last executing test programs:

2.211883843s ago: executing program 2 (id=846):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
lseek(r0, 0x1000000, 0x0)

2.03110237s ago: executing program 2 (id=851):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009402"])

1.870935677s ago: executing program 4 (id=854):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00')
writev(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

1.756780099s ago: executing program 2 (id=857):
open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$setlease(r0, 0x400, 0x0)

1.67910653s ago: executing program 4 (id=859):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x20000000)

1.563915766s ago: executing program 2 (id=861):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000006f80)=[{{&(0x7f0000001080)={0xa, 0x4e21, 0xb, @private0, 0x7fff}, 0x1c, &(0x7f0000001500)=[{&(0x7f00000010c0)='P', 0x1}], 0x1}}, {{&(0x7f0000001580)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x3}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000015c0)="de", 0x1}], 0x1}}], 0x2, 0x8040)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

1.380392231s ago: executing program 2 (id=867):
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d105012000020000de010902120001000000000904"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x95)

1.207334314s ago: executing program 1 (id=872):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18)
r1 = fanotify_init(0x0, 0x40000)
fanotify_mark(r1, 0x180, 0x40000008, 0xffffffffffffffff, 0x0)

1.147096871s ago: executing program 1 (id=873):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300)
poll(&(0x7f00000020c0)=[{r0, 0x9012}], 0x1, 0x0)
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)
poll(&(0x7f00000021c0)=[{r0, 0x1000}], 0x1, 0x6)

1.069967617s ago: executing program 1 (id=875):
r0 = getpid()
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5}, 0x0)
ioprio_get$uid(0x2, 0x0)

979.610593ms ago: executing program 1 (id=878):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000a80)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}, 0x6048090)

820.538662ms ago: executing program 1 (id=882):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x31863}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40040)

771.540748ms ago: executing program 4 (id=883):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000200)=""/25, &(0x7f0000000340)=0x19)

737.990565ms ago: executing program 3 (id=884):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38)

670.602448ms ago: executing program 1 (id=885):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x4018}], 0x1, 0x0, 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)

659.65155ms ago: executing program 4 (id=886):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100b}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

564.634676ms ago: executing program 3 (id=888):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

506.341907ms ago: executing program 4 (id=889):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x19c00}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)

481.816762ms ago: executing program 0 (id=890):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000080096000040"])

435.495652ms ago: executing program 3 (id=891):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x2, 0x8, 0xffffffff, 0x4}]})

411.77771ms ago: executing program 4 (id=892):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7d, &(0x7f0000000740)={r1}, &(0x7f0000000040)=0x8)

315.206088ms ago: executing program 0 (id=893):
socket$unix(0x1, 0x1, 0x0)
r0 = syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39)

241.237619ms ago: executing program 3 (id=894):
syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
r0 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

237.930609ms ago: executing program 0 (id=895):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, 0x0)

155.666835ms ago: executing program 0 (id=896):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x32ce750b, 0x61})

155.289896ms ago: executing program 3 (id=897):
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x129, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})

92.349394ms ago: executing program 0 (id=898):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1)

80.970854ms ago: executing program 2 (id=899):
unshare(0x2c060000)
unshare(0x24020400)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18)

21.351705ms ago: executing program 3 (id=900):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

