last executing test programs: 5m9.169659913s ago: executing program 32 (id=277): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x2}}, 0x18) 2m23.402481287s ago: executing program 5 (id=2505): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m22.497038649s ago: executing program 5 (id=2517): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10000}]}}]}, 0x3c}}, 0x40d0) 2m22.341458356s ago: executing program 5 (id=2519): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000740)=""/200, 0xc8}, {0x0}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0xcb, 0x0, 0x0) write(r0, &(0x7f0000001680)="95d404bf", 0x4) 2m22.254979398s ago: executing program 5 (id=2521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 2m22.169393072s ago: executing program 5 (id=2522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) 2m21.914626171s ago: executing program 5 (id=2525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x40000002, 0x40, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x440401d0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffd9, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m21.578236703s ago: executing program 33 (id=2525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x40000002, 0x40, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x440401d0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffd9, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1m27.977729699s ago: executing program 6 (id=3275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf253700000008000300", @ANYRES32=r2, @ANYBLOB="08005700db0000000800810002000000080027000000000008002600a41aef55bf2149000e8fb3d20217"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1m27.971946627s ago: executing program 2 (id=3276): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m27.70639219s ago: executing program 6 (id=3282): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}}, 0x0) 1m27.537765708s ago: executing program 6 (id=3285): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 1m27.346771318s ago: executing program 6 (id=3289): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000440)='./file1\x00') 1m27.09835011s ago: executing program 1 (id=3291): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.02247878s ago: executing program 2 (id=3292): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0xff) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m26.911039548s ago: executing program 6 (id=3294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000002010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100"], 0xdc}}, 0x0) 1m26.910353405s ago: executing program 1 (id=3295): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 1m26.007685758s ago: executing program 2 (id=3302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 1m26.00668927s ago: executing program 1 (id=3303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m25.811655063s ago: executing program 2 (id=3305): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(&(0x7f0000000100)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 1m25.492474111s ago: executing program 1 (id=3308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)={0x58, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x80000003, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x82, 0xb}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x58}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 1m25.115742482s ago: executing program 3 (id=3311): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x2800200d}) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 1m24.961825985s ago: executing program 3 (id=3313): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) 1m24.821605778s ago: executing program 3 (id=3316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) 1m24.734582387s ago: executing program 3 (id=3317): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x23) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x7, 0x3fe, 0xfffffffd, 0x7ff, 0x3, "04ae080000000000007800000500080100", 0x7, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 1m24.578643376s ago: executing program 3 (id=3320): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}]}}]}, 0x8c}}, 0x0) 1m24.188462583s ago: executing program 2 (id=3321): setrlimit(0x8, &(0x7f0000000080)) mlockall(0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) io_setup(0x8, &(0x7f00000002c0)) 1m24.188041082s ago: executing program 1 (id=3322): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000340)="c1dfb080", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000340)={'wg1\x00', 0x20}) 1m23.974702848s ago: executing program 3 (id=3323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1m23.578969531s ago: executing program 34 (id=3323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1m23.5698335s ago: executing program 1 (id=3326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.956407963s ago: executing program 35 (id=3326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.921644156s ago: executing program 2 (id=3327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1m22.920831918s ago: executing program 36 (id=3327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1m22.877773841s ago: executing program 6 (id=3294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000002010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100"], 0xdc}}, 0x0) 1m22.742910127s ago: executing program 37 (id=3294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000002010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100"], 0xdc}}, 0x0) 3.724627909s ago: executing program 9 (id=4285): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x4}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3.390523076s ago: executing program 9 (id=4291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.142095573s ago: executing program 9 (id=4294): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x28}, 0x1, 0x7}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.809773904s ago: executing program 8 (id=4299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0x2, 0x4) 2.335399754s ago: executing program 8 (id=4302): socket$igmp(0x2, 0x3, 0x2) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x9, "e8"}, @main=@item_4={0x3, 0x0, 0x8, "99efb6b3"}]}}, 0x0}, 0x0) 2.251837031s ago: executing program 4 (id=4304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x5, 0x2, 0x0, 0x4}, {0x1}, {0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x7fc}]}) 2.123211477s ago: executing program 4 (id=4305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 2.04966772s ago: executing program 4 (id=4306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x400000000000113, 0x0, 0x0) 1.25788077s ago: executing program 9 (id=4315): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r2 = dup(r0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x24008081}, 0xc0094) 1.142666956s ago: executing program 9 (id=4316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="5c3830da", 0x4, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.08998725s ago: executing program 0 (id=4317): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)) 1.078813659s ago: executing program 4 (id=4319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x4000000, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x4660}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xa8a, 0x0, 0x8100}}]}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'batadv_slave_1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x0) 978.649192ms ago: executing program 0 (id=4320): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 961.386768ms ago: executing program 7 (id=4321): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404885c}, 0x40000) 844.995094ms ago: executing program 4 (id=4322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 826.077264ms ago: executing program 0 (id=4323): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) 789.024351ms ago: executing program 7 (id=4324): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0xb}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) 745.885894ms ago: executing program 4 (id=4325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/profiling', 0x141a82, 0x0) sendfile(r1, r1, 0x0, 0x4) 685.127596ms ago: executing program 0 (id=4326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) 638.626164ms ago: executing program 7 (id=4327): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') rmdir(&(0x7f0000000000)='./file0\x00') 621.210421ms ago: executing program 8 (id=4328): unshare(0x24060400) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 508.844309ms ago: executing program 8 (id=4329): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040) 477.326028ms ago: executing program 7 (id=4330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 354.852316ms ago: executing program 0 (id=4331): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x6c70, &(0x7f0000001300)={0x0, 0x15c, 0x100, 0xffffffff}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 354.269679ms ago: executing program 8 (id=4332): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) 273.314848ms ago: executing program 7 (id=4333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7a11f) 70.108519ms ago: executing program 0 (id=4334): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]]}, 0x34}}, 0x40) 69.393887ms ago: executing program 9 (id=4335): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x0) 523.41µs ago: executing program 7 (id=4336): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000340)=[{&(0x7f0000001640)="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", 0x6fa}, {0x0}], 0x2}}], 0x1, 0x8084) 0s ago: executing program 8 (id=4337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x7507ee81d8d062b3}, 0x4000040) kernel console output (not intermixed with test programs): 6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.096505][ T8597] usb 1-1: Using ep0 maxpacket: 32 [ 302.114596][ T8597] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.137324][ T8597] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.164171][ T8597] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.185786][ T8597] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 302.240498][ T8597] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 302.265996][ T8597] usb 1-1: Product: syz [ 302.281666][ T8597] usb 1-1: Manufacturer: syz [ 302.307007][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.307510][ T8597] usb 1-1: SerialNumber: syz [ 302.314871][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.352762][ T8597] usb 1-1: config 0 descriptor?? [ 302.391198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.404590][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.786243][ T8597] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 302.796747][ T51] Bluetooth: hci1: command tx timeout [ 302.976764][ T5971] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 303.146607][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 303.157496][ T5971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.178531][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.207202][ T8597] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 303.222878][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.236092][ T5971] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 303.271738][ T8597] usb 1-1: USB disconnect, device number 25 [ 303.284142][ T5971] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.304630][ T5971] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.354993][ T5971] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.373614][ T5971] usb 3-1: Manufacturer: syz [ 303.384672][ T5971] usb 3-1: config 0 descriptor?? [ 303.696700][ T5971] rc_core: IR keymap rc-hauppauge not found [ 303.705966][ T5971] Registered IR keymap rc-empty [ 303.711771][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.736731][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.749565][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'. [ 303.758121][ T5971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 303.770438][T12127] netlink: 'syz.1.2624': attribute type 5 has an invalid length. [ 303.800906][ T5971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 303.823634][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.853035][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.893652][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.916658][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.936655][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.957002][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.976577][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.997095][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.017774][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.041363][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.069105][ T5971] mceusb 3-1:0.0: Registered Ѕ with mce emulator interface version 1 [ 304.090312][ T5971] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 304.103811][ T5971] usb 3-1: USB disconnect, device number 24 [ 304.186719][ T9697] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 304.359988][ T9697] usb 2-1: Using ep0 maxpacket: 32 [ 304.380568][ T9697] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.397094][ T9697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.421966][ T9697] usb 2-1: config 0 descriptor?? [ 304.638194][ T9697] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 304.651076][ T9697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.665057][T12157] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 304.673768][ T9697] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 304.697292][ T9697] usb 2-1: media controller created [ 304.770541][ T9697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.845340][ T9697] az6027: usb out operation failed. (-71) [ 304.863944][ T9697] az6027: usb out operation failed. (-71) [ 304.874761][ T9697] stb0899_attach: Driver disabled by Kconfig [ 304.898837][ T9697] az6027: no front-end attached [ 304.898837][ T9697] [ 304.935306][ T9697] az6027: usb out operation failed. (-71) [ 304.951926][ T9697] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 304.975593][ T9697] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 305.027000][ T9697] dvb-usb: schedule remote query interval to 400 msecs. [ 305.052283][ T9697] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 305.069262][ T9697] usb 2-1: USB disconnect, device number 22 [ 305.177926][ T9697] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 305.680952][T12199] input: syz0 as /devices/virtual/input/input40 [ 306.123626][T12217] macsec3: entered allmulticast mode [ 306.466510][ T9697] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 306.678549][ T9697] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 306.687986][ T9697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.696085][ T9697] usb 3-1: Product: syz [ 306.736477][ T9697] usb 3-1: Manufacturer: syz [ 306.741158][ T9697] usb 3-1: SerialNumber: syz [ 306.766655][ T9697] usb 3-1: config 0 descriptor?? [ 