last executing test programs: 7m39.602060506s ago: executing program 2 (id=2005): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@random={'os2.', '#[:{\x00'}, 0x0, 0x0, 0x3) 7m39.367141395s ago: executing program 2 (id=2006): unshare(0x20040400) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, 0x0) 7m39.102861313s ago: executing program 2 (id=2008): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) 7m38.756976383s ago: executing program 2 (id=2011): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 7m38.515032319s ago: executing program 2 (id=2015): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 7m38.071779528s ago: executing program 2 (id=2021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x170, r1, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2079ce0bd88e386d489f544c096b0a719ef9d87d3d08427b95cdafdd3323d5b5"}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @mcast1, 0xb}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @loopback, 0xa}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c0eb6492e880fa716c4d06d00e04d61b9dbeb890ffbf1c6278d153fd9392cb2e"}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7m37.67633945s ago: executing program 32 (id=2021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x170, r1, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2079ce0bd88e386d489f544c096b0a719ef9d87d3d08427b95cdafdd3323d5b5"}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @mcast1, 0xb}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @loopback, 0xa}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c0eb6492e880fa716c4d06d00e04d61b9dbeb890ffbf1c6278d153fd9392cb2e"}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m27.490672874s ago: executing program 3 (id=6658): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffb, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m27.348109611s ago: executing program 3 (id=6661): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff6a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404005400ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b70000000000000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x16ab}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440080001000ffff26bd70a6046b3f1f32bfa200", @ANYRES32=0x0, @ANYBLOB="2884050000020000240012800b00010062726964676500001400028005002a000100000005002b0003"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 2m27.239577751s ago: executing program 3 (id=6662): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300001f6d000280080001"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m27.185641988s ago: executing program 3 (id=6663): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m26.80415367s ago: executing program 5 (id=6670): mmap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0xa, 0x20031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x7f, 0x3) 2m26.711730734s ago: executing program 5 (id=6672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m25.768084526s ago: executing program 4 (id=6681): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m25.656389091s ago: executing program 4 (id=6683): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setuid(0xee01) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2m25.646920588s ago: executing program 5 (id=6684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 2m25.555234114s ago: executing program 4 (id=6686): r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m25.482289158s ago: executing program 5 (id=6687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010000, 0x0, 0x6}]}) 2m25.45466656s ago: executing program 4 (id=6689): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) 2m25.408869215s ago: executing program 3 (id=6690): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000001480)={0x2020}, 0x2020) 2m25.324723369s ago: executing program 5 (id=6691): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) 2m25.322894802s ago: executing program 4 (id=6692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 2m25.210994803s ago: executing program 3 (id=6693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80080000008009"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 2m24.739933591s ago: executing program 33 (id=6693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80080000008009"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 2m24.257372523s ago: executing program 5 (id=6696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x6ad0, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x3, 0x134}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000340)={0x0, 0x4, 0x8, 0x3, 0x119}, 0x1) 2m23.914074152s ago: executing program 34 (id=6696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x6ad0, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x3, 0x134}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000340)={0x0, 0x4, 0x8, 0x3, 0x119}, 0x1) 2m23.906369032s ago: executing program 4 (id=6697): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x4) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4401c0, 0x42) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 2m23.905495066s ago: executing program 35 (id=6697): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x4) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4401c0, 0x42) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 4.19938044s ago: executing program 0 (id=8409): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 4.03257042s ago: executing program 0 (id=8412): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 3.200001822s ago: executing program 7 (id=8429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x2, 0x0, [{0x4, 0x0, 0x7ff}, {}, {0x10000, 0x0, 0xfffffffffffffff8}, {0xfffffffd}, {0x0, 0x0, 0x8000}, {0x3ff, 0x0, 0x6}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1000000000000}, {}, {0x200}, {0xfffff43e}, {}, {0x3}, {0x80, 0x0, 0x8}, {0x1ff, 0x0, 0x100000000}, {0x3ff}]}) 3.017321504s ago: executing program 1 (id=8434): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b9"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.955490507s ago: executing program 7 (id=8435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff040000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000000000600b50085010000040013000a000600ffffffffffff0000140081"], 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x0) 2.743074612s ago: executing program 7 (id=8440): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 2.439126952s ago: executing program 7 (id=8446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feff00000000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00050037193c99a8772efb0c0002"], 0x3c}}, 0x20000000) 2.204066485s ago: executing program 7 (id=8449): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.44018569s ago: executing program 1 (id=8462): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x59455247}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.363170426s ago: executing program 8 (id=8463): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) iopl(0x3) 1.290646262s ago: executing program 1 (id=8465): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0xeffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/29, 0x1d}, 0xc8}], 0x1, 0x102, 0x0) 1.289992501s ago: executing program 7 (id=8466): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x800) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000400), 0x4a) 1.088028875s ago: executing program 6 (id=8467): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.040306727s ago: executing program 6 (id=8468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r1, 0x5, 0xfffffffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x24}]}]}, 0x28}}, 0x0) 947.790327ms ago: executing program 6 (id=8469): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000000000001000000000010000002"]) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000005000/0x2000)=nil}) 879.626175ms ago: executing program 0 (id=8470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010429bd7000fcdbdf2504000000140005000000000000000000000000000000000008000800ac1414bb080002000500000008000c010000fdff08000700"], 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x10) 736.507873ms ago: executing program 6 (id=8471): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="10000180040004800800010072"], 0x28}}, 0x0) 591.06875ms ago: executing program 6 (id=8475): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 564.790709ms ago: executing program 8 (id=8476): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 420.095335ms ago: executing program 0 (id=8477): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfcfb1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) 419.621053ms ago: executing program 8 (id=8478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x49}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48840}, 0x4) 305.951924ms ago: executing program 1 (id=8479): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}]}], {0x14, 0x10}}, 0x90}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 305.297743ms ago: executing program 6 (id=8480): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 304.873597ms ago: executing program 8 (id=8481): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 179.594426ms ago: executing program 1 (id=8482): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r2, 0x3, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 29.827316ms ago: executing program 1 (id=8483): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 0s ago: executing program 8 (id=8484): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@deltclass={0x24, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xfff3}, {0x3, 0x10}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000812}, 0x20000004) kernel console output (not intermixed with test programs): read [ 533.425613][ T5948] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 533.434558][T20182] Buffer I/O error on dev loop6, logical block 0, async page read [ 533.448641][T20182] Buffer I/O error on dev loop6, logical block 0, async page read [ 533.457810][T20182] Buffer I/O error on dev loop6, logical block 0, async page read [ 533.471158][T20182] Buffer I/O error on dev loop6, logical block 0, async page read [ 533.490096][T20182] ldm_validate_partition_table(): Disk read failed. [ 533.498387][T20182] Buffer I/O error on dev loop6, logical block 0, async page read [ 533.511849][T20182] Buffer I/O error on dev loop6, logical block 0, async page read [ 533.520419][T20182] Dev loop6: unable to read RDB block 0 [ 533.551886][T20182] loop6: unable to read partition table [ 533.568634][T20182] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 533.600527][ T5948] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 533.612593][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.631357][ T5948] usb 5-1: Product: syz [ 533.641514][ T5948] usb 5-1: Manufacturer: syz [ 533.651633][ T5948] usb 5-1: SerialNumber: syz [ 533.686714][ T5948] usb 5-1: config 0 descriptor?? [ 533.905214][ T5948] usb 5-1: ignoring: probably an ADSL modem [ 534.307998][ T5948] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 534.523697][ T980] usb 5-1: USB disconnect, device number 39 [ 534.776297][T20237] pimreg: tun_chr_ioctl cmd 1074025673 [ 534.940970][T20243] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6471'. [ 535.090672][T20247] program syz.1.6473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.261611][T11888] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 535.449149][T11888] usb 6-1: config 0 has no interfaces? [ 535.468658][T11888] usb 6-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 535.505244][T11888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.530160][T11888] usb 6-1: config 0 descriptor?? [ 535.662451][ T30] audit: type=1326 audit(1755820143.655:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3438ebe9 code=0x7ffc0000 [ 535.684086][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.762343][ T30] audit: type=1326 audit(1755820143.655:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3438ebe9 code=0x7ffc0000 [ 535.784004][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.815165][T11888] usb 6-1: USB disconnect, device number 26 [ 535.870649][ T30] audit: type=1326 audit(1755820143.695:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3438ebe9 code=0x7ffc0000 [ 535.921184][ T30] audit: type=1326 audit(1755820143.695:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3438ebe9 code=0x7ffc0000 [ 535.945726][ T30] audit: type=1326 audit(1755820143.695:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3438ebe9 code=0x7ffc0000 [ 535.968193][ T30] audit: type=1326 audit(1755820143.695:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3438ebe9 code=0x7ffc0000 [ 535.994964][ T980] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 536.013829][ T30] audit: type=1326 audit(1755820143.695:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3438ebe9 code=0x7ffc0000 [ 536.052983][ T30] audit: type=1326 audit(1755820143.695:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f34385ba7 code=0x7ffc0000 [ 536.131914][ T30] audit: type=1326 audit(1755820143.695:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3432ade9 code=0x7ffc0000 [ 536.179029][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.190357][ T30] audit: type=1326 audit(1755820143.695:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20265 comm="syz.3.6481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f34385ba7 code=0x7ffc0000 [ 536.194947][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 536.230356][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6488'. [ 536.252163][ T980] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 536.263128][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.291380][ T980] usb 5-1: Product: syz [ 536.298964][ T980] usb 5-1: Manufacturer: syz [ 536.303625][ T980] usb 5-1: SerialNumber: syz [ 536.326297][ T980] usb 5-1: config 0 descriptor?? [ 536.371736][ T980] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 536.414366][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.469762][ T980] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 536.485766][ T980] usb 5-1: media controller created [ 536.559659][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.777269][ T980] DVB: Unable to find symbol tda10046_attach() [ 536.800747][ T980] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 536.823063][ T980] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 536.885171][ T5948] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 537.048210][ T5948] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 537.071832][ T5948] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 537.096758][ T980] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 537.110912][ T5948] usb 2-1: config 0 interface 0 has no altsetting 0 [ 537.131508][ T980] usb 5-1: USB disconnect, device number 40 [ 537.137443][ T5948] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.137479][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 537.137502][ T5948] usb 2-1: Product: syz [ 537.137519][ T5948] usb 2-1: Manufacturer: syz [ 537.137536][ T5948] usb 2-1: SerialNumber: syz [ 537.141741][ T5948] usb 2-1: config 0 descriptor?? [ 537.194801][T20322] syz_tun: entered promiscuous mode [ 537.212568][T20322] syz_tun: left promiscuous mode [ 537.259817][ T5948] hub 2-1:0.0: bad descriptor, ignoring hub [ 537.288433][ T5948] hub 2-1:0.0: probe with driver hub failed with error -5 [ 537.312317][ T5948] usb 2-1: selecting invalid altsetting 0 [ 537.775896][T20340] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6507'. [ 537.855455][T20344] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 538.241777][ T980] usb 2-1: USB disconnect, device number 41 [ 538.430280][T20372] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6523'. [ 538.465159][ T980] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 538.626808][ T980] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 538.645147][ T980] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 538.670347][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 538.690255][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.704182][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.723294][ T980] usb 2-1: Product: syz [ 538.728533][ T980] usb 2-1: Manufacturer: syz [ 538.733195][ T980] usb 2-1: SerialNumber: syz [ 538.755814][ T980] usb 2-1: config 0 descriptor?? [ 538.766599][ T980] hub 2-1:0.0: bad descriptor, ignoring hub [ 538.777369][ T980] hub 2-1:0.0: probe with driver hub failed with error -5 [ 538.815391][ T980] usb 2-1: selecting invalid altsetting 0 [ 539.087253][ T980] usb 2-1: USB disconnect, device number 42 [ 539.191069][T20400] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6536'. [ 539.478656][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6541'. [ 541.504990][T11888] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 541.522398][T20473] loop6: detected capacity change from 0 to 4096 [ 541.715097][T11888] usb 4-1: Using ep0 maxpacket: 16 [ 541.746148][T11888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.784978][T11888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.794819][T11888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 541.815140][T11888] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 541.838658][T11888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.882497][T11888] usb 4-1: config 0 descriptor?? [ 542.324276][T11888] hid (null): invalid report_size 1354493550 [ 542.359189][T11888] hid (null): unknown global tag 0xe [ 542.546858][ T979] usb 4-1: USB disconnect, device number 43 [ 543.388137][T20517] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6575'. [ 543.679314][T20533] bpf: Bad value for 'gid' [ 544.036085][ T979] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 544.196086][ T979] usb 6-1: Using ep0 maxpacket: 8 [ 544.223918][ T979] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.249599][ T979] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 544.267909][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.282569][ T979] usb 6-1: config 0 descriptor?? [ 544.309096][ T979] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 544.463017][T20563] sp0: Synchronizing with TNC [ 544.833158][T20568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6595'. [ 545.147133][ T979] gspca_vc032x: reg_w err -71 [ 545.153213][ T979] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 545.173381][T20584] batman_adv: batadv0: Adding interface: dummy0 [ 545.180324][ T979] usb 6-1: USB disconnect, device number 27 [ 545.211282][T20584] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.251687][T20584] batman_adv: batadv0: Interface activated: dummy0 [ 545.260253][T20586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6604'. [ 545.655102][T11884] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 545.834944][T11884] usb 4-1: Using ep0 maxpacket: 32 [ 545.847827][T11884] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.895043][T11884] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.926675][T11884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 545.956431][T11884] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 545.981923][T11884] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 546.005061][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 546.005082][ T30] audit: type=1804 audit(1755820153.995:154): pid=20618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.6618" name="/" dev="pidfs" ino=20619 res=1 errno=0 [ 546.035000][T11884] usb 4-1: Product: syz [ 546.056008][T11884] usb 4-1: config 0 descriptor?? [ 546.490659][T11884] waterforce 0003:1044:7A4D.0056: unknown main item tag 0x0 [ 546.531721][T11884] waterforce 0003:1044:7A4D.0056: unknown main item tag 0x0 [ 546.541840][T11884] waterforce 0003:1044:7A4D.0056: item fetching failed at offset 2/5 [ 546.553308][T11884] waterforce 0003:1044:7A4D.0056: hid parse failed with -22 [ 546.561004][T11884] waterforce 0003:1044:7A4D.0056: probe with driver waterforce failed with error -22 [ 546.722262][ T43] usb 4-1: USB disconnect, device number 44 [ 547.344716][T20661] random: crng reseeded on system resumption [ 547.405167][T11884] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 547.567260][T11884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.590152][T11884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 547.611989][T11884] usb 6-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 547.633942][T11884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.643291][T20670] program syz.3.6643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.666138][T11884] usb 6-1: config 0 descriptor?? [ 547.695322][T20655] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 547.792562][ T980] kernel write not supported for file /syz0 (pid: 980 comm: kworker/0:2) [ 547.906934][T20678] netem: change failed [ 548.153900][T11884] glorious 0003:22D4:1503.0057: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.5-1/input0 [ 548.164385][T20692] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6654'. [ 548.264759][T20696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6656'. [ 548.315036][T20696] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 548.330941][T11884] usb 6-1: USB disconnect, device number 28 [ 548.591720][T20709] netlink: 'syz.3.6662': attribute type 1 has an invalid length. [ 548.603176][T20709] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6662'. [ 548.612631][T20709] netlink: 97 bytes leftover after parsing attributes in process `syz.3.6662'. [ 548.917767][T11884] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 549.084991][T11884] usb 4-1: Using ep0 maxpacket: 16 [ 549.110531][T11884] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.136805][T11884] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.151972][T11884] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 549.172095][T11884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 549.178954][T11884] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 549.194775][T11884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.214614][T11884] usb 4-1: config 0 descriptor?? [ 549.667268][T20740] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 549.674583][T20740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 549.757543][T20740] vhci_hcd vhci_hcd.0: Device attached [ 549.860930][ T979] usb 4-1: USB disconnect, device number 45 [ 550.005031][ T5948] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 551.000346][ T1162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.164698][ T1162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.321203][ T1162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.461340][ T1162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.756618][ T1162] bridge_slave_1: left promiscuous mode [ 551.762583][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.801166][ T1162] bridge_slave_0: left allmulticast mode [ 551.815053][ T1162] bridge_slave_0: left promiscuous mode [ 551.822973][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.201122][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 552.220305][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 552.232854][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 552.258730][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 552.272656][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 552.620593][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 552.636321][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 552.645422][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 552.653600][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 