0s ago: executing program 0 (id=901):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts.
[   83.133439][ T5828] cgroup: Unknown subsys name 'net'
[   83.300485][ T5828] cgroup: Unknown subsys name 'cpuset'
[   83.309829][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.939489][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.671186][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.683943][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.706940][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.714585][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.723119][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.731251][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.735167][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.746696][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.747046][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.754557][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.762759][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.775695][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.783176][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.790697][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.790912][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.805093][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.815980][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.840708][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.848230][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.857310][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.866033][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.869001][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.876974][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.909991][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.919775][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.509408][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   88.588650][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   88.644925][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   88.682368][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   88.747490][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   88.928149][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.935363][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.943136][ T5840] bridge_slave_0: entered allmulticast mode
[   88.950910][ T5840] bridge_slave_0: entered promiscuous mode
[   88.965832][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.973318][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.980673][ T5840] bridge_slave_1: entered allmulticast mode
[   88.988630][ T5840] bridge_slave_1: entered promiscuous mode
[   88.995874][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.003314][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.010449][ T5839] bridge_slave_0: entered allmulticast mode
[   89.018446][ T5839] bridge_slave_0: entered promiscuous mode
[   89.031273][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.038609][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.045736][ T5841] bridge_slave_0: entered allmulticast mode
[   89.053059][ T5841] bridge_slave_0: entered promiscuous mode
[   89.060960][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.070661][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.079025][ T5841] bridge_slave_1: entered allmulticast mode
[   89.086089][ T5841] bridge_slave_1: entered promiscuous mode
[   89.112886][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.120266][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.127744][ T5839] bridge_slave_1: entered allmulticast mode
[   89.134938][ T5839] bridge_slave_1: entered promiscuous mode
[   89.234036][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.243836][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.251217][ T5854] bridge_slave_0: entered allmulticast mode
[   89.259201][ T5854] bridge_slave_0: entered promiscuous mode
[   89.294625][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.306950][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.316578][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.324003][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.331704][ T5854] bridge_slave_1: entered allmulticast mode
[   89.339200][ T5854] bridge_slave_1: entered promiscuous mode
[   89.361806][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.374103][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.381304][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.389364][ T5842] bridge_slave_0: entered allmulticast mode
[   89.397140][ T5842] bridge_slave_0: entered promiscuous mode
[   89.406093][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.417397][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.459519][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.471281][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.495673][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.503212][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.510677][ T5842] bridge_slave_1: entered allmulticast mode
[   89.517935][ T5842] bridge_slave_1: entered promiscuous mode
[   89.554327][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.593169][ T5841] team0: Port device team_slave_0 added
[   89.627434][ T5839] team0: Port device team_slave_0 added
[   89.649459][ T5841] team0: Port device team_slave_1 added
[   89.659102][ T5854] team0: Port device team_slave_0 added
[   89.682710][ T5840] team0: Port device team_slave_0 added
[   89.690678][ T5839] team0: Port device team_slave_1 added
[   89.728942][ T5854] team0: Port device team_slave_1 added
[   89.750744][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.764406][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.775559][ T5840] team0: Port device team_slave_1 added
[   89.810129][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.817578][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.843634][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.882977][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.887566][ T5857] Bluetooth: hci0: command tx timeout
[   89.894462][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.922392][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.948137][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.955116][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.956600][ T5851] Bluetooth: hci1: command tx timeout
[   89.985767][ T5857] Bluetooth: hci2: command tx timeout
[   89.986912][ T5851] Bluetooth: hci4: command tx timeout
[   89.992090][ T5857] Bluetooth: hci3: command tx timeout
[   89.992869][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.047581][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.054543][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.080579][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.092133][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.099359][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.125396][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.139340][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.146577][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.172547][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.195089][ T5842] team0: Port device team_slave_0 added
[   90.206914][ T5842] team0: Port device team_slave_1 added
[   90.213815][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.221251][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.247622][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.260635][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.267908][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.293969][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.429144][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.436122][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.462380][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.475382][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.482391][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.508485][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.538087][ T5839] hsr_slave_0: entered promiscuous mode
[   90.544497][ T5839] hsr_slave_1: entered promiscuous mode
[   90.557905][ T5854] hsr_slave_0: entered promiscuous mode
[   90.564292][ T5854] hsr_slave_1: entered promiscuous mode
[   90.571713][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.579596][ T5854] Cannot create hsr debugfs directory
[   90.611889][ T5841] hsr_slave_0: entered promiscuous mode
[   90.618409][ T5841] hsr_slave_1: entered promiscuous mode
[   90.624503][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.632493][ T5841] Cannot create hsr debugfs directory
[   90.764231][ T5840] hsr_slave_0: entered promiscuous mode
[   90.771210][ T5840] hsr_slave_1: entered promiscuous mode
[   90.778517][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.786087][ T5840] Cannot create hsr debugfs directory
[   90.860601][ T5842] hsr_slave_0: entered promiscuous mode
[   90.867176][ T5842] hsr_slave_1: entered promiscuous mode
[   90.873455][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.881177][ T5842] Cannot create hsr debugfs directory
[   91.375501][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.396933][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.433381][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.452237][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.477028][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.487845][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.502840][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.527236][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.588834][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.630675][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.660819][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.688849][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.758823][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.771812][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.782611][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.794908][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.888271][ T1207] cfg80211: failed to load regulatory.db
[   91.912012][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.957132][ T5851] Bluetooth: hci0: command tx timeout
[   91.973296][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.982031][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.004465][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.014064][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.025079][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.036608][ T5851] Bluetooth: hci3: command tx timeout
[   92.036727][ T5849] Bluetooth: hci4: command tx timeout
[   92.042096][ T5851] Bluetooth: hci2: command tx timeout
[   92.048091][ T5857] Bluetooth: hci1: command tx timeout