306.981251][ T9697] usb 3-1: ignoring: probably an ADSL modem [ 307.387643][ T9697] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 307.599784][ T9697] usb 3-1: USB disconnect, device number 25 [ 307.862769][ T30] audit: type=1326 audit(1755644296.674:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12268 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bd8ebe9 code=0x7ffc0000 [ 307.923919][ T30] audit: type=1326 audit(1755644296.674:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12268 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bd8ebe9 code=0x7ffc0000 [ 308.006444][ T30] audit: type=1326 audit(1755644296.674:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12268 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f6a6bd8ebe9 code=0x7ffc0000 [ 308.068501][ T30] audit: type=1326 audit(1755644296.674:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12268 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bd8ebe9 code=0x7ffc0000 [ 308.123205][ T30] audit: type=1326 audit(1755644296.704:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12268 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bd8ebe9 code=0x7ffc0000 [ 309.466468][ T9697] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 309.539404][ T5971] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 309.637412][ T9697] usb 7-1: Using ep0 maxpacket: 8 [ 309.653225][ T9697] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 309.673700][ T9697] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 309.690976][ T9697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.704687][ T9697] usb 7-1: Product: syz [ 309.711631][ T9697] usb 7-1: Manufacturer: syz [ 309.716647][ T5971] usb 2-1: Using ep0 maxpacket: 32 [ 309.729709][ T9697] usb 7-1: SerialNumber: syz [ 309.741496][ T5971] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 309.761069][ T9697] usb 7-1: config 0 descriptor?? [ 309.761292][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.789188][ T9697] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 309.806581][ T9697] usb 7-1: setting power ON [ 309.811487][ T5971] usb 2-1: Product: syz [ 309.815706][ T5971] usb 2-1: Manufacturer: syz [ 309.822788][ T9697] dvb-usb: bulk message failed: -22 (2/0) [ 309.833121][ T5971] usb 2-1: SerialNumber: syz [ 309.847749][ T9697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.858707][ T5971] usb 2-1: config 0 descriptor?? [ 309.870260][ T9697] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 309.884911][ T9697] usb 7-1: media controller created [ 309.928360][ T9697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.975286][ T9697] usb 7-1: selecting invalid altsetting 6 [ 310.023485][ T9697] usb 7-1: digital interface selection failed (-22) [ 310.044862][ T9697] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 310.073344][ T9697] usb 7-1: setting power OFF [ 310.093707][ T9697] dvb-usb: bulk message failed: -22 (2/0) [ 310.105283][ T9697] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 310.128353][ T9697] (NULL device *): no alternate interface [ 310.201717][ T9697] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 310.267195][ T9697] usb 7-1: USB disconnect, device number 2 [ 310.287219][ T5971] airspy 2-1:0.0: Board ID: 00 [ 310.292088][ T5971] airspy 2-1:0.0: Firmware version: [ 310.695754][ T5971] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 310.711844][ T5971] airspy 2-1:0.0: Registered as swradio24 [ 310.725318][ T5971] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 310.749669][ T5971] usb 2-1: USB disconnect, device number 23 [ 311.939321][T12388] netlink: 'syz.0.2742': attribute type 3 has an invalid length. [ 314.188034][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2782'. [ 314.216801][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2782'. [ 314.794927][T12489] xt_CT: No such helper "snmp" [ 314.905400][T12501] batman_adv: batadv0: Adding interface: gretap1 [ 314.905420][T12501] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.905472][T12501] batman_adv: batadv0: Interface activated: gretap1 [ 315.706522][ T5830] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 315.859080][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 315.882821][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 315.907461][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 315.923151][ T5830] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 315.932567][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.960673][ T5830] usb 2-1: Product: syz [ 315.976412][ T5830] usb 2-1: Manufacturer: syz [ 315.986486][ T5830] usb 2-1: SerialNumber: syz [ 315.997465][ T5830] usb 2-1: config 0 descriptor?? [ 316.003333][T12519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.013014][T12519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.057721][ T5830] usb 2-1: ucan: probing device on interface #0 [ 316.219950][T12536] overlayfs: workdir and upperdir must be separate subtrees [ 316.290761][ T8597] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 316.459426][ T8597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 316.476710][ T8597] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 316.495896][T12547] tap0: tun_chr_ioctl cmd 1074025675 [ 316.506133][T12547] tap0: persist disabled [ 316.511006][ T8597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 316.525843][ T5830] usb 2-1: ucan: device reported invalid tx-fifo size [ 316.543107][ T5830] usb 2-1: ucan: probe failed; try to update the device firmware [ 316.563326][ T8597] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 316.586879][ T8597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.602533][ T8597] usb 1-1: Product: syz [ 316.607028][ T8597] usb 1-1: Manufacturer: syz [ 316.611682][ T8597] usb 1-1: SerialNumber: syz [ 316.628347][ T8597] usb 1-1: config 0 descriptor?? [ 316.634342][T12527] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 316.652210][T12527] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 316.669057][ T8597] usb 1-1: ucan: probing device on interface #0 [ 316.750842][ T8586] usb 2-1: USB disconnect, device number 24 [ 316.803174][T12553] bridge1: entered promiscuous mode [ 316.828268][T12553] bridge1: entered allmulticast mode [ 317.050872][T12565] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2819'. [ 317.277288][ T8597] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 317.307070][T12574] tap0: tun_chr_ioctl cmd 1074025677 [ 317.332284][T12574] tap0: linktype set to 805 [ 317.403200][T12578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2826'. [ 317.491535][ T8597] usb 1-1: USB disconnect, device number 26 [ 318.016527][ T8597] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 318.179933][ T8597] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 318.206622][ T8597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.230086][T12606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2838'. [ 318.231966][ T8597] usb 7-1: config 0 descriptor?? [ 318.249295][ T8597] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 318.400850][T12612] sp0: Synchronizing with TNC [ 319.078458][ T8597] gspca_sunplus: reg_w_riv err -71 [ 319.084481][ T8597] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 319.092739][ T5830] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 319.103954][ T8597] usb 7-1: USB disconnect, device number 3 [ 319.266959][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 319.289699][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.322366][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.336902][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 319.365957][ T5830] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 319.376161][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.404829][ T5830] usb 3-1: config 0 descriptor?? [ 319.566153][T12652] kvm: kvm [12649]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000085) = 0x0 [ 319.837175][ T5830] logitech 0003:046D:C293.0014: nested delimiters [ 319.854029][ T5830] logitech 0003:046D:C293.0014: item 0 4 2 10 parsing failed [ 319.896053][ T5830] logitech 0003:046D:C293.0014: parse failed [ 319.951671][ T5830] logitech 0003:046D:C293.0014: probe with driver logitech failed with error -22 [ 320.105631][ T5830] usb 3-1: USB disconnect, device number 26 [ 320.764847][T12728] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2872'. [ 320.850320][ T5830] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 321.012606][T12736] batadv_slave_0: entered promiscuous mode [ 321.024912][ T5830] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 321.038395][T12735] tap0: tun_chr_ioctl cmd 1074025673 [ 321.047496][T12734] batadv_slave_0: left promiscuous mode [ 321.053806][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.086998][ T5830] usb 7-1: config 0 descriptor?? [ 321.109547][ T5830] cp210x 7-1:0.0: cp210x converter detected [ 321.123521][T12738] syz.2.2876: attempt to access beyond end of device [ 321.123521][T12738] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 321.166670][T12738] FAT-fs (loop5): unable to read boot sector [ 321.373237][ T30] audit: type=1326 audit(1755644310.184:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a6bd85ba7 code=0x7ffc0000 [ 321.446755][ T30] audit: type=1326 audit(1755644310.184:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a6bd2add9 code=0x7ffc0000 [ 321.469809][ T30] audit: type=1326 audit(1755644310.184:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6bd8ebe9 code=0x7ffc0000 [ 321.494738][ T30] audit: type=1326 audit(1755644310.184:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a6bd85ba7 code=0x7ffc0000 [ 321.539180][ T5830] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 321.556619][ T30] audit: type=1326 audit(1755644310.184:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a6bd2add9 code=0x7ffc0000 [ 321.606915][ T30] audit: type=1326 audit(1755644310.184:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a6bd85ba7 code=0x7ffc0000 [ 321.635857][ T30] audit: type=1326 audit(1755644310.184:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a6bd2add9 code=0x7ffc0000 [ 321.703208][ T30] audit: type=1326 audit(1755644310.184:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a6bd85ba7 code=0x7ffc0000 [ 321.752799][ T30] audit: type=1326 audit(1755644310.184:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a6bd2add9 code=0x7ffc0000 [ 321.777072][ T5830] cp210x 7-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 321.805855][ T30] audit: type=1326 audit(1755644310.184:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12745 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a6bd85ba7 code=0x7ffc0000 [ 322.256436][ T5830] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 322.273925][ T5830] usb 7-1: cp210x converter now attached to ttyUSB0 [ 322.282728][ T5830] usb 7-1: USB disconnect, device number 4 [ 322.291914][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 322.301060][ T5830] cp210x 7-1:0.0: device disconnected [ 322.329971][T12765] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2888'. [ 322.563382][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.569850][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.779637][T12777] netlink: 'syz.0.2895': attribute type 11 has an invalid length. [ 325.157560][T12861] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2931'. [ 325.185348][T12861] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2931'. [ 325.768535][T12880] team_slave_0: entered allmulticast mode [ 325.808819][T12880] team_slave_0: entered promiscuous mode [ 326.120222][T12893] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2945'. [ 326.495894][T12906] tipc: Started in network mode [ 326.504342][T12906] tipc: Node identity ac141441, cluster identity 4711 [ 326.537411][T12906] tipc: Enabling of bearer rejected, failed to enable media [ 326.840528][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2956'. [ 327.042134][T12924] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 327.181899][T12929] tipc: Enabled bearer , priority 24 [ 327.971525][T12963] netlink: del zone limit has 4 unknown bytes [ 328.073652][T12957] netlink: set zone limit has 4 unknown bytes [ 328.306470][ T8597] tipc: Node number set to 2886997057 [ 328.369749][T12986] netlink: 'syz.1.2981': attribute type 10 has an invalid length. [ 328.401561][T12986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.433403][T12986] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 328.493229][T12991] netlink: 'syz.1.2981': attribute type 10 has an invalid length. [ 328.518226][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2984'. [ 328.536538][T12991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2981'. [ 328.555901][T12990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2984'. [ 328.566990][T12991] batadv0: entered promiscuous mode [ 328.572427][T12991] batadv0: entered allmulticast mode [ 328.639936][T12991] bond0: (slave batadv0): Releasing backup interface [ 328.706573][T12991] bridge0: port 3(batadv0) entered blocking state [ 328.729274][T12991] bridge0: port 3(batadv0) entered disabled state [ 329.129094][ T1114] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 329.139040][ T1114] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 329.417031][T13030] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 329.429105][T13030] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 329.439287][T13030] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 329.524074][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'. [ 329.541883][T13036] random: crng reseeded on system resumption [ 329.615582][T13036] Restarting kernel threads ... [ 329.626697][ T5830] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 329.634498][T13036] Done restarting kernel threads. [ 329.802708][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 329.824770][ T5830] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 329.838985][ T5830] usb 7-1: config 0 has no interface number 0 [ 329.857778][ T5830] usb 7-1: config 0 interface 12 has no altsetting 0 [ 329.881393][ T5830] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 329.895325][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.913940][ T5830] usb 7-1: Product: syz [ 329.921987][ T5830] usb 7-1: Manufacturer: syz [ 329.929619][ T5830] usb 7-1: SerialNumber: syz [ 329.943085][ T5830] usb 7-1: config 0 descriptor?? [ 330.036653][ T5971] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 330.101322][T13051] sch_fq: defrate 0 ignored. [ 330.200462][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.226210][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.256450][ T5971] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 330.265615][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.284258][ T5971] usb 4-1: config 0 descriptor?? [ 330.774743][ T5830] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 330.783242][ T5830] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 330.790711][ T5830] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 330.799476][ T5830] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 330.812852][ T5830] usb 