552.661840][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.743069][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.753840][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.762549][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.770976][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.779016][T20741] vhci_hcd: connection reset by peer [ 552.787849][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.804410][ T59] vhci_hcd: stop threads [ 552.848497][ T59] vhci_hcd: release socket [ 552.866538][ T59] vhci_hcd: disconnect device [ 553.180256][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.191544][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.203149][ T1162] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 553.216006][ T1162] bond0 (unregistering): Released all slaves [ 553.238336][ T1162] bond1 (unregistering): Released all slaves [ 553.314749][T20794] lo speed is unknown, defaulting to 1000 [ 553.394697][T20792] lo speed is unknown, defaulting to 1000 [ 553.422424][ T1162] tipc: Left network mode [ 553.451640][T20790] lo speed is unknown, defaulting to 1000 [ 554.045332][ T1162] hsr_slave_0: left promiscuous mode [ 554.059846][ T1162] hsr_slave_1: left promiscuous mode [ 554.070588][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.078641][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.097684][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.105310][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.135198][ T1162] veth1_macvtap: left promiscuous mode [ 554.141289][ T1162] veth0_macvtap: left promiscuous mode [ 554.325433][ T5843] Bluetooth: hci1: command tx timeout [ 554.735592][ T5843] Bluetooth: hci2: command tx timeout [ 554.871304][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 554.900714][ T5843] Bluetooth: hci3: command tx timeout [ 554.955513][ T1162] team0 (unregistering): Port device C removed [ 555.132915][ T5948] vhci_hcd: vhci_device speed not set [ 555.230365][ T30] audit: type=1326 audit(1755820163.225:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.0.6711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe1978ebe9 code=0x0 [ 555.953774][T20790] chnl_net:caif_netlink_parms(): no params data found [ 555.975318][T20792] chnl_net:caif_netlink_parms(): no params data found [ 556.048382][T20794] chnl_net:caif_netlink_parms(): no params data found [ 556.261990][ T1162] IPVS: stop unused estimator thread 0... [ 556.405380][ T5843] Bluetooth: hci1: command tx timeout [ 556.436048][T20790] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.444346][T20790] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.452265][T20790] bridge_slave_0: entered allmulticast mode [ 556.460410][T20790] bridge_slave_0: entered promiscuous mode [ 556.488563][T20792] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.495992][T20792] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.503274][T20792] bridge_slave_0: entered allmulticast mode [ 556.511455][T20792] bridge_slave_0: entered promiscuous mode [ 556.520334][T20790] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.534310][T20790] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.543337][T20790] bridge_slave_1: entered allmulticast mode [ 556.552507][T20790] bridge_slave_1: entered promiscuous mode [ 556.578255][T20794] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.586275][T20794] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.593543][T20794] bridge_slave_0: entered allmulticast mode [ 556.601286][T20794] bridge_slave_0: entered promiscuous mode [ 556.613682][T20794] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.623964][T20794] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.631487][T20794] bridge_slave_1: entered allmulticast mode [ 556.642439][T20794] bridge_slave_1: entered promiscuous mode [ 556.650378][T20792] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.657780][T20792] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.668065][T20792] bridge_slave_1: entered allmulticast mode [ 556.677301][T20792] bridge_slave_1: entered promiscuous mode [ 556.705411][T20790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.757288][T20790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.814964][ T5843] Bluetooth: hci2: command tx timeout [ 556.830238][T20792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.862931][T20790] team0: Port device team_slave_0 added [ 556.877940][T20794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.890447][T20792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.911349][T20790] team0: Port device team_slave_1 added [ 556.925727][T20794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.965263][ T5843] Bluetooth: hci3: command tx timeout [ 556.985739][T20792] team0: Port device team_slave_0 added [ 557.149143][ T1162] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.173860][T20792] team0: Port device team_slave_1 added [ 557.180965][T20790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.193059][T20790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.218996][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.233389][T20790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.252875][T20794] team0: Port device team_slave_0 added [ 557.263981][T20794] team0: Port device team_slave_1 added [ 557.340433][ T1162] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.360817][T20790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.368998][T20790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.396602][T20790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.423185][T20792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.430846][T20792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.458450][T20792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.491359][ T1162] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.524688][T20794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.533957][T20794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.560572][T20794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.585973][ T5948] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 557.602022][T20792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.609420][T20792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.635327][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.642363][T20792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.673384][ T1162] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.691521][T20794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.699018][T20794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.725867][T20794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.756307][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 557.785290][ T5948] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 557.793448][ T5948] usb 2-1: config 0 has no interface number 0 [ 557.801771][T20790] hsr_slave_0: entered promiscuous mode [ 557.809389][T20790] hsr_slave_1: entered promiscuous mode [ 557.817610][T20790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.825448][ T5948] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 557.834539][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.842771][T20790] Cannot create hsr debugfs directory [ 557.854962][ T5948] usb 2-1: Product: syz [ 557.859201][ T5948] usb 2-1: Manufacturer: syz [ 557.863852][ T5948] usb 2-1: SerialNumber: syz [ 557.889216][ T5948] usb 2-1: config 0 descriptor?? [ 557.907522][ T5948] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 557.992268][T20792] hsr_slave_0: entered promiscuous mode [ 558.000937][T20792] hsr_slave_1: entered promiscuous mode [ 558.008188][T20792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.016065][T20792] Cannot create hsr debugfs directory [ 558.074022][T20794] hsr_slave_0: entered promiscuous mode [ 558.082486][T20794] hsr_slave_1: entered promiscuous mode [ 558.089622][T20794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.097771][T20794] Cannot create hsr debugfs directory [ 558.119157][ T5948] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 558.142539][ T5948] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 