[   92.085260][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   92.101115][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   92.133136][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.140397][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.195383][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.202565][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.212970][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.220218][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.232458][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.239578][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.372385][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.385667][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.439310][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   92.486002][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.493196][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.529947][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.537172][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.583370][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   92.620981][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.628208][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.661221][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.668391][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.724395][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.829313][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   92.864721][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.871924][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.922535][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.935932][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.943150][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.014600][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.123080][ T5854] veth0_vlan: entered promiscuous mode
[   93.151610][ T5854] veth1_vlan: entered promiscuous mode
[   93.264359][ T5854] veth0_macvtap: entered promiscuous mode
[   93.346323][ T5854] veth1_macvtap: entered promiscuous mode
[   93.428399][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.467308][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.511452][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.536417][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.545145][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.554416][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.595274][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.634242][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.738511][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.839408][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.849454][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.903404][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.914031][ T5842] veth0_vlan: entered promiscuous mode
[   93.921743][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.990200][ T5842] veth1_vlan: entered promiscuous mode
[   94.002521][ T5840] veth0_vlan: entered promiscuous mode
[   94.023113][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.030044][ T5841] veth0_vlan: entered promiscuous mode
[   94.044309][ T5857] Bluetooth: hci0: command tx timeout
[   94.061295][ T5839] veth0_vlan: entered promiscuous mode
[   94.089507][ T5841] veth1_vlan: entered promiscuous mode
[   94.117283][ T5857] Bluetooth: hci1: command tx timeout
[   94.120779][ T5839] veth1_vlan: entered promiscuous mode
[   94.128584][ T5857] Bluetooth: hci4: command tx timeout
[   94.134033][ T5857] Bluetooth: hci2: command tx timeout
[   94.139560][   T51] Bluetooth: hci3: command tx timeout
[   94.156215][ T5840] veth1_vlan: entered promiscuous mode
[   94.223792][ T5842] veth0_macvtap: entered promiscuous mode
[   94.253236][ T5842] veth1_macvtap: entered promiscuous mode
[   94.284432][ T5840] veth0_macvtap: entered promiscuous mode
[   94.298204][ T5841] veth0_macvtap: entered promiscuous mode
[   94.309182][ T5840] veth1_macvtap: entered promiscuous mode
[   94.351965][ T5841] veth1_macvtap: entered promiscuous mode
[   94.371589][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.398698][ T5839] veth0_macvtap: entered promiscuous mode
[   94.426124][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.449213][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.460374][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.472359][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.486890][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.495609][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.552140][ T5839] veth1_macvtap: entered promiscuous mode
[   94.574407][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.611581][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.645158][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.655851][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.665549][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.674335][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.689378][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.703954][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.739873][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.751101][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.764656][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.773790][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.809711][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.863162][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.872105][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.881126][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.889959][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.930835][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.942323][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.996855][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.005435][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.024655][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.047416][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.104576][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.115817][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.199453][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.233471][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.341243][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.376505][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.467263][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.491349][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.573041][ T5977] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   95.573041][ T5977] The task syz.1.7 (5977) triggered the difference, watch for misbehavior.
[   95.645538][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   95.667258][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.701265][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.924690][ T5983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.116812][ T5857] Bluetooth: hci0: command tx timeout
[   96.125778][ T5986] Bluetooth: MGMT ver 1.23
[   96.164074][ T5988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9'.
[   96.197108][ T5857] Bluetooth: hci2: command tx timeout
[   96.203141][   T51] Bluetooth: hci3: command tx timeout
[   96.203184][ T5849] Bluetooth: hci1: command tx timeout
[   96.209198][ T5857] Bluetooth: hci4: command tx timeout
[   97.430548][ T6022] Illegal XDP return value 4294967294 on prog  (id 3) dev N/A, expect packet loss!
[   98.540209][ T6053] netlink: 68 bytes leftover after parsing attributes in process `syz.4.37'.
[   99.169216][ T6072] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   99.202806][ T6074] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET)
[   99.489051][ T6053] syz.4.37 (6053) used greatest stack depth: 19928 bytes left
[   99.649800][ T6086] Bluetooth: hci1: Opcode 0x080f failed: -4
[   99.720736][ T6090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.754832][ T6090] netlink: 'syz.2.53': attribute type 2 has an invalid length.
[   99.831793][ T6095] capability: warning: `syz.1.54' uses deprecated v2 capabilities in a way that may be insecure
[   99.877940][   T30] audit: type=1400 audit(1752756860.097:2): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6091 comm="syz.1.54" name="14" dev="tmpfs" ino=83
[  100.085334][ T6104] bridge0: entered promiscuous mode
[  100.106567][ T6104] macvlan2: entered promiscuous mode
[  100.170581][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'.
[  100.576178][ T6120] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.751237][ T6120] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.815190][ T6133] netlink: 'syz.1.73': attribute type 39 has an invalid length.
[  100.882535][ T6120] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.008455][ T6120] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.145752][ T6141] netlink: 'syz.2.77': attribute type 14 has an invalid length.
[  101.192580][ T6120] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.273802][ T6120] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.341023][ T6120] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.379174][ T6148] netlink: 'syz.2.79': attribute type 1 has an invalid length.
[  101.399042][ T6148] netlink: 224 bytes leftover after parsing attributes in process `syz.2.79'.
[  101.426163][ T6120] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.589288][ T6155] sch_fq: defrate 0 ignored.
[  101.720075][ T5857] Bluetooth: hci1: command 0x080f tx timeout
[  101.947246][ T5952] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  102.126428][ T5952] usb 3-1: Using ep0 maxpacket: 16
[  102.148891][ T5952] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  102.164085][ T5952] usb 3-1: config 0 has no interface number 0
[  102.171302][ T5952] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  102.185462][ T5952] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  102.216129][ T5952] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  102.235788][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  102.245883][ T5952] usb 3-1: Product: syz
[  102.255997][ T5952] usb 3-1: SerialNumber: syz
[  102.272988][ T5952] usb 3-1: config 0 descriptor??
[  102.292863][ T5952] cm109 3-1:0.8: invalid payload size 0, expected 4
[  102.302576][ T5952] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5
[  102.539602][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  102.621107][ T6197] pim6reg0: tun_chr_ioctl cmd 1074812118
[  102.746103][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.754431][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.761943][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.769333][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.776536][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.783732][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.791286][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.798576][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.806221][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.813555][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.822331][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  102.831382][ T5838] usb 3-1: USB disconnect, device number 2
