last executing test programs: 1m29.797748524s ago: executing program 4 (id=1246): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000040)="000300000d80ff60", 0x8) 1m29.666616794s ago: executing program 4 (id=1247): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 1m29.57558113s ago: executing program 4 (id=1249): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x4, 0x400, 0x2, 0x9, 0xa}}, {0x4}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x5c}}, 0x44880) 1m29.454599029s ago: executing program 4 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 1m29.304778892s ago: executing program 4 (id=1252): unshare(0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) 1m27.289097582s ago: executing program 4 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 1m27.05057957s ago: executing program 32 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 26.932278357s ago: executing program 3 (id=2365): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8001, 0x4) 26.395303131s ago: executing program 3 (id=2372): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x14, 0x4, @void, @value=r0}, 0x20) 26.157643976s ago: executing program 3 (id=2377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r1, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 25.950947071s ago: executing program 3 (id=2381): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 25.72414266s ago: executing program 3 (id=2387): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 25.583257442s ago: executing program 3 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 10.500744543s ago: executing program 33 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 6.136534007s ago: executing program 1 (id=2678): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001ca000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4.845816347s ago: executing program 1 (id=2694): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x8308, 0x2000) 3.743712483s ago: executing program 1 (id=2711): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0xab7, @private2, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002440)=']', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x81, 0x100, 0x8, 0xfff, 0xeb}, 0x14) 3.628534061s ago: executing program 1 (id=2714): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x4, "04ab4a12"}, 0x0}) 2.72866156s ago: executing program 2 (id=2733): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r0, 0x5, 0xffffffff, 0xc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x880) 2.601074934s ago: executing program 2 (id=2734): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r1}, 0x8) 2.344206491s ago: executing program 2 (id=2735): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000080)={0x20, 0xa, 0x2, "72ef"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.278980965s ago: executing program 0 (id=2736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009502"]) 2.082765518s ago: executing program 0 (id=2740): r0 = fanotify_init(0x10, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) fanotify_mark(r0, 0x80, 0x0, r1, 0x0) 1.905140583s ago: executing program 0 (id=2743): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000005000000fa010000c6"], 0x48}, 0x2}, 0x20000080) 1.823014866s ago: executing program 0 (id=2746): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x260601, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1.574082044s ago: executing program 6 (id=2752): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x80) 1.543081761s ago: executing program 5 (id=2753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.493904881s ago: executing program 6 (id=2754): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x1}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.107485994s ago: executing program 5 (id=2755): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048010}, 0x840) 1.022406322s ago: executing program 5 (id=2756): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 1.021826489s ago: executing program 5 (id=2757): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='?', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 567.046621ms ago: executing program 0 (id=2758): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x340, 0x1d0, 0x32, 0x148, 0x1d0, 0x148, 0x2a8, 0x240, 0x240, 0x2a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'nr0\x00'}, 0x0, 0x190, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x2, {'syz1\x00'}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'team_slave_1\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 493.322691ms ago: executing program 1 (id=2759): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76e04c34b99d"}) 492.206826ms ago: executing program 6 (id=2760): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x20f) 407.741847ms ago: executing program 0 (id=2761): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$KDSIGACCEPT(r0, 0x800455c9, 0x2e) 359.950398ms ago: executing program 2 (id=2762): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000004000)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) 359.438051ms ago: executing program 6 (id=2763): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r1 = epoll_create(0xfe) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x401, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000016}) 349.649495ms ago: executing program 1 (id=2764): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 283.756864ms ago: executing program 2 (id=2765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'veth0_vlan\x00', @multicast}) 171.360685ms ago: executing program 6 (id=2766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2, 0x20000, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xf}]}}}]}, 0x3c}}, 0x0) 101.949006ms ago: executing program 5 (id=2767): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 79.450805ms ago: executing program 6 (id=2768): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 52.001051ms ago: executing program 2 (id=2769): io_setup(0x5, &(0x7f0000003b40)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000030c0)=[{}], &(0x7f0000000040)=0x8) 0s ago: executing program 5 (id=2770): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_mrelease(0xffffffffffffffff, 0x1000000) kernel console output (not intermixed with test programs): urb error = -90 [ 100.141773][ T975] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.177161][ T975] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 100.185218][ T975] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 100.201063][ T975] usb 3-1: USB disconnect, device number 7 [ 100.586216][ T5875] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.755950][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 100.781373][ T5875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 100.819446][ T5875] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 100.849816][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.868850][ T5875] usb 5-1: Product: syz [ 100.873160][ T5875] usb 5-1: Manufacturer: syz [ 100.893724][ T5875] usb 5-1: SerialNumber: syz [ 100.914195][ T5875] usb 5-1: config 0 descriptor?? [ 100.941805][ T5875] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 100.966545][ T5875] usb 5-1: Detected FT232R [ 101.166018][ T5875] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 101.419425][ T5875] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 101.620223][ T975] usb 5-1: USB disconnect, device number 5 [ 101.649788][ T975] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.686111][ T975] ftdi_sio 5-1:0.0: device disconnected [ 101.763290][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 101.763311][ T30] audit: type=1804 audit(1743100083.170:21): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.420" name="/newroot/88/bus" dev="tmpfs" ino=464 res=1 errno=0 [ 102.661971][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.670319][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.785854][ T5915] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.930552][ T6934] ======================================================= [ 102.930552][ T6934] WARNING: The mand mount option has been deprecated and [ 102.930552][ T6934] and is ignored by this kernel. Remove the mand [ 102.930552][ T6934] option from the mount to silence this warning. [ 102.930552][ T6934] ======================================================= [ 102.997748][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.009481][ T5915] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.025247][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.067580][ T5915] usb 5-1: config 0 descriptor?? [ 103.525075][ T5915] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 103.554490][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input7 [ 103.691413][ T5915] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 103.979702][ T5915] usb 5-1: USB disconnect, device number 6 [ 104.609074][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 104.753715][ T6979] sctp: [Deprecated]: syz.4.460 (pid 6979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.753715][ T6979] Use struct sctp_sack_info instead [ 104.786579][ T1216] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.844238][ T6981] Bluetooth: MGMT ver 1.23 [ 104.976118][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 104.982983][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.025803][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.055764][ T1216] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 105.091842][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.127007][ T1216] usb 2-1: config 0 descriptor?? [ 105.266118][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 105.284997][ T7000] netlink: 'syz.0.469': attribute type 2 has an invalid length. [ 105.315386][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 105.567535][ T1216] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0 [ 105.608279][ T1216] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0 [ 105.619385][ T1216] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0 [ 105.627352][ T1216] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0 [ 105.634830][ T1216] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0 [ 105.645517][ T1216] zeroplus 0003:0C12:0030.000A: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 105.657927][ T1216] zeroplus 0003:0C12:0030.000A: no inputs found [ 105.802366][ T1216] usb 2-1: USB disconnect, device number 5 [ 106.725739][ T1216] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.921687][ T1216] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.946638][ T1216] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 106.967397][ T1216] usb 1-1: can't read configurations, error -71 [ 107.015858][ T7056] bond0: entered promiscuous mode [ 107.021201][ T7056] bond_slave_0: entered promiscuous mode [ 107.031860][ T7056] bond_slave_1: entered promiscuous mode [ 107.039598][ T7056] batadv0: entered promiscuous mode [ 107.055576][ T7056] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 107.076703][ T7056] bond0: left promiscuous mode [ 107.091847][ T7056] bond_slave_0: left promiscuous mode [ 107.108398][ T7056] bond_slave_1: left promiscuous mode [ 107.115994][ T5915] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.130808][ T7056] batadv0: left promiscuous mode [ 107.249942][ T7060] veth1_macvtap: left promiscuous mode [ 107.288322][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 107.305554][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 107.342714][ T5915] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 107.366193][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 107.378426][ T5915] usb 2-1: Product: syz [ 107.383054][ T5915] usb 2-1: Manufacturer: syz [ 107.396656][ T5915] usb 2-1: SerialNumber: syz [ 107.403593][ T5915] usb 2-1: config 0 descriptor?? [ 107.411289][ T7051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.647427][ T978] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.667622][ T5875] usb 2-1: USB disconnect, device number 6 [ 107.815967][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 107.832380][ T978] usb 4-1: config 3 has an invalid interface number: 94 but max is 0 [ 107.841029][ T978] usb 4-1: config 3 has no interface number 0 [ 107.847660][ T978] usb 4-1: config 3 interface 94 has no altsetting 0 [ 107.858410][ T978] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=38.ae [ 107.882299][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.905722][ T978] usb 4-1: Product: syz [ 107.909947][ T978] usb 4-1: Manufacturer: syz [ 107.935725][ T978] usb 4-1: SerialNumber: syz [ 108.166137][ T978] snd-usb-audio 4-1:3.94: probe with driver snd-usb-audio failed with error -71 [ 108.188017][ T978] usb 4-1: USB disconnect, device number 3 [ 108.362080][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.506'. [ 109.142393][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 109.303829][ T62] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.320844][ T7128] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 109.902703][ T7149] Failed to get privilege flags for destination (handle=0x2:0x9) [ 110.195794][ T7153] netlink: 596 bytes leftover after parsing attributes in process `syz.3.537'. [ 110.596794][ T5828] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.705818][ T7183] syz.2.553 (7183) used greatest stack depth: 19128 bytes left [ 110.742009][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 110.800461][ T5828] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 110.814754][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.843345][ T5828] usb 4-1: Product: syz [ 110.862100][ T5828] usb 4-1: Manufacturer: syz [ 110.870143][ T5828] usb 4-1: SerialNumber: syz [ 110.879144][ T5828] usb 4-1: config 0 descriptor?? [ 110.979931][ T7192] program syz.0.