7-1: USB disconnect, device number 5 [ 330.976538][ T8586] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 331.108453][ T5971] uclogic 0003:256C:006D.0015: failed retrieving Huion firmware version: -71 [ 331.134334][ T5971] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 331.149473][ T8586] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.166254][ T5971] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71 [ 331.181907][ T8586] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.199297][ T5971] usb 4-1: USB disconnect, device number 22 [ 331.227216][ T8586] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.245411][ T8586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.256936][ T8586] usb 3-1: SerialNumber: syz [ 331.485464][ T8586] usb 3-1: 0:2 : does not exist [ 331.529358][ T8586] usb 3-1: USB disconnect, device number 27 [ 331.637186][ T9697] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 331.801289][ T9697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.818584][ T9697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.846647][ T9697] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 331.866222][ T9697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.877823][ T9697] usb 1-1: config 0 descriptor?? [ 332.045863][T13104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3038'. [ 332.230341][T13112] bond0: entered promiscuous mode [ 332.235770][T13112] bond_slave_0: entered promiscuous mode [ 332.252381][T13112] bond_slave_1: entered promiscuous mode [ 332.258820][T13112] geneve0: entered promiscuous mode [ 332.271099][T13112] bond0: left promiscuous mode [ 332.276078][T13112] bond_slave_0: left promiscuous mode [ 332.282788][T13112] bond_slave_1: left promiscuous mode [ 332.292741][T13112] geneve0: left promiscuous mode [ 332.317373][ T9697] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 332.523849][ T9697] usb 1-1: USB disconnect, device number 27 [ 332.836443][ T8586] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 333.024646][ T8586] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 333.076398][ T8586] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 333.085119][ T8586] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 333.133610][ T8586] usb 7-1: config 1 has no interface number 0 [ 333.145765][ T8586] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 333.204076][ T8586] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 333.246885][ T8586] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 333.299279][ T8586] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.356003][ T8586] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 333.543707][T13154] sctp: [Deprecated]: syz.0.3062 (pid 13154) Use of int in max_burst socket option. [ 333.543707][T13154] Use struct sctp_assoc_value instead [ 333.743106][T13163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3066'. [ 333.932895][ T8586] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 333.947132][ T8575] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 333.967605][T13173] pimreg: tun_chr_ioctl cmd 1074812118 [ 334.101793][T13178] loop9: detected capacity change from 0 to 7 [ 334.110157][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.118416][ T8575] usb 4-1: Using ep0 maxpacket: 8 [ 334.129332][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.154429][T13180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.155243][ T8575] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 334.162257][T13180] IPv6: NLM_F_CREATE should be set when creating new route [ 334.177882][T13180] IPv6: NLM_F_CREATE should be set when creating new route [ 334.178642][ T8597] usb 7-1: USB disconnect, device number 6 [ 334.185167][T13180] IPv6: NLM_F_CREATE should be set when creating new route [ 334.196694][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.208324][ T8597] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 334.211521][T13180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.215628][ T8575] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.236160][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.247242][ T8575] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.257732][ T8575] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.268144][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.278180][ T8575] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.291925][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.300057][ T8575] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.309823][ T8575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.319237][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.334516][T13178] ldm_validate_partition_table(): Disk read failed. [ 334.341899][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.350328][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.358620][T13178] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.367157][T13178] Dev loop9: unable to read RDB block 0 [ 334.373416][T13178] loop9: unable to read partition table [ 334.380289][T13178] loop9: partition table beyond EOD, truncated [ 334.390484][T13178] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 334.390484][T13178] ) failed (rc=-5) [ 334.541732][ T8575] usb 4-1: GET_CAPABILITIES returned 0 [ 334.558126][ T8575] usbtmc 4-1:16.0: can't read capabilities [ 334.755793][ T8586] usb 4-1: USB disconnect, device number 23 [ 335.783947][T13235] netlink: 'syz.0.3094': attribute type 11 has an invalid length. [ 335.792774][T13235] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3094'. [ 336.091798][T13243] netlink: 'syz.3.3097': attribute type 29 has an invalid length. [ 336.117377][T13246] random: crng reseeded on system resumption [ 336.117978][T13234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.164277][T13243] netlink: 'syz.3.3097': attribute type 29 has an invalid length. [ 336.387963][T13247] netlink: 'syz.3.3097': attribute type 29 has an invalid length. [ 337.475675][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 337.475697][ T30] audit: type=1326 audit(1755644326.274:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6edd8ebe9 code=0x7ffc0000 [ 337.566562][ T30] audit: type=1326 audit(1755644326.304:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6edd8ebe9 code=0x7ffc0000 [ 337.632756][ T30] audit: type=1326 audit(1755644326.304:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6edd8d550 code=0x7ffc0000 [ 337.675638][ T30] audit: type=1326 audit(1755644326.304:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa6edd90417 code=0x7ffc0000 [ 337.725374][ T30] audit: type=1326 audit(1755644326.304:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6edd8ebe9 code=0x7ffc0000 [ 337.783371][ T30] audit: type=1326 audit(1755644326.304:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa6edd90417 code=0x7ffc0000 [ 337.806995][T13299] netlink: 'syz.0.3120': attribute type 1 has an invalid length. [ 337.842457][ T30] audit: type=1326 audit(1755644326.304:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa6edd8d84a code=0x7ffc0000 [ 337.906190][ T30] audit: type=1326 audit(1755644326.304:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6edd8ebe9 code=0x7ffc0000 [ 337.964039][ T30] audit: type=1326 audit(1755644326.304:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6edd8ebe9 code=0x7ffc0000 [ 338.011944][ T30] audit: type=1326 audit(1755644326.304:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa6edd8ebe9 code=0x7ffc0000 [ 338.142395][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'. [ 338.445173][T13292] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 338.616773][ T9697] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 338.784500][ T9697] usb 7-1: unable to get BOS descriptor or descriptor too short [ 338.811822][ T9697] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 338.831141][ T9697] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 338.852692][ T9697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.881934][ T9697] usb 7-1: Product: syz [ 338.897070][ T9697] usb 7-1: Manufacturer: syz [ 338.906606][ T9697] usb 7-1: SerialNumber: syz [ 339.781265][ T9697] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 339.956752][ T9697] usb 7-1: unable to get BOS descriptor or descriptor too short [ 340.108136][T13376] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3156'. [ 340.239642][ T8575] usb 7-1: USB disconnect, device number 7 [ 341.264425][T13422] nbd: nbd1 already in use [ 341.468511][T13431] tun0: tun_chr_ioctl cmd 1074025694 [ 342.996776][ T8575] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 343.166778][ T8575] usb 7-1: Using ep0 maxpacket: 8 [ 343.178665][ T8575] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.200550][ T8575] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 343.225483][ T8575] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.265118][ T8575] usb 7-1: config 0 descriptor?? [ 343.279853][ T8575] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 343.547768][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 343.562813][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 344.096083][ T8575] gspca_vc032x: reg_w err -71 [ 344.102298][ T8575] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 344.118712][ T8575] usb 7-1: USB disconnect, device number 8 [ 344.600975][T13532] vivid-000: ================= START STATUS ================= [ 344.631798][T13532] vivid-000: Test Pattern: 75% Colorbar [ 344.657475][T13532] vivid-000: Fill Percentage of Frame: 100 [ 344.663625][T13532] vivid-000: Horizontal Movement: No Movement [ 344.670954][T13532] vivid-000: Vertical Movement: No Movement [ 344.677338][T13532] vivid-000: OSD Text Mode: All [ 344.686994][T13532] vivid-000: Show Border: false [ 344.692851][T13532] vivid-000: Show Square: false [ 344.702592][T13532] vivid-000: Sensor Flipped Horizontally: false [ 344.709493][T13532] vivid-000: Sensor Flipped Vertically: false [ 344.715734][T13532] vivid-000: Insert SAV Code in Image: false [ 344.732641][T13532] vivid-000: Insert EAV Code in Image: false [ 344.750363][T13532] vivid-000: Insert Video Guard Band: false [ 344.761514][T13532] vivid-000: Reduced Framerate: false [ 344.767423][T13532] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 344.776024][T13532] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 344.785411][T13532] vivid-000: Enable Capture Cropping: true grabbed [ 344.792311][T13532] vivid-000: Enable Capture Composing: true grabbed [ 344.799257][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 344.799992][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 344.806916][T13532] vivid-000: Enable Capture Scaler: true grabbed [ 344.936450][T13532] vivid-000: Timestamp Source: End of Frame [ 344.959107][T13532] vivid-000: Colorspace: sRGB [ 344.980610][T13532] vivid-000: Transfer Function: Default [ 345.001853][T13532] vivid-000: Y'CbCr Encoding: Default [ 345.013198][T13532] vivid-000: HSV Encoding: Hue 0-179 [ 345.018870][T13532] vivid-000: Quantization: Default [ 345.024250][T13532] vivid-000: Apply Alpha To Red Only: false [ 345.039483][T13532] vivid-000: Standard Aspect Ratio: 4x3 [ 345.045386][T13532] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 345.060783][T13532] vivid-000: DV Timings: 640x480p59 inactive [ 345.091627][T13532] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 345.133758][T13532] vivid-000: Maximum EDID Blocks: 2 [ 345.143900][T13532] vivid-000: Limited RGB Range (16-235): false [ 345.184072][T13532] vivid-000: Rx RGB Quantization Range: Automatic [ 345.196156][T13532] vivid-000: Power Present: 0x00000001 [ 345.202948][T13532] tpg source WxH: 320x240 (Y'CbCr) [ 345.215514][T13532] tpg field: 1 [ 345.219669][T13532] tpg crop: (0,0)/320x240 [ 345.224312][T13532] tpg compose: (0,0)/320x240 [ 345.237960][T13532] tpg colorspace: 8 [ 345.241857][T13532] tpg transfer function: 0/2 [ 345.264393][T13532] tpg Y'CbCr encoding: 0/1 [ 345.284950][T13532] tpg quantization: 0/2 [ 345.302749][T13532] tpg RGB range: 0/2 [ 345.312637][T13532] vivid-000: ================== END STATUS ================== [ 345.781327][T13570] kvm: kvm [13568]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 347.478288][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3274'. [ 347.501658][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3274'. [ 347.514761][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3274'. [ 347.537476][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3274'. [ 347.596316][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3275'. [ 347.662544][T13645] serio: Serial port ptm0 [ 348.086259][T11895] cgroup: fork rejected by pids controller in /syz6 [ 348.165947][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 348.185805][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 348.673421][ T1152] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.879527][ T1152] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.026242][ T1152] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.213977][ T1152] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.446022][ T13] tipc: Resetting bearer [ 349.657246][ T1152] bridge_slave_1: left allmulticast mode [ 349.673103][ T1152] bridge_slave_1: left promiscuous mode [ 349.691696][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.785819][ T1152] bridge_slave_0: left allmulticast mode [ 349.824277][ T1152] bridge_slave_0: left promiscuous mode [ 349.836638][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.868921][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.882424][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.892122][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.903463][ T1152] batman_adv: batadv0: Interface deactivated: gretap1 [ 349.917616][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.926177][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 349.926198][ T30] audit: type=1326 audit(1755644338.724:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf8ff85ba7 code=0x7ffc0000 [ 349.957162][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.963877][ T30] audit: type=1326 audit(1755644338.724:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf8ff2add9 code=0x7ffc0000 [ 349.988708][ T30] audit: type=1326 audit(1755644338.724:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf8ff85ba7 code=0x7ffc0000 [ 350.011648][ T30] audit: type=1326 audit(1755644338.724:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf8ff2add9 code=0x7ffc0000 [ 350.034146][ T30] audit: type=1326 audit(1755644338.724:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf8ff85ba7 code=0x7ffc0000 [ 350.056450][ T30] audit: type=1326 audit(1755644338.724:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf8ff2add9 code=0x7ffc0000 [ 350.079562][ T30] audit: type=1326 audit(1755644338.724:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf8ff85ba7 code=0x7ffc0000 [ 350.101441][ T30] audit: type=1326 audit(1755644338.724:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf8ff2add9 code=0x7ffc0000 [ 350.123455][ T30] audit: type=1326 audit(1755644338.724:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf8ff85ba7 