[  102.848197][ T5838] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  103.686675][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.846489][ T5904] usb 1-1: Using ep0 maxpacket: 8
[  103.860647][ T5904] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  103.883337][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.893580][ T6232] program syz.4.119 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  103.900739][ T5904] usb 1-1: Product: syz
[  103.923570][ T5904] usb 1-1: Manufacturer: syz
[  103.930531][ T5904] usb 1-1: SerialNumber: syz
[  103.952507][ T5904] usb 1-1: config 0 descriptor??
[  104.188986][ T5904] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  104.646393][ T6263] IPv6: addrconf: prefix option has invalid lifetime
[  104.775668][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[  104.785518][ T5904] gspca_sunplus: reg_w_riv err -71
[  104.789706][ T6267] netlink: 'syz.2.134': attribute type 20 has an invalid length.
[  104.806645][ T5904] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  104.819884][ T6267] netlink: 'syz.2.134': attribute type 21 has an invalid length.
[  104.830454][ T5904] usb 1-1: USB disconnect, device number 2
[  105.505489][ T6295] hsr0: entered promiscuous mode
[  105.720849][ T6308] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  105.743825][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.154'.
[  105.748234][ T6308] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  105.755183][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.154'.
[  105.792895][ T6308] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  105.820302][ T6308] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  105.863436][ T6312] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  105.882782][ T6312] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  105.920896][ T6312] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  105.938433][ T6312] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  105.997928][ T6318] Zero length message leads to an empty skb
[  106.102370][ T6323] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  106.128532][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.137307][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.303307][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'.
[  106.317101][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'.
[  106.330655][ T6330] netlink: 58 bytes leftover after parsing attributes in process `syz.0.162'.
[  106.646111][ T6348] program syz.2.170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.708688][ T6341] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  106.717440][ T6341] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  106.743331][ T6341] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  106.767595][ T6352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.812454][ T6341] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  106.826925][ T6341] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  106.870423][ T6341] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  106.904260][ T6341] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  106.940021][ T6341] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  106.959430][ T6359] mmap: syz.3.176 (6359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  106.983535][ T6341] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  106.992707][ T6362] team_slave_0: entered allmulticast mode
[  107.000817][ T6341] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  107.016493][ T6341] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  107.030675][ T6341] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  107.047302][ T6341] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  107.053559][ T6341] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  107.065912][ T6341] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  107.115179][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'.
[  107.346767][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  107.530369][   T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  107.565780][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.590018][   T24] usb 3-1: config 0 descriptor??
[  108.239490][   T24] ath6kl: mismatched byte count 0 vs. expected 12
[  108.253381][   T24] ath6kl: Failed to init ath6kl core: -22
[  108.271050][   T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22
[  108.457920][ T5904] usb 3-1: USB disconnect, device number 3
[  108.492490][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'.
[  108.519848][ T6414] bridge0: port 3(macvlan3) entered blocking state
[  108.545879][ T6414] bridge0: port 3(macvlan3) entered disabled state
[  108.553091][ T6414] macvlan3: entered allmulticast mode
[  108.572089][ T6414] macvlan3: left allmulticast mode
[  108.610564][ T6419] netlink: 'syz.0.204': attribute type 9 has an invalid length.
[  108.616002][ T6423] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  108.636229][ T6419] netlink: 'syz.0.204': attribute type 6 has an invalid length.
[  108.678242][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout
[  108.836736][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout
[  108.917201][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout
[  109.076446][   T51] Bluetooth: hci1: command 0x080f tx timeout
[  109.082583][ T5857] Bluetooth: hci4: command 0x0405 tx timeout
[  109.455425][ T6463] capability: warning: `syz.4.224' uses 32-bit capabilities (legacy support in use)
[  109.885715][ T6483] netlink: 'syz.1.233': attribute type 10 has an invalid length.
[  109.930359][ T6483] team0: Port device geneve1 added
[  110.522127][ T6502] =======================================================
[  110.522127][ T6502] WARNING: The mand mount option has been deprecated and
[  110.522127][ T6502]          and is ignored by this kernel. Remove the mand
[  110.522127][ T6502]          option from the mount to silence this warning.
[  110.522127][ T6502] =======================================================
[  110.557043][    C1] vkms_vblank_simulate: vblank timer overrun
[  110.725653][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.769433][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.915639][ T6522] use of bytesused == 0 is deprecated and will be removed in the future,
[  110.924419][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.949857][ T6522] use the actual size instead.
[  110.996681][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout
[  111.086048][ T6531] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  111.136176][ T6533] hsr0: entered promiscuous mode
[  111.153099][ T6533] macvtap1: entered promiscuous mode
[  111.158584][ T5857] Bluetooth: hci4: command 0x0405 tx timeout
[  111.158658][ T5857] Bluetooth: hci1: command 0x080f tx timeout
[  111.176878][ T6533] macvtap1: entered allmulticast mode
[  111.190304][ T6533] hsr0: entered allmulticast mode
[  111.205477][ T6533] hsr_slave_0: entered allmulticast mode
[  111.214337][ T6533] hsr_slave_1: entered allmulticast mode
[  111.231106][ T6533] hsr0: left allmulticast mode
[  111.235920][ T6533] hsr_slave_0: left allmulticast mode
[  111.242441][ T6533] hsr_slave_1: left allmulticast mode
[  111.337360][ T6541] can0: slcan on ttyS3.
[  111.337676][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[  111.417608][ T6541] can0 (unregistered): slcan off ttyS3.
[  111.432329][ T6541] Falling back ldisc for ttyS3.
[  111.725715][ T6561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.267'.
[  111.966418][ T5918] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  112.157867][ T5918] usb 4-1: Using ep0 maxpacket: 32
[  112.211187][ T5918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  112.224177][ T5918] usb 4-1: config 0 has no interface number 0
[  112.271668][ T5918] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.336771][ T5918] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.352952][ T5918] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  112.364032][ T6576] netlink: 'syz.4.274': attribute type 1 has an invalid length.
[  112.372775][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.382375][ T6576] netlink: 208 bytes leftover after parsing attributes in process `syz.4.274'.
[  112.397462][ T5918] usb 4-1: config 0 descriptor??
[  112.414903][ T6576] netlink: 'syz.4.274': attribute type 1 has an invalid length.
[  112.456698][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'.
[  112.736576][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  112.839110][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  112.861778][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.906544][   T24] usb 1-1: Using ep0 maxpacket: 8
[  112.926065][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  112.939940][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.949266][   T24] usb 1-1: Product: syz
[  112.953669][   T24] usb 1-1: Manufacturer: syz
[  112.962312][   T24] usb 1-1: SerialNumber: syz
[  112.979608][   T24] usb 1-1: config 0 descriptor??
[  113.006525][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  113.022546][ T5918] uclogic 0003:28BD:0094.0001: pen parameters not found
[  113.036792][ T5918] uclogic 0003:28BD:0094.0001: interface is invalid, ignoring
[  113.048730][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.068485][ T5904] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  113.078069][ T5918] usb 4-1: USB disconnect, device number 2
[  113.086401][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  113.092474][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.110785][ T5904] usb 3-1: config 0 descriptor??
[  113.162289][ T6597] debugfs: Directory 'ptm0' with parent 'caif_serial' already present!
[  113.221741][   T24] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  113.239318][   T51] Bluetooth: hci1: command 0x080f tx timeout
[  113.239337][ T5857] Bluetooth: hci4: command 0x0405 tx timeout
[  113.279106][ T6601] team0: Device gtp0 is of different type
[  113.442905][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'.
[  113.742726][ T5904] razer 0003:1532:010E.0002: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0
[  113.838315][   T24] usb write operation failed. (-71)
[  113.855827][   T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  113.881973][   T24] dvbdev: DVB: registering new adapter (Terratec H7)
[  113.896087][   T24] usb 1-1: media controller created
[  113.906010][   T24] usb read operation failed. (-71)
[  113.915278][   T24] usb write operation failed. (-71)
[  113.924845][   T24] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  113.948779][   T24] usb 1-1: USB disconnect, device number 3
[  113.957382][ T5904] usb 3-1: USB disconnect, device number 4
[  113.957610][ T6628] hsr0: left promiscuous mode
