 287.411474][ T5873] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 287.423296][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.431970][ T5873] usb 9-1: Product: syz [ 287.436355][ T5873] usb 9-1: Manufacturer: syz [ 287.441456][ T5873] usb 9-1: SerialNumber: syz [ 287.450045][ T5873] usb 9-1: config 0 descriptor?? [ 287.965647][T13587] netlink: 'syz.3.3216': attribute type 21 has an invalid length. [ 287.973887][T13587] netlink: 'syz.3.3216': attribute type 6 has an invalid length. [ 287.984199][T13587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3216'. [ 287.995898][T13587] netlink: 'syz.3.3216': attribute type 21 has an invalid length. [ 288.004087][T13587] netlink: 'syz.3.3216': attribute type 6 has an invalid length. [ 288.034562][T13587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3216'. [ 288.078562][ T5873] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.214/input/input44 [ 288.297803][ T5873] usb 9-1: USB disconnect, device number 5 [ 288.697365][ T977] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 288.789118][T13612] macvtap1: entered promiscuous mode [ 288.796663][T13612] batadv0: entered promiscuous mode [ 288.817407][T13612] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 288.824889][T13612] team0: Device macvtap1 failed to register rx_handler [ 288.846131][T13612] batadv0: left promiscuous mode [ 288.855339][ T977] usb 4-1: config 1 has an invalid descriptor of length 25, skipping remainder of the config [ 288.868056][ T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.879578][ T977] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 288.891723][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.903030][ T977] usb 4-1: SerialNumber: syz [ 289.095722][T13618] lo speed is unknown, defaulting to 1000 [ 289.121675][T13620] syz.7.3232 (13620): /proc/13619/oom_adj is deprecated, please use /proc/13619/oom_score_adj instead. [ 289.124010][ T977] usb 4-1: 0:2 : does not exist [ 289.159801][ T977] usb 4-1: USB disconnect, device number 21 [ 289.297205][ T5827] Bluetooth: hci0: command tx timeout [ 289.425209][T13630] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3236'. [ 289.434818][T13630] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3236'. [ 289.467294][ T5873] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 289.626764][ T5873] usb 9-1: Using ep0 maxpacket: 8 [ 289.643873][ T5873] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 289.665858][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.684920][ T5873] usb 9-1: Product: syz [ 289.695044][ T5873] usb 9-1: Manufacturer: syz [ 289.705168][ T5873] usb 9-1: SerialNumber: syz [ 289.713741][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3231'. [ 289.727827][ T5873] usb 9-1: config 0 descriptor?? [ 289.806538][T13618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.948326][ T5873] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 290.549268][ T5873] gspca_sunplus: reg_w_riv err -71 [ 290.554513][ T5873] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 290.589845][ T5873] usb 9-1: USB disconnect, device number 6 [ 290.782932][ T9007] syz_tun: left allmulticast mode [ 290.801748][ T9007] syz_tun: left promiscuous mode [ 290.889617][ T9007] team0: Port device vlan2 removed [ 291.092341][ T1172] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.258325][ T1172] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.366473][ T1172] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.518444][ T1172] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.853094][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.869401][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.883525][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.920853][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.920966][ T1172] bridge_slave_1: left allmulticast mode [ 291.939841][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.952687][ T1172] bridge_slave_1: left promiscuous mode [ 291.956900][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.998787][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.062426][ T1172] bridge_slave_0: left allmulticast mode [ 292.073313][ T1172] bridge_slave_0: left promiscuous mode [ 292.083933][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.703535][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.718980][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.729247][ T1172] bond0 (unregistering): Released all slaves [ 292.787964][T13706] lo speed is unknown, defaulting to 1000 [ 292.840900][ T46] kernel write not supported for file /amidi2 (pid: 46 comm: kworker/1:1) [ 293.111967][T13706] chnl_net:caif_netlink_parms(): no params data found [ 293.332028][ T1172] hsr_slave_0: left promiscuous mode [ 293.343052][ T1172] hsr_slave_1: left promiscuous mode [ 293.349974][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.358760][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.367763][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.375836][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.427812][ T1172] veth1_macvtap: left promiscuous mode [ 293.433393][ T1172] veth0_macvtap: left promiscuous mode [ 293.442393][ T1172] veth1_vlan: left promiscuous mode [ 293.466696][ T1172] veth0_vlan: left