code=0x7ffc0000 [ 350.150654][ T30] audit: type=1326 audit(1755644338.724:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf8ff2add9 code=0x7ffc0000 [ 350.625474][ T1152] batman_adv: batadv0: Removing interface: gretap1 [ 351.098926][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.113077][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.125974][ T1152] bond0 (unregistering): Released all slaves [ 351.330081][ T1152] tipc: Disabling bearer [ 351.394639][ T1152] tipc: Left network mode [ 352.019151][T13742] dummy0: entered allmulticast mode [ 352.196641][ T1152] hsr_slave_0: left promiscuous mode [ 352.216996][ T1152] hsr_slave_1: left promiscuous mode [ 352.223432][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.246438][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.257678][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.265162][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.372911][ T1152] veth1_macvtap: left promiscuous mode [ 352.403238][ T1152] veth0_macvtap: left promiscuous mode [ 352.422493][ T1152] veth1_vlan: left promiscuous mode [ 352.442247][ T1152] veth0_vlan: left promiscuous mode [ 352.602415][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.616047][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.626866][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.635344][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.648282][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.175990][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.191215][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.200778][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.210334][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.222774][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.401960][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.427925][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.428307][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.449727][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.461134][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.470879][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.475584][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.487755][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.487859][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.504570][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.803911][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 353.857191][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 354.716773][ T5158] Bluetooth: hci0: command tx timeout [ 355.281759][ T5158] Bluetooth: hci1: command tx timeout [ 355.517023][ T5158] Bluetooth: hci2: command tx timeout [ 355.604894][T13752] chnl_net:caif_netlink_parms(): no params data found [ 355.611962][ T5158] Bluetooth: hci3: command tx timeout [ 355.664461][T13745] chnl_net:caif_netlink_parms(): no params data found [ 355.798384][T13754] chnl_net:caif_netlink_parms(): no params data found [ 355.815697][T13750] chnl_net:caif_netlink_parms(): no params data found [ 356.319926][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.327711][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.335254][T13745] bridge_slave_0: entered allmulticast mode [ 356.344799][T13745] bridge_slave_0: entered promiscuous mode [ 356.384001][T13754] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.391852][T13754] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.399348][T13754] bridge_slave_0: entered allmulticast mode [ 356.407349][T13754] bridge_slave_0: entered promiscuous mode [ 356.473439][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.500607][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.508384][T13745] bridge_slave_1: entered allmulticast mode [ 356.516614][T13745] bridge_slave_1: entered promiscuous mode [ 356.544621][T13754] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.552082][T13754] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.559948][T13754] bridge_slave_1: entered allmulticast mode [ 356.568527][T13754] bridge_slave_1: entered promiscuous mode [ 356.620933][T13750] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.635864][T13750] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.644500][T13750] bridge_slave_0: entered allmulticast mode [ 356.660609][T13750] bridge_slave_0: entered promiscuous mode [ 356.674431][T13752] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.682190][T13752] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.702554][T13752] bridge_slave_0: entered allmulticast mode [ 356.717962][T13752] bridge_slave_0: entered promiscuous mode [ 356.796495][ T5158] Bluetooth: hci0: command tx timeout [ 356.809664][T13754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.828343][T13750] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.835603][T13750] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.864178][T13750] bridge_slave_1: entered allmulticast mode [ 356.887586][T13750] bridge_slave_1: entered promiscuous mode [ 356.936105][T13752] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.954284][T13752] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.974926][T13752] bridge_slave_1: entered allmulticast mode [ 356.994589][T13752] bridge_slave_1: entered promiscuous mode [ 357.005195][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.062501][T13754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.259749][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.322025][T13750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.354484][T13752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.364567][ T5158] Bluetooth: hci1: command tx timeout [ 357.380951][T13752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.454707][T13754] team0: Port device team_slave_0 added [ 357.472963][T13750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.600070][ T5158] Bluetooth: hci2: command tx timeout [ 357.657664][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.676766][ T5158] Bluetooth: hci3: command tx timeout [ 357.701749][T13745] team0: Port device team_slave_0 added [ 357.711980][T13754] team0: Port device team_slave_1 added [ 357.797832][T13750] team0: Port device team_slave_0 added [ 357.821653][T13752] team0: Port device team_slave_0 added [ 357.840804][T13752] team0: Port device team_slave_1 added [ 357.861787][T13745] team0: Port device team_slave_1 added [ 357.897594][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.036554][T13750] team0: Port device team_slave_1 added [ 358.179628][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.256293][T13752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.274348][T13752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.308637][T13752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.333182][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.341046][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.369967][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.406060][T13809] macvlan0: entered promiscuous mode [ 358.414798][T13809] bridge0: entered promiscuous mode [ 358.430771][T13754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.449788][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.517045][T13754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.538989][T13754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.546014][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.592094][T13754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.624133][T13750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.631796][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.658881][T13750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.672213][T13750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.679329][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.714646][T13750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.737455][T13752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.744581][T13752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.777462][T13752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.798148][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.805166][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.831655][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.881113][ T5158] Bluetooth: hci0: command tx timeout [ 358.898088][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.095556][T13754] hsr_slave_0: entered promiscuous mode [ 359.103575][T13754] hsr_slave_1: entered promiscuous mode [ 359.111259][T13754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.118930][T13754] Cannot create hsr debugfs directory [ 359.229403][T13752] hsr_slave_0: entered promiscuous mode [ 359.249009][T13752] hsr_slave_1: entered promiscuous mode [ 359.255628][T13752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.271870][T13752] Cannot create hsr debugfs directory [ 359.304719][T13750] hsr_slave_0: entered promiscuous mode [ 359.320000][T13750] hsr_slave_1: entered promiscuous mode [ 359.326803][T13750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.334457][T13750] Cannot create hsr debugfs directory [ 359.382777][T13745] hsr_slave_0: entered promiscuous mode [ 359.389918][T13745] hsr_slave_1: entered promiscuous mode [ 359.404532][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.412558][T13745] Cannot create hsr debugfs directory [ 359.436845][ T5158] Bluetooth: hci1: command tx timeout [ 359.677186][ T5158] Bluetooth: hci2: command tx timeout [ 359.706557][ T8581] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 359.725538][ T1152] bridge0: port 3(batadv0) entered disabled state [ 359.738644][ T1152] bridge_slave_1: left allmulticast mode [ 359.744366][ T1152] bridge_slave_1: left promiscuous mode [ 359.750586][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.758408][ T5158] Bluetooth: hci3: command tx timeout [ 359.774062][ T1152] bridge_slave_0: left allmulticast mode [ 359.779847][ T1152] bridge_slave_0: left promiscuous mode [ 359.785585][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.802983][ T1152] bridge_slave_1: left promiscuous mode [ 359.809174][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.819512][ T1152] bridge_slave_0: left allmulticast mode [ 359.825197][ T1152] bridge_slave_0: left promiscuous mode [ 359.832232][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.882009][ T8581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.893267][ T8581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.908411][ T8581] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 359.917966][ T8581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.930919][ T8581] usb 1-1: config 0 descriptor?? [ 360.388629][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.401007][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.411369][ T1152] bond0 (unregistering): Released all slaves [ 360.655688][ T1152] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 360.798689][ T8581] hid-led 0003:27B8:01ED.0017: probe with driver hid-led failed with error -71 [ 360.822215][ T8581] usb 1-1: USB disconnect, device number 28 [ 360.905224][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.916448][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.930307][ T1152] bond0 (unregistering): Released all slaves [ 360.956747][ T5158] Bluetooth: hci0: command tx timeout [ 361.517779][ T5158] Bluetooth: hci1: command tx timeout [ 361.652068][T13752] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 361.686151][T13752] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 361.763168][ T5158] Bluetooth: hci2: command tx timeout [ 361.769651][T13752] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 361.785592][T13752] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 361.821748][ T1152] hsr_slave_0: left promiscuous mode [ 361.829208][ T1152] hsr_slave_1: left promiscuous mode [ 361.835485][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.838314][ T5158] Bluetooth: hci3: command tx timeout [ 361.850759][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.863662][ T1152] hsr_slave_0: left promiscuous mode [ 361.874060][ T1152] hsr_slave_1: left promiscuous mode [ 361.884516][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.897554][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.954464][ T1152] team0 (unregistering): Port device batadv1 removed [ 362.515200][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 362.574257][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 363.570338][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 363.629770][ T1152] team0 (unregistering): Port device C removed [ 364.224385][ T1152] lo (unregistering): left allmulticast mode [ 364.369805][T13745] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 364.422849][T13745] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 364.451544][T13745] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 364.580761][T13745] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 364.792083][T13849] tipc: Started in network mode [ 364.800007][T13849] tipc: Node identity ac14140f, cluster identity 4711 [ 364.807450][T13849] tipc: New replicast peer: 255.255.255.255 [ 364.813974][T13849] tipc: Enabled bearer , priority 10 [ 364.826084][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3356'. [ 364.836218][T13853] tipc: Disabling bearer [ 365.088459][T13752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.231911][T13752] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.284660][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.291927][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.324265][ T1152] IPVS: stop unused estimator thread 0... [ 365.354176][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.361471][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.370473][ T1152] IPVS: stop unused estimator thread 0... [ 365.491532][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.554999][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.601313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.608569][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.637852][T13754] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 365.671586][T13754] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 365.872058][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.879350][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.906731][T13754] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 365.930857][T13754] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 366.172242][T13750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.190574][T13750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.257958][T13750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.279879][T13750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.368142][T13890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3366'. [ 366.384601][T13752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.532234][T13754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.640823][T13754] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.688438][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.695657][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.740472][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.747733][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.842032][T13750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.849714][ T9701] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 366.878137][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.944793][T13750] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.011516][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.018795][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.028043][ T9701] usb 1-1: Using ep0 maxpacket: 32 [ 367.066985][ T9701] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.092337][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.099692][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.117277][ T9701] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 367.139565][ T9701] usb 1-1: config 0 interface 0 has no altsetting 0 [ 367.170322][ T9701] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 367.195096][ T9701] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 367.234384][ T9701] usb 1-1: Product: syz [ 367.246681][ T9701] usb 1-1: Manufacturer: syz [ 367.251463][ T9701] usb 1-1: SerialNumber: syz [ 367.283779][ T9701] usb 1-1: config 0 descriptor?? [ 367.389239][T13752] veth0_vlan: entered promiscuous mode [ 367.455279][T13752] veth1_vlan: entered promiscuous mode [ 367.585815][T13754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.616218][T13752] veth0_macvtap: entered promiscuous mode [ 367.664608][T13752] veth1_macvtap: entered promiscuous mode [ 367.740491][ T9701] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 367.761936][T13752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.835611][T13752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.898075][T13752] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.921116][T13752] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.950596][T13752] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.970945][T13752] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.147598][ T9701] usb 1-1: USB disconnect, device number 29 [ 368.159306][T13745] veth0_vlan: entered promiscuous mode [ 368.292253][T13745] veth1_vlan: entered promiscuous mode [ 368.349600][T13750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.401441][T13832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.422414][T13832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.521259][T13745] veth0_macvtap: entered promiscuous mode [ 368.546248][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.571285][T13745] veth1_macvtap: entered promiscuous mode [ 368.579280][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.597834][T13754] veth0_vlan: entered promiscuous mode [ 368.649256][T13754] veth1_vlan: entered promiscuous mode [ 368.662951][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.719885][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.791959][T13745] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.814987][T13745] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.833401][T13745] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.845718][T13745] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.983621][T13754] veth0_macvtap: entered promiscuous mode [ 369.003207][T13754] veth1_macvtap: entered promiscuous mode [ 369.093273][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 369.093292][ T30] audit: type=1326 audit(1755644357.904:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13934 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59178ebe9 code=0x7ffc0000 [ 369.133437][T13754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.165724][ T30] audit: type=1326 audit(1755644357.904:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13934 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59178ebe9 code=0x7ffc0000 [ 369.210263][T13754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.228958][ T30] audit: type=1326 audit(1755644357.944:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13934 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd59178ebe9 code=0x7ffc0000 [ 369.234757][T13750] veth0_vlan: entered promiscuous mode [ 369.260311][ T30] audit: type=1326 audit(1755644357.944:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13934 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59178ebe9 code=0x7ffc0000 [ 369.293211][ T30] audit: type=1326 audit(1755644357.944:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13934 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fd59178ebe9 code=0x7ffc0000 [ 369.316684][ T30] audit: type=1326 audit(1755644357.944:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13934 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59178ebe9 code=0x7ffc0000 [ 369.383937][T13754] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.406568][T13754] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.415357][T13754] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.430181][T13754] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.454049][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.462902][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.478391][T13750] veth1_vlan: entered promiscuous mode [ 369.611040][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.647036][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.706149][T13750] veth0_macvtap: entered promiscuous mode [ 369.749510][T13750] veth1_macvtap: entered promiscuous mode [ 369.896006][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.910520][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.929565][T13750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.014946][T13750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.036770][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.058101][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.070748][T13750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.099113][T13750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.116975][T13750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.125939][T13750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.345446][T13832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.366554][T13832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.462583][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.496560][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.076929][ T5830] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 371.243309][ T5830] usb 1-1: config 107 has an invalid interface number: 170 but max is 0 [ 371.262113][ T5830] usb 1-1: config 107 has no interface number 0 [ 371.281184][ T5830] usb 1-1: config 107 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 1056, setting to 64 [ 371.306932][ T5830] usb 1-1: config 107 interface 170 altsetting 5 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 371.318382][ T5830] usb 1-1: config 107 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 371.364206][ T5830] usb 1-1: config 107 interface 170 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 371.394079][ T5830] usb 1-1: config 107 interface 170 has no altsetting 0 [ 371.415632][ T5830] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=25.b6 [ 371.431437][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.447093][ T5830] usb 1-1: Product: syz [ 371.451346][ T5830] usb 1-1: Manufacturer: syz [ 371.456078][ T5830] usb 1-1: SerialNumber: syz [ 371.704842][ T5830] keyspan 1-1:107.170: Keyspan 1 port adapter converter detected [ 371.724720][ T5830] keyspan 1-1:107.170: found no endpoint descriptor for endpoint 87 [ 371.753470][ T5830] keyspan 1-1:107.170: found no endpoint descriptor for endpoint 7 [ 371.791733][ T5830] keyspan 1-1:107.170: found no endpoint descriptor for endpoint 81 [ 371.806582][ T5830] keyspan 1-1:107.170: found no endpoint descriptor for endpoint 1 [ 371.827021][ T5830] keyspan 1-1:107.170: unsupported endpoint type 0 [ 371.843945][ T5830] keyspan 1-1:107.170: found no endpoint descriptor for endpoint 85 [ 371.861370][ T5830] keyspan 1-1:107.170: found no endpoint descriptor for endpoint 5 [ 371.896958][ T5830] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 371.942552][ T5830] usb 1-1: USB disconnect, device number 30 [ 371.980156][ T5830] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 372.017981][ T5830] keyspan 1-1:107.170: device disconnected [ 372.616733][T14015] netlink: 'syz.0.3403': attribute type 1 has an invalid length. [ 372.655934][T14015] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3403'. [ 372.692761][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 372.742196][ T5830] kernel write not supported for file /sg0 (pid: 5830 comm: kworker/1:3) [ 373.264900][T14045] random: crng reseeded on system resumption [ 373.376953][ T8586] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 373.542693][T14052] sp0: Synchronizing with TNC [ 373.546142][ T8586] usb 9-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 373.555948][T14052] sp0: Found TNC [ 373.566828][ T8586] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.575192][ T8586] usb 9-1: Product: syz [ 373.579757][ T8586] usb 9-1: Manufacturer: syz [ 373.584507][ T8586] usb 9-1: SerialNumber: syz [ 373.597437][ T8586] usb 9-1: config 0 descriptor?? [ 374.191001][T14065] cgroup: fork rejected by pids controller in /syz0 [ 374.422349][ T8586] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 374.440327][ T8586] asix 9-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 374.469317][ T8586] asix 9-1:0.0: probe with driver asix failed with error -71 [ 374.512631][ T8586] usb 9-1: USB disconnect, device number 2 [ 375.322428][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3437'. [ 376.004846][T14945] usb usb8: usbfs: process 14945 (syz.8.3448) did not claim interface 0 before use [ 376.350650][T14965] syz.8.3458: attempt to access beyond end of device [ 376.350650][T14965] loop17: rw=0, sector=2, nr_sectors = 2 limit=0 [ 376.437590][T14965] syz.8.3458: attempt to access beyond end of device [ 376.437590][T14965] loop17: rw=0, sector=16, nr_sectors = 2 limit=0 [ 376.572137][ T30] audit: type=1326 audit(1755644365.374:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 376.653561][ T30] audit: type=1326 audit(1755644365.414:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 376.676128][ T30] audit: type=1326 audit(1755644365.414:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 376.700729][ T30] audit: type=1326 audit(1755644365.414:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 376.773745][ T30] audit: type=1326 audit(1755644365.414:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 376.817630][ T30] audit: type=1326 audit(1755644365.444:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 376.896658][ T30] audit: type=1326 audit(1755644365.444:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 376.926689][ T5830] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 376.987147][ T30] audit: type=1326 audit(1755644365.444:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 377.020804][ T30] audit: type=1326 audit(1755644365.444:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 377.043536][ T30] audit: type=1326 audit(1755644365.514:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14971 comm="syz.7.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b2f8ebe9 code=0x7ffc0000 [ 377.096431][ T5830] usb 10-1: Using ep0 maxpacket: 32 [ 377.107845][ T5830] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 377.150691][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.181376][ T5830] usb 10-1: config 0 descriptor?? [ 377.233631][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'. [ 377.262082][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'. [ 377.431038][ T5830] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 377.462303][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 377.484668][ T5830] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 377.495832][ T5830] usb 10-1: media controller created [ 377.574392][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.633661][ T5830] az6027: usb out operation failed. (-71) [ 377.662447][ T5830] az6027: usb out operation failed. (-71) [ 377.691780][ T5830] stb0899_attach: Driver disabled by Kconfig [ 377.732014][ T5830] az6027: no front-end attached [ 377.732014][ T5830] [ 377.836085][ T5830] az6027: usb out operation failed. (-71) [ 377.842961][ T5830] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 377.852523][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input42 [ 377.917498][ T5830] dvb-usb: schedule remote query interval to 400 msecs. [ 377.944390][ T5830] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 377.980780][ T5830] usb 10-1: USB disconnect, device number 2 [ 378.088050][ T5830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 378.251763][T15029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.357124][ T8586] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 378.387616][T15033] netlink: 'syz.9.3487': attribute type 3 has an invalid length. [ 378.403157][T15033] netlink: 'syz.9.3487': attribute type 3 has an invalid length. [ 378.542745][ T8586] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 378.567086][ T8586] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 378.609297][ T8586] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 378.639791][ T8586] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.670173][ T8586] usb 9-1: Product: syz [ 378.680002][ T8586] usb 9-1: Manufacturer: syz [ 378.705152][ T8586] usb 9-1: SerialNumber: syz [ 378.738630][ T8586] usb 9-1: config 0 descriptor?? [ 378.760149][T15025] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 378.772155][T15025] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 379.031059][T15025] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 379.080221][T15025] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 379.437632][T15059] netlink: 'syz.0.3499': attribute type 9 has an invalid length. [ 379.454303][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 379.513586][T15059] macvlan1: entered promiscuous mode [ 379.533903][ T8586] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 379.551282][T15059] macvlan1: entered allmulticast mode [ 379.571103][T15059] hsr0: entered allmulticast mode [ 379.593390][T15059] hsr_slave_0: entered allmulticast mode [ 379.626505][T15059] hsr_slave_1: entered allmulticast mode [ 379.735405][ T8586] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 379.772276][ T8586] usb 9-1: USB disconnect, device number 3 [ 380.788454][T15100] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3518'. [ 381.885300][T15131] macvlan0: entered promiscuous mode [ 381.915890][T15131] macvlan1: entered promiscuous mode [ 381.927745][T15131] hsr1: entered promiscuous mode [ 382.027948][T15134] netlink: 'syz.7.3534': attribute type 3 has an invalid length. [ 382.035764][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3534'. [ 382.086216][T15134] netlink: 'syz.7.3534': attribute type 3 has an invalid length. [ 382.108219][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3534'. [ 382.946511][ T8597] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 383.148701][ T8597] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.162793][ T8597] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 383.175750][ T8597] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 383.188355][ T8597] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 383.198729][ T8597] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 383.239060][ T8597] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 383.249551][ T8581] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 383.260664][ T8597] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 383.269324][ T8597] usb 10-1: Product: syz [ 383.274460][ T8597] usb 10-1: Manufacturer: syz [ 383.280169][ T8597] usb 10-1: SerialNumber: syz [ 383.288917][ T8597] usb 10-1: config 0 descriptor?? [ 383.444301][ T8581] usb 9-1: Using ep0 maxpacket: 8 [ 383.464638][ T8581] usb 9-1: too many configurations: 120, using maximum allowed: 8 [ 383.504968][ T8597] radio-si470x 10-1:0.0: DeviceID=0xc8c8 ChipID=0xc500 [ 383.548287][ T8581] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 383.559232][ T8581] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 383.571409][ T8581] usb 9-1: Product: syz [ 383.575720][ T8581] usb 9-1: Manufacturer: syz [ 383.580767][ T8581] usb 9-1: SerialNumber: syz [ 383.597732][ T8581] usb 9-1: config 0 descriptor?? [ 383.610507][ T8581] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 383.626567][ T8581] usb 9-1: setting power ON [ 383.632301][ T8581] dvb-usb: bulk message failed: -22 (2/0) [ 383.643386][ T8581] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 383.656801][ T8581] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 383.665677][ T8581] usb 9-1: media controller created [ 383.716517][ T8597] radio-si470x 10-1:0.0: software version 200, hardware version 200 [ 383.744497][ T8581] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.779127][ T8581] usb 9-1: selecting invalid altsetting 6 [ 383.785271][ T8581] usb 9-1: digital interface selection failed (-22) [ 383.792179][ T8581] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 383.816779][ T5830] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 383.846209][ T8581] usb 9-1: setting power OFF [ 383.855498][ T8581] dvb-usb: bulk message failed: -22 (2/0) [ 383.863368][ T8581] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 383.880221][ T8581] (NULL device *): no alternate interface [ 383.906081][ T8597] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 383.941823][ T8597] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 383.951991][ T8581] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 383.964731][ T8597] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 383.978659][ T5830] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 383.995259][ T5830] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.014533][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.021029][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.031266][ T8597] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 384.042106][ T8581] usb 9-1: USB disconnect, device number 4 [ 384.057636][ T5830] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 384.068247][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 384.076818][ T8597] usb 10-1: USB disconnect, device number 3 [ 384.085626][ T5830] usb 1-1: SerialNumber: syz [ 384.099622][ T5830] usb 1-1: bad CDC descriptors [ 384.105135][ T5830] usb-storage 1-1:1.0: USB Mass Storage device detected [ 384.121030][ T5830] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 384.142689][ T5830] scsi host1: usb-storage 1-1:1.0 [ 384.248678][ T9700] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 384.406475][ T9700] usb 5-1: Using ep0 maxpacket: 32 [ 384.420116][ T9700] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.428798][ T9700] usb 5-1: config 0 has no interface number 0 [ 384.434966][ T9700] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.448422][ T9700] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.458553][ T9700] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 384.467734][ T9700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.486840][ T9700] usb 5-1: config 0 descriptor?? [ 384.777304][T15219] openvswitch: netlink: IPv4 tunnel dst address is zero [ 385.116658][ T9700] uclogic 0003:28BD:0094.0018: pen parameters not found [ 385.124213][ T9700] uclogic 0003:28BD:0094.0018: interface is invalid, ignoring [ 385.143116][ T9700] usb 5-1: USB disconnect, device number 5 [ 385.452256][ T9700] usb 1-1: USB disconnect, device number 31 [ 385.953025][T15257] netlink: 'syz.9.3589': attribute type 1 has an invalid length. [ 385.967777][T15257] netlink: 208 bytes leftover after parsing attributes in process `syz.9.3589'. [ 385.967999][ T8597] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 386.003326][T15257] netlink: 'syz.9.3589': attribute type 1 has an invalid length. [ 386.017258][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3589'. [ 386.085334][T15261] block nbd0: Dead connection, failed to find a fallback [ 386.113267][T15261] block nbd0: shutting down sockets [ 386.131480][T15261] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.146605][ T8597] usb 5-1: Using ep0 maxpacket: 16 [ 386.154071][ T8597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.166139][ T8597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.173094][T15261] buffer_io_error: 4 callbacks suppressed [ 386.173120][T15261] Buffer I/O error on dev nbd0, logical block 0, async page read [ 386.179488][ T8597] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 386.200543][T15261] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.202646][ T8597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.243032][T15261] Buffer I/O error on dev nbd0, logical block 1, async page read [ 386.244365][ T8597] usb 5-1: config 0 descriptor?? [ 386.274759][T15261] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.295074][T15261] Buffer I/O error on dev nbd0, logical block 2, async page read [ 386.327479][T15261] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.339672][T15261] Buffer I/O error on dev nbd0, logical block 3, async page read [ 386.352070][T15261] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.361464][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 386.361483][ T30] audit: type=1326 audit(1755644375.164:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15270 comm="syz.9.3595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1446f8ebe9 code=0x0 [ 386.386543][T15261] Buffer I/O error on dev nbd0, logical block 0, async page read [ 386.407420][T15261] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.427320][T15261] Buffer I/O error on dev nbd0, logical block 1, async page read [ 386.435950][T15261] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.445877][T15261] Buffer I/O error on dev nbd0, logical block 2, async page read [ 386.454880][T15261] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.474757][T15261] Buffer I/O error on dev nbd0, logical block 3, async page read [ 386.483311][T15261] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.493211][T15261] Buffer I/O error on dev nbd0, logical block 0, async page read [ 386.501905][T15261] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.511634][T15261] Buffer I/O error on dev nbd0, logical block 1, async page read [ 386.537382][T15261] ldm_validate_partition_table(): Disk read failed. [ 386.554480][T15261] Dev nbd0: unable to read RDB block 0 [ 386.563323][T15261] nbd0: unable to read partition table [ 386.598596][T15265] ldm_validate_partition_table(): Disk read failed. [ 386.614652][T15265] Dev nbd0: unable to read RDB block 0 [ 386.635343][T15265] nbd0: unable to read partition table [ 386.645269][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 386.664978][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=62, location=62 [ 386.688402][ T8597] playstation 0003:054C:05C4.0019: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 386.699923][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=61, location=61 [ 386.712153][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=60, location=60 [ 386.723137][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 386.737148][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 386.747452][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=30, location=30 [ 386.757896][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=29, location=29 [ 386.768061][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=28, location=28 [ 386.777656][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 386.806641][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 386.830815][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=14, location=14 [ 386.856283][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=13, location=13 [ 386.870428][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=12, location=12 [ 386.881370][T15265] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 386.881421][ T8597] playstation 0003:054C:05C4.0019: Invalid reportID received, expected 18 got 113 [ 386.891634][T15265] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 386.934680][ T8597] playstation 0003:054C:05C4.0019: Failed to retrieve DualShock4 pairing info: -22 [ 386.944166][ T8597] playstation 0003:054C:05C4.0019: Failed to get MAC address from DualShock4 [ 386.976555][ T8597] playstation 0003:054C:05C4.0019: Failed to create dualshock4. [ 386.995768][ T8597] playstation 0003:054C:05C4.0019: probe with driver playstation failed with error -22 [ 387.105747][ T8586] usb 5-1: USB disconnect, device number 6 [ 387.234900][T15289] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3603'. [ 387.661607][T15307] program syz.8.3611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.736961][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3612'. [ 388.063654][T15325] syz.4.3619 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 388.466416][ T8597] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 388.668806][ T8597] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.703761][ T8597] usb 10-1: config 0 has no interfaces? [ 388.713658][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3622'. [ 388.723896][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3622'. [ 388.733167][ T8597] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.733201][ T8597] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.736282][ T8597] usb 10-1: config 0 descriptor?? [ 388.757683][T15333] netlink: 58 bytes leftover after parsing attributes in process `syz.7.3622'. [ 388.972688][ T8597] usb 10-1: USB disconnect, device number 4 [ 389.927920][T15357] netlink: 'syz.0.3634': attribute type 4 has an invalid length. [ 390.196953][T15365] netlink: 'syz.0.3637': attribute type 1 has an invalid length. [ 390.216942][T15365] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3637'. [ 390.226950][T15367] tipc: Started in network mode [ 390.231920][T15367] tipc: Node identity ac14140f, cluster identity 4711 [ 390.247915][T15367] tipc: New replicast peer: 255.255.255.255 [ 390.264763][T15367] tipc: Enabled bearer , priority 10 [ 390.666227][T15384] vlan2: entered promiscuous mode [ 390.676839][T15384] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 390.685389][T15384] vlan2: entered allmulticast mode [ 390.695289][T15384] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 390.722567][T15384] team0: Device vlan2 is up. Set it down before adding it as a team port [ 391.014958][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 391.040570][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 391.070184][T15398] ip6gretap1: entered allmulticast mode [ 391.149535][ T8586] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 391.326605][ T8586] usb 9-1: Using ep0 maxpacket: 32 [ 391.337098][ T8586] usb 9-1: config 0 interface 0 has no altsetting 0 [ 391.352079][ T8586] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 391.386490][ T8597] tipc: Node number set to 2886997007 [ 391.386692][ T8586] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.410491][ T8586] usb 9-1: Product: syz [ 391.414743][ T8586] usb 9-1: Manufacturer: syz [ 391.433776][ T8586] usb 9-1: SerialNumber: syz [ 391.455118][ T8586] usb 9-1: config 0 descriptor?? [ 391.658161][T15420] netlink: 'syz.9.3662': attribute type 1 has an invalid length. [ 391.683000][T15420] netlink: 'syz.9.3662': attribute type 4 has an invalid length. [ 391.692571][T15420] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3662'. [ 391.702130][T15420] NCSI netlink: No device for ifindex 458760 [ 391.891954][ T8586] gs_usb 9-1:0.0: Configuring for 2 interfaces [ 392.059407][T15425] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3664'. [ 392.079615][T15425] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.095149][T15425] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.330584][ T8586] gs_usb 9-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 392.376536][ T8586] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 392.948255][ T8586] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -71 [ 392.998298][ T8586] usb 9-1: USB disconnect, device number 5 [ 393.121484][T15434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.134594][T15434] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.157509][T15434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.252049][T15437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.738010][T15466] netlink: 'syz.7.3681': attribute type 10 has an invalid length. [ 393.764436][T15466] bond0: (slave bond_slave_0): Releasing backup interface [ 393.991090][T15479] netlink: 'syz.8.3689': attribute type 83 has an invalid length. [ 394.276740][ T8586] kernel read not supported for file /dsp1 (pid: 8586 comm: kworker/0:8) [ 395.906736][T15549] netlink: 'syz.4.3723': attribute type 12 has an invalid length. [ 395.914646][T15549] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3723'. [ 396.512289][T15573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3734'. [ 396.520034][T15577] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.529360][T15577] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.536894][T15577] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.544378][T15577] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.551918][T15577] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.559506][T15577] Dead loop on virtual device ip6_vti0, fix it urgently! [ 397.056628][ T8581] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 397.248335][ T8581] usb 9-1: Using ep0 maxpacket: 16 [ 397.257378][ T8581] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 397.269196][ T8581] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 397.294778][ T8581] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 397.326133][ T8581] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.355235][ T8581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 397.406977][ T8581] usb 9-1: SerialNumber: syz [ 397.421477][T15579] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 397.629473][T15623] netlink: 'syz.0.3758': attribute type 25 has an invalid length. [ 397.643706][T15623] netlink: 'syz.0.3758': attribute type 3 has an invalid length. [ 397.662328][ T8581] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 397.693573][ T8581] usb 9-1: USB disconnect, device number 6 [ 397.810764][T15631] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 398.571050][T15656] program syz.8.