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.101405][ T1216] IPVS: starting estimator thread 0... [ 111.205938][ T7197] IPVS: using max 24 ests per chain, 57600 per kthread [ 111.302168][ T5828] usb 4-1: Firmware: major: 83, minor: 52, hardware type: HULUSB (4) [ 111.316082][ T5832] Bluetooth: hci5: command 0x1003 tx timeout [ 111.323221][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.513345][ T5828] usb 4-1: failed to fetch extended address, random address set [ 111.587957][ T5828] usb 4-1: USB disconnect, device number 4 [ 111.615860][ T978] kernel read not supported for file /dsp1 (pid: 978 comm: kworker/0:2) [ 111.877782][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 112.245754][ T1216] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.395801][ T1216] usb 2-1: Using ep0 maxpacket: 8 [ 112.406804][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.425029][ T1216] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 112.475795][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.503112][ T1216] usb 2-1: config 0 descriptor?? [ 112.929428][ T1216] holtek 0003:1241:5015.000B: unknown main item tag 0x0 [ 112.944519][ T1216] holtek 0003:1241:5015.000B: item fetching failed at offset 3/5 [ 112.955029][ T1216] holtek 0003:1241:5015.000B: parse failed [ 112.961561][ T1216] holtek 0003:1241:5015.000B: probe with driver holtek failed with error -22 [ 113.145065][ T1216] usb 2-1: USB disconnect, device number 7 [ 113.235243][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 113.361207][ T7282] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.371100][ T7282] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.379980][ T7282] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.388780][ T7282] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.664077][ T7299] syz.4.604 uses obsolete (PF_INET,SOCK_PACKET) [ 113.783043][ T5828] kernel write not supported for file /sequencer (pid: 5828 comm: kworker/0:3) [ 114.410703][ T7338] netlink: 88 bytes leftover after parsing attributes in process `syz.0.621'. [ 114.735839][ T5915] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 114.833111][ T7348] tipc: Started in network mode [ 114.861768][ T7348] tipc: Node identity ff, cluster identity 4711 [ 114.868744][ T7348] tipc: Enabling of bearer rejected, failed to enable media [ 114.899730][ T5915] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 114.925926][ T5915] usb 5-1: config 150 has no interface number 0 [ 114.932270][ T5915] usb 5-1: config 150 interface 204 has no altsetting 0 [ 114.968726][ T5915] usb 5-1: config 150 interface 1 has no altsetting 0 [ 114.993379][ T7354] netlink: 156 bytes leftover after parsing attributes in process `syz.3.628'. [ 115.004449][ T5915] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 115.026005][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.034053][ T5915] usb 5-1: Product: syz [ 115.045725][ T5915] usb 5-1: Manufacturer: syz [ 115.050369][ T5915] usb 5-1: SerialNumber: syz [ 115.288803][ T5915] xr_serial 5-1:150.204: xr_serial converter detected [ 115.583593][ T7367] misc userio: Invalid payload size [ 115.846002][ T1216] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.863014][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 115.889427][ T5915] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 115.898444][ T5915] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 115.909435][ T5915] usb 5-1: USB disconnect, device number 7 [ 115.923986][ T5915] xr_serial 5-1:150.204: device disconnected [ 116.027311][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.047125][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.065703][ T1216] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 116.066242][ T7381] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 116.075532][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.104906][ T1216] usb 2-1: config 0 descriptor?? [ 116.114516][ T7381] team0: Port device batadv1 added [ 116.121691][ T7386] netlink: 280 bytes leftover after parsing attributes in process `syz.2.642'. [ 116.235237][ T7390] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 116.389545][ T30] audit: type=1326 audit(1743100097.800:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 116.432952][ T30] audit: type=1326 audit(1743100097.800:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 116.455401][ T30] audit: type=1326 audit(1743100097.800:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 116.503733][ T7400] vxcan1: entered allmulticast mode [ 116.524353][ T7403] bpf: Bad value for 'gid' [ 116.531877][ T1216] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 116.543429][ T7400] vxcan1: left allmulticast mode [ 116.553028][ T30] audit: type=1326 audit(1743100097.800:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 116.574691][ T1216] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 116.582798][ T1216] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 116.595827][ T1216] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 116.612269][ T30] audit: type=1326 audit(1743100097.800:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 116.636351][ T1216] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 116.643626][ T1216] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 116.660099][ T1216] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 116.669867][ T30] audit: type=1326 audit(1743100097.800:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 116.706995][ T1216] logitech 0003:046D:C294.000C: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 116.740831][ T1216] logitech 0003:046D:C294.000C: no inputs found [ 116.776640][ T30] audit: type=1326 audit(1743100097.900:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 116.802627][ T1216] usb 2-1: USB disconnect, device number 8 [ 116.915832][ T30] audit: type=1326 audit(1743100097.900:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 117.014415][ T30] audit: type=1326 audit(1743100097.960:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 117.076995][ T30] audit: type=1326 audit(1743100097.960:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 118.203455][ T7464] @: renamed from vlan0 (while UP) [ 119.230819][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 119.411447][ T5834] Bluetooth: hci4: connection err: -111 [ 119.418596][ T5834] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 119.807878][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 121.007993][ T1216] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.190956][ T1216] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 121.205094][ T1216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.245811][ T1216] usb 1-1: config 0 has no interface number 0 [ 121.262221][ T1216] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 121.282545][ T1216] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.305559][ T1216] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 121.315421][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.329726][ T1216] usb 1-1: Product: syz [ 121.334187][ T1216] usb 1-1: Manufacturer: syz [ 121.365800][ T1216] usb 1-1: SerialNumber: syz [ 121.381487][ T1216] usb 1-1: config 0 descriptor?? [ 121.406643][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.591147][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 121.622716][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.647241][ T10] usb 4-1: config 1 interface 0 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.673668][ T10] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.697341][ T10] usb 4-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.718873][ T10] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 0 [ 121.758573][ T10] usb 4-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.797906][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 121.829581][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.838959][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.865783][ T10] usb 4-1: Product: syz [ 121.868817][ T5915] usb 1-1: USB disconnect, device number 7 [ 121.870022][ T10] usb 4-1: Manufacturer: syz [ 121.888877][ T10] usb 4-1: SerialNumber: syz [ 122.122131][ T10] usb 4-1: bad CDC descriptors [ 122.150697][ T10] usb 4-1: USB disconnect, device number 5 [ 122.309832][ T7596] syz.4.740 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.576597][ T7612] netlink: 'syz.0.748': attribute type 21 has an invalid length. [ 122.584690][ T7612] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 122.865905][ T7626] netem: incorrect gi model size [ 122.895894][ T7626] netem: change failed [ 123.675712][ T7649] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 123.676426][ T7654] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 123.696119][ T7655] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 123.721394][ T7656] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 124.189410][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 124.789315][ T7705] netlink: 'syz.1.783': attribute type 39 has an invalid length. [ 124.915026][ T7712] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 124.930442][ T7712] netlink: 'syz.0.785': attribute type 3 has an invalid length. [ 124.940915][ T7712] netlink: 216 bytes leftover after parsing attributes in process `syz.0.785'. [ 124.954068][ T7712] NCSI netlink: No device for ifindex 813332851 [ 125.951022][ T7758] netem: invalid attributes len -3 [ 125.985820][ T7758] netem: change failed [ 127.444028][ T7834] netlink: 'syz.2.823': attribute type 39 has an invalid length. [ 128.140094][ T7870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.837'. [ 128.150913][ T7868] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.159906][ T7868] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.168721][ T7868] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.177925][ T7868] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.188377][ T7870] bond0: option ad_select: unable to set because the bond device is up [ 128.212022][ T7873] tap0: tun_chr_ioctl cmd 1074812118 [ 128.498358][ T7890] netlink: 'syz.2.845': attribute type 19 has an invalid length. [ 128.566592][ T5875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.741761][ T7905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.756145][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 128.773540][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.804976][ T5875] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 128.830764][ T5875] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.860805][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.887813][ T5875] usb 4-1: Product: syz [ 128.892021][ T5875] usb 4-1: Manufacturer: syz [ 128.905808][ T5875] usb 4-1: SerialNumber: syz [ 128.948981][ T7909] xt_CT: No such helper "snmp" [ 129.168722][ T5875] cdc_ncm 4-1:1.0: bind() failure [ 129.178704][ T5875] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 129.193554][ T5875] cdc_ncm 4-1:1.1: bind() failure [ 129.214683][ T5875] usb 4-1: USB disconnect, device number 6 [ 130.050828][ T7961] netlink: 'syz.3.877': attribute type 15 has an invalid length. [ 130.475940][ T5875] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.542387][ T7972] tun0: tun_chr_ioctl cmd 1074025675 [ 130.576008][ T7972] tun0: persist disabled [ 130.665875][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 130.687789][ T5875] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 130.696277][ T5875] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.705101][ T5875] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.744626][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.775886][ T5875] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.796093][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.845711][ T5875] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.864389][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.893811][ T5875] usb 4-1: config 0 descriptor?? [ 131.053092][ T7996] netlink: 'syz.2.892': attribute type 25 has an invalid length. [ 131.065845][ T7996] netlink: 'syz.2.892': attribute type 8 has an invalid length. [ 131.074789][ T7998] netlink: 'syz.4.893': attribute type 10 has an invalid length. [ 131.085032][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.893'. [ 131.109444][ T5875] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.134429][ T7998] team0: Port device geneve0 added [ 131.334460][ T978] usb 4-1: USB disconnect, device number 7 [ 131.344714][ T978] usblp0: removed [ 132.111996][ T8055] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 132.460340][ T5915] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5915 comm: kworker/1:5) [ 132.633692][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 132.633711][ T30] audit: type=1326 audit(1743100114.040:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 132.661252][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.691913][ T8091] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 132.692282][ T8089] IPVS: stopping backup sync thread 8091 ... [ 132.704758][ T30] audit: type=1326 audit(1743100114.080:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 132.721922][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 132.729274][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.739842][ T30] audit: type=1326 audit(1743100114.080:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 132.769679][ T30] audit: type=1326 audit(1743100114.080:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 132.797323][ T30] audit: type=1326 audit(1743100114.090:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 132.895758][ T30] audit: type=1326 audit(1743100114.090:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 132.960546][ T30] audit: type=1326 audit(1743100114.090:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7ffc0000 [ 132.999455][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.006177][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.035938][ T5915] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.205823][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 134.223033][ T5915] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 134.242753][ T5915] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 134.275015][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.287956][ T5915] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 134.297373][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.307483][ T5915] usb 4-1: Product: syz [ 134.311712][ T5915] usb 4-1: Manufacturer: syz [ 134.325401][ T5915] usb 4-1: SerialNumber: syz [ 134.338488][ T5915] usb 4-1: config 0 descriptor?? [ 134.360037][ T8183] Driver unsupported XDP return value 0 on prog (id 108) dev N/A, expect packet loss! [ 134.372277][ T5875] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 134.545787][ T5875] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.567533][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.569201][ T5915] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 134.611493][ T5875] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.621025][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.645924][ T5875] usb 2-1: Product: syz [ 134.656088][ T5875] usb 2-1: Manufacturer: syz [ 134.660735][ T5875] usb 2-1: SerialNumber: syz [ 134.862049][ T5915] usb 4-1: USB disconnect, device number 8 [ 