[  113.985488][ T6629] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  116.075074][ T6715] process 'syz.3.337' launched './file2' with NULL argv: empty string added
[  116.548446][ T6735] loop8: detected capacity change from 0 to 7
[  116.596003][ T6735] Dev loop8: unable to read RDB block 7
[  116.616374][ T6735]  loop8: unable to read partition table
[  116.632511][ T6735] loop8: partition table beyond EOD, truncated
[  116.651955][ T6735] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5)
[  117.065504][ T6755] netlink: 248 bytes leftover after parsing attributes in process `syz.1.355'.
[  117.320284][ T6769] syz.1.363: attempt to access beyond end of device
[  117.320284][ T6769] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0
[  117.358186][ T6769] SQUASHFS error: Failed to read block 0x0: -5
[  118.679123][ T6838] netlink: 48 bytes leftover after parsing attributes in process `syz.0.396'.
[  119.006686][ T6856] netlink: 27 bytes leftover after parsing attributes in process `syz.3.403'.
[  119.163074][ T6865] binder: 6863:6865 ioctl c00c620f 200000000040 returned -22
[  119.367352][ T5838] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  119.541769][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.556464][ T5838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.578683][ T5838] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  119.591469][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  119.616355][ T5838] usb 1-1: SerialNumber: syz
[  119.627254][ T6890] blkio.reset_stats is deprecated
[  119.852698][ T5838] usb 1-1: 0:2 : does not exist
[  119.918130][ T5838] usb 1-1: USB disconnect, device number 4
[  120.556566][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  120.716546][   T24] usb 3-1: Using ep0 maxpacket: 8
[  120.731565][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  120.746187][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.755207][   T24] usb 3-1: Product: syz
[  120.761894][   T24] usb 3-1: Manufacturer: syz
[  120.769284][   T24] usb 3-1: SerialNumber: syz
[  120.779232][   T24] usb 3-1: config 0 descriptor??
[  120.846699][ T5904] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  121.008185][   T24] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  121.028977][ T5904] usb 4-1: config 0 has an invalid interface number: 104 but max is 0
[  121.046911][ T5904] usb 4-1: config 0 has no interface number 0
[  121.063402][ T5904] usb 4-1: config 0 interface 104 has no altsetting 0
[  121.083897][ T5904] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  121.106184][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.119989][ T5904] usb 4-1: Product: syz
[  121.124207][ T5904] usb 4-1: Manufacturer: syz
[  121.129952][ T5904] usb 4-1: SerialNumber: syz
[  121.143811][ T5904] usb 4-1: config 0 descriptor??
[  121.177051][ T5904] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  121.279952][ T6940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.444'.
[  121.400254][ T5904] gspca_vc032x: reg_r err -71
[  121.417155][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.422485][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.436146][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.460217][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.465552][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.477548][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.490428][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.496166][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.519599][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.536700][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.542028][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.550707][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.556033][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.564091][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.572095][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.580539][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.606617][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.611274][   T24] usb write operation failed. (-71)
[  121.616478][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  121.622438][ T5904] gspca_vc032x: Unknown sensor...
[  121.630323][   T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  121.642379][ T5904] vc032x 4-1:0.104: probe with driver vc032x failed with error -22
[  121.655783][   T24] dvbdev: DVB: registering new adapter (Terratec H7)
[  121.663375][   T24] usb 3-1: media controller created
[  121.673559][   T24] usb read operation failed. (-71)
[  121.683383][   T24] usb write operation failed. (-71)
[  121.696629][ T5904] usb 4-1: USB disconnect, device number 3
[  121.708773][   T24] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  121.747058][   T24] usb 3-1: USB disconnect, device number 5
[  121.886737][ T5952] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  122.064020][ T5952] usb 1-1: config 0 has an invalid interface number: 186 but max is 1
[  122.079261][ T5952] usb 1-1: config 0 has no interface number 1
[  122.090524][ T5952] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83
[  122.113967][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.146337][ T5952] usb 1-1: Product: syz
[  122.162114][ T5952] usb 1-1: Manufacturer: syz
[  122.174936][ T5952] usb 1-1: SerialNumber: syz
[  122.175987][ T6975] netem: incorrect ge model size
[  122.203518][ T5952] usb 1-1: config 0 descriptor??
[  122.208663][ T6975] netem: change failed
[  122.245749][   T30] audit: type=1400 audit(1752756882.467:3): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=6976 comm="syz.4.461" opid=6976 ocomm="syz.4.461"
[  122.454396][ T5952] usb 1-1: USB disconnect, device number 5
[  122.493607][ T6986] netlink: 'syz.4.464': attribute type 1 has an invalid length.
[  122.517408][ T6986] netlink: 'syz.4.464': attribute type 2 has an invalid length.
[  123.096342][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  123.256925][   T24] usb 2-1: Using ep0 maxpacket: 32
[  123.267507][   T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.285346][   T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.313448][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  123.329142][   T24] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  123.341917][   T24] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  123.370377][   T24] usb 2-1: Product: syz
[  123.389995][   T24] usb 2-1: config 0 descriptor??
[  123.698737][ T5970] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  123.816199][   T30] audit: type=1400 audit(1752756884.037:4): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7028 comm="syz.2.482" name="82" dev="tmpfs" ino=427
[  123.823579][   T24] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0
[  123.875282][   T24] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0
[  123.898792][   T24] waterforce 0003:1044:7A4D.0003: item fetching failed at offset 2/5
[  123.909102][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.923814][   T24] waterforce 0003:1044:7A4D.0003: hid parse failed with -22
[  123.936452][ T5970] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  123.957210][   T24] waterforce 0003:1044:7A4D.0003: probe with driver waterforce failed with error -22
[  123.967517][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.982035][ T5970] usb 1-1: config 0 descriptor??
[  124.061944][   T24] usb 2-1: USB disconnect, device number 2
[  124.065303][ T7036] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  124.096507][ T7036] macsec1: entered allmulticast mode
[  124.102116][ T7036] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  124.139314][ T7036] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  124.177149][ T7036] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  124.307769][ T7044] warning: `syz.2.487' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  124.400988][ T5970] magicmouse 0003:05AC:0265.0004: unbalanced collection at end of report description
[  124.412880][ T5970] magicmouse 0003:05AC:0265.0004: magicmouse hid parse failed
[  124.422284][ T5970] magicmouse 0003:05AC:0265.0004: probe with driver magicmouse failed with error -22
[  124.621747][ T5838] usb 1-1: USB disconnect, device number 6
[  124.807918][ T7070] loop7: detected capacity change from 0 to 524255232
[  125.024950][ T7082] netlink: 452 bytes leftover after parsing attributes in process `syz.1.504'.
[  125.255415][ T7096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.509'.
[  125.266231][ T5838] kernel write not supported for file /comedi4 (pid: 5838 comm: kworker/0:3)
[  125.634556][   T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  125.846765][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.866353][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.898022][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  125.916365][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.944730][   T24] usb 1-1: Product: syz
[  125.954859][   T24] usb 1-1: Manufacturer: syz
[  125.975194][   T24] usb 1-1: SerialNumber: syz
[  126.419077][   T24] usb 1-1: 0:2 : does not exist
[  126.492686][ T7147] IPVS: Error joining to the multicast group
[  126.579220][ T7153] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  126.581006][ T7152] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.596029][ T7152] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.606052][ T7152] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.615969][ T7152] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.853490][   T24] usb 1-1: USB disconnect, device number 7
[  127.176427][ T5952] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  127.266678][ T5838] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  127.326393][ T5952] usb 3-1: Using ep0 maxpacket: 16
[  127.333153][ T5952] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.344453][ T5952] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.354298][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0
[  127.361025][ T5952] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  127.370149][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.390812][ T5952] usb 3-1: config 0 descriptor??
[  127.419759][ T5838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.445360][ T5838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.483907][ T5838] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.510348][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.518511][ T5838] usb 5-1: Product: syz
[  127.523541][ T5838] usb 5-1: Manufacturer: syz
[  127.537309][ T5838] usb 5-1: SerialNumber: syz
[  127.563186][ T7187] @: renamed from vlan0 (while UP)
[  127.762495][ T5838] usb 5-1: 0:2 : does not exist
[  127.782939][ T5838] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  127.813094][ T5952] wacom 0003:056A:00B3.0005: unknown main item tag 0x0
[  127.848818][ T5952] wacom 0003:056A:00B3.0005: unknown main item tag 0x0
[  127.866352][ T5952] wacom 0003:056A:00B3.0005: collection stack underflow