558.485839][ T5843] Bluetooth: hci1: command tx timeout [ 558.535455][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 558.536083][T11888] usb 2-1: USB disconnect, device number 43 [ 558.566315][T11888] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 558.583776][T11888] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 558.596550][T11888] quatech2 2-1:0.51: device disconnected [ 558.705744][ T1162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.826914][ T1162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.886428][ T5843] Bluetooth: hci2: command tx timeout [ 558.930626][ T1162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.955583][T20790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 558.978812][T20790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 558.993679][T20790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 559.024250][ T1162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.039246][T20790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 559.046880][ T5843] Bluetooth: hci3: command tx timeout [ 559.181645][T20792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 559.264108][T20792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 559.292209][T20792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 559.382963][T20792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 559.491724][ T1162] bridge_slave_1: left allmulticast mode [ 559.502396][ T1162] bridge_slave_1: left promiscuous mode [ 559.515333][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.529266][ T1162] bridge_slave_0: left allmulticast mode [ 559.535492][ T1162] bridge_slave_0: left promiscuous mode [ 559.543269][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.555305][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 559.582127][ T1162] bridge_slave_1: left allmulticast mode [ 559.588141][ T1162] bridge_slave_1: left promiscuous mode [ 559.593893][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.604475][ T1162] bridge_slave_0: left allmulticast mode [ 559.610563][ T1162] bridge_slave_0: left promiscuous mode [ 559.617079][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.717348][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.739112][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.760565][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 559.770620][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 559.786166][ T24] usb 2-1: SerialNumber: syz [ 560.033722][ T24] usb 2-1: 0:2 : does not exist [ 560.057368][ T24] usb 2-1: USB disconnect, device number 44 [ 560.111723][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.254423][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.269214][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.280388][ T1162] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 560.294655][ T1162] bond0 (unregistering): Released all slaves [ 560.575317][ T5843] Bluetooth: hci1: command tx timeout [ 560.672673][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.684728][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.700033][ T1162] bond0 (unregistering): Released all slaves [ 560.827207][T20794] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 560.884559][T20794] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 560.923745][ T1162] tipc: Disabling bearer [ 560.942573][ T1162] tipc: Left network mode [ 560.952086][T20794] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 560.975939][ T5843] Bluetooth: hci2: command tx timeout [ 561.000233][ T1162] IPVS: stopping backup sync thread 18972 ... [ 561.021926][T20794] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 561.126249][ T5843] Bluetooth: hci3: command tx timeout [ 561.128452][T20790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.225442][T20790] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.271062][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.277524][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 561.278275][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.314637][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.322019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.435312][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 561.442384][ T24] usb 2-1: config 0 has no interfaces? [ 561.458413][ T24] usb 2-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 561.490222][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.511211][T20792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.519923][ T24] usb 2-1: Product: syz [ 561.524439][ T24] usb 2-1: Manufacturer: syz [ 561.530587][ T24] usb 2-1: SerialNumber: syz [ 561.546827][ T24] usb 2-1: config 0 descriptor?? [ 561.667777][T20792] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.731849][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.739111][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.762995][ T43] usb 2-1: USB disconnect, device number 45 [ 561.777624][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.784906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.853342][ T1162] hsr_slave_0: left promiscuous mode [ 561.876623][ T1162] hsr_slave_1: left promiscuous mode [ 561.882789][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.890831][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.903332][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.912601][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.927928][ T1162] hsr_slave_0: left promiscuous mode [ 561.937292][ T1162] hsr_slave_1: left promiscuous mode [ 561.943315][ T1162] batman_adv: batadv0: Interface deactivated: dummy0 [ 561.951244][ T1162] batman_adv: batadv0: Removing interface: dummy0 [ 561.958717][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.967461][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.976056][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.983585][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.027599][ T1162] veth1_macvtap: left promiscuous mode [ 562.033211][ T1162] veth0_macvtap: left promiscuous mode [ 562.039002][ T1162] veth1_vlan: left promiscuous mode [ 562.044338][ T1162] veth0_vlan: left promiscuous mode [ 562.052980][ T1162] veth1_macvtap: left promiscuous mode [ 562.059112][ T1162] veth0_macvtap: left promiscuous mode [ 562.803473][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 562.851650][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 562.971823][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.712428][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 563.763276][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 564.400124][T20794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.549390][T20794] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.621888][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.629163][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.739147][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.746449][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.881009][T20790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.270393][T20792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.658640][T20939] can0: slcan on ttyS3. [ 565.789345][T20794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.826821][T20939] can0 (unregistered): slcan off ttyS3. [ 565.897345][T20945] can0: slcan on ttyS3. [ 565.996118][T20938] can0 (unregistered): slcan off ttyS3. [ 566.069152][T20790] veth0_vlan: entered promiscuous mode [ 566.112995][T20790] veth1_vlan: entered promiscuous mode [ 566.279714][T20790] veth0_macvtap: entered promiscuous mode [ 566.347961][T20790] veth1_macvtap: entered promiscuous mode [ 566.402295][T20962] loop4: detected capacity change from 0 to 524255232 [ 566.497749][T20790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.575288][T20792] veth0_vlan: entered promiscuous mode [ 