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.056141][ T30] audit: type=1326 audit(1755644387.864:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446f8ebe9 code=0x7ffc0000 [ 399.099383][ T30] audit: type=1326 audit(1755644387.894:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446f8ebe9 code=0x7ffc0000 [ 399.156497][ T30] audit: type=1326 audit(1755644387.894:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1446f8ebe9 code=0x7ffc0000 [ 399.193286][ T30] audit: type=1326 audit(1755644387.894:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446f8ebe9 code=0x7ffc0000 [ 399.221299][ T30] audit: type=1326 audit(1755644387.894:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446f8ebe9 code=0x7ffc0000 [ 399.244744][ T30] audit: type=1326 audit(1755644387.904:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1446f8ebe9 code=0x7ffc0000 [ 399.283559][ T30] audit: type=1326 audit(1755644387.904:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446f8ebe9 code=0x7ffc0000 [ 399.375091][ T30] audit: type=1326 audit(1755644387.904:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1446f85ba7 code=0x7ffc0000 [ 399.406793][ T30] audit: type=1326 audit(1755644387.904:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1446f2add9 code=0x7ffc0000 [ 399.438702][ T30] audit: type=1326 audit(1755644387.904:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15677 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f1446f8ebe9 code=0x7ffc0000 [ 399.481860][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3786'. [ 399.715075][T15695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3791'. [ 399.733375][T15695] netlink: 'syz.4.3791': attribute type 12 has an invalid length. [ 399.775613][T15695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3791'. [ 400.240661][T15717] netlink: 'syz.7.3801': attribute type 5 has an invalid length. [ 400.369294][T15725] netlink: 'syz.4.3806': attribute type 3 has an invalid length. [ 400.377764][T15725] netlink: 'syz.4.3806': attribute type 3 has an invalid length. [ 400.866257][T15743] openvswitch: netlink: Multiple metadata blocks provided [ 401.086528][T15755] Falling back ldisc for ptm0. [ 401.186436][ T8597] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 401.296447][ T8581] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 401.347187][ T8597] usb 1-1: Using ep0 maxpacket: 8 [ 401.405363][ T8597] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 401.414895][ T8597] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 401.423267][ T8597] usb 1-1: Product: syz [ 401.432686][ T8597] usb 1-1: Manufacturer: syz [ 401.446544][ T8597] usb 1-1: SerialNumber: syz [ 401.461395][ T8597] usb 1-1: config 0 descriptor?? [ 401.479016][ T8581] usb 10-1: Using ep0 maxpacket: 16 [ 401.488556][ T8597] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 401.507263][ T8581] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 401.522349][ T8581] usb 10-1: config 0 has no interface number 0 [ 401.529194][ T8581] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 401.539563][ T8581] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 401.554398][ T8581] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 401.575737][ T8581] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.594084][ T8581] usb 10-1: Product: syz [ 401.599879][ T8581] usb 10-1: Manufacturer: syz [ 401.604654][ T8581] usb 10-1: SerialNumber: syz [ 401.639287][ T8581] usb 10-1: config 0 descriptor?? [ 401.655705][T15752] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 401.673535][T15752] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 401.908754][T15752] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 401.916104][T15752] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 402.105264][ T8597] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44 [ 402.152124][T15779] tun0: tun_chr_ioctl cmd 1074025681 [ 402.324348][ T8597] usb 1-1: USB disconnect, device number 32 [ 402.542917][ T8581] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 402.576742][ T8581] asix 10-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 402.596705][ T8581] asix 10-1:0.251: probe with driver asix failed with error -71 [ 402.636646][ T8581] usb 10-1: USB disconnect, device number 5 [ 403.546432][ T8597] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 403.728088][ T8597] usb 10-1: Using ep0 maxpacket: 32 [ 403.739784][ T8597] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.760446][ T8597] usb 10-1: config 0 has no interface number 0 [ 403.781077][ T8597] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 403.800282][ T8597] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.829874][ T8597] usb 10-1: Product: syz [ 403.834211][ T8597] usb 10-1: Manufacturer: syz [ 403.848447][ T8597] usb 10-1: SerialNumber: syz [ 403.865941][ T8597] usb 10-1: config 0 descriptor?? [ 403.890880][ T8597] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 404.119720][ T8597] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 404.156056][ T8597] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 404.548018][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 404.556257][ T8597] usb 10-1: USB disconnect, device number 6 [ 404.573479][ T8597] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 404.609168][ T8597] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 404.635549][ T8597] quatech2 10-1:0.51: device disconnected [ 404.835360][T15877] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3876'. [ 405.655483][ T9697] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 405.756938][ T5158] Bluetooth: hci3: command tx timeout [ 405.828463][ T9697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.846979][ T9697] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 405.866771][ T9697] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.918153][ T9697] usb 10-1: config 0 descriptor?? [ 406.345715][ T9697] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 406.371902][ T9697] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.001A/input/input45 [ 406.472314][T15913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3893'. [ 406.545522][ T9697] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 406.603307][T15917] input: syz0 as /devices/virtual/input/input46 [ 406.837504][ T8586] usb 10-1: USB disconnect, device number 7 [ 407.256546][T15949] netlink: 'syz.7.3909': attribute type 1 has an invalid length. [ 407.270595][T15949] netlink: 'syz.7.3909': attribute type 2 has an invalid length. [ 407.282076][T15949] netlink: 'syz.7.3909': attribute type 1 has an invalid length. [ 407.292342][T15949] netlink: 1156 bytes leftover after parsing attributes in process `syz.7.3909'. [ 407.895286][T15973] lo: Caught tx_queue_len zero misconfig [ 408.366502][T15998] netlink: 'syz.8.3932': attribute type 25 has an invalid length. [ 408.378519][T15998] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3932'. [ 408.597483][T16006] ntfs3(nullb0): Primary boot signature is not NTFS. [ 408.632584][T16006] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 408.891543][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3941'. [ 409.373280][T16024] ./file0: Can't open blockdev [ 409.772869][T16032] mkiss: ax0: crc mode is auto. [ 410.599572][ T8597] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 410.711696][T16068] overlayfs: missing 'lowerdir' [ 410.756408][ T8597] usb 10-1: Using ep0 maxpacket: 16 [ 410.770980][ T8597] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.804080][ T8597] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.824844][ T8597] usb 10-1: config 0 interface 0 has no altsetting 0 [ 410.833656][T16073] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3967'. [ 410.835933][T16074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3966'. [ 410.843034][ T8597] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 410.843070][ T8597] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.858007][ T8597] usb 10-1: config 0 descriptor?? [ 411.071056][T16080] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.099397][T16080] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 411.132712][T16080] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.156389][T16080] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 411.182957][T16083] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.212728][T16083] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 411.246877][T16083] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.275161][T16083] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 411.345242][ T8597] cougar 0003:060B:500A.001B: unexpected long global item [ 411.380010][ T8597] cougar 0003:060B:500A.001B: parse failed [ 411.402190][ T8597] cougar 0003:060B:500A.001B: probe with driver cougar failed with error -22 [ 411.520897][ T9697] usb 10-1: USB disconnect, device number 8 [ 412.488666][T16137] netlink: 'syz.9.3996': attribute type 3 has an invalid length. [ 412.526535][T16137] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.3996'. [ 413.158235][T16157] bridge0: entered promiscuous mode [ 413.177907][T16157] macvtap1: entered allmulticast mode [ 413.201051][T16157] bridge0: entered allmulticast mode [ 413.226689][T16157] bridge0: port 3(macvtap1) entered blocking state [ 413.244209][T16157] bridge0: port 3(macvtap1) entered disabled state [ 413.298710][T16157] bridge0: left allmulticast mode [ 413.305780][T16157] bridge0: left promiscuous mode [ 414.584848][T16223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.755724][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4040'. [ 414.777893][T16232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4040'. [ 416.149336][ T8597] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 416.331188][ T8597] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.364306][ T8597] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.385020][ T8597] usb 9-1: config 0 descriptor?? [ 416.404813][ T8597] cp210x 9-1:0.0: cp210x converter detected [ 416.640116][ T9700] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 416.781266][ T1152] Bluetooth: hci5: Frame reassembly failed (-84) [ 416.797651][T16312] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 416.799023][ T9700] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 416.814847][ T8597] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 416.823725][ T9700] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 416.843896][ T9700] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 416.846631][ T1152] Bluetooth: hci5: Frame reassembly failed (-84) [ 416.864710][ T9700] usb 1-1: config 220 has no interface number 2 [ 416.871762][ T8597] usb 9-1: cp210x converter now attached to ttyUSB0 [ 416.881348][ T9700] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 416.897766][ T9700] usb 1-1: config 220 interface 0 has no altsetting 0 [ 416.904626][ T9700] usb 1-1: config 220 interface 76 has no altsetting 0 [ 416.911762][ T9700] usb 1-1: config 220 interface 1 has no altsetting 0 [ 416.923615][ T9700] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 416.933505][ T9700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.942765][ T9700] usb 1-1: Product: syz [ 416.947275][ T9700] usb 1-1: Manufacturer: syz [ 416.951914][ T9700] usb 1-1: SerialNumber: syz [ 417.051914][ T8586] usb 9-1: USB disconnect, device number 7 [ 417.067625][ T8586] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 417.078650][ T8586] cp210x 9-1:0.0: device disconnected [ 417.172090][ T9700] usb 1-1: selecting invalid altsetting 0 [ 417.178748][ T9700] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 417.185390][ T9700] usb 1-1: No valid video chain found. [ 417.218411][ T9700] usb 1-1: selecting invalid altsetting 0 [ 417.224372][ T9700] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 417.241072][ T9700] usb 1-1: USB disconnect, device number 33 [ 418.558930][T16351] netlink: 1036 bytes leftover after parsing attributes in process `syz.9.4092'. [ 418.568540][T16351] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 418.798705][ T5158] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 419.176415][ T8581] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 419.186718][ T8597] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 419.329113][ T8581] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.342517][ T8581] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 419.351971][ T8597] usb 9-1: Using ep0 maxpacket: 8 [ 419.358210][ T8581] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.372259][ T8581] usb 10-1: config 0 descriptor?? [ 419.390065][ T8597] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 419.401372][ T8597] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.410116][ T8597] usb 9-1: Product: syz [ 419.414678][ T8597] usb 9-1: Manufacturer: syz [ 419.419845][ T8597] usb 9-1: SerialNumber: syz [ 419.428943][ T8597] usb 9-1: config 0 descriptor?? [ 419.442913][ T8597] gspca_main: se401-2.14.0 probing 047d:5003 [ 419.827735][ T8581] koneplus 0003:1E7D:2E22.001C: hidraw0: USB HID vff.fe Device [HID 1e7d:2e22] on usb-dummy_hcd.9-1/input0 [ 419.857915][ T8597] gspca_se401: ExtraFeatures: 24 [ 420.062926][ T8597] input: se401 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input48 [ 420.084769][T16383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4107'. [ 420.104476][T16383] netlink: 'syz.0.4107': attribute type 10 has an invalid length. [ 420.126421][ T8597] usb 9-1: USB disconnect, device number 8 [ 420.230970][ T8581] usb 10-1: USB disconnect, device number 9 [ 420.496833][ T8586] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 420.613555][T16394] tipc: Started in network mode [ 420.622618][T16394] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 420.635599][T16394] tipc: Enabled bearer , priority 10 [ 420.660035][ T8586] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 420.673612][ T8586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.709816][ T8586] usb 1-1: config 0 descriptor?? [ 420.721220][ T8586] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 421.404343][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4125'. [ 421.538633][ T8586] usb 1-1: USB disconnect, device number 34 [ 421.747967][ T8586] tipc: Node number set to 4269801488 [ 421.917174][T16444] netlink: ct family unspecified [ 421.922642][T16444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.111367][T16454] CUSE: zero length info key specified [ 423.055549][T16501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4163'. [ 424.738517][T16557] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 426.119157][T16595] netlink: 'syz.0.4203': attribute type 83 has an invalid length. [ 426.451202][T16607] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 