[  127.877529][ T5838] usb 5-1: USB disconnect, device number 2
[  127.883668][ T5952] wacom 0003:056A:00B3.0005: item 0 0 0 12 parsing failed
[  127.904573][ T5952] wacom 0003:056A:00B3.0005: parse failed
[  127.921028][ T5952] wacom 0003:056A:00B3.0005: probe with driver wacom failed with error -22
[  128.033770][ T5952] usb 3-1: USB disconnect, device number 6
[  128.446714][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.607379][   T24] usb 2-1: Using ep0 maxpacket: 32
[  128.634108][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.665410][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.691659][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  128.701985][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.741440][   T24] usb 2-1: config 0 descriptor??
[  128.768707][   T24] hub 2-1:0.0: USB hub found
[  128.770292][ T7231] netlink: 56 bytes leftover after parsing attributes in process `syz.4.576'.
[  128.973519][   T24] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[  128.990988][ T7241] netlink: 72 bytes leftover after parsing attributes in process `syz.4.581'.
[  129.330283][ T7254] bridge0: entered allmulticast mode
[  129.416053][   T24] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[  129.426801][ T5838] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  129.599300][ T5838] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  129.628903][ T5838] usb 3-1: config 0 has no interface number 0
[  129.635073][ T5838] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  129.659781][ T5838] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  129.680514][ T7269] netlink: 'syz.0.594': attribute type 1 has an invalid length.
[  129.686686][ T5838] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  129.696361][ T7269] netlink: 72 bytes leftover after parsing attributes in process `syz.0.594'.
[  129.708787][ T5838] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[  129.714961][ T7269] netlink: 97 bytes leftover after parsing attributes in process `syz.0.594'.
[  129.732375][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  129.751188][   T24] usb 2-1: USB disconnect, device number 3
[  129.754627][ T5838] usb 3-1: Product: syz
[  129.761513][ T5838] usb 3-1: SerialNumber: syz
[  129.787309][ T5838] usb 3-1: config 0 descriptor??
[  129.805843][ T5838] cm109 3-1:0.8: invalid payload size 0, expected 4
[  129.832367][ T5838] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7
[  130.054519][    C0] cm109_urb_ctl_callback: 2 callbacks suppressed
[  130.054545][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  130.068514][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  130.071868][ T7280] tipc: Started in network mode
[  130.075753][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  130.086070][ T7280] tipc: Node identity ac14140f, cluster identity 4711
[  130.088380][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  130.095198][ T7280] tipc: New replicast peer: 255.255.255.255
[  130.103418][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  130.114857][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  130.122119][ T5838] usb 3-1: USB disconnect, device number 7
[  130.122239][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  130.134999][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  130.180122][ T5838] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  130.193993][ T7280] tipc: Enabled bearer <udp:syz2>, priority 10
[  130.313636][   T30] audit: type=1326 audit(1752756890.537:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  130.366440][   T30] audit: type=1326 audit(1752756890.537:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  130.387685][    C1] vkms_vblank_simulate: vblank timer overrun
[  130.461575][   T30] audit: type=1326 audit(1752756890.567:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd85f78d290 code=0x7ffc0000
[  130.516622][   T30] audit: type=1326 audit(1752756890.567:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd85f790157 code=0x7ffc0000
[  130.537865][    C1] vkms_vblank_simulate: vblank timer overrun
[  130.591951][   T30] audit: type=1326 audit(1752756890.567:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  130.619484][   T30] audit: type=1326 audit(1752756890.567:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd85f790157 code=0x7ffc0000
[  130.640789][    C1] vkms_vblank_simulate: vblank timer overrun
[  130.656395][   T30] audit: type=1326 audit(1752756890.567:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd85f78d58a code=0x7ffc0000
[  130.678759][   T30] audit: type=1326 audit(1752756890.567:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  130.732986][   T30] audit: type=1326 audit(1752756890.567:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  130.754341][    C1] vkms_vblank_simulate: vblank timer overrun
[  130.763171][   T30] audit: type=1326 audit(1752756890.577:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  130.897774][ T7306] netlink: 'syz.1.611': attribute type 2 has an invalid length.
[  130.975817][ T7309] netlink: 596 bytes leftover after parsing attributes in process `syz.0.610'.
[  131.307241][ T5918] tipc: Node number set to 2886997007
[  131.374683][ T7335] Invalid/unusable pipe
[  131.416360][ T5970] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  131.489232][ T7343] random: crng reseeded on system resumption
[  131.503247][ T7344] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.629'.
[  131.585801][ T5970] usb 5-1: Using ep0 maxpacket: 32
[  131.603376][ T5970] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  131.612597][ T5970] usb 5-1: config 0 has no interface number 0
[  131.623773][ T5970] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  131.633048][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.654246][ T5970] usb 5-1: Product: syz
[  131.658562][ T5970] usb 5-1: Manufacturer: syz
[  131.663182][ T5970] usb 5-1: SerialNumber: syz
[  131.695796][ T5970] usb 5-1: config 0 descriptor??
[  131.707374][ T7351] netlink: 56 bytes leftover after parsing attributes in process `syz.0.633'.
[  131.728946][ T5970] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  131.746509][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[  131.936458][ T7360] netlink: 56 bytes leftover after parsing attributes in process `syz.0.637'.
[  131.958619][ T7363] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  131.960063][ T5970] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  132.005154][ T5970] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  132.171641][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  132.372773][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  132.383416][ T5970] usb 5-1: USB disconnect, device number 3
[  132.397584][ T5970] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  132.435236][ T5970] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  132.468202][ T5970] quatech2 5-1:0.51: device disconnected
[  132.509501][ T7382] netlink: 596 bytes leftover after parsing attributes in process `syz.3.648'.
[  132.845715][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  133.737259][ T5970] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  133.767739][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'.
[  133.906875][ T5970] usb 2-1: Using ep0 maxpacket: 16
[  133.920633][ T5970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.939432][ T5970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.968658][ T5970] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.989053][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.006750][ T5970] usb 2-1: Product: syz
[  134.018381][ T5970] usb 2-1: Manufacturer: syz
[  134.030794][ T5970] usb 2-1: SerialNumber: syz
[  134.477102][ T7466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.482286][ T5970] usb 2-1: 0:2 : does not exist
[  134.496695][ T5838] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  134.615914][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'.
[  134.669601][ T5838] usb 1-1: Using ep0 maxpacket: 16
[  134.712584][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  134.736550][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  134.775743][ T5838] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  134.790003][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.799956][ T5838] usb 1-1: Product: syz
[  134.804155][ T5838] usb 1-1: Manufacturer: syz
[  134.813781][ T5838] usb 1-1: SerialNumber: syz
[  134.823543][ T5838] usb 1-1: config 0 descriptor??
[  134.848052][ T5838] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  134.881487][ T5838] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  134.890800][ T5970] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  134.935132][ T5970] usb 2-1: USB disconnect, device number 4
[  135.146708][ T5918] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  135.308329][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.327201][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.350509][ T5918] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  135.360783][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.368931][ T5918] usb 5-1: SerialNumber: syz
[  135.450882][ T7502] 8021q: adding VLAN 0 to HW filter on device batadv1
[  135.460627][ T7502] team0: Port device batadv1 added
[  135.482090][ T5838] em28xx 1-1:0.0: chip ID is em2870
[  135.587776][ T5918] usb 5-1: 0:2 : does not exist
[  135.623619][ T5918] usb 5-1: USB disconnect, device number 4
[  135.704953][ T5838] usb 1-1: USB disconnect, device number 8
[  135.715357][ T5838] em28xx 1-1:0.0: Disconnecting em28xx
[  135.725085][ T5838] em28xx 1-1:0.0: Freeing device
[  136.036921][ T5904] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  136.186608][ T5904] usb 2-1: Using ep0 maxpacket: 32
[  136.197943][ T5904] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  136.206472][ T5904] usb 2-1: config 0 has no interface number 0
[  136.224222][ T5904] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  136.255421][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.271917][ T5904] usb 2-1: Product: syz
[  136.282816][ T5904] usb 2-1: Manufacturer: syz
[  136.292445][ T5904] usb 2-1: SerialNumber: syz
[  136.309494][ T5904] usb 2-1: config 0 descriptor??
[  136.321619][ T5904] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  136.551156][ T5904] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  136.603140][ T5904] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  136.691531][ T5952] IPVS: starting estimator thread 0...
[  136.716797][ T7538] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  136.797012][ T7539] IPVS: using max 27 ests per chain, 64800 per kthread
[  136.946672][ T5904] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  136.957249][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  136.973358][ T5918] usb 2-1: USB disconnect, device number 5
[  136.984461][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  137.026955][ T7554] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.727'.