566.592851][T20790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.662986][T20790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.684521][T20790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.703846][T20790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.716626][T20790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.740583][T20792] veth1_vlan: entered promiscuous mode [ 566.783388][T20969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.953401][T20794] veth0_vlan: entered promiscuous mode [ 566.991074][T20794] veth1_vlan: entered promiscuous mode [ 567.048857][T20792] veth0_macvtap: entered promiscuous mode [ 567.080823][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.136273][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.139542][T20792] veth1_macvtap: entered promiscuous mode [ 567.188474][T20794] veth0_macvtap: entered promiscuous mode [ 567.231140][T20794] veth1_macvtap: entered promiscuous mode [ 567.271766][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.280773][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.291841][T20792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.304617][T20794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.333893][T20792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.361965][T20794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.390634][T20792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.406429][T20792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.421197][T20792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.431420][T20792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.456121][T20794] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.472467][T20794] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.481961][T20794] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.496293][T20794] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.761265][T20899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.785997][T20899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.891506][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.916872][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.981733][T20899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.014992][T20899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.089540][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.120675][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.421852][T21002] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.6704'. [ 568.947154][T21017] openvswitch: netlink: IP tunnel dst address not specified [ 569.332691][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6772'. [ 569.354620][T21032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6772'. [ 569.393045][T21032] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.402434][T21032] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.412206][T21032] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.421733][T21032] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.745181][T21036] serio: Serial port ttynull [ 570.141331][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6781'. [ 571.187294][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6790'. [ 571.727997][T21094] tap0: tun_chr_ioctl cmd 1074025677 [ 571.734549][T21094] tap0: linktype set to 776 [ 571.898399][T21100] misc userio: Invalid payload size [ 572.634727][T21128] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 572.676202][T21128] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 573.507551][T21148] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6824'. [ 573.824065][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6830'. [ 576.222158][ T1143] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.101331][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 577.122019][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 577.143938][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 577.163426][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 577.173162][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 577.411926][T21245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6868'. [ 577.573705][ T1143] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.737734][T21251] xt_CT: No such helper "pptp" [ 577.788922][ T1143] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.896909][T21240] lo speed is unknown, defaulting to 1000 [ 578.081242][ T1143] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.181671][T21271] bond0: entered promiscuous mode [ 578.211852][T21271] bond0: left promiscuous mode [ 578.507557][T21278] netlink: 'syz.6.6882': attribute type 21 has an invalid length. [ 578.654183][T21278] netlink: 'syz.6.6882': attribute type 1 has an invalid length. [ 578.664620][T21278] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6882'. [ 578.929565][ T979] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 578.946057][ T1143] bridge_slave_1: left allmulticast mode [ 578.951788][ T1143] bridge_slave_1: left promiscuous mode [ 578.981735][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.013320][ T1143] bridge_slave_0: left allmulticast mode [ 579.035139][ T1143] bridge_slave_0: left promiscuous mode [ 579.076735][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.134000][ T979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 579.162032][ T979] usb 2-1: not running at top speed; connect to a high speed hub [ 579.186557][ T979] usb 2-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 579.216707][ T979] usb 2-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.230448][ T979] usb 2-1: config 1 interface 0 has no altsetting 0 [ 579.255437][ T979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.270805][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.285446][ T5843] Bluetooth: hci2: command tx timeout [ 579.305628][ T979] usb 2-1: Product: syz [ 579.317277][ T979] usb 2-1: Manufacturer: syz [ 579.322097][ T979] usb 2-1: SerialNumber: syz [ 579.337317][T21285] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 579.406528][ T980] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 579.578127][ T979] usb 2-1: bad CDC descriptors [ 579.613782][ T979] usb 2-1: USB disconnect, device number 46 [ 579.627389][ T980] usb 9-1: config 0 has an invalid interface number: 227 but max is 0 [ 579.635898][ T980] usb 9-1: config 0 has no interface number 0 [ 579.642347][ T980] usb 9-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 579.661051][ T980] usb 9-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 579.672929][ T980] usb 9-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 579.684916][ T980] usb 9-1: config 0 interface 227 has no altsetting 0 [ 579.694639][ T980] usb 9-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 579.710694][ T980] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.719202][ T980] usb 9-1: Product: syz [ 579.723493][ T980] usb 9-1: Manufacturer: syz [ 579.733612][ T980] usb 9-1: SerialNumber: syz [ 579.752902][ T980] usb 9-1: config 0 descriptor?? [ 579.761766][T21295] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 579.775755][ T980] usbtouchscreen 9-1:0.227: probe with driver usbtouchscreen failed with error -90 [ 579.898338][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.910172][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.921031][ T1143] bond0 (unregistering): Released all slaves [ 579.950883][T21240] chnl_net:caif_netlink_parms(): no params data found [ 580.559108][T21240] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.573316][T21240] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.582938][T21240] bridge_slave_0: entered allmulticast mode [ 580.629409][T21240] bridge_slave_0: entered promiscuous mode [ 580.657345][ T980] usb 9-1: USB disconnect, device number 2 [ 580.781473][T21240] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.795221][T21240] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.813074][T21240] bridge_slave_1: entered allmulticast mode [ 580.840903][T21240] bridge_slave_1: entered promiscuous mode [ 580.906468][ T1143] hsr_slave_0: left promiscuous mode [ 580.918737][ T1143] hsr_slave_1: left