promiscuous mode [ 293.859516][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 293.876889][ T5827] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 294.017029][ T5827] Bluetooth: hci5: command tx timeout [ 294.323206][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 294.503559][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 294.526729][ T5905] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.545173][ T5905] usb 4-1: config 0 has no interface number 0 [ 294.555523][ T5905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.575741][ T5905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.606757][ T5905] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 294.624622][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.639422][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 294.643690][ T5905] usb 4-1: config 0 descriptor?? [ 294.780373][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 294.807043][ T29] audit: type=1326 audit(1738876656.851:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 294.844356][ T29] audit: type=1326 audit(1738876656.861:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 294.884501][ T29] audit: type=1326 audit(1738876656.891:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 294.906158][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.914905][ T29] audit: type=1326 audit(1738876656.891:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 294.937380][ T29] audit: type=1326 audit(1738876656.891:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 294.958927][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.967921][ T29] audit: type=1326 audit(1738876656.891:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 294.989484][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.014407][ T29] audit: type=1326 audit(1738876656.891:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 295.036861][ T29] audit: type=1326 audit(1738876656.891:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 295.058416][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.066111][ T29] audit: type=1326 audit(1738876656.891:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8cde9 code=0x7ffc0000 [ 295.324906][ T5905] uclogic 0003:28BD:0094.0038: pen parameters not found [ 295.333130][ T5905] uclogic 0003:28BD:0094.0038: interface is invalid, ignoring [ 295.533994][ T5873] usb 4-1: USB disconnect, device number 22 [ 295.818927][T13706] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.832709][T13706] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.840437][T13706] bridge_slave_0: entered allmulticast mode [ 295.848242][T13706] bridge_slave_0: entered promiscuous mode [ 295.866031][T13706] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.877850][T13706] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.896873][T13706] bridge_slave_1: entered allmulticast mode [ 295.914196][T13706] bridge_slave_1: entered promiscuous mode [ 295.997862][T13706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.010470][T13706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.098393][ T5827] Bluetooth: hci5: command tx timeout [ 296.153865][T13706] team0: Port device team_slave_0 added [ 296.172075][T13706] team0: Port device team_slave_1 added [ 296.338709][T13706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.365309][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.419242][T13706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.440061][T13706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.456781][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.495994][T13706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.583886][T13706] hsr_slave_0: entered promiscuous mode [ 296.590987][T13706] hsr_slave_1: entered promiscuous mode [ 296.609911][T13706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.622102][T13706] Cannot create hsr debugfs directory [ 296.866689][ T5873] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 297.016827][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 297.026246][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.040580][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.051392][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 297.060744][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.076241][ T5873] usb 4-1: config 0 descriptor?? [ 297.086470][ T5873] hub 4-1:0.0: USB hub found [ 297.196984][ T46] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 297.285250][ T5873] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 297.356773][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 297.370526][T13706] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 297.386093][ T46] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 297.386142][ T46] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.386167][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.386217][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.388599][ T46] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 297.388626][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.388646][ T46] usb 6-1: Product: syz [ 297.388686][ T46] usb 6-1: Manufacturer: syz [ 297.388701][ T46] usb 6-1: SerialNumber: syz [ 297.391847][ T46] usb 6-1: config 0 descriptor?? [ 297.392576][T13822] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 297.397148][T13706] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 297.488215][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 297.511806][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.557711][T13706] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 297.575654][ T5873] usb 4-1: USB disconnect, device number 23 [ 297.599929][ T46] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 297.622341][T13706] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 297.636827][ T46] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input45 [ 297.800557][T13706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.851672][T13706] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.873322][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.880517][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.977487][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.984645][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.033743][ C1] powermate: config urb returned -71 [ 298.039993][ C1] powermate: config urb returned -71 [ 298.046251][ C1] powermate: config urb returned -71 [ 298.052064][ T5873] usb 6-1: USB disconnect, device number 16 [ 298.058207][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 298.143166][T13842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.176889][ T5827] Bluetooth: hci5: command tx timeout [ 298.451757][T13706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.994067][T13706] veth0_vlan: entered promiscuous mode [ 299.018641][T13706] veth1_vlan: entered promiscuous mode [ 299.086462][T13706] veth0_macvtap: entered promiscuous mode [ 299.121334][T13706] veth1_macvtap: entered promiscuous mode [ 299.174362][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.202787][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.220793][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.235091][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.250015][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.266338][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.276537][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.289084][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.300330][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.311035][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.322497][T13706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.351006][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.361942][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.372620][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.383912][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.416687][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.428543][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.439663][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.450975][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.467020][ T5873] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 299.470809][T13706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.493219][T13706] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.506221][T13706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.515463][T13706] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.524713][T13706] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.627257][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 299.642740][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.669781][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.675323][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 299.697545][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.702202][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 299.740902][ T5873] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 299.753947][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.770109][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.777299][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.812937][ T5873] usb 6-1: config 0 descriptor?? [ 299.825903][T13881] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 299.837442][ T5873] hub 6-1:0.0: USB hub found [ 300.043928][T13900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.054227][ T5873] hub 6-1:0.0: config failed, hub has too many ports! (err -19) [ 300.258875][ T5873] usbhid 6-1:0.0: can't add hid device: -71 [ 300.262442][ T5827] Bluetooth: hci5: command tx timeout [ 300.264895][ T5873] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 300.409032][ T5873] usb 6-1: USB disconnect, device number 17 [ 302.413579][T14002] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3404'. [ 302.931652][T14024] tun0: tun_chr_ioctl cmd 1074812118 [ 303.298716][ T5833] Bluetooth: hci5: command 0x0405 tx timeout [ 303.651820][T14057] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 303.743868][T14063] sctp: [Deprecated]: syz.5.3431 (pid 14063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.743868][T14063] Use struct sctp_sack_info instead [ 304.066874][ T46] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 304.236665][ T46] usb 9-1: Using ep0 maxpacket: 16 [ 304.243581][ T46] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.270355][ T46] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.287048][ T46] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.300058][ T46] usb 9-1: config 0 interface 0 has no altsetting 0 [ 304.307242][ T46] usb 9-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 304.321875][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.334591][ T46] usb 9-1: config 0 descriptor?? [ 304.779024][ T46] hid-generic 0003:045E:05DA.0039: unknown main item tag 0x0 [ 304.786486][ T46] hid-generic 0003:045E:05DA.0039: unknown main item tag 0x0 [ 304.811823][ T46] hid-generic 0003:045E:05DA.0039: unknown main item tag 0x0 [ 304.841483][ T46] hid-generic 0003:045E:05DA.0039: ignoring exceeding usage max [ 304.857528][ T46] hid-generic 0003:045E:05DA.0039: ignoring exceeding usage max [ 304.876037][ T46] hid-generic 0003:045E:05DA.0039: unknown main item tag 0xe [ 304.894102][ T46] hid-generic 0003:045E:05DA.0039: unbalanced collection at end of report description [ 304.915549][ T46] hid-generic 0003:045E:05DA.0039: probe with driver hid-generic failed with error -22 [ 305.035776][ T46] usb 9-1: USB disconnect, device number 7 [ 305.541687][ T29] audit: type=1326 audit(1738876667.581:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.582583][ T29] audit: type=1326 audit(1738876667.581:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.613324][ T29] audit: type=1326 audit(1738876667.581:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.674007][ T29] audit: type=1326 audit(1738876667.591:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.756890][ T29] audit: type=1326 audit(1738876667.591:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.806366][ T29] audit: type=1326 audit(1738876667.591:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.870138][ T29] audit: type=1326 audit(1738876667.591:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.892022][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.924149][ T29] audit: type=1326 audit(1738876667.591:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.958639][T14112] Bluetooth: hci4: Frame reassembly failed (-84) [ 305.968132][ T29] audit: type=1326 audit(1738876667.591:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 305.989890][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.997373][ T1172] Bluetooth: hci4: Frame reassembly failed (-84) [ 306.008157][ T29] audit: type=1326 audit(1738876667.591:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14094 comm="syz.6.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ab18cde9 code=0x7ffc0000 [ 306.107099][ T46] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 306.286925][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 306.298360][ T46] usb 9-1: unable to get BOS descriptor or descriptor too short [ 306.315127][ T46] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 306.327180][ T46] usb 9-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.348215][ T46] usb 9-1: config 1 interface 0 has no altsetting 0 [ 306.362861][ T46] usb 9-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 306.374712][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.387917][ T46] usb 9-1: Product: syz [ 306.392198][ T46] usb 9-1: Manufacturer: syz [ 306.400121][ T46] usb 9-1: SerialNumber: syz [ 306.410710][T14108] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 306.631030][ T46] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input47 [ 307.314541][T14151] dvmrp5: entered allmulticast mode [ 307.323520][T14151] pimreg: left allmulticast mode [ 307.403185][T14150] dvmrp5: left allmulticast mode [ 308.016792][ T5827] Bluetooth: hci4: command 0x1003 tx timeout [ 308.023450][ T5833] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 308.140668][T14179] syz.3.3484 (14179) used greatest stack depth: 15608 bytes left [ 308.225616][T14186] lo speed is unknown, defaulting to 1000 [ 308.753311][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3487'. [ 308.804299][T14186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.879227][ T58] usb 9-1: USB disconnect, device number 8 [ 309.143350][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3496'. [ 309.166910][T14216] tmpfs: Unexpected value for 'usrquota' [ 309.811882][T14244] vxcan1: tx address claim with dlc 1 [ 310.986890][ T5906] kernel write not supported for file /56/timerslack_ns (pid: 5906 comm: kworker/1:6) [ 310.987747][ T977] kernel write not supported for file /input/mice (pid: 977 comm: kworker/0:3) [ 311.203017][T14299] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3532'. [ 311.246371][T14302] PKCS7: Unknown OID: [5] 0.0 [ 311.266099][T14302] PKCS7: Only support pkcs7_signedData type [ 311.426739][ T58] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 311.553903][T14315] netlink: 'syz.7.3542': attribute type 1 has an invalid length. [ 311.561802][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3542'. [ 311.608429][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.630871][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.666683][ T58] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 311.675804][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.726449][ T58] usb 4-1: config 0 descriptor?? [ 312.155330][ T58] corsair 0003:1B1C:1B3E.003A: unknown main item tag 0x0 [ 312.162612][ T58] corsair 0003:1B1C:1B3E.003A: unknown main item tag 0x0 [ 312.186751][ T58] corsair 0003:1B1C:1B3E.003A: item fetching failed at offset 2/5 [ 312.203996][ T58] corsair 0003:1B1C:1B3E.003A: parse failed [ 312.211165][ T58] corsair 0003:1B1C:1B3E.003A: probe with driver corsair failed with error -22 [ 312.355412][ T58] usb 4-1: USB disconnect, device number 24 [ 312.376720][ T5906] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 312.392363][T14349] netlink: 'syz.5.3559': attribute type 39 has an invalid length. [ 312.558455][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.577618][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.594452][ T5906] usb 9-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 312.616629][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.638676][ T5906] usb 9-1: config 0 descriptor?? [ 312.918977][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 312.918994][ T29] audit: type=1400 audit(1738876674.971:135): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=14367 comm="syz.6.3568" opid=14367 ocomm="syz.6.3568" [ 313.075804][ T5906] wacom 0003:056A:0031.003B: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.8-1/input0 [ 313.291989][ T46] usb 9-1: USB disconnect, device number 9 [ 313.586797][ T5906] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 313.758550][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.769735][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.786721][ T5906] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 313.795795][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.815460][ T5906] usb 4-1: config 0 descriptor?? [ 314.049104][T14399] hsr_slave_0: left promiscuous mode [ 314.055329][T14399] hsr_slave_1: left promiscuous mode [ 314.236097][ T5906] aquacomputer_d5next 0003:0C70:F011.003C: unknown main item tag 0xd [ 314.247526][ T5906] aquacomputer_d5next 0003:0C70:F011.003C: hidraw0: USB HID v0.01 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 314.329047][T14403] bridge_slave_0: invalid flags given to default FDB implementation [ 314.438382][ T5906] usb 4-1: USB disconnect, device number 25 [ 314.993253][T14433] sp0: Synchronizing with TNC [ 315.008908][ T63] [ 315.011265][ T63] ===================================================== [ 315.018201][ T63] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 315.025650][ T63] 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 Not tainted [ 315.032741][ T63] ----------------------------------------------------- [ 315.039653][ T63] kworker/u8:4/63 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 315.047260][ T63] ffffffff8f4a7b18 (disc_data_lock#3){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x440 [ 315.056914][ T63] [ 315.056914][ T63] and this task is already holding: [ 315.064254][ T63] ffffffff9a710958 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 315.072928][ T63] which would create a new lock dependency: [ 315.078804][ T63] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.+.+}-{3:3} [ 315.086633][ T63] [ 315.086633][ T63] but this new dependency connects a HARDIRQ-irq-safe lock: [ 315.096081][ T63] (&port_lock_key){-.-.}-{3:3} [ 315.096104][ T63] [ 315.096104][ T63] ... which became HARDIRQ-irq-safe at: [ 315.108611][ T63] lock_acquire+0x1ed/0x550 [ 315.113207][ T63] _raw_spin_lock_irqsave+0xd5/0x120 [ 315.118558][ T63] serial8250_handle_irq+0x6d/0xb80 [ 315.123821][ T63] serial8250_default_handle_irq+0xd1/0x1f0 [ 315.129782][ T63] serial8250_interrupt+0xa9/0x1f0 [ 315.134955][ T63] __handle_irq_event_percpu+0x29a/0xa60 [ 315.140660][ T63] handle_irq_event+0x89/0x1f0 [ 315.145514][ T63] handle_edge_irq+0x25f/0xc20 [ 315.150352][ T63] __common_interrupt+0x136/0x230 [ 315.155459][ T63] common_interrupt+0xb4/0xd0 [ 315.160218][ T63] asm_common_interrupt+0x26/0x40 [ 315.165339][ T63] acpi_safe_halt+0x21/0x30 [ 315.169938][ T63] acpi_idle_enter+0xe4/0x140 [ 315.174697][ T63] cpuidle_enter_state+0x109/0x470 [ 315.179880][ T63] cpuidle_enter+0x5d/0xa0 [ 315.184386][ T63] do_idle+0x372/0x5c0 [ 315.188519][ T63] cpu_startup_entry+0x42/0x60 [ 315.193346][ T63] rest_init+0x2dc/0x300 [ 315.197656][ T63] start_kernel+0x484/0x510 [ 315.202225][ T63] x86_64_start_reservations+0x2a/0x30 [ 315.207835][ T63] x86_64_start_kernel+0x9f/0xa0 [ 315.212837][ T63] common_startup_64+0x13e/0x147 [ 315.217854][ T63] [ 315.217854][ T63] to a HARDIRQ-irq-unsafe lock: [ 315.224936][ T63] (disc_data_lock#3){.+.+}-{3:3} [ 315.224959][ T63] [ 315.224959][ T63] ... which became HARDIRQ-irq-unsafe at: [ 315.237813][ T63] ... [ 315.237819][ T63] lock_acquire+0x1ed/0x550 [ 315.244946][ T63] _raw_read_lock+0x36/0x50 [ 315.249520][ T63] sixpack_ioctl+0x81/0x550 [ 315.254089][ T63] tty_ioctl+0x998/0xdc0 [ 315.258396][ T63] __se_sys_ioctl+0xf5/0x170 [ 315.263051][ T63] do_syscall_64+0xf3/0x230 [ 315.267621][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.273587][ T63] [ 315.273587][ T63] other info that might help us debug this: [ 315.273587][ T63] [ 315.283882][ T63] Possible interrupt unsafe locking scenario: [ 315.283882][ T63] [ 315.292204][ T63] CPU0 CPU1 [ 315.297551][ T63] ---- ---- [ 315.302908][ T63] lock(disc_data_lock#3); [ 315.307397][ T63] local_irq_disable(); [ 315.314132][ T63] lock(&port_lock_key); [ 315.320965][ T63] lock(disc_data_lock#3); [ 315.327971][ T63] [ 315.331405][ T63] lock(&port_lock_key); [ 