[  137.032180][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  137.101427][ T5918] quatech2 2-1:0.51: device disconnected
[  137.135336][ T5904] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  137.146443][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.184651][ T5904] usb 4-1: config 0 descriptor??
[  137.205906][ T5904] cp210x 4-1:0.0: cp210x converter detected
[  137.285656][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  137.285674][   T30] audit: type=1326 audit(1752756897.507:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7561 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  137.324511][   T30] audit: type=1326 audit(1752756897.507:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7561 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  137.347345][   T30] audit: type=1326 audit(1752756897.547:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7561 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd85f78e929 code=0x7ffc0000
[  137.370488][   T30] audit: type=1326 audit(1752756897.547:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7561 comm="syz.0.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd85f78e929 code=0x0
[  137.616045][ T5904] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  137.656738][ T5904] usb 4-1: cp210x converter now attached to ttyUSB0
[  137.841913][ T5857] Bluetooth: hci3: Malformed LE Event: 0x0d
[  137.859633][ T5952] usb 4-1: USB disconnect, device number 4
[  137.873798][ T5952] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  137.885429][ T5952] cp210x 4-1:0.0: device disconnected
[  139.105567][   T30] audit: type=1804 audit(1752756899.327:24): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.765" name="/newroot/145/bus" dev="tmpfs" ino=751 res=1 errno=0
[  139.317147][ T5838] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  139.469717][ T5838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.487594][ T5838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.509133][ T5838] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  139.518671][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  139.559142][ T5838] usb 2-1: SerialNumber: syz
[  139.596484][ T5952] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  139.777917][ T5952] usb 1-1: Using ep0 maxpacket: 16
[  139.792544][ T5838] usb 2-1: 0:2 : does not exist
[  139.795558][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  139.829953][ T5838] usb 2-1: USB disconnect, device number 6
[  139.839112][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  139.907938][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  139.923431][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.942242][ T5952] usb 1-1: Product: syz
[  139.952355][ T5952] usb 1-1: Manufacturer: syz
[  139.966606][ T5952] usb 1-1: SerialNumber: syz
[  139.977393][ T5952] usb 1-1: config 0 descriptor??
[  139.987147][ T5952] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  140.005766][ T5952] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  140.593764][ T5952] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  140.644507][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'.
[  140.802087][ T5952] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  140.824795][ T5952] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  140.845823][ T5952] em28xx 1-1:0.0: No AC97 audio processor
[  140.870574][ T5952] usb 1-1: USB disconnect, device number 9
[  140.887972][ T5952] em28xx 1-1:0.0: Disconnecting em28xx
[  140.898234][ T5952] em28xx 1-1:0.0: Freeing device
[  141.437359][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.804'.
[  141.652669][ T7719] sctp: [Deprecated]: syz.3.805 (pid 7719) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.652669][ T7719] Use struct sctp_sack_info instead
[  142.047060][ T5838] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  142.368715][ T5838] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  142.378662][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.407245][ T5838] usb 2-1: config 0 descriptor??
[  142.418854][ T5838] usb 2-1: selecting invalid altsetting 1
[  142.428777][ T5838] flexcop_usb: set interface failed.
[  142.434601][ T5838] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  142.664267][ T5838] usb 2-1: USB disconnect, device number 7
[  142.772253][ T7760] syz.3.822 (7760) used greatest stack depth: 18952 bytes left
[  142.915634][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'.
[  142.965922][ T7771] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  143.675739][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'.
[  143.801888][ T7810] netlink: 44 bytes leftover after parsing attributes in process `syz.3.847'.
[  143.856669][ T7812] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.865324][ T7812] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.874309][ T7812] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.882882][ T7812] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.971551][ T7817] program syz.1.850 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.486748][ T7845] CIFS: VFS: Malformed UNC in devname
[  144.826485][ T5952] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  145.009070][ T5952] usb 3-1: Using ep0 maxpacket: 16
[  145.018187][ T5952] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  145.028137][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222
[  145.038096][ T5952] usb 3-1: SerialNumber: syz
[  145.045436][ T5952] usb 3-1: config 0 descriptor??
[  145.068864][ T5952] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  145.087588][ T5952] usb 3-1: Detected FT232A
[  145.106521][ T5952] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  145.200443][ T7880] mkiss: ax0: crc mode is auto.
[  145.292309][ T5952] usb 3-1: USB disconnect, device number 8
[  145.314158][ T5952] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  145.339777][ T5952] ftdi_sio 3-1:0.0: device disconnected
[  145.376613][ T7890] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  145.972406][ T7921] sp0: Synchronizing with TNC
[  145.980219][   T13] 
[  145.982561][   T13] =====================================================
[  145.989486][   T13] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  145.996941][   T13] 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 Not tainted
[  146.004057][   T13] -----------------------------------------------------
[  146.010974][   T13] kworker/u8:1/13 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  146.018595][   T13] ffffffff8ecdedf8 (disc_data_lock#4){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480
[  146.028263][   T13] 
[  146.028263][   T13] and this task is already holding:
[  146.035620][   T13] ffffffff99dbfbd8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0
[  146.044923][   T13] which would create a new lock dependency:
[  146.050805][   T13]  (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#4){.+.+}-{3:3}
[  146.058649][   T13] 
[  146.058649][   T13] but this new dependency connects a HARDIRQ-irq-safe lock:
[  146.068090][   T13]  (&port_lock_key){-.-.}-{3:3}
[  146.068112][   T13] 
[  146.068112][   T13] ... which became HARDIRQ-irq-safe at:
[  146.080641][   T13]   lock_acquire+0x120/0x360
[  146.085222][   T13]   _raw_spin_lock_irqsave+0xa7/0xf0
[  146.090501][   T13]   serial8250_handle_irq+0x6b/0xbb0
[  146.095782][   T13]   serial8250_default_handle_irq+0xbf/0x1b0
[  146.101761][   T13]   serial8250_interrupt+0xa5/0x1d0
[  146.106962][   T13]   __handle_irq_event_percpu+0x28c/0x980
[  146.112707][   T13]   handle_irq_event+0x8b/0x1e0
[  146.117550][   T13]   handle_edge_irq+0x267/0x9c0
[  146.122397][   T13]   __common_interrupt+0x140/0x250
[  146.127519][   T13]   common_interrupt+0xb6/0xe0
[  146.132278][   T13]   asm_common_interrupt+0x26/0x40
[  146.137382][   T13]   pv_native_safe_halt+0x13/0x20
[  146.142421][   T13]   default_idle+0x13/0x20
[  146.146840][   T13]   default_idle_call+0x74/0xb0
[  146.151687][   T13]   do_idle+0x1e8/0x510
[  146.155837][   T13]   cpu_startup_entry+0x44/0x60
[  146.160677][   T13]   rest_init+0x2de/0x300
[  146.164995][   T13]   start_kernel+0x47d/0x500
[  146.169574][   T13]   x86_64_start_reservations+0x24/0x30
[  146.175111][   T13]   x86_64_start_kernel+0x143/0x1c0
[  146.180300][   T13]   common_startup_64+0x13e/0x147
[  146.185329][   T13] 
[  146.185329][   T13] to a HARDIRQ-irq-unsafe lock:
[  146.192336][   T13]  (disc_data_lock#4){.+.+}-{3:3}
[  146.192366][   T13] 
[  146.192366][   T13] ... which became HARDIRQ-irq-unsafe at:
[  146.205271][   T13] ...
[  146.205279][   T13]   lock_acquire+0x120/0x360
[  146.212436][   T13]   _raw_read_lock+0x36/0x50
[  146.217034][   T13]   sixpack_receive_buf+0x5c/0x1450
[  146.222236][   T13]   tty_ldisc_receive_buf+0x119/0x160
[  146.227613][   T13]   tty_port_default_receive_buf+0x6e/0xa0
[  146.233423][   T13]   flush_to_ldisc+0x247/0x720
[  146.238209][   T13]   process_scheduled_works+0xade/0x17b0
[  146.243837][   T13]   worker_thread+0x8a0/0xda0
[  146.248507][   T13]   kthread+0x711/0x8a0
[  146.252663][   T13]   ret_from_fork+0x3fc/0x770
[  146.257352][   T13]   ret_from_fork_asm+0x1a/0x30
[  146.262203][   T13] 
[  146.262203][   T13] other info that might help us debug this:
[  146.262203][   T13] 
[  146.272421][   T13]  Possible interrupt unsafe locking scenario:
[  146.272421][   T13] 
[  146.280727][   T13]        CPU0                    CPU1
[  146.286078][   T13]        ----                    ----
[  146.291431][   T13]   lock(disc_data_lock#4);
[  146.295936][   T13]                                local_irq_disable();
[  146.302682][   T13]                                lock(&port_lock_key);
[  146.309523][   T13]                                lock(disc_data_lock#4);
[  146.316568][   T13]   <Interrupt>
[  146.320018][   T13]     lock(&port_lock_key);
[  146.324529][   T13] 
[  146.324529][   T13]  *** DEADLOCK ***
[  146.324529][   T13] 
[  146.332693][   T13] 6 locks held by kworker/u8:1/13:
[  146.337808][   T13]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  146.349481][   T13]  #1: ffffc90000127bc0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  146.361149][   T13]  #2: ffff888024930ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x720
[  146.370305][   T13]  #3: ffff88806d8320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90
[  146.379634][   T13]  #4: ffffffff99dbfbd8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0
[  146.389473][   T13]  #5: ffff88806d8320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90
[  146.398794][   T13] 
[  146.398794][   T13] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  146.409189][   T13] -> (&port_lock_key){-.-.}-{3:3} {
[  146.414392][   T13]    IN-HARDIRQ-W at:
[  146.418368][   T13]                     lock_acquire+0x120/0x360
[  146.424519][   T13]                     _raw_spin_lock_irqsave+0xa7/0xf0