promiscuous mode [ 580.936375][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.943899][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.986925][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.994433][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.050394][ T1143] veth1_macvtap: left promiscuous mode [ 581.064031][ T1143] veth0_macvtap: left promiscuous mode [ 581.073440][ T1143] veth1_vlan: left promiscuous mode [ 581.095066][ T1143] veth0_vlan: left promiscuous mode [ 581.365199][ T5843] Bluetooth: hci2: command tx timeout [ 581.932375][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 581.983822][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 582.553127][T21331] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6899'. [ 582.584180][T21240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.646568][T21240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.743345][T21348] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6907'. [ 582.926856][T21240] team0: Port device team_slave_0 added [ 582.954479][T21240] team0: Port device team_slave_1 added [ 583.111131][T21240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.131761][T21240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.168169][T21240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.204063][T21240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.229445][T21240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.261194][T21240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.318337][T21361] kvm: kvm [21360]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 583.446382][ T5843] Bluetooth: hci2: command tx timeout [ 583.513054][T21240] hsr_slave_0: entered promiscuous mode [ 583.541516][T21240] hsr_slave_1: entered promiscuous mode [ 584.430524][T21240] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 584.445916][T21240] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 584.459277][T21240] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 584.480942][T21240] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 584.658934][T21240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.713591][T21240] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.765829][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.773058][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.838437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.845684][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.530424][ T5843] Bluetooth: hci2: command tx timeout [ 585.531541][T21240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.554809][T21425] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6936'. [ 586.033069][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6942'. [ 586.663332][T21240] veth0_vlan: entered promiscuous mode [ 586.723409][T21240] veth1_vlan: entered promiscuous mode [ 586.803302][T21240] veth0_macvtap: entered promiscuous mode [ 586.834056][T21240] veth1_macvtap: entered promiscuous mode [ 586.914597][T21240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.941677][T21240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.959070][T21464] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6952'. [ 586.991752][T21240] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.024899][T21240] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.033756][T21240] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.051913][T21240] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.332423][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.374973][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.471918][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.521186][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.322659][T21485] lo speed is unknown, defaulting to 1000 [ 590.390477][T21599] kvm: apic: phys broadcast and lowest prio [ 591.929755][T21637] macvlan0: entered promiscuous mode [ 591.950794][T21637] macvlan1: entered promiscuous mode [ 591.986937][T21637] hsr1: entered promiscuous mode [ 592.391008][T21652] netlink: 'syz.0.7005': attribute type 1 has an invalid length. [ 592.416636][T21652] netlink: 'syz.0.7005': attribute type 1 has an invalid length. [ 592.444980][T21652] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7005'. [ 593.867718][T21691] loop7: detected capacity change from 0 to 7 [ 594.394352][ T5839] Dev loop7: unable to read RDB block 7 [ 594.413397][ T5839] loop7: unable to read partition table [ 594.414924][ C0] blk_print_req_error: 25 callbacks suppressed [ 594.414947][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 594.435137][ C0] buffer_io_error: 7 callbacks suppressed [ 594.435154][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 594.442353][ T5839] loop7: partition table beyond EOD, truncated [ 594.820919][T21691] Dev loop7: unable to read RDB block 7 [ 594.845159][T21691] loop7: unable to read partition table [ 594.851120][T21691] loop7: partition table beyond EOD, truncated [ 594.873392][T21691] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 595.568103][ T43] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 595.760025][ T43] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 595.787488][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.818422][ T43] usb 2-1: config 0 descriptor?? [ 596.438755][ T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 596.455573][ T43] asix 2-1:0.0: probe with driver asix failed with error -71 [ 596.484565][ T43] usb 2-1: USB disconnect, device number 47 [ 596.531881][T21755] kvm: user requested TSC rate below hardware speed [ 597.233727][T21768] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 597.335090][ T979] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 597.497270][ T979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 597.508927][ T979] usb 2-1: config 0 has no interface number 0 [ 597.519974][ T979] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 597.532146][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.540751][ T979] usb 2-1: Product: syz [ 597.545447][ T979] usb 2-1: Manufacturer: syz [ 597.550112][ T979] usb 2-1: SerialNumber: syz [ 597.563732][ T979] usb 2-1: config 0 descriptor?? [ 597.804960][ T979] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 597.822536][ T979] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.835730][ T979] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 597.843937][ T979] usb 2-1: media controller created [ 597.883977][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.002075][ T979] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 598.083678][ T979] usb 2-1: USB disconnect, device number 48 [ 598.539313][T21797] sp0: Synchronizing with TNC [ 598.548728][T21797] sp0: Found TNC [ 598.710145][T21803] loop6: detected capacity change from 0 to 63 [ 598.718619][T21803] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.727566][T21803] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.735897][T21803] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.743945][T21803] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.752255][T21803] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.760319][T21803] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.768332][T21803] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.779031][T21803] loop6: unable to read partition table [ 598.779446][T21804] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 598.794462][T21804] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 598.796537][T21803] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 599.325181][ T979] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 599.488352][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.520890][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.537823][ T979] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 599.561275][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.583411][ T979] usb 2-1: config 0 descriptor?? [ 600.035948][ T979] pyra 0003:1E7D:2CF6.0059: unknown main