426.577306][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4210'. [ 427.066476][ T9697] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 427.231470][T16637] loop4: detected capacity change from 0 to 524255232 [ 427.278045][ T9697] usb 5-1: Using ep0 maxpacket: 8 [ 427.278045][T16639] IPVS: length: 73 != 24 [ 427.295036][ T9697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 427.316836][ T9697] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 427.348982][ T9697] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 427.361193][T16642] loop7: detected capacity change from 0 to 7 [ 427.377788][ T9697] usb 5-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0 [ 427.395166][ C1] blk_print_req_error: 130 callbacks suppressed [ 427.395190][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.410833][ C1] buffer_io_error: 118 callbacks suppressed [ 427.410853][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.417243][ T9697] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.435816][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.446879][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.455378][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.464647][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.473302][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.482647][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.494564][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.503895][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.512134][ T9697] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 427.520119][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.530703][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.545382][ T9697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.567517][T16643] Invalid logical block size (6) [ 427.576936][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.586171][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.595241][T16642] ldm_validate_partition_table(): Disk read failed. [ 427.613633][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.622917][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.631088][ T9697] usb 5-1: Product: syz [ 427.635324][ T9697] usb 5-1: Manufacturer: syz [ 427.641148][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.650392][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.658695][ T9697] usb 5-1: SerialNumber: syz [ 427.660223][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.672627][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 427.680936][T16642] Dev loop7: unable to read RDB block 0 [ 427.697895][T16642] loop7: unable to read partition table [ 427.703947][T16642] loop7: partition table beyond EOD, truncated [ 427.725983][T16642] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 427.759617][T16649] ipvlan2: entered promiscuous mode [ 427.793711][T16649] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 427.806494][T16649] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 427.826434][ T8575] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 427.906722][ T9697] usb 5-1: USB disconnect, device number 7 [ 427.992209][ T8575] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 428.016446][ T8575] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.056402][ T8575] usb 10-1: Product: syz [ 428.060737][ T8575] usb 10-1: Manufacturer: syz [ 428.065462][ T8575] usb 10-1: SerialNumber: syz [ 428.100466][ T8575] usb 10-1: config 0 descriptor?? [ 428.321930][ T8575] usb 10-1: ignoring: probably an ADSL modem [ 428.345052][T16663] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 428.724125][ T8575] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 428.945521][ T8575] usb 10-1: USB disconnect, device number 10 [ 429.525974][T16691] kvm: kvm [16690]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x6 [ 429.966277][T16705] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4256'. [ 429.986212][T16705] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4256'. [ 430.235638][T16716] sp0: Synchronizing with TNC [ 431.207134][T16744] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4272'. [ 431.263879][T16746] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.4273'. [ 431.534189][T16758] netlink: 'syz.8.4279': attribute type 1 has an invalid length. [ 431.557123][T16758] netlink: 'syz.8.4279': attribute type 2 has an invalid length. [ 432.217595][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4292'. [ 432.226526][ T8586] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 432.379044][ T8586] usb 1-1: Using ep0 maxpacket: 8 [ 432.407626][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'. [ 432.411924][ T8586] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 432.432944][ T8586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.452677][ T8586] pvrusb2: Hardware description: Terratec Grabster AV400 [ 432.465073][ T8586] pvrusb2: ********** [ 432.477572][ T8586] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 432.498746][ T8586] pvrusb2: Important functionality might not be entirely working. [ 432.519133][ T8586] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 432.532477][ T8586] pvrusb2: ********** [ 432.567296][ T9697] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 432.659139][ T2344] pvrusb2: Invalid write control endpoint [ 432.726426][ T9697] usb 10-1: Using ep0 maxpacket: 16 [ 432.739106][ T9697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.769290][ T9697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.826544][ T9697] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 432.833668][ T2344] pvrusb2: Invalid write control endpoint [ 432.835731][ T9697] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.853046][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 432.868670][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 432.880502][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 432.892193][ T2344] pvrusb2: Device being rendered inoperable [ 432.899093][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 432.910791][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 432.911126][ T8586] usb 1-1: USB disconnect, device number 35 [ 432.928835][ T9697] usb 10-1: config 0 descriptor?? [ 432.942512][ T2344] pvrusb2: Attached sub-driver cx25840 [ 432.961370][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 432.980681][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 433.015726][T16806] netlink: 'syz.4.4301': attribute type 6 has an invalid length. [ 433.356692][ T8597] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 433.384102][ T9697] hid (null): bogus close delimiter [ 433.531078][ T8597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.541348][ T8597] usb 9-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 433.550844][ T8597] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.562291][ T8597] usb 9-1: config 0 descriptor?? [ 433.579523][ T9697] usb 10-1: string descriptor 0 read error: -71 [ 433.613253][ T9697] usb 10-1: Max retries (5) exceeded reading string descriptor 200 [ 433.623226][ T9697] letsketch 0003:6161:4D15.001D: probe with driver letsketch failed with error -32 [ 433.647520][ T9697] usb 10-1: USB disconnect, device number 11 [ 434.001667][ T8597] nintendo 0003:057E:200E.001E: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.8-1/input0 [ 434.067787][ T8597] nintendo 0003:057E:200E.001E: Failed charging grip handshake [ 434.084215][ T8597] nintendo 0003:057E:200E.001E: Failed to initialize controller; ret=-110 [ 434.112103][ T8597] nintendo 0003:057E:200E.001E: probe - fail = -110 [ 434.144508][ T8597] nintendo 0003:057E:200E.001E: probe with driver nintendo failed with error -110 [ 434.210703][ T8597] usb 9-1: USB disconnect, device number 9 [ 434.210993][T16834] sctp: [Deprecated]: syz.0.4314 (pid 16834) Use of int in max_burst socket option deprecated. [ 434.210993][T16834] Use struct sctp_assoc_value instead [ 434.409966][T16844] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 434.467779][T16844] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 434.697909][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4324'. [ 434.720369][ T8597] IPVS: starting estimator thread 0... [ 434.739794][T16856] kernel profiling enabled (shift: 0) [ 434.817911][T16857] IPVS: using max 25 ests per chain, 60000 per kthread [ 435.026732][T16868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.584594][ T36] [ 435.595081][ T36] ====================================================== [ 435.602125][ T36] WARNING: possible circular locking dependency detected [ 435.609207][ T36] 6.16.0-syzkaller #0 Not tainted [ 435.614270][ T36] ------------------------------------------------------ [ 435.621325][ T36] kworker/u8:2/36 is trying to acquire lock: [ 435.627326][ T36] ffff888025374358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 435.636598][ T36] [ 435.636598][ T36] but task is already holding lock: [ 435.643971][ T36] ffff888025879188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 435.653622][ T36] [ 435.653622][ T36] which lock already depends on the new lock. [ 435.653622][ T36] [ 435.664046][ T36] [ 435.664046][ T36] the existing dependency chain (in reverse order) is: [ 435.673093][ T36] [ 435.673093][ T36] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 435.681561][ T36] lock_acquire+0x120/0x360 [ 435.686731][ T36] down_write+0x96/0x1f0 [ 435.691529][ T36] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 435.697796][ T36] nbd_start_device+0x16c/0xac0 [ 435.703185][ T36] nbd_genl_connect+0x135b/0x18f0 [ 435.708749][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 435.714833][ T36] genl_rcv_msg+0x60e/0x790 [ 435.719889][ T36] netlink_rcv_skb+0x205/0x470 [ 435.725197][ T36] genl_rcv+0x28/0x40 [ 435.729718][ T36] netlink_unicast+0x75c/0x8e0 [ 435.735017][ T36] netlink_sendmsg+0x805/0xb30 [ 435.740320][ T36] __sock_sendmsg+0x21c/0x270 [ 435.745532][ T36] ____sys_sendmsg+0x505/0x830 [ 435.750838][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 435.756080][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 435.761609][ T36] do_syscall_64+0xfa/0x3b0 [ 435.766684][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.773112][ T36] [ 435.773112][ T36] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 435.780967][ T36] lock_acquire+0x120/0x360 [ 435.786012][ T36] __mutex_lock+0x182/0xe80 [ 435.791053][ T36] refcount_dec_and_mutex_lock+0x30/0xa0 [ 435.797227][ T36] nbd_config_put+0x2c/0x790 [ 435.802353][ T36] nbd_release+0xfe/0x140 [ 435.807220][ T36] bdev_release+0x533/0x650 [ 435.812261][ T36] blkdev_release+0x15/0x20 [ 435.817305][ T36] __fput+0x449/0xa70 [ 435.821827][ T36] fput_close_sync+0x119/0x200 [ 435.827126][ T36] __x64_sys_close+0x7f/0x110 [ 435.832341][ T36] do_syscall_64+0xfa/0x3b0 [ 435.837378][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.843823][ T36] [ 435.843823][ T36] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 435.851668][ T36] validate_chain+0xb9b/0x2140 [ 435.857063][ T36] __lock_acquire+0xab9/0xd20 [ 435.862272][ T36] lock_acquire+0x120/0x360 [ 435.867332][ T36] __mutex_lock+0x182/0xe80 [ 435.872388][ T36] __del_gendisk+0x129/0x9e0 [ 435.877524][ T36] del_gendisk+0xe8/0x160 [ 435.882420][ T36] nbd_dev_remove_work+0x47/0xe0 [ 435.887904][ T36] process_scheduled_works+0xade/0x17b0 [ 435.893995][ T36] worker_thread+0x8a0/0xda0 [ 435.899147][ T36] kthread+0x70e/0x8a0 [ 435.903763][ T36] ret_from_fork+0x3fc/0x770 [ 435.908891][ T36] ret_from_fork_asm+0x1a/0x30 [ 435.914201][ T36] [ 435.914201][ T36] other info that might help us debug this: [ 435.914201][ T36] [ 435.924442][ T36] Chain exists of: [ 435.924442][ T36] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 435.924442][ T36] [ 435.938637][ T36] Possible unsafe locking scenario: [ 435.938637][ T36] [ 435.946110][ T36] CPU0 CPU1 [ 435.951482][ T36] ---- ---- [ 435.956863][ T36] rlock(&set->update_nr_hwq_lock); [ 435.962172][ T36] lock(&nbd->config_lock); [ 435.969296][ T36] lock(&set->update_nr_hwq_lock); [ 435.977027][ T36] lock(&disk->open_mutex); [ 435.981639][ T36] [ 435.981639][ T36] *** DEADLOCK *** [ 435.981639][ T36] [ 435.989895][ T36] 3 locks held by kworker/u8:2/36: [ 435.995041][ T36] #0: ffff888025362948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 436.006124][ T36] #1: ffffc90000ac7bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 436.018417][ T36] #2: ffff888025879188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 436.028458][ T36] [ 436.028458][ T36] stack backtrace: [ 436.034369][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 436.034390][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.034403][ T36] Workqueue: nbd-del nbd_dev_remove_work [ 436.034431][ T36] Call Trace: [ 436.034442][ T36] [ 436.034450][ T36] dump_stack_lvl+0x189/0x250 [ 436.034472][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.034491][ T36] ? __pfx__printk+0x10/0x10 [ 436.034513][ T36] ? print_lock_name+0xde/0x100 [ 436.034535][ T36] print_circular_bug+0x2ee/0x310 [ 436.034558][ T36] check_noncircular+0x134/0x160 [ 436.034580][ T36] validate_chain+0xb9b/0x2140 [ 436.034600][ T36] ? __bpf_trace_contention_end+0xdc/0x130 [ 436.034619][ T36] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 436.034641][ T36] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 436.034670][ T36] __lock_acquire+0xab9/0xd20 [ 436.034689][ T36] ? __del_gendisk+0x129/0x9e0 [ 436.034709][ T36] lock_acquire+0x120/0x360 [ 436.034723][ T36] ? __del_gendisk+0x129/0x9e0 [ 436.034746][ T36] ? check_path+0x21/0x40 [ 436.034766][ T36] __mutex_lock+0x182/0xe80 [ 436.034786][ T36] ? __del_gendisk+0x129/0x9e0 [ 436.034811][ T36] ? __del_gendisk+0x129/0x9e0 [ 436.034833][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 436.034851][ T36] ? __pfx___might_resched+0x10/0x10 [ 436.034872][ T36] ? __lock_acquire+0xab9/0xd20 [ 436.034887][ T36] ? disk_del_events+0xb5/0x210 [ 436.034909][ T36] ? __del_gendisk+0xc1/0x9e0 [ 436.034937][ T36] __del_gendisk+0x129/0x9e0 [ 436.034958][ T36] ? del_gendisk+0xe0/0x160 [ 436.034981][ T36] ? __pfx___del_gendisk+0x10/0x10 [ 436.035004][ T36] ? down_read+0x1ad/0x2e0 [ 436.035024][ T36] del_gendisk+0xe8/0x160 [ 436.035046][ T36] nbd_dev_remove_work+0x47/0xe0 [ 436.035067][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 436.035085][ T36] process_scheduled_works+0xade/0x17b0 [ 436.035115][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.035140][ T36] worker_thread+0x8a0/0xda0 [ 436.035169][ T36] kthread+0x70e/0x8a0 [ 436.035193][ T36] ? __pfx_worker_thread+0x10/0x10 [ 436.035210][ T36] ? __pfx_kthread+0x10/0x10 [ 436.035233][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.035247][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.035263][ T36] ? __pfx_kthread+0x10/0x10 [ 436.035285][ T36] ret_from_fork+0x3fc/0x770 [ 436.035302][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 436.035321][ T36] ? __switch_to_asm+0x39/0x70 [ 436.035340][ T36] ? __switch_to_asm+0x33/0x70 [ 436.035360][ T36] ? __pfx_kthread+0x10/0x10 [ 436.035382][ T36] ret_from_fork_asm+0x1a/0x30 [ 436.035410][ T36] [ 445.438734][ T1303] ieee802154 phy0 wpan0: encryption failed: -22