[  146.431365][   T13]                     serial8250_handle_irq+0x6b/0xbb0
[  146.438215][   T13]                     serial8250_default_handle_irq+0xbf/0x1b0
[  146.445770][   T13]                     serial8250_interrupt+0xa5/0x1d0
[  146.452528][   T13]                     __handle_irq_event_percpu+0x28c/0x980
[  146.459819][   T13]                     handle_irq_event+0x8b/0x1e0
[  146.466251][   T13]                     handle_edge_irq+0x267/0x9c0
[  146.472671][   T13]                     __common_interrupt+0x140/0x250
[  146.479372][   T13]                     common_interrupt+0xb6/0xe0
[  146.485706][   T13]                     asm_common_interrupt+0x26/0x40
[  146.492373][   T13]                     pv_native_safe_halt+0x13/0x20
[  146.498961][   T13]                     default_idle+0x13/0x20
[  146.504944][   T13]                     default_idle_call+0x74/0xb0
[  146.511347][   T13]                     do_idle+0x1e8/0x510
[  146.517061][   T13]                     cpu_startup_entry+0x44/0x60
[  146.523460][   T13]                     rest_init+0x2de/0x300
[  146.529341][   T13]                     start_kernel+0x47d/0x500
[  146.535582][   T13]                     x86_64_start_reservations+0x24/0x30
[  146.542689][   T13]                     x86_64_start_kernel+0x143/0x1c0
[  146.549454][   T13]                     common_startup_64+0x13e/0x147
[  146.556046][   T13]    IN-SOFTIRQ-W at:
[  146.560025][   T13]                     lock_acquire+0x120/0x360
[  146.566186][   T13]                     _raw_spin_lock_irqsave+0xa7/0xf0
[  146.573054][   T13]                     serial8250_handle_irq+0x6b/0xbb0
[  146.579910][   T13]                     serial8250_default_handle_irq+0xbf/0x1b0
[  146.587459][   T13]                     serial8250_interrupt+0xa5/0x1d0
[  146.594221][   T13]                     __handle_irq_event_percpu+0x28c/0x980
[  146.601513][   T13]                     handle_irq_event+0x8b/0x1e0
[  146.607932][   T13]                     handle_edge_irq+0x267/0x9c0
[  146.614346][   T13]                     __common_interrupt+0x140/0x250
[  146.621025][   T13]                     common_interrupt+0xb6/0xe0
[  146.627354][   T13]                     asm_common_interrupt+0x26/0x40
[  146.634022][   T13]                     unwind_next_frame+0x188/0x2390
[  146.640692][   T13]                     arch_stack_walk+0x11c/0x150
[  146.647104][   T13]                     stack_trace_save+0x9c/0xe0
[  146.653433][   T13]                     kasan_save_track+0x3e/0x80
[  146.659761][   T13]                     kasan_save_free_info+0x46/0x50
[  146.666434][   T13]                     __kasan_slab_free+0x62/0x70
[  146.672842][   T13]                     slab_free_after_rcu_debug+0x129/0x2a0
[  146.680134][   T13]                     rcu_core+0xca8/0x1710
[  146.686040][   T13]                     handle_softirqs+0x283/0x870
[  146.692466][   T13]                     run_ksoftirqd+0x9b/0x100
[  146.698631][   T13]                     smpboot_thread_fn+0x542/0xa60
[  146.705210][   T13]                     kthread+0x711/0x8a0
[  146.711465][   T13]                     ret_from_fork+0x3fc/0x770
[  146.717717][   T13]                     ret_from_fork_asm+0x1a/0x30
[  146.724134][   T13]    INITIAL USE at:
[  146.728034][   T13]                    lock_acquire+0x120/0x360
[  146.734095][   T13]                    _raw_spin_lock_irqsave+0xa7/0xf0
[  146.740859][   T13]                    serial8250_do_set_termios+0x4bb/0x1c20
[  146.748142][   T13]                    uart_set_options+0x3c2/0x5b0
[  146.754551][   T13]                    serial8250_console_setup+0x2f4/0x3c0
[  146.761659][   T13]                    univ8250_console_setup+0x43a/0x540
[  146.768588][   T13]                    try_enable_preferred_console+0x4e4/0x650
[  146.776038][   T13]                    register_console+0x551/0xf90
[  146.782458][   T13]                    univ8250_console_init+0x52/0x90
[  146.789138][   T13]                    console_init+0x1a1/0x670
[  146.795208][   T13]                    start_kernel+0x2cc/0x500
[  146.801266][   T13]                    x86_64_start_reservations+0x24/0x30
[  146.808280][   T13]                    x86_64_start_kernel+0x143/0x1c0
[  146.814945][   T13]                    common_startup_64+0x13e/0x147
[  146.821441][   T13]  }
[  146.823929][   T13]  ... key      at: [<ffffffff99dbefa0>] port_lock_key+0x0/0x20
[  146.831556][   T13] 
[  146.831556][   T13] the dependencies between the lock to be acquired
[  146.831565][   T13]  and HARDIRQ-irq-unsafe lock:
[  146.845065][   T13] -> (disc_data_lock#4){.+.+}-{3:3} {
[  146.850454][   T13]    HARDIRQ-ON-R at:
[  146.854432][   T13]                     lock_acquire+0x120/0x360
[  146.860602][   T13]                     _raw_read_lock+0x36/0x50
[  146.866772][   T13]                     sixpack_receive_buf+0x5c/0x1450
[  146.873531][   T13]                     tty_ldisc_receive_buf+0x119/0x160
[  146.880551][   T13]                     tty_port_default_receive_buf+0x6e/0xa0
[  146.887916][   T13]                     flush_to_ldisc+0x247/0x720
[  146.894240][   T13]                     process_scheduled_works+0xade/0x17b0
[  146.901427][   T13]                     worker_thread+0x8a0/0xda0
[  146.907659][   T13]                     kthread+0x711/0x8a0
[  146.913371][   T13]                     ret_from_fork+0x3fc/0x770
[  146.919608][   T13]                     ret_from_fork_asm+0x1a/0x30
[  146.926019][   T13]    SOFTIRQ-ON-R at:
[  146.929992][   T13]                     lock_acquire+0x120/0x360
[  146.936135][   T13]                     _raw_read_lock+0x36/0x50
[  146.942285][   T13]                     sixpack_receive_buf+0x5c/0x1450
[  146.949041][   T13]                     tty_ldisc_receive_buf+0x119/0x160
[  146.955966][   T13]                     tty_port_default_receive_buf+0x6e/0xa0
[  146.963335][   T13]                     flush_to_ldisc+0x247/0x720
[  146.969661][   T13]                     process_scheduled_works+0xade/0x17b0
[  146.976859][   T13]                     worker_thread+0x8a0/0xda0
[  146.983102][   T13]                     kthread+0x711/0x8a0
[  146.988816][   T13]                     ret_from_fork+0x3fc/0x770
[  146.995051][   T13]                     ret_from_fork_asm+0x1a/0x30
[  147.001463][   T13]    INITIAL READ USE at:
[  147.005789][   T13]                         lock_acquire+0x120/0x360
[  147.012281][   T13]                         _raw_read_lock+0x36/0x50
[  147.018778][   T13]                         sixpack_receive_buf+0x5c/0x1450
[  147.025882][   T13]                         tty_ldisc_receive_buf+0x119/0x160
[  147.033166][   T13]                         tty_port_default_receive_buf+0x6e/0xa0
[  147.040901][   T13]                         flush_to_ldisc+0x247/0x720
[  147.047591][   T13]                         process_scheduled_works+0xade/0x17b0
[  147.055134][   T13]                         worker_thread+0x8a0/0xda0
[  147.061712][   T13]                         kthread+0x711/0x8a0
[  147.067776][   T13]                         ret_from_fork+0x3fc/0x770
[  147.074353][   T13]                         ret_from_fork_asm+0x1a/0x30
[  147.081125][   T13]  }
[  147.083616][   T13]  ... key      at: [<ffffffff8ecdedf8>] disc_data_lock+0x18/0x100
[  147.091504][   T13]  ... acquired at:
[  147.095301][   T13]    lock_acquire+0x120/0x360
[  147.099961][   T13]    _raw_read_lock+0x36/0x50
[  147.104630][   T13]    sixpack_write_wakeup+0x30/0x480
[  147.109907][   T13]    tty_wakeup+0xbe/0x100
[  147.114318][   T13]    tty_port_default_wakeup+0xa2/0xf0
[  147.119775][   T13]    serial8250_tx_chars+0x72e/0x970
[  147.125051][   T13]    __start_tx+0x33b/0x480
[  147.129547][   T13]    __uart_start+0x23c/0x440
[  147.134223][   T13]    uart_write+0xdc/0x130
[  147.138633][   T13]    sixpack_receive_buf+0x447/0x1450
[  147.143995][   T13]    tty_ldisc_receive_buf+0x119/0x160
[  147.149449][   T13]    tty_port_default_receive_buf+0x6e/0xa0
[  147.155354][   T13]    flush_to_ldisc+0x247/0x720
[  147.160195][   T13]    process_scheduled_works+0xade/0x17b0
[  147.165904][   T13]    worker_thread+0x8a0/0xda0
[  147.170671][   T13]    kthread+0x711/0x8a0
[  147.174905][   T13]    ret_from_fork+0x3fc/0x770
[  147.179654][   T13]    ret_from_fork_asm+0x1a/0x30
[  147.184584][   T13] 
[  147.186896][   T13] 
[  147.186896][   T13] stack backtrace:
[  147.192788][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  147.192804][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  147.192814][   T13] Workqueue: events_unbound flush_to_ldisc
[  147.192835][   T13] Call Trace:
[  147.192845][   T13]  <TASK>
[  147.192852][   T13]  dump_stack_lvl+0x189/0x250
[  147.192868][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.192882][   T13]  ? __pfx__printk+0x10/0x10
[  147.192902][   T13]  validate_chain+0x1f05/0x2140
[  147.192925][   T13]  __lock_acquire+0xab9/0xd20
[  147.192939][   T13]  ? sixpack_write_wakeup+0x30/0x480
[  147.192957][   T13]  lock_acquire+0x120/0x360
[  147.192967][   T13]  ? sixpack_write_wakeup+0x30/0x480
[  147.192986][   T13]  ? ldsem_down_read_trylock+0x137/0x1a0
[  147.192999][   T13]  ? tty_ldisc_ref+0x1c/0x90
[  147.193015][   T13]  _raw_read_lock+0x36/0x50
[  147.193034][   T13]  ? sixpack_write_wakeup+0x30/0x480
[  147.193052][   T13]  sixpack_write_wakeup+0x30/0x480
[  147.193071][   T13]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  147.193088][   T13]  tty_wakeup+0xbe/0x100
[  147.193103][   T13]  tty_port_default_wakeup+0xa2/0xf0
[  147.193122][   T13]  serial8250_tx_chars+0x72e/0x970
[  147.193145][   T13]  __start_tx+0x33b/0x480
[  147.193164][   T13]  __uart_start+0x23c/0x440
[  147.193181][   T13]  uart_write+0xdc/0x130
[  147.193198][   T13]  sixpack_receive_buf+0x447/0x1450
[  147.193242][   T13]  ? __pfx_sixpack_receive_buf+0x10/0x10
[  147.193261][   T13]  tty_ldisc_receive_buf+0x119/0x160
[  147.193282][   T13]  tty_port_default_receive_buf+0x6e/0xa0
[  147.193303][   T13]  flush_to_ldisc+0x247/0x720
[  147.193324][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  147.193339][   T13]  process_scheduled_works+0xade/0x17b0
[  147.193362][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.193382][   T13]  worker_thread+0x8a0/0xda0
[  147.193405][   T13]  kthread+0x711/0x8a0
[  147.193423][   T13]  ? __pfx_worker_thread+0x10/0x10
[  147.193437][   T13]  ? __pfx_kthread+0x10/0x10
[  147.193455][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.193479][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.193490][   T13]  ? __pfx_kthread+0x10/0x10
[  147.193508][   T13]  ret_from_fork+0x3fc/0x770
[  147.193521][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  147.193535][   T13]  ? __switch_to_asm+0x39/0x70
[  147.193551][   T13]  ? __switch_to_asm+0x33/0x70
[  147.193567][   T13]  ? __pfx_kthread+0x10/0x10
[  147.193584][   T13]  ret_from_fork_asm+0x1a/0x30
[  147.193606][   T13]  </TASK>
[  147.433748][    C1] vkms_vblank_simulate: vblank timer overrun
[  147.483013][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'.