item tag 0x0 [ 600.063650][ T979] pyra 0003:1E7D:2CF6.0059: unknown main item tag 0x0 [ 600.083781][ T979] pyra 0003:1E7D:2CF6.0059: unknown main item tag 0x0 [ 600.114072][ T979] pyra 0003:1E7D:2CF6.0059: unknown main item tag 0x0 [ 600.136344][ T979] pyra 0003:1E7D:2CF6.0059: unknown main item tag 0x0 [ 600.143261][ T979] pyra 0003:1E7D:2CF6.0059: unknown main item tag 0x0 [ 600.150824][ T979] pyra 0003:1E7D:2CF6.0059: unknown main item tag 0x0 [ 600.207176][ T979] pyra 0003:1E7D:2CF6.0059: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 600.432473][ T979] pyra 0003:1E7D:2CF6.0059: couldn't init struct pyra_device [ 600.444212][ T979] pyra 0003:1E7D:2CF6.0059: couldn't install mouse [ 600.473632][ T979] pyra 0003:1E7D:2CF6.0059: probe with driver pyra failed with error -71 [ 600.492478][ T979] usb 2-1: USB disconnect, device number 49 [ 601.402422][T21872] team0: Device gtp0 is of different type [ 603.556386][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7137'. [ 604.070675][T21965] loop7: detected capacity change from 0 to 524255231 [ 604.186121][T21965] loop7: detected capacity change from 524255231 to 524287912 [ 604.907876][T21997] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.7164'. [ 606.117993][T22044] netlink: 'syz.8.7186': attribute type 7 has an invalid length. [ 606.147612][T22044] netlink: 'syz.8.7186': attribute type 8 has an invalid length. [ 606.174977][T22044] netlink: 'syz.8.7186': attribute type 4 has an invalid length. [ 606.193365][T22044] netlink: 212 bytes leftover after parsing attributes in process `syz.8.7186'. [ 606.324009][T22050] netlink: 6 bytes leftover after parsing attributes in process `syz.7.7187'. [ 606.718799][T22065] netlink: 'syz.8.7198': attribute type 3 has an invalid length. [ 606.737129][T22065] netlink: 'syz.8.7198': attribute type 3 has an invalid length. [ 606.955533][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7200'. [ 607.119299][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7203'. [ 607.934926][T11884] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 608.109008][T11884] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 608.125654][T22111] Falling back ldisc for ptm0. [ 608.146612][T11884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.180969][T11884] usb 9-1: Product: syz [ 608.199690][T11884] usb 9-1: Manufacturer: syz [ 608.204376][T11884] usb 9-1: SerialNumber: syz [ 608.246650][T11884] usb 9-1: config 0 descriptor?? [ 608.276459][T11884] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 003 [ 608.677856][T11884] (null): failure reading functionality [ 608.699030][T11884] i2c i2c-2: connected i2c-tiny-usb device [ 608.905596][T11887] usb 9-1: USB disconnect, device number 3 [ 610.646048][T22175] input: syz1 as /devices/virtual/input/input35 [ 610.946525][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7252'. [ 611.309639][T22197] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7259'. [ 611.518466][T22201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7261'. [ 613.093287][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7280'. [ 613.644222][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7290'. [ 613.963606][T22277] netlink: 1 bytes leftover after parsing attributes in process `syz.8.7297'. [ 614.127436][T22284] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.7300'. [ 614.808082][T22313] pim6reg: entered allmulticast mode [ 614.819357][T22311] pim6reg: left allmulticast mode [ 615.041109][T22319] vivid-000: disconnect [ 615.073443][T22318] vivid-000: reconnect [ 615.251835][T22325] openvswitch: netlink: Message has 4 unknown bytes. [ 615.268454][T22325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.836712][T22346] netlink: 'syz.6.7329': attribute type 1 has an invalid length. [ 615.854930][T22346] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7329'. [ 615.866788][T22346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7329'. [ 616.034616][T22352] loop6: detected capacity change from 0 to 63 [ 616.050451][T22352] buffer_io_error: 5 callbacks suppressed [ 616.050471][T22352] Buffer I/O error on dev loop6, logical block 0, async page read [ 616.072382][T22352] Buffer I/O error on dev loop6, logical block 0, async page read [ 616.080504][T22352] Buffer I/O error on dev loop6, logical block 0, async page read [ 616.095987][T22352] Buffer I/O error on dev loop6, logical block 0, async page read [ 616.110229][T22352] Buffer I/O error on dev loop6, logical block 0, async page read [ 616.126982][T22355] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 616.156863][T22352] loop6: unable to read partition table [ 616.163141][T22355] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 616.179015][T22352] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 616.194646][T22355] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 616.258985][T22355] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 616.273650][T22355] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 616.327008][ T5207] ldm_validate_partition_table(): Disk read failed. [ 616.342432][ T5207] Dev loop6: unable to read RDB block 0 [ 616.352310][ T5207] loop6: unable to read partition table [ 616.669795][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7337'. [ 616.931840][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7341'. [ 616.957607][T22374] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 616.969490][T22374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.391036][T22391] loop6: detected capacity change from 0 to 63 [ 617.412359][ T5839] ldm_validate_partition_table(): Disk read failed. [ 617.446824][ T5839] loop6: unable to read partition table [ 617.465893][T22391] ldm_validate_partition_table(): Disk read failed. [ 617.485255][T22391] Dev loop6: unable to read RDB block 0 [ 617.495884][T22391] loop6: unable to read partition table [ 617.505511][T22391] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 618.374865][T22410] bond_slave_0: entered promiscuous mode [ 618.381049][T22410] bond_slave_1: entered promiscuous mode [ 618.441855][T22410] macsec1: entered allmulticast mode [ 618.469937][T22410] bond0: entered allmulticast mode [ 618.477473][T22410] bond_slave_0: entered allmulticast mode [ 618.484529][T22410] bond_slave_1: entered allmulticast mode [ 618.505610][T22410] bond0: left allmulticast mode [ 618.510549][T22410] bond_slave_0: left allmulticast mode [ 618.521611][T22410] bond_slave_1: left allmulticast mode [ 618.529761][T22410] bond_slave_0: left promiscuous mode [ 618.535307][T22410] bond_slave_1: left promiscuous mode [ 618.734360][ T30] audit: type=1326 audit(1755820228.725:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22422 comm="syz.0.7363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe1978ebe9 code=0x0 [ 619.339475][T22443] netlink: 'syz.6.7372': attribute type 4 has an invalid length. [ 619.359111][T22443] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7372'. [ 620.380629][T22473] ip6gre1: entered promiscuous mode [ 620.393075][T22473] ip6gre1: entered allmulticast mode [ 620.440658][T22460] lo speed is unknown, defaulting to 1000 [ 620.665025][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 620.815131][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 620.860313][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.881158][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.919227][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 620.949953][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 620.973365][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.998517][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 621.010998][ T24] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 621.022679][ T24] usb 9-1: Manufacturer: syz [ 621.033706][ T24] usb 9-1: config 0 descriptor?? [ 621.425001][ T24] rc_core: IR keymap rc-hauppauge not found [ 621.431655][ T24] Registered IR keymap rc-empty [ 621.455034][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