134.893661][ T5875] usb 2-1: 0:2 : does not exist [ 134.909373][ T5875] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 134.942028][ T5875] usb 2-1: USB disconnect, device number 9 [ 135.274095][ T8224] netlink: zone id is out of range [ 135.283690][ T8224] netlink: zone id is out of range [ 135.295820][ T8224] netlink: zone id is out of range [ 135.300975][ T8224] netlink: zone id is out of range [ 135.321637][ T8224] netlink: zone id is out of range [ 135.332518][ T8224] netlink: zone id is out of range [ 135.340093][ T8224] netlink: zone id is out of range [ 135.345482][ T8224] netlink: zone id is out of range [ 135.352363][ T8224] netlink: zone id is out of range [ 135.357721][ T8224] netlink: zone id is out of range [ 136.784774][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1027'. [ 137.635834][ T5834] Bluetooth: hci4: command tx timeout [ 137.867794][ T8332] netlink: 1344 bytes leftover after parsing attributes in process `syz.2.1044'. [ 138.364717][ T8355] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 138.443344][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 138.536601][ T5915] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 138.588044][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1060'. [ 138.711333][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.721357][ T5915] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 138.730369][ T5915] usb 2-1: can't read configurations, error -71 [ 138.745486][ T8375] netlink: 'syz.2.1066': attribute type 4 has an invalid length. [ 138.778671][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 139.036410][ T8394] vxcan1: tx address claim with dlc 0 [ 139.076546][ T30] audit: type=1326 audit(1743100120.490:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.103760][ T30] audit: type=1326 audit(1743100120.510:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.144610][ T30] audit: type=1326 audit(1743100120.510:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.176875][ T30] audit: type=1326 audit(1743100120.510:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.176882][ T8398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1076'. [ 139.204438][ T30] audit: type=1326 audit(1743100120.510:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.234243][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.273504][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.295198][ T30] audit: type=1326 audit(1743100120.510:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.334179][ T30] audit: type=1326 audit(1743100120.510:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.356842][ T30] audit: type=1326 audit(1743100120.510:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.435230][ T30] audit: type=1326 audit(1743100120.510:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.469759][ T30] audit: type=1326 audit(1743100120.510:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbaf8d169 code=0x7ffc0000 [ 139.585397][ T8410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.633568][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1085'. [ 139.723252][ T8410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.844067][ T8410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.963076][ T8410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.984470][ T8432] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 140.095188][ T8410] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.132974][ T8410] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.185860][ T8410] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.218093][ T8410] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.237251][ T8445] pimreg3: entered allmulticast mode [ 140.259822][ T8444] pimreg3: left allmulticast mode [ 140.647330][ T8462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1106'. [ 140.677596][ T8462] netem: unknown loss type 13 [ 140.682537][ T8462] netem: change failed [ 141.248147][ T8488] input: syz0 as /devices/virtual/input/input14 [ 141.325813][ T975] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.500105][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 141.519729][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.547024][ T975] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.575928][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.603142][ T975] usb 1-1: config 0 descriptor?? [ 141.769174][ T24] IPVS: starting estimator thread 0... [ 141.855771][ T8516] IPVS: using max 27 ests per chain, 64800 per kthread [ 141.862922][ T975] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 142.042552][ T24] usb 1-1: USB disconnect, device number 8 [ 142.059213][ T62] wlan1: Trigger new scan to find an IBSS to join [ 142.245820][ T975] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.408146][ T975] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 142.448102][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.461528][ T975] usb 3-1: config 0 descriptor?? [ 142.808590][ T8537] 9p: Unknown Cache mode or invalid value PL [ 143.275310][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 143.296490][ T8563] netlink: 'syz.4.1153': attribute type 30 has an invalid length. [ 143.304360][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 143.305567][ T975] usb 3-1: Cannot set autoneg [ 143.340107][ T975] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 143.372382][ T975] usb 3-1: USB disconnect, device number 8 [ 144.022498][ T8588] net_ratelimit: 74 callbacks suppressed [ 144.022520][ T8588] openvswitch: netlink: Duplicate or invalid key (type 0). [ 144.090406][ T8588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.336748][ T8604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.017671][ T8638] support for cryptoloop has been removed. Use dm-crypt instead. [ 145.079910][ T12] wlan1: Trigger new scan to find an IBSS to join [ 145.153269][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 145.293373][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1198'. [ 145.436199][ T978] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.545904][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 145.608731][ T978] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.630708][ T978] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.661847][ T978] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.663601][ T8671] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.1205'. [ 145.694240][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.701033][ T8671] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.723348][ T8649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.744687][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.916851][ T8679] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.985220][ T975] usb 3-1: USB disconnect, device number 9 [ 146.016728][ T8679] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.037305][ T30] audit: type=1326 audit(1743100127.440:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.1213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcbaf8d169 code=0x0 [ 146.116609][ T8679] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.170980][ T8679] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.274550][ T8679] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.295046][ T8679] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.310854][ T8679] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.328318][ T8679] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.134162][ T8727] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 147.146889][ T8727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.305782][ T975] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.455776][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 147.461965][ T8740] netlink: 'syz.3.1237': attribute type 3 has an invalid length. [ 147.467786][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.485800][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.504834][ T975] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 147.535801][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.545967][ T975] usb 1-1: config 0 descriptor?? [ 147.867948][ T5915] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 147.987117][ T975] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 148.027267][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 148.034598][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.046341][ T3547] wlan1: Trigger new scan to find an IBSS to join [ 148.066214][ T5915] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 148.087422][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.102869][ T5915] usb 4-1: config 0 descriptor?? [ 148.210555][ T975] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 148.418207][ T975] ft260 0003:0403:6030.000D: failed to retrieve system status [ 148.443947][ T975] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -71 [ 148.488613][ T975] usb 1-1: USB disconnect, device number 9 [ 148.534922][ T5915] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.000E/input/input16 [ 148.643693][ T5915] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.000E/input/input17 [ 148.688319][ T5915] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.000E/input/input18 [ 148.733054][ T5915] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.000E/input/input19 [ 148.782964][ T5915] hid-udraw 0003:20D6:CB17.000E: hidraw0: USB HID v0.05 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0 [ 148.986789][ T12] wlan1: Creating new IBSS network, BSSID 42:37:d3:42:43:04 [ 149.006828][ T1216] usb 4-1: USB disconnect, device number 9 [ 149.069402][ T8776] kvm: user requested TSC rate below hardware speed [ 149.516749][ T8792] input: syz1 as /devices/virtual/input/input20 [ 150.066256][ T1216] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.240369][ T1216] usb 4-1: Using ep0 maxpacket: 16 [ 150.250127][ T1216] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.285856][ T1216] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.308935][ T1216] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.335758][ T1216] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.342442][ T1216] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 150.349606][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 150.365782][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.375754][ T1216] usb 4-1: config 0 descriptor?? [ 150.434731][ T8748] Set syz1 is full, maxelem 65536 reached [ 150.684059][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.756630][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.797865][ T1216] kye 0003:0458:0153.000F: unexpected long global item [ 150.805255][ T1216] kye 0003:0458:0153.000F: parse failed [ 150.835863][ T1216] kye 0003:0458:0153.000F: probe with driver kye failed with error -22 [ 150.891440][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.961507][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.011790][ T978] usb 4-1: USB disconnect, device number 10 [ 151.199388][ T13] bridge0: port 3(batadv0) entered disabled state [ 151.296395][ T13] bridge_slave_1: left allmulticast mode [ 151.309698][ T13] bridge_slave_1: left promiscuous mode [ 151.328386][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.386801][ T13] bridge_slave_0: left allmulticast mode [ 151.392520][ T13] bridge_slave_0: left promiscuous mode [ 151.405992][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.482899][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.491541][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.497689][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 151.511892][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.521242][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.531212][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.982677][ T13] team0: Port device geneve0 removed [ 152.254087][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.272095][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.282809][ T13] bond0 (unregistering): Released all slaves [ 152.298337][ T8873] bridge_slave_0: default FDB implementation only supports local addresses [ 152.627276][ T8846] chnl_net:caif_netlink_parms(): no params data found [ 152.787618][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.805106][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.822670][ T8846] bridge_slave_0: entered allmulticast mode [ 152.844063][ T8846] bridge_slave_0: entered promiscuous mode [ 152.863000][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.883758][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.902657][ T8846] bridge_slave_1: entered allmulticast mode [ 152.950634][ T8846] bridge_slave_1: entered promiscuous mode [ 153.022682][ T8846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.059664][ T8846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.175398][ T8846] team0: Port device team_slave_0 added [ 153.200572][ T8846] team0: Port device team_slave_1 added [ 153.293304][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.325879][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.405027][ T8846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.518435][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.525454][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.604231][ T8846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.641638][ T5832] Bluetooth: hci3: command tx timeout [ 153.646106][ T10] hid-generic 0005:16C0:05DF.0010: item fetching failed at offset 0/1 [ 153.702287][ T10] hid-generic 0005:16C0:05DF.0010: probe with driver hid-generic failed with error -22 [ 153.821909][ T8846] hsr_slave_0: entered promiscuous mode [ 153.834010][ T8846] hsr_slave_1: entered promiscuous mode [ 153.860795][ T8846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.891917][ T8846] Cannot create hsr debugfs directory [ 153.899028][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 154.471656][ T8846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.558912][ T8846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.585155][ T8846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.650981][ T8846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.749446][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.768745][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.791604][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.805891][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.837103][ T13] hsr0: left allmulticast mode [ 154.844593][ T13] veth1_macvtap: left promiscuous mode [ 154.871808][ T13] veth0_macvtap: left promiscuous mode [ 154.884325][ T13] veth1_vlan: left promiscuous mode [ 154.898091][ T13] veth0_vlan: left promiscuous mode [ 155.549788][ T13] team0 (unregistering): Port device team_slave_1 removed [ 155.607115][ T13] team0 (unregistering): Port device team_slave_0 removed [ 155.715778][ T5832] Bluetooth: hci3: command tx timeout [ 156.243154][ T9012] netlink: 'syz.3.1361': attribute type 6 has an invalid length. [ 156.433996][ T8846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.482895][ T8846] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.531695][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.538895][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.574080][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.581263][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.649372][ T30] audit: type=1326 audit(1743100138.060:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9022 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 156.755696][ T30] audit: type=1326 audit(1743100138.060:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9022 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 156.817079][ T30] audit: type=1326 audit(1743100138.080:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9022 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 156.905776][ T30] audit: type=1326 audit(1743100138.160:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9022 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 157.016072][ T30] audit: type=1326 audit(1743100138.160:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9022 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 157.053399][ T8846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.098067][ T30] audit: type=1326 audit(1743100138.160:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9028 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39defbfa25 code=0x7ffc0000 [ 157.153585][ T30] audit: type=1326 audit(1743100138.280:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9022 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 157.223782][ T30] audit: type=1326 audit(1743100138.280:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9022 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 157.295742][ T30] audit: type=1326 audit(1743100138.340:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9028 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 157.317112][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.653107][ T8846] veth0_vlan: entered promiscuous mode [ 157.680114][ T8846] veth1_vlan: entered promiscuous mode [ 157.748624][ T8846] veth0_macvtap: entered promiscuous mode [ 157.788409][ T8846] veth1_macvtap: entered promiscuous mode [ 157.804001][ T5832] Bluetooth: hci3: command tx timeout [ 157.821843][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.837114][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.849217][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.860096][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.870474][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.882423][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.892916][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.904418][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.927788][ T8846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.955552][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.986826][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.006203][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.023002][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.033637][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.051341][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.068370][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.095858][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.114897][ T8846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.167974][ T8846] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.189965][ T8846] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.213097][ T8846] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.222718][ T8846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.417546][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.425424][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.532344][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.561269][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.700010][ T9088] veth1_macvtap: left promiscuous mode [ 159.782230][ T9135] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1410'. [ 159.877619][ T5832] Bluetooth: hci3: command tx timeout [ 161.076008][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.107498][ T9199] random: crng reseeded on system resumption [ 161.236773][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 161.243707][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.254759][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.285730][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.324724][ T5915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 161.344491][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.376329][ T5915] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.396036][ T5915] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.424006][ T5915] usb 6-1: Manufacturer: syz [ 161.434813][ T5915] usb 6-1: config 0 descriptor?? [ 161.725847][ T5915] rc_core: IR keymap rc-hauppauge not found [ 161.734157][ T5915] Registered IR keymap rc-empty [ 161.740994][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 161.765769][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 161.797504][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 161.817289][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 161.865244][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 161.895865][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 161.905785][ T975] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 161.920641][ T9225] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1448'. [ 161.945817][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 161.957117][ T5832] Bluetooth: hci3: command tx timeout [ 161.965745][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 161.995802][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 162.025820][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 162.054991][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 162.064132][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.078683][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.089253][ T975] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 162.100055][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 162.107448][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.135975][ T975] usb 4-1: config 0 descriptor?? [ 162.145754][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 162.165792][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 162.185785][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 162.215043][ T5915] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 162.234213][ T5915] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 162.257655][ T5915] usb 6-1: USB disconnect, device number 2 [ 162.568410][ T975] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 162.765485][ T975] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 162.773367][ T975] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 162.784560][ T975] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -32 [ 162.804417][ T9202] Restarting kernel threads ... done. [ 162.814748][ T975] usb 4-1: USB disconnect, device number 11 [ 162.863365][ T1216] kernel write not supported for file /amidi2 (pid: 1216 comm: kworker/1:3) [ 163.135021][ T30] audit: type=1800 audit(1743100144.540:64): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1464" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 163.227107][ T5875] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 163.400186][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.431250][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 163.482021][ T5875] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 163.506127][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.530981][ T5875] usb 3-1: config 0 descriptor?? [ 163.713822][ T9285] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1476'. [ 163.947726][ T5875] hid (null): nested delimiters [ 163.952635][ T5875] hid (null): nested delimiters [ 163.985734][ T5875] hid (null): nested delimiters [ 163.990705][ T5875] hid (null): bogus close delimiter [ 164.038050][ T5875] uclogic 0003:28BD:0042.0012: interface is invalid, ignoring [ 164.161651][ T1216] usb 3-1: USB disconnect, device number 10 [ 164.221623][ T9305] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.378267][ T9312] usb usb1: usbfs: process 9312 (syz.1.1489) did not claim interface 0 before use [ 164.446103][ T30] audit: type=1326 audit(1743100145.850:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 164.506586][ T30] audit: type=1326 audit(1743100145.850:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 164.558721][ T30] audit: type=1326 audit(1743100145.850:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 164.627740][ T30] audit: type=1326 audit(1743100145.850:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 164.666591][ T30] audit: type=1326 audit(1743100145.850:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 164.750670][ T30] audit: type=1326 audit(1743100145.850:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 165.605758][ T5875] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 165.772118][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.815729][ T5875] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.835137][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.871260][ T5875] usb 1-1: config 0 descriptor?? [ 166.281728][ T9397] overlayfs: disabling nfs_export due to verity=on [ 166.290730][ T5875] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 166.333157][ T5875] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input22 [ 166.448746][ T5875] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 166.655793][ T975] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 166.731035][ T5915] usb 1-1: USB disconnect, device number 10 [ 166.763995][ T30] audit: type=1800 audit(1743100148.170:71): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1535" name="bus" dev="tmpfs" ino=155 res=0 errno=0 [ 166.830766][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 166.847043][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.865719][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.885291][ T975] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 166.894969][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.905915][ T975] usb 4-1: config 0 descriptor?? [ 167.056586][ T9434] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 167.066440][ T9434] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 167.346729][ T975] corsair 0003:1B1C:1B02.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 167.464316][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1550'. [ 167.538913][ T975] corsair 0003:1B1C:1B02.0014: Read invalid backlight brightness: d7. [ 167.764620][ T975] usb 4-1: USB disconnect, device number 12 [ 168.085823][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.257460][ T5915] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.284524][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.310153][ T5915] usb 3-1: Product: syz [ 168.314370][ T5915] usb 3-1: Manufacturer: syz [ 168.325171][ T5915] usb 3-1: SerialNumber: syz [ 168.339421][ T5915] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.394486][ T975] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.946073][ T9517] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1579'. [ 168.966305][ T9517] netlink: 157 bytes leftover after parsing attributes in process `syz.1.1579'. [ 169.199214][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.216057][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.477184][ T975] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 169.510425][ T975] ath9k_htc: Failed to initialize the device [ 169.566116][ T975] usb 3-1: ath9k_htc: USB layer deinitialized [ 169.597732][ T1216] usb 3-1: USB disconnect, device number 11 [ 170.040571][ T9560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.120188][ T9566] netlink: 'syz.1.1601': attribute type 1 has an invalid length. [ 170.128207][ T9566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.135453][ T9566] IPv6: NLM_F_CREATE should be set when creating new route [ 170.175883][ T9560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.309169][ T9560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.398822][ T30] audit: type=1326 audit(1743100151.810:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 170.432297][ T9560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.442011][ T30] audit: type=1326 audit(1743100151.810:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 170.513055][ T30] audit: type=1326 audit(1743100151.850:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 170.605345][ T9560] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.621267][ T9560] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.636750][ T9560] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.651522][ T9560] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.683120][ T30] audit: type=1326 audit(1743100151.850:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 170.725778][ T30] audit: type=1326 audit(1743100151.850:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 170.785918][ T30] audit: type=1326 audit(1743100151.880:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 170.860676][ T30] audit: type=1326 audit(1743100151.880:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 170.925246][ T30] audit: type=1326 audit(1743100151.890:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 171.008570][ T30] audit: type=1326 audit(1743100151.890:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 171.051334][ T30] audit: type=1326 audit(1743100151.890:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 171.387053][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 171.419453][ T9608] openvswitch: netlink: VXLAN extension 0 has unexpected len 12 expected 0 [ 171.806610][ T9629] input: syz0 as /devices/virtual/input/input23 [ 173.308741][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 173.361322][ T9707] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 173.468929][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 173.482590][ T9712] bridge0: entered promiscuous mode [ 173.496430][ T9712] macsec1: entered promiscuous mode [ 173.515765][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 173.523823][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 173.538965][ T10] usb 3-1: config 0 has no interface number 0 [ 173.566223][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 173.575338][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.595746][ T10] usb 3-1: Product: syz [ 173.599963][ T10] usb 3-1: Manufacturer: syz [ 173.608809][ T10] usb 3-1: SerialNumber: syz [ 173.615550][ T10] usb 3-1: config 0 descriptor?? [ 173.630416][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 173.834494][ T9693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.858278][ T9724] tap0: tun_chr_ioctl cmd 1074025677 [ 173.863819][ T9724] tap0: linktype set to 65534 [ 173.876707][ T9693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.895296][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 173.919085][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 174.049754][ T9734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.075960][ T9734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.194771][ T9734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.226475][ T9734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.304545][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 174.313604][ T10] usb 3-1: USB disconnect, device number 12 [ 174.323425][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 174.346666][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 174.359364][ T10] quatech2 3-1:0.51: device disconnected [ 174.382253][ T9734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.407175][ T9734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.517499][ T9734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.545750][ T9734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.692905][ T9734] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.701623][ T9734] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.717161][ T9734] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.727854][ T9734] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.750397][ T9734] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.758779][ T9734] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.773700][ T9734] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.782288][ T9734] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.456671][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1711'. [ 175.979975][ T975] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 176.145942][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 176.149349][ T975] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 176.149385][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.149406][ T975] usb 3-1: Product: syz [ 176.149420][ T975] usb 3-1: Manufacturer: syz [ 176.149436][ T975] usb 3-1: SerialNumber: syz [ 176.151281][ T975] usb 3-1: config 0 descriptor?? [ 176.153948][ T975] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 176.273668][ T9838] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 176.297421][ T9838] macvtap2: entered promiscuous mode [ 176.297624][ T9838] macvtap2: entered allmulticast mode [ 176.297645][ T9838] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 176.301907][ T9838] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 176.302235][ T9838] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 176.767239][ T975] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 176.787429][ T975] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 176.803280][ T975] usb 3-1: USB disconnect, device number 13 [ 176.944230][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 177.106555][ T10] usb 1-1: config 0 has no interfaces? [ 177.117855][ T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 177.142184][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.153154][ T10] usb 1-1: Product: syz [ 177.157836][ T10] usb 1-1: Manufacturer: syz [ 177.162544][ T10] usb 1-1: SerialNumber: syz [ 177.181243][ T10] usb 1-1: config 0 descriptor?? [ 177.435932][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 177.435952][ T30] audit: type=1326 audit(1743100158.840:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.473708][ T10] usb 1-1: USB disconnect, device number 11 [ 177.507891][ T30] audit: type=1326 audit(1743100158.840:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.626555][ T30] audit: type=1326 audit(1743100158.840:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.657861][ T30] audit: type=1326 audit(1743100158.840:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.690401][ T30] audit: type=1326 audit(1743100158.840:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.723789][ T9854] syz.5.1734 (9854): drop_caches: 2 [ 177.725666][ T30] audit: type=1326 audit(1743100158.840:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.823686][ T30] audit: type=1326 audit(1743100158.840:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.885889][ T30] audit: type=1326 audit(1743100158.840:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.969909][ T30] audit: type=1326 audit(1743100158.840:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 177.976121][ T9877] tc_dump_action: action bad kind [ 178.038729][ T30] audit: type=1326 audit(1743100158.840:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7fc00000 [ 178.356054][ T5828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 178.515899][ T5828] usb 6-1: Using ep0 maxpacket: 16 [ 178.524220][ T5828] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.536381][ T5828] usb 6-1: config 0 has no interface number 0 [ 178.553039][ T5828] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.585202][ T5828] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.607580][ T5828] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 178.627631][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.677005][ T5828] usb 6-1: config 0 descriptor?? [ 178.764414][ T9915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1763'. [ 179.308809][ T5828] uclogic 0003:28BD:0071.0015: pen parameters not found [ 179.330779][ T5828] uclogic 0003:28BD:0071.0015: interface is invalid, ignoring [ 179.343762][ T5828] usb 6-1: USB disconnect, device number 3 [ 179.672977][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 180.415142][ T9997] random: crng reseeded on system resumption [ 180.418257][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1801'. [ 180.982035][T10025] loop9: detected capacity change from 0 to 8 [ 180.991077][T10025] Dev loop9: unable to read RDB block 8 [ 180.995884][ T1164] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 181.014031][T10025] loop9: unable to read partition table [ 181.022317][T10025] loop9: partition table beyond EOD, truncated [ 181.034626][T10025] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 181.965727][ T5828] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 182.116799][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 182.131395][ T5828] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 182.153055][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.185727][ T5828] usb 2-1: Product: syz [ 182.189968][ T5828] usb 2-1: Manufacturer: syz [ 182.194590][ T5828] usb 2-1: SerialNumber: syz [ 182.208270][ T5828] usb 2-1: config 0 descriptor?? [ 182.233363][ T5828] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 182.439914][ T5828] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 182.454485][ T5828] visor 2-1:0.0: probe with driver visor failed with error -5 [ 182.645950][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 182.650610][ T975] usb 2-1: USB disconnect, device number 12 [ 182.797569][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.835745][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 182.861749][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.880007][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.902485][T10087] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 182.919195][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.944405][ T5832] Bluetooth: hci3: Unknown advertising packet type: 0x75 [ 182.944463][ T5832] Bluetooth: hci3: adv larger than maximum supported [ 182.952422][ T5832] Bluetooth: hci3: Malformed LE Event: 0x0d [ 183.287903][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1856'. [ 183.337938][T10110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.589544][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'. [ 183.656796][ T24] usb 3-1: USB disconnect, device number 14 [ 183.705707][ T1216] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.715506][T10143] netlink: zone id is out of range [ 183.776746][T10143] netlink: set zone limit has 8 unknown bytes [ 183.866087][ T1216] usb 4-1: Using ep0 maxpacket: 8 [ 183.897018][ T1216] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.908246][ T1216] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.914915][ T1216] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 183.931323][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.942811][ T1216] usb 4-1: config 0 descriptor?? [ 184.125953][ T975] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 184.292275][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.320517][ T975] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.330294][ T975] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 184.347661][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.378700][ T975] usb 1-1: config 0 descriptor?? [ 184.387150][ T975] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 184.394004][ T975] dvb-usb: bulk message failed: -22 (3/0) [ 184.401009][ T1216] steelseries 0003:1038:12B6.0016: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 184.417689][ T975] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 184.429233][ T975] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 184.444192][ T975] usb 1-1: media controller created [ 184.458584][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.494986][ T975] dvb-usb: bulk message failed: -22 (6/0) [ 184.509274][ T975] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 184.519539][ T975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 184.534882][ T975] dvb-usb: schedule remote query interval to 150 msecs. [ 184.543526][ T975] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 184.622432][T10153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.632202][T10153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.650249][ T5915] usb 1-1: USB disconnect, device number 12 [ 184.672293][ T5915] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 184.796818][ T5828] usb 4-1: USB disconnect, device number 13 [ 184.804953][T10185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.954147][T10193] netlink: 904 bytes leftover after parsing attributes in process `syz.5.1888'. [ 185.655898][ T1216] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 185.806343][ T1216] usb 3-1: Using ep0 maxpacket: 8 [ 185.813335][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 185.818391][ T1216] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.826530][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 185.855969][ T1216] usb 3-1: config 179 has no interface number 0 [ 185.860289][T10235] netlink: 'syz.0.1905': attribute type 4 has an invalid length. [ 185.862272][ T1216] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.932270][ T1216] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 185.965713][ T1216] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.985813][ T1216] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 185.998745][ T1216] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.013933][ T1216] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.023552][ T1216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.060558][T10219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.175799][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.310194][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input26 [ 186.345803][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 186.375774][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 186.391333][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.415479][ T10] usb 2-1: Product: syz [ 186.426532][ T10] usb 2-1: Manufacturer: syz [ 186.441368][ T10] usb 2-1: SerialNumber: syz [ 186.459753][ T10] usb 2-1: config 0 descriptor?? [ 186.475045][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 186.508272][ T5828] usb 3-1: USB disconnect, device number 15 [ 186.508326][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 186.523272][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 186.526156][ T5828] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 186.570670][T10265] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 186.665049][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 186.740112][T10271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.748813][T10271] bond0: (slave bond1): Enslaving as an active interface with an up link [ 187.037503][ T10] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 187.658812][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 187.676411][ T10] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 187.702131][ T10] usb 2-1: USB disconnect, device number 13 [ 188.346216][T10360] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 188.362928][T10362] trusted_key: encrypted_key: keyword 'upcate' not recognized [ 188.561113][T10368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.708425][T10368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.826940][T10368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.948940][T10368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.059042][T10368] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.076376][T10368] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.094515][T10368] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.109373][T10368] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.176498][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'. [ 190.084483][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.092076][T10433] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.332999][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 190.349669][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 190.489527][T10447] syz.0.1990 (10447): drop_caches: 2 [ 191.187851][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'. [ 191.376917][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 191.376936][ T30] audit: type=1326 audit(1743100172.790:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.399553][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 191.405520][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 191.432820][ T30] audit: type=1326 audit(1743100172.790:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.454390][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.467051][ T30] audit: type=1326 audit(1743100172.790:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.491287][ T30] audit: type=1326 audit(1743100172.790:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.513051][ T30] audit: type=1326 audit(1743100172.790:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.534640][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.540943][ T30] audit: type=1326 audit(1743100172.790:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.567935][ T30] audit: type=1326 audit(1743100172.790:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.590760][ T30] audit: type=1326 audit(1743100172.790:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.612640][ T30] audit: type=1326 audit(1743100172.790:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f974138d169 code=0x7ffc0000 [ 191.634216][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.672181][ T30] audit: type=1326 audit(1743100172.790:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 192.580125][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2025'. [ 192.616634][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2025'. [ 193.588583][T10568] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 193.740941][T10577] ptrace attach of "./syz-executor exec"[5820] was attempted by "\x22%"[10577] [ 194.444091][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.450662][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665722][ T5915] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 194.857624][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 194.875771][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.908669][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.932880][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 194.961300][ T5915] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 194.980576][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.005709][ T5915] usb 3-1: Product: syz [ 195.010003][ T5915] usb 3-1: Manufacturer: syz [ 195.014646][ T5915] usb 3-1: SerialNumber: syz [ 195.031594][ T5915] usb 3-1: config 0 descriptor?? [ 195.046398][T10599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.242177][T10623] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.286049][ T5915] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 195.303463][T10623] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 195.317668][ T5915] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 195.368453][T10623] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.405771][T10623] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 195.426850][T10627] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.445029][T10627] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 195.454950][T10627] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.463529][T10627] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 195.576695][ C1] powermate: config urb returned -71 [ 195.577889][ T5872] usb 3-1: USB disconnect, device number 16 [ 195.582065][ C1] powermate: usb_submit_urb(config) failed [ 195.582142][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 196.335913][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 196.408561][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 196.505036][T10671] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2088'. [ 196.532812][ T10] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.556192][ T10] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.576736][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.601694][ T10] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 196.627792][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.657619][ T10] usb 4-1: config 0 descriptor?? [ 196.858440][T10684] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2093'. [ 197.115120][ T10] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 197.138462][ T10] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 197.163385][ T10] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 197.181336][ T10] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 197.193514][ T10] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 197.203705][ T10] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 197.224172][ T10] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 197.250101][ T10] acrux 0003:1A34:F705.0017: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.3-1/input0 [ 197.285679][ T10] acrux 0003:1A34:F705.0017: no inputs found [ 197.291744][ T10] acrux 0003:1A34:F705.0017: Failed to enable force feedback support, error: -19 [ 197.399723][ T10] usb 4-1: USB disconnect, device number 14 [ 197.666370][T10718] ceph: Bad value for 'source' [ 198.084936][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2121'. [ 198.735882][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.794629][ T10] IPVS: starting estimator thread 0... [ 198.886336][T10774] IPVS: using max 25 ests per chain, 60000 per kthread [ 198.899540][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.910160][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.921863][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.931615][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.940097][ T24] usb 2-1: SerialNumber: syz [ 198.945917][ T5915] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 199.116743][ T5915] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.132029][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.144445][T10785] kernel profiling enabled (shift: 17) [ 199.153712][ T5915] usb 1-1: config 0 descriptor?? [ 199.167792][ T24] usb 2-1: 0:2 : does not exist [ 199.186596][ T5915] cp210x 1-1:0.0: cp210x converter detected [ 199.208109][ T24] usb 2-1: USB disconnect, device number 14 [ 199.470973][T10797] tap0: tun_chr_ioctl cmd 1074025677 [ 199.499550][T10797] tap0: linktype set to 778 [ 199.602260][ T5915] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 199.618997][ T5915] usb 1-1: cp210x converter now attached to ttyUSB0 [ 199.826225][ T5915] usb 1-1: USB disconnect, device number 13 [ 199.857287][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.898109][ T5915] cp210x 1-1:0.0: device disconnected [ 200.119736][T10821] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 200.133996][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 200.202194][T10823] netlink: 'syz.5.2159': attribute type 10 has an invalid length. [ 200.292263][T10829] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2163'. [ 201.401719][T10848] sctp: [Deprecated]: syz.2.2171 (pid 10848) Use of int in max_burst socket option. [ 201.401719][T10848] Use struct sctp_assoc_value instead [ 201.673822][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 201.673843][ T30] audit: type=1326 audit(1743100183.080:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 201.701547][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.745095][ T30] audit: type=1326 audit(1743100183.080:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 201.809854][ T30] audit: type=1326 audit(1743100183.080:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 201.892877][ T30] audit: type=1326 audit(1743100183.080:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 201.955862][ T30] audit: type=1326 audit(1743100183.080:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 202.009299][ T30] audit: type=1326 audit(1743100183.080:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 202.055927][ T30] audit: type=1326 audit(1743100183.080:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 202.154080][ T30] audit: type=1326 audit(1743100183.080:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 202.230274][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2199'. [ 202.255896][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2199'. [ 202.276979][ T30] audit: type=1326 audit(1743100183.080:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 202.282275][T10910] bridge0: port 3(vlan0) entered blocking state [ 202.350372][ T30] audit: type=1326 audit(1743100183.080:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3551f8d169 code=0x7fc00000 [ 202.369425][T10910] bridge0: port 3(vlan0) entered disabled state [ 202.382855][T10910] vlan0: entered allmulticast mode [ 202.392817][T10910] bridge0: entered allmulticast mode [ 202.404720][T10910] vlan0: left allmulticast mode [ 202.415134][T10910] bridge0: left allmulticast mode [ 202.553724][T10926] netlink: 1256 bytes leftover after parsing attributes in process `syz.5.2206'. [ 202.751312][T10935] netpci0: tun_chr_ioctl cmd 1074812118 [ 202.865163][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2215'. [ 203.177652][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2220'. [ 203.447491][T10963] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2222'. [ 203.652655][T10977] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2229'. [ 203.662751][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 203.702991][T10972] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2228'. [ 204.003373][T10994] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2238'. [ 204.138083][T10999] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 204.395778][ T5915] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 204.549504][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 204.570739][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.592806][ T5915] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 204.618979][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.639108][ T5915] usb 2-1: config 0 descriptor?? [ 204.813155][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 205.092539][ T5915] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 205.515962][ T24] usb 2-1: USB disconnect, device number 15 [ 206.636161][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 206.778153][T11091] netlink: 'syz.1.2282': attribute type 1 has an invalid length. [ 206.796226][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 206.806016][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 206.836525][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.865818][ T10] usb 3-1: Product: syz [ 206.870049][ T10] usb 3-1: Manufacturer: syz [ 206.874676][ T10] usb 3-1: SerialNumber: syz [ 206.896897][ T10] usb 3-1: config 0 descriptor?? [ 206.911933][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 207.240746][T11119] __nla_validate_parse: 2 callbacks suppressed [ 207.240769][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 207.275813][T11119] netlink: 'syz.0.2296': attribute type 15 has an invalid length. [ 207.293993][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2296'. [ 207.316602][T11119] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.324903][T11119] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.333255][T11119] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.342603][T11119] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.358846][T11122] hsr0: entered promiscuous mode [ 207.719333][ T10] gspca_stk1135: reg_w 0x5 err -71 [ 207.726283][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 207.732662][ T10] gspca_stk1135: Sensor write failed [ 207.751220][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 207.761039][ T10] gspca_stk1135: Sensor write failed [ 207.778897][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 207.785279][ T10] gspca_stk1135: Sensor read failed [ 207.800802][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 207.808041][ T10] gspca_stk1135: Sensor read failed [ 207.813281][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 207.820818][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 207.835711][ T10] gspca_stk1135: Sensor read failed [ 207.845399][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 207.855096][ T10] gspca_stk1135: Sensor read failed [ 207.860840][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 207.867662][ T10] gspca_stk1135: Sensor write failed [ 207.873752][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 207.881249][ T10] gspca_stk1135: Sensor write failed [ 207.904898][ T10] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 207.935382][ T10] usb 3-1: USB disconnect, device number 17 [ 208.004001][T11147] 9pnet_fd: Insufficient options for proto=fd [ 208.716909][ T1216] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 208.875843][ T1216] usb 1-1: Using ep0 maxpacket: 32 [ 208.882973][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.915842][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.939317][ T1216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 208.972933][ T1216] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 208.994414][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.007589][ T1216] usb 1-1: config 0 descriptor?? [ 209.246866][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'. [ 209.289297][T11203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2335'. [ 209.424331][ T1216] hid (null): invalid report_size 822751293 [ 209.444561][ T1216] hid (null): usage index exceeded [ 209.476052][ T1216] hid (null): invalid report_size 27745 [ 209.506509][ T1216] hid (null): invalid report_size 29285 [ 209.544665][ T1216] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0019/input/input28 [ 209.662169][ T1216] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0019/input/input29 [ 209.736838][ T1216] kye 0003:0458:5011.0019: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 209.812220][ T1216] usb 1-1: USB disconnect, device number 14 [ 210.464171][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 210.634342][T11250] netlink: 'syz.5.2357': attribute type 11 has an invalid length. [ 210.849285][T11253] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2359'. [ 211.155155][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 212.018614][ T5834] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 212.155815][ T5915] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 212.161051][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 212.174703][T11310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2384'. [ 212.200546][T11310] vlan2: entered allmulticast mode [ 212.318557][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 212.344773][ T5915] usb 1-1: config 0 has no interfaces? [ 212.352737][ T5915] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 212.363149][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.385642][ T5915] usb 1-1: Product: syz [ 212.390343][ T5915] usb 1-1: Manufacturer: syz [ 212.401905][ T5915] usb 1-1: SerialNumber: syz [ 212.414692][ T5915] usb 1-1: config 0 descriptor?? [ 212.644233][ T5915] usb 1-1: USB disconnect, device number 15 [ 212.679808][T11332] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2396'. [ 212.810807][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 213.181652][ T1216] IPVS: starting estimator thread 0... [ 213.287388][T11357] IPVS: using max 34 ests per chain, 81600 per kthread [ 214.016337][T11381] netlink: 'syz.0.2419': attribute type 6 has an invalid length. [ 214.441577][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 214.441600][ T30] audit: type=1326 audit(1743100195.850:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11392 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 214.510801][ T30] audit: type=1326 audit(1743100195.850:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11392 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 214.614567][ T30] audit: type=1326 audit(1743100195.880:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11392 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 214.656148][ T30] audit: type=1326 audit(1743100195.880:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11392 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 214.784705][ T30] audit: type=1326 audit(1743100195.880:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11392 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 214.832828][ T30] audit: type=1326 audit(1743100195.880:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11392 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 214.859815][T11404] netem: change failed [ 214.890504][ T30] audit: type=1326 audit(1743100195.890:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11392 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 214.965859][ T30] audit: type=1326 audit(1743100195.890:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11392 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x7ffc0000 [ 215.302474][T11411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.347712][T11411] bond0: (slave bond1): Enslaving as an active interface with an up link [ 216.284199][T11425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2438'. [ 218.275961][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 218.897129][T11496] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2471'. [ 218.998375][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2472'. [ 219.410165][ T30] audit: type=1326 audit(1743100200.820:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11516 comm="syz.2.2481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39def8d169 code=0x0 [ 220.764720][T11559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2497'. [ 221.465909][ T1216] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 221.625849][ T1216] usb 3-1: Using ep0 maxpacket: 8 [ 221.635339][ T1216] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 221.665805][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.674091][ T1216] usb 3-1: Product: syz [ 221.684660][ T1216] usb 3-1: Manufacturer: syz [ 221.704509][ T1216] usb 3-1: SerialNumber: syz [ 221.711401][ T1216] usb 3-1: config 0 descriptor?? [ 221.728811][ T1216] gspca_main: se401-2.14.0 probing 047d:5003 [ 222.096620][T11601] overlayfs: failed to clone lowerpath [ 222.144125][ T1216] gspca_se401: Wrong descriptor type [ 224.287214][ T1216] usb 3-1: USB disconnect, device number 18 [ 224.865717][ T5828] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 225.028304][ T5828] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.049885][ T5828] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.079492][ T5828] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.106037][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.131655][T11693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.151366][ T5828] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.393003][ T5828] usb 3-1: USB disconnect, device number 19 [ 225.516000][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 225.825115][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 225.875000][T11738] bond1 (unregistering): Released all slaves [ 225.954060][T11743] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2584'. [ 226.432474][T11763] 9p: Unknown uid 00000000004294967295 [ 226.456929][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2595'. [ 226.493531][T11765] netlink: 39 bytes leftover after parsing attributes in process `syz.5.2595'. [ 226.852452][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2600'. [ 227.051106][T11786] overlayfs: unescaped trailing colons in lowerdir mount option. [ 227.763430][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.774220][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.784315][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.794416][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.802274][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.421965][T11807] chnl_net:caif_netlink_parms(): no params data found [ 228.715087][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.735770][T11807] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.736052][T11855] bpf: Bad value for 'uid' [ 228.764813][T11807] bridge_slave_0: entered allmulticast mode [ 228.771966][T11807] bridge_slave_0: entered promiscuous mode [ 228.780975][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.788827][T11807] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.796428][T11807] bridge_slave_1: entered allmulticast mode [ 228.803627][T11807] bridge_slave_1: entered promiscuous mode [ 228.930457][T11807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.958793][T11807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.078676][T11807] team0: Port device team_slave_0 added [ 229.122628][T11807] team0: Port device team_slave_1 added [ 229.185333][T11807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.205872][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.231794][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.238325][T11807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.252064][T11807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.259124][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.285011][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.301327][T11807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.478307][T11885] macsec2: entered promiscuous mode [ 229.483619][T11885] vlan0: entered promiscuous mode [ 229.500563][T11885] macsec2: entered allmulticast mode [ 229.506445][T11885] vlan0: entered allmulticast mode [ 229.511698][T11885] veth0_vlan: entered allmulticast mode [ 229.540743][T11807] hsr_slave_0: entered promiscuous mode [ 229.547905][T11807] hsr_slave_1: entered promiscuous mode [ 229.554915][T11807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.563325][T11807] Cannot create hsr debugfs directory [ 229.822046][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2654'. [ 229.875906][ T5832] Bluetooth: hci5: command tx timeout [ 229.899767][T11807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.923333][T11807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.935470][T11807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.954789][T11807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.113194][T11807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.199361][T11807] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.238656][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.245843][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.268605][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.275770][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.384489][T11807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.555787][ T5828] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 230.691032][T11807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.745785][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 230.756998][ T5828] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 230.788163][ T5828] usb 1-1: config 0 has no interface number 0 [ 230.794338][ T5828] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.829284][ T5828] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.866984][ T5828] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 230.896043][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 230.904179][ T5828] usb 1-1: Product: syz [ 230.930754][ T5828] usb 1-1: SerialNumber: syz [ 230.962285][ T5828] usb 1-1: config 0 descriptor?? [ 230.979863][ T5828] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 230.992935][ T5828] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input30 [ 231.206271][T11807] veth0_vlan: entered promiscuous mode [ 231.235139][T11807] veth1_vlan: entered promiscuous mode [ 231.242618][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 231.326772][T11807] veth0_macvtap: entered promiscuous mode [ 231.354402][T11807] veth1_macvtap: entered promiscuous mode [ 231.410040][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.449010][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.465878][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.479496][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.485184][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.488389][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.504889][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.512149][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.519305][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.519360][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.537806][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.545311][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.552186][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.552461][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.569649][ T5828] usb 1-1: USB disconnect, device number 16 [ 231.576137][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.576160][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 231.613444][T11957] Attempt to restore checkpoint with obsolete wellknown handles [ 231.630256][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.656042][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.676260][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.687231][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.699033][T11807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.716859][ T5828] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 231.738866][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.765278][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.776331][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.793710][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.804382][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.823869][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.862318][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.889232][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.902853][T11807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.916219][T11807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.938237][T11807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.955863][T11962] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2677'. [ 231.956041][ T5832] Bluetooth: hci5: command tx timeout [ 231.998875][T11807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.044419][T11807] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.054276][T11807] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.063247][T11807] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.207518][T11969] 9pnet_virtio: no channels available for device 127.0.0.1 [ 232.260036][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.314019][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.362034][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.383123][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.722443][T11989] netlink: 'syz.5.2689': attribute type 2 has an invalid length. [ 234.042806][ T5832] Bluetooth: hci5: command tx timeout [ 234.129269][T12035] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2708'. [ 235.327278][T12087] sctp: [Deprecated]: syz.2.2734 (pid 12087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.327278][T12087] Use struct sctp_sack_info instead [ 235.836775][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 236.024278][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 236.032847][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 236.063871][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 236.084476][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.102877][ T10] usb 3-1: Product: syz [ 236.116434][ T5832] Bluetooth: hci5: command tx timeout [ 236.119628][ T10] usb 3-1: Manufacturer: syz [ 236.141640][ T10] usb 3-1: SerialNumber: syz [ 236.158347][ T10] usb 3-1: config 0 descriptor?? [ 236.183506][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 236.203948][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 236.325757][ T5872] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 236.476069][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 236.489525][ T5872] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 236.498196][ T5872] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 236.507255][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.518397][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 236.527540][ T5872] usb 1-1: config 1 has no interface number 0 [ 236.534465][ T5872] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 236.547180][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.572775][ T5872] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 236.782899][ T5872] snd_usb_pod 1-1:1.1: set_interface failed [ 236.790143][ T10] em28xx 3-1:0.0: chip ID is em28178 [ 236.804148][ T5872] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 236.815914][ T5872] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 236.835001][ T5872] usb 1-1: USB disconnect, device number 17 [ 237.063250][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 237.072401][ T10] em28xx 3-1:0.0: board has no eeprom [ 237.146062][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 237.153970][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 237.165942][ T5872] em28xx 3-1:0.0: Binding DVB extension [ 237.178548][ T10] usb 3-1: USB disconnect, device number 20 [ 237.184893][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 237.212353][ T5872] em28xx 3-1:0.0: Registering input extension [ 237.265831][ T5872] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 237.272518][ T5872] Registered IR keymap rc-empty [ 237.279221][ T5872] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 237.290958][ T5872] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 237.322847][ T5872] em28xx 3-1:0.0: Input extension successfully initialized [ 237.331413][ T10] em28xx 3-1:0.0: Closing input extension [ 237.382273][ T10] em28xx 3-1:0.0: Freeing device [ 237.448376][T12145] mkiss: ax0: crc mode is auto. [ 237.626377][ T30] audit: type=1326 audit(1743100219.040:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7ffc0000 [ 237.647965][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.663507][ T30] audit: type=1326 audit(1743100219.040:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x7ffc0000 [ 237.695237][ T30] audit: type=1326 audit(1743100219.070:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f48a3b8d169 code=0x7ffc0000 [ 237.724195][T12158] syzkaller1: tun_chr_ioctl cmd 35108 [ 237.745975][ T30] audit: type=1326 audit(1743100219.070:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.2764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48a3b8d169 code=0x0 [ 237.887147][T12165] sp0: Synchronizing with TNC [ 237.907378][ T54] [ 237.909743][ T54] ===================================================== [ 237.916699][ T54] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 237.924146][ T54] 6.14.0-syzkaller-05877-g1a9239bb4253 #0 Not tainted [ 237.930982][ T54] ----------------------------------------------------- [ 237.937899][ T54] kworker/u8:3/54 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 237.945533][ T54] ffffffff8f6b5bd8 (disc_data_lock){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x440 [ 237.955034][ T54] [ 237.955034][ T54] and this task is already holding: [ 237.962393][ T54] ffffffff9a7d48f8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 237.971084][ T54] which would create a new lock dependency: [ 237.976960][ T54] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 237.984610][ T54] [ 237.984610][ T54] but this new dependency connects a HARDIRQ-irq-safe lock: [ 237.994057][ T54] (&port_lock_key){-.-.}-{3:3} [ 237.994076][ T54] [ 237.994076][ T54] ... which became HARDIRQ-irq-safe at: [ 238.006633][ T54] lock_acquire+0x116/0x2f0 [ 238.011234][ T54] _raw_spin_lock_irqsave+0xd8/0x130 [ 238.016646][ T54] serial8250_handle_irq+0x6d/0xb80 [ 238.021946][ T54] serial8250_default_handle_irq+0xd1/0x1f0 [ 238.027927][ T54] serial8250_interrupt+0xa9/0x1f0 [ 238.033122][ T54] __handle_irq_event_percpu+0x29c/0xa60 [ 238.038839][ T54] handle_irq_event+0x89/0x1f0 [ 238.043684][ T54] handle_edge_irq+0x25f/0xc20 [ 238.048526][ T54] __common_interrupt+0x136/0x230 [ 238.053644][ T54] common_interrupt+0xb4/0xd0 [ 238.058399][ T54] asm_common_interrupt+0x26/0x40 [ 238.063496][ T54] acpi_safe_halt+0x21/0x30 [ 238.068072][ T54] acpi_idle_enter+0xe4/0x140 [ 238.072822][ T54] cpuidle_enter_state+0x111/0x480 [ 238.078004][ T54] cpuidle_enter+0x5d/0xa0 [ 238.082496][ T54] do_idle+0x374/0x5d0 [ 238.086656][ T54] cpu_startup_entry+0x42/0x60 [ 238.091509][ T54] rest_init+0x2dc/0x300 [ 238.095824][ T54] start_kernel+0x484/0x510 [ 238.100404][ T54] x86_64_start_reservations+0x2a/0x30 [ 238.105935][ T54] x86_64_start_kernel+0x66/0x70 [ 238.110944][ T54] common_startup_64+0x13e/0x147 [ 238.115954][ T54] [ 238.115954][ T54] to a HARDIRQ-irq-unsafe lock: [ 238.122970][ T54] (disc_data_lock){.+.+}-{3:3} [ 238.122992][ T54] [ 238.122992][ T54] ... which became HARDIRQ-irq-unsafe at: [ 238.135707][ T54] ... [ 238.135718][ T54] lock_acquire+0x116/0x2f0 [ 238.142877][ T54] _raw_read_lock+0x36/0x50 [ 238.147463][ T54] sixpack_receive_buf+0x57/0x1420 [ 238.152658][ T54] tiocsti+0x24f/0x310 [ 238.156802][ T54] tty_ioctl+0x518/0xdc0 [ 238.161133][ T54] __se_sys_ioctl+0xf1/0x160 [ 238.165816][ T54] do_syscall_64+0xf3/0x230 [ 238.170394][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.176360][ T54] [ 238.176360][ T54] other info that might help us debug this: [ 238.176360][ T54] [ 238.186574][ T54] Possible interrupt unsafe locking scenario: [ 238.186574][ T54] [ 238.194878][ T54] CPU0 CPU1 [ 238.200243][ T54] ---- ---- [ 238.205595][ T54] lock(disc_data_lock); [ 238.209919][ T54] local_irq_disable(); [ 238.216659][ T54] lock(&port_lock_key); [ 238.223497][ T54] lock(disc_data_lock); [ 238.230335][ T54] [ 238.233778][ T54] lock(&port_lock_key); [ 238.238286][ T54] [ 238.238286][ T54] *** DEADLOCK *** [ 238.238286][ T54] [ 238.246416][ T54] 6 locks held by kworker/u8:3/54: [ 238.251526][ T54] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 238.263197][ T54] #1: ffffc90000bf7c60 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 238.274853][ T54] #2: ffff8880249b0ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x860 [ 238.283890][ T54] #3: ffff888021bbf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 238.293184][ T54] #4: ffffffff9a7d48f8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 238.302318][ T54] #5: ffff888021bbf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 238.311645][ T54] [ 238.311645][ T54] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 238.322064][ T54] -> (&port_lock_key){-.-.}-{3:3} { [ 238.327278][ T54] IN-HARDIRQ-W at: [ 238.331256][ T54] lock_acquire+0x116/0x2f0 [ 238.337407][ T54] _raw_spin_lock_irqsave+0xd8/0x130 [ 238.344353][ T54] serial8250_handle_irq+0x6d/0xb80 [ 238.351223][ T54] serial8250_default_handle_irq+0xd1/0x1f0 [ 238.358764][ T54] serial8250_interrupt+0xa9/0x1f0 [ 238.365541][ T54] __handle_irq_event_percpu+0x29c/0xa60 [ 238.372860][ T54] handle_irq_event+0x89/0x1f0 [ 238.379286][ T54] handle_edge_irq+0x25f/0xc20 [ 238.385735][ T54] __common_interrupt+0x136/0x230 [ 238.392408][ T54] common_interrupt+0xb4/0xd0 [ 238.398741][ T54] asm_common_interrupt+0x26/0x40 [ 238.405415][ T54] acpi_safe_halt+0x21/0x30 [ 238.411561][ T54] acpi_idle_enter+0xe4/0x140 [ 238.417875][ T54] cpuidle_enter_state+0x111/0x480 [ 238.424624][ T54] cpuidle_enter+0x5d/0xa0 [ 238.430684][ T54] do_idle+0x374/0x5d0 [ 238.436407][ T54] cpu_startup_entry+0x42/0x60 [ 238.442811][ T54] rest_init+0x2dc/0x300 [ 238.448782][ T54] start_kernel+0x484/0x510 [ 238.454937][ T54] x86_64_start_reservations+0x2a/0x30 [ 238.462033][ T54] x86_64_start_kernel+0x66/0x70 [ 238.468609][ T54] common_startup_64+0x13e/0x147 [ 238.475210][ T54] IN-SOFTIRQ-W at: [ 238.479202][ T54] lock_acquire+0x116/0x2f0 [ 238.485361][ T54] _raw_spin_lock_irqsave+0xd8/0x130 [ 238.492299][ T54] serial8250_handle_irq+0x6d/0xb80 [ 238.499141][ T54] serial8250_default_handle_irq+0xd1/0x1f0 [ 238.506674][ T54] serial8250_interrupt+0xa9/0x1f0 [ 238.513427][ T54] __handle_irq_event_percpu+0x29c/0xa60 [ 238.520698][ T54] handle_irq_event+0x89/0x1f0 [ 238.527101][ T54] handle_edge_irq+0x25f/0xc20 [ 238.533504][ T54] __common_interrupt+0x136/0x230 [ 238.540167][ T54] common_interrupt+0x5e/0xd0 [ 238.546483][ T54] asm_common_interrupt+0x26/0x40 [ 238.553142][ T54] handle_softirqs+0x1f1/0x9b0 [ 238.559547][ T54] __irq_exit_rcu+0xfb/0x220 [ 238.565775][ T54] irq_exit_rcu+0x9/0x30 [ 238.571675][ T54] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 238.578969][ T54] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 238.586597][ T54] finish_task_switch+0x1ea/0x870 [ 238.593283][ T54] __schedule+0x1acb/0x5090 [ 238.599454][ T54] schedule+0x163/0x360 [ 238.605285][ T54] schedule_timeout+0x15b/0x290 [ 238.611801][ T54] rcu_gp_fqs_loop+0x2e1/0x1340 [ 238.618296][ T54] rcu_gp_kthread+0xa7/0x3b0 [ 238.624549][ T54] kthread+0x7a9/0x920 [ 238.630273][ T54] ret_from_fork+0x4b/0x80 [ 238.636356][ T54] ret_from_fork_asm+0x1a/0x30 [ 238.642760][ T54] INITIAL USE at: [ 238.646645][ T54] lock_acquire+0x116/0x2f0 [ 238.652715][ T54] _raw_spin_lock_irqsave+0xd8/0x130 [ 238.659554][ T54] serial8250_do_set_termios+0x4dc/0x1c70 [ 238.666826][ T54] uart_set_options+0x439/0x780 [ 238.673248][ T54] serial8250_console_setup+0x3dd/0x670 [ 238.680346][ T54] univ8250_console_setup+0x429/0x530 [ 238.687270][ T54] try_enable_preferred_console+0x46b/0x5c0 [ 238.694723][ T54] register_console+0x37d/0x1080 [ 238.701248][ T54] univ8250_console_init+0x52/0x90 [ 238.707942][ T54] console_init+0x1b8/0x6f0 [ 238.714013][ T54] start_kernel+0x2dd/0x510 [ 238.720101][ T54] x86_64_start_reservations+0x2a/0x30 [ 238.727120][ T54] x86_64_start_kernel+0x66/0x70 [ 238.733609][ T54] common_startup_64+0x13e/0x147 [ 238.740098][ T54] } [ 238.742588][ T54] ... key at: [] port_lock_key+0x0/0x20 [ 238.750211][ T54] [ 238.750211][ T54] the dependencies between the lock to be acquired [ 238.750220][ T54] and HARDIRQ-irq-unsafe lock: [ 238.763728][ T54] -> (disc_data_lock){.+.+}-{3:3} { [ 238.768934][ T54] HARDIRQ-ON-R at: [ 238.772900][ T54] lock_acquire+0x116/0x2f0 [ 238.779045][ T54] _raw_read_lock+0x36/0x50 [ 238.785191][ T54] sixpack_receive_buf+0x57/0x1420 [ 238.791939][ T54] tiocsti+0x24f/0x310 [ 238.797664][ T54] tty_ioctl+0x518/0xdc0 [ 238.803562][ T54] __se_sys_ioctl+0xf1/0x160 [ 238.809792][ T54] do_syscall_64+0xf3/0x230 [ 238.815931][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.823459][ T54] SOFTIRQ-ON-R at: [ 238.827476][ T54] lock_acquire+0x116/0x2f0 [ 238.833618][ T54] _raw_read_lock+0x36/0x50 [ 238.839760][ T54] sixpack_receive_buf+0x57/0x1420 [ 238.846508][ T54] tiocsti+0x24f/0x310 [ 238.852228][ T54] tty_ioctl+0x518/0xdc0 [ 238.858108][ T54] __se_sys_ioctl+0xf1/0x160 [ 238.864337][ T54] do_syscall_64+0xf3/0x230 [ 238.870478][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.878008][ T54] INITIAL USE at: [ 238.881891][ T54] lock_acquire+0x116/0x2f0 [ 238.887966][ T54] _raw_write_lock_irq+0xd3/0x120 [ 238.894567][ T54] sixpack_close+0x2c/0x280 [ 238.900652][ T54] tty_ldisc_kill+0xa3/0x1a0 [ 238.906805][ T54] tty_ldisc_release+0x1a1/0x200 [ 238.913302][ T54] tty_release_struct+0x2b/0xe0 [ 238.919720][ T54] tty_release+0xd06/0x12c0 [ 238.925789][ T54] __fput+0x3e9/0x9f0 [ 238.931348][ T54] task_work_run+0x251/0x310 [ 238.937501][ T54] syscall_exit_to_user_mode+0x13f/0x340 [ 238.944685][ T54] do_syscall_64+0x100/0x230 [ 238.950826][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.958272][ T54] INITIAL READ USE at: [ 238.962590][ T54] lock_acquire+0x116/0x2f0 [ 238.969082][ T54] _raw_read_lock+0x36/0x50 [ 238.975587][ T54] sixpack_receive_buf+0x57/0x1420 [ 238.982681][ T54] tiocsti+0x24f/0x310 [ 238.988735][ T54] tty_ioctl+0x518/0xdc0 [ 238.994975][ T54] __se_sys_ioctl+0xf1/0x160 [ 239.001554][ T54] do_syscall_64+0xf3/0x230 [ 239.008042][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.015920][ T54] } [ 239.018405][ T54] ... key at: [] disc_data_lock+0x18/0x100 [ 239.026286][ T54] ... acquired at: [ 239.030078][ T54] lock_acquire+0x116/0x2f0 [ 239.034747][ T54] _raw_read_lock+0x36/0x50 [ 239.039417][ T54] sixpack_write_wakeup+0x30/0x440 [ 239.044687][ T54] tty_wakeup+0xbb/0x100 [ 239.049086][ T54] tty_port_default_wakeup+0xa6/0xf0 [ 239.054533][ T54] serial8250_tx_chars+0x6e2/0x930 [ 239.059803][ T54] __start_tx+0x32e/0x470 [ 239.064297][ T54] __uart_start+0x2bc/0x450 [ 239.068960][ T54] uart_write+0x280/0xa40 [ 239.073450][ T54] sixpack_receive_buf+0x447/0x1420 [ 239.078809][ T54] tty_ldisc_receive_buf+0x11f/0x170 [ 239.084263][ T54] tty_port_default_receive_buf+0x6d/0xa0 [ 239.090158][ T54] flush_to_ldisc+0x32b/0x860 [ 239.094995][ T54] process_scheduled_works+0xac3/0x18e0 [ 239.100706][ T54] worker_thread+0x870/0xd30 [ 239.105465][ T54] kthread+0x7a9/0x920 [ 239.109693][ T54] ret_from_fork+0x4b/0x80 [ 239.114279][ T54] ret_from_fork_asm+0x1a/0x30 [ 239.119224][ T54] [ 239.121543][ T54] [ 239.121543][ T54] stack backtrace: [ 239.127420][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 239.127435][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.127444][ T54] Workqueue: events_unbound flush_to_ldisc [ 239.127459][ T54] Call Trace: [ 239.127470][ T54] [ 239.127478][ T54] dump_stack_lvl+0x241/0x360 [ 239.127493][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.127505][ T54] ? __pfx__printk+0x10/0x10 [ 239.127519][ T54] validate_chain+0x22bb/0x24e0 [ 239.127535][ T54] __lock_acquire+0xad5/0xd80 [ 239.127550][ T54] lock_acquire+0x116/0x2f0 [ 239.127564][ T54] ? sixpack_write_wakeup+0x30/0x440 [ 239.127576][ T54] _raw_read_lock+0x36/0x50 [ 239.127591][ T54] ? sixpack_write_wakeup+0x30/0x440 [ 239.127601][ T54] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 239.127610][ T54] sixpack_write_wakeup+0x30/0x440 [ 239.127621][ T54] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 239.127632][ T54] tty_wakeup+0xbb/0x100 [ 239.127641][ T54] tty_port_default_wakeup+0xa6/0xf0 [ 239.127655][ T54] serial8250_tx_chars+0x6e2/0x930 [ 239.127669][ T54] __start_tx+0x32e/0x470 [ 239.127682][ T54] __uart_start+0x2bc/0x450 [ 239.127693][ T54] uart_write+0x280/0xa40 [ 239.127705][ T54] sixpack_receive_buf+0x447/0x1420 [ 239.127717][ T54] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 239.127733][ T54] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 239.127744][ T54] tty_ldisc_receive_buf+0x11f/0x170 [ 239.127757][ T54] tty_port_default_receive_buf+0x6d/0xa0 [ 239.127771][ T54] flush_to_ldisc+0x32b/0x860 [ 239.127785][ T54] ? process_scheduled_works+0x9cb/0x18e0 [ 239.127801][ T54] process_scheduled_works+0xac3/0x18e0 [ 239.127822][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.127839][ T54] ? assign_work+0x367/0x3d0 [ 239.127855][ T54] worker_thread+0x870/0xd30 [ 239.127867][ T54] ? __kthread_parkme+0x169/0x1d0 [ 239.127878][ T54] ? __pfx_worker_thread+0x10/0x10 [ 239.127888][ T54] kthread+0x7a9/0x920 [ 239.127900][ T54] ? __pfx_worker_thread+0x10/0x10 [ 239.127909][ T54] ? __pfx_kthread+0x10/0x10 [ 239.127920][ T54] ? __pfx_kthread+0x10/0x10 [ 239.127931][ T54] ? __pfx_kthread+0x10/0x10 [ 239.127941][ T54] ? __pfx_kthread+0x10/0x10 [ 239.127953][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.127967][ T54] ? lockdep_hardirqs_on+0x9d/0x150 [ 239.127977][ T54] ? __pfx_kthread+0x10/0x10 [ 239.127988][ T54] ret_from_fork+0x4b/0x80 [ 239.128003][ T54] ? __pfx_kthread+0x10/0x10 [ 239.128015][ T54] ret_from_fork_asm+0x1a/0x30 [ 239.128032][ T54] [ 239.128105][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.383515][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.404292][ T5834] Bluetooth: hci5: command tx timeout [ 239.635670][ T5832] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.641849][ T5834] Bluetooth: hci0: command 0x1003 tx timeout