315.335899][ T63] [ 315.335899][ T63] *** DEADLOCK *** [ 315.335899][ T63] [ 315.344042][ T63] 6 locks held by kworker/u8:4/63: [ 315.349126][ T63] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 315.360778][ T63] #1: ffffc90001547c60 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 315.372404][ T63] #2: ffff888024b48ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x860 [ 315.381429][ T63] #3: ffff8880516980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 315.390738][ T63] #4: ffffffff9a710958 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 315.399866][ T63] #5: ffff8880516980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 315.409169][ T63] [ 315.409169][ T63] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 315.419578][ T63] -> (&port_lock_key){-.-.}-{3:3} { [ 315.424782][ T63] IN-HARDIRQ-W at: [ 315.428748][ T63] lock_acquire+0x1ed/0x550 [ 315.434978][ T63] _raw_spin_lock_irqsave+0xd5/0x120 [ 315.441993][ T63] serial8250_handle_irq+0x6d/0xb80 [ 315.448826][ T63] serial8250_default_handle_irq+0xd1/0x1f0 [ 315.456346][ T63] serial8250_interrupt+0xa9/0x1f0 [ 315.463088][ T63] __handle_irq_event_percpu+0x29a/0xa60 [ 315.470355][ T63] handle_irq_event+0x89/0x1f0 [ 315.476762][ T63] handle_edge_irq+0x25f/0xc20 [ 315.483155][ T63] __common_interrupt+0x136/0x230 [ 315.489808][ T63] common_interrupt+0xb4/0xd0 [ 315.496121][ T63] asm_common_interrupt+0x26/0x40 [ 315.502782][ T63] acpi_safe_halt+0x21/0x30 [ 315.509003][ T63] acpi_idle_enter+0xe4/0x140 [ 315.515336][ T63] cpuidle_enter_state+0x109/0x470 [ 315.522098][ T63] cpuidle_enter+0x5d/0xa0 [ 315.528149][ T63] do_idle+0x372/0x5c0 [ 315.533849][ T63] cpu_startup_entry+0x42/0x60 [ 315.540242][ T63] rest_init+0x2dc/0x300 [ 315.546113][ T63] start_kernel+0x484/0x510 [ 315.552250][ T63] x86_64_start_reservations+0x2a/0x30 [ 315.559342][ T63] x86_64_start_kernel+0x9f/0xa0 [ 315.565917][ T63] common_startup_64+0x13e/0x147 [ 315.572489][ T63] IN-SOFTIRQ-W at: [ 315.576449][ T63] lock_acquire+0x1ed/0x550 [ 315.582584][ T63] _raw_spin_lock_irqsave+0xd5/0x120 [ 315.589497][ T63] serial8250_console_write+0x1ae/0x1e00 [ 315.596760][ T63] console_flush_all+0x869/0xeb0 [ 315.603338][ T63] console_unlock+0x14f/0x3b0 [ 315.609667][ T63] vprintk_emit+0x730/0xa10 [ 315.616111][ T63] dev_vprintk_emit+0x2ae/0x330 [ 315.622616][ T63] dev_printk_emit+0xdd/0x120 [ 315.628948][ T63] _dev_warn+0x122/0x170 [ 315.634836][ T63] qt2_read_bulk_callback+0x1087/0x1160 [ 315.642103][ T63] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 315.649131][ T63] dummy_timer+0x856/0x4620 [ 315.655278][ T63] __hrtimer_run_queues+0x59b/0xd30 [ 315.662201][ T63] hrtimer_run_softirq+0x19a/0x2c0 [ 315.669044][ T63] handle_softirqs+0x2d4/0x9b0 [ 315.675475][ T63] __irq_exit_rcu+0xf7/0x220 [ 315.681734][ T63] irq_exit_rcu+0x9/0x30 [ 315.687611][ T63] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 315.694875][ T63] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.702496][ T63] unwind_next_frame+0x6fb/0x22d0 [ 315.709179][ T63] arch_stack_walk+0x11c/0x150 [ 315.715579][ T63] stack_trace_save+0x118/0x1d0 [ 315.722148][ T63] kasan_save_track+0x3f/0x80 [ 315.728540][ T63] __kasan_kmalloc+0x98/0xb0 [ 315.734762][ T63] __kmalloc_noprof+0x285/0x4c0 [ 315.741241][ T63] kobject_get_path+0xb8/0x230 [ 315.747639][ T63] kobject_uevent_env+0x2a5/0x8e0 [ 315.754300][ T63] device_release_driver_internal+0x4a9/0x7c0 [ 315.762003][ T63] driver_detach+0x1fb/0x2d0 [ 315.768219][ T63] bus_remove_driver+0x1f3/0x320 [ 315.774799][ T63] usb_gadget_unregister_driver+0x4e/0x70 [ 315.782157][ T63] raw_release+0xf6/0x1e0 [ 315.788115][ T63] __fput+0x3e9/0x9f0 [ 315.793730][ T63] task_work_run+0x24f/0x310 [ 315.799955][ T63] syscall_exit_to_user_mode+0x13f/0x340 [ 315.807220][ T63] do_syscall_64+0x100/0x230 [ 315.813444][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.820970][ T63] INITIAL USE at: [ 315.824871][ T63] lock_acquire+0x1ed/0x550 [ 315.830922][ T63] _raw_spin_lock_irqsave+0xd5/0x120 [ 315.837750][ T63] serial8250_do_set_termios+0x4da/0x1c70 [ 315.845014][ T63] uart_set_options+0x3eb/0x730 [ 315.851406][ T63] serial8250_console_setup+0x3db/0x670 [ 315.858510][ T63] univ8250_console_setup+0x426/0x530 [ 315.865451][ T63] try_enable_preferred_console+0x46b/0x5c0 [ 315.872922][ T63] register_console+0x37a/0xfd0 [ 315.879345][ T63] univ8250_console_init+0x52/0x90 [ 315.886014][ T63] console_init+0x1b8/0x6f0 [ 315.892063][ T63] start_kernel+0x2dd/0x510 [ 315.898220][ T63] x86_64_start_reservations+0x2a/0x30 [ 315.905237][ T63] x86_64_start_kernel+0x9f/0xa0 [ 315.911743][ T63] common_startup_64+0x13e/0x147 [ 315.918255][ T63] } [ 315.920736][ T63] ... key at: [] port_lock_key+0x0/0x20 [ 315.928441][ T63] [ 315.928441][ T63] the dependencies between the lock to be acquired [ 315.928449][ T63] and HARDIRQ-irq-unsafe lock: [ 315.941958][ T63] -> (disc_data_lock#3){.+.+}-{3:3} { [ 315.947351][ T63] HARDIRQ-ON-R at: [ 315.951337][ T63] lock_acquire+0x1ed/0x550 [ 315.957490][ T63] _raw_read_lock+0x36/0x50 [ 315.963654][ T63] sixpack_ioctl+0x81/0x550 [ 315.969796][ T63] tty_ioctl+0x998/0xdc0 [ 315.975675][ T63] __se_sys_ioctl+0xf5/0x170 [ 315.982008][ T63] do_syscall_64+0xf3/0x230 [ 315.988146][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.995683][ T63] SOFTIRQ-ON-R at: [ 315.999650][ T63] lock_acquire+0x1ed/0x550 [ 316.005788][ T63] _raw_read_lock+0x36/0x50 [ 316.011924][ T63] sixpack_ioctl+0x81/0x550 [ 316.018062][ T63] tty_ioctl+0x998/0xdc0 [ 316.023938][ T63] __se_sys_ioctl+0xf5/0x170 [ 316.030159][ T63] do_syscall_64+0xf3/0x230 [ 316.036301][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.043828][ T63] INITIAL USE at: [ 316.047702][ T63] lock_acquire+0x1ed/0x550 [ 316.053754][ T63] _raw_write_lock_irq+0xd3/0x120 [ 316.060326][ T63] sixpack_close+0x2c/0x280 [ 316.066369][ T63] tty_ldisc_kill+0xa3/0x1a0 [ 316.072502][ T63] tty_ldisc_release+0x1a1/0x200 [ 316.078987][ T63] tty_release_struct+0x2b/0xe0 [ 316.085380][ T63] tty_release+0xd06/0x12c0 [ 316.091432][ T63] __fput+0x3e9/0x9f0 [ 316.096967][ T63] task_work_run+0x24f/0x310 [ 316.103104][ T63] syscall_exit_to_user_mode+0x13f/0x340 [ 316.110307][ T63] do_syscall_64+0x100/0x230 [ 316.116475][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.123916][ T63] INITIAL READ USE at: [ 316.128227][ T63] lock_acquire+0x1ed/0x550 [ 316.134711][ T63] _raw_read_lock+0x36/0x50 [ 316.141191][ T63] sixpack_ioctl+0x81/0x550 [ 316.147673][ T63] tty_ioctl+0x998/0xdc0 [ 316.154239][ T63] __se_sys_ioctl+0xf5/0x170 [ 316.160804][ T63] do_syscall_64+0xf3/0x230 [ 316.167284][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.175156][ T63] } [ 316.177647][ T63] ... key at: [] disc_data_lock+0x18/0x100 [ 316.185524][ T63] ... acquired at: [ 316.189306][ T63] lock_acquire+0x1ed/0x550 [ 316.193962][ T63] _raw_read_lock+0x36/0x50 [ 316.198626][ T63] sixpack_write_wakeup+0x30/0x440 [ 316.203890][ T63] tty_wakeup+0xbb/0x100 [ 316.208284][ T63] tty_port_default_wakeup+0xa6/0xf0 [ 316.213742][ T63] serial8250_tx_chars+0x6e2/0x930 [ 316.219027][ T63] __start_tx+0x32e/0x470 [ 316.223511][ T63] __uart_start+0x2bc/0x450 [ 316.228192][ T63] uart_write+0x280/0xa40 [ 316.232677][ T63] sixpack_receive_buf+0x490/0x1640 [ 316.238056][ T63] tty_ldisc_receive_buf+0x11f/0x170 [ 316.243494][ T63] tty_port_default_receive_buf+0x6d/0xa0 [ 316.249370][ T63] flush_to_ldisc+0x328/0x860 [ 316.254201][ T63] process_scheduled_works+0xa66/0x1840 [ 316.259901][ T63] worker_thread+0x870/0xd30 [ 316.264732][ T63] kthread+0x7a9/0x920 [ 316.268958][ T63] ret_from_fork+0x4b/0x80 [ 316.273528][ T63] ret_from_fork_asm+0x1a/0x30 [ 316.278461][ T63] [ 316.280783][ T63] [ 316.280783][ T63] stack backtrace: [ 316.286664][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 316.286676][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 316.286684][ T63] Workqueue: events_unbound flush_to_ldisc [ 316.286707][ T63] Call Trace: [ 316.286713][ T63] [ 316.286719][ T63] dump_stack_lvl+0x241/0x360 [ 316.286736][ T63] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.286749][ T63] ? __pfx__printk+0x10/0x10 [ 316.286763][ T63] ? print_shortest_lock_dependencies+0xf2/0x160 [ 316.286776][ T63] validate_chain+0x4ebd/0x5920 [ 316.286794][ T63] ? __pfx_validate_chain+0x10/0x10 [ 316.286812][ T63] ? mark_lock+0x9a/0x360 [ 316.286824][ T63] ? mark_lock+0x9a/0x360 [ 316.286836][ T63] __lock_acquire+0x1397/0x2100 [ 316.286850][ T63] lock_acquire+0x1ed/0x550 [ 316.286860][ T63] ? sixpack_write_wakeup+0x30/0x440 [ 316.286872][ T63] ? __pfx_lock_acquire+0x10/0x10 [ 316.286883][ T63] ? tty_port_default_wakeup+0x9e/0xf0 [ 316.286894][ T63] ? do_raw_spin_lock+0x14f/0x370 [ 316.286902][ T63] ? __pfx_lock_release+0x10/0x10 [ 316.286914][ T63] ? ldsem_down_read_trylock+0x192/0x200 [ 316.286927][ T63] ? tty_ldisc_ref+0x1c/0x80 [ 316.286938][ T63] _raw_read_lock+0x36/0x50 [ 316.286948][ T63] ? sixpack_write_wakeup+0x30/0x440 [ 316.286957][ T63] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 316.286966][ T63] sixpack_write_wakeup+0x30/0x440 [ 316.286976][ T63] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 316.286985][ T63] tty_wakeup+0xbb/0x100 [ 316.286995][ T63] tty_port_default_wakeup+0xa6/0xf0 [ 316.287007][ T63] serial8250_tx_chars+0x6e2/0x930 [ 316.287022][ T63] __start_tx+0x32e/0x470 [ 316.287033][ T63] __uart_start+0x2bc/0x450 [ 316.287043][ T63] uart_write+0x280/0xa40 [ 316.287054][ T63] sixpack_receive_buf+0x490/0x1640 [ 316.287064][ T63] ? do_raw_spin_unlock+0x13c/0x8b0 [ 316.287073][ T63] ? tty_ldisc_ref+0x1c/0x80 [ 316.287083][ T63] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 316.287098][ T63] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 316.287107][ T63] tty_ldisc_receive_buf+0x11f/0x170 [ 316.287119][ T63] tty_port_default_receive_buf+0x6d/0xa0 [ 316.287132][ T63] flush_to_ldisc+0x328/0x860 [ 316.287145][ T63] ? process_scheduled_works+0x976/0x1840 [ 316.287155][ T63] process_scheduled_works+0xa66/0x1840 [ 316.287169][ T63] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.287181][ T63] ? assign_work+0x364/0x3d0 [ 316.287190][ T63] worker_thread+0x870/0xd30 [ 316.287202][ T63] ? __kthread_parkme+0x169/0x1d0 [ 316.287213][ T63] ? __pfx_worker_thread+0x10/0x10 [ 316.287222][ T63] kthread+0x7a9/0x920 [ 316.287232][ T63] ? __pfx_kthread+0x10/0x10 [ 316.287243][ T63] ? __pfx_worker_thread+0x10/0x10 [ 316.287253][ T63] ? __pfx_kthread+0x10/0x10 [ 316.287263][ T63] ? __pfx_kthread+0x10/0x10 [ 316.287274][ T63] ? __pfx_kthread+0x10/0x10 [ 316.287284][ T63] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.287294][ T63] ? lockdep_hardirqs_on+0x99/0x150 [ 316.287305][ T63] ? __pfx_kthread+0x10/0x10 [ 316.287316][ T63] ret_from_fork+0x4b/0x80 [ 316.287326][ T63] ? __pfx_kthread+0x10/0x10 [ 316.287337][ T63] ret_from_fork_asm+0x1a/0x30 [ 316.287349][ T63] [ 316.596023][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 317.194479][ T1172] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.204841][ T1172] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.284295][ T1172] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.294927][ T1172] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.382802][ T1172] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.408465][ T1172] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.470497][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.476861][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.492799][ T1172] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.503544][ T1172] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.572718][ T1172] bridge_slave_1: left allmulticast mode [ 317.578754][ T1172] bridge_slave_1: left promiscuous mode [ 317.584476][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.593228][ T1172] bridge_slave_0: left allmulticast mode [ 317.599248][ T1172] bridge_slave_0: left promiscuous mode [ 317.604933][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.717956][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.733193][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.743234][ T1172] bond0 (unregistering): Released all slaves [ 317.922954][ T1172] hsr_slave_0: left promiscuous mode [ 317.929150][ T1172] hsr_slave_1: left promiscuous mode [ 317.935648][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.943662][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.953188][ T1172] veth1_macvtap: left promiscuous mode [ 317.959036][ T1172] veth0_macvtap: left promiscuous mode [ 317.964666][ T1172] veth1_vlan: left promiscuous mode [ 317.970149][ T1172] veth0_vlan: left promiscuous mode [ 318.119995][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 318.152281][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 318.466368][ T1172] IPVS: stop unused estimator thread 0... [ 318.532320][ T1172] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.581074][ T1172] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.652285][ T1172] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.711279][ T1172] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.772177][ T1172] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.830946][ T1172] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.890155][ T1172] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.940616][ T1172] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.991616][ T1172] bridge_slave_1: left allmulticast mode [ 318.997635][ T1172] bridge_slave_1: left promiscuous mode [ 319.003432][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.011613][ T1172] bridge_slave_0: left allmulticast mode [ 319.018667][ T1172] bridge_slave_0: left promiscuous mode [ 319.024452][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.033175][ T1172] bridge_slave_1: left allmulticast mode [ 319.039028][ T1172] bridge_slave_1: left promiscuous mode [ 319.044758][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.053555][ T1172] bridge_slave_0: left allmulticast mode [ 319.060929][ T1172] bridge_slave_0: left promiscuous mode [ 319.067116][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.243485][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.253601][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.263512][ T1172] bond0 (unregistering): Released all slaves [ 319.276395][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.287963][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.298107][ T1172] bond0 (unregistering): Released all slaves [ 319.592236][ T1172] hsr_slave_0: left promiscuous mode [ 319.598624][ T1172] hsr_slave_1: left promiscuous mode [ 319.604233][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.612122][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.620727][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.629733][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.639622][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.647546][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.655406][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.663409][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.679598][ T1172] veth1_macvtap: left promiscuous mode [ 319.685094][ T1172] veth0_macvtap: left promiscuous mode [ 319.690889][ T1172] veth1_vlan: left promiscuous mode [ 319.696368][ T1172] veth0_vlan: left promiscuous mode [ 319.702981][ T1172] veth1_macvtap: left promiscuous mode [ 319.708928][ T1172] veth0_macvtap: left promiscuous mode [ 319.714656][ T1172] veth1_vlan: left promiscuous mode [ 319.720050][ T1172] veth0_vlan: left promiscuous mode [ 319.800277][ T1172] pim6reg527 (unregistering): left allmulticast mode [ 319.899688][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 319.928781][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 320.132363][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 320.162870][ T1172] team0 (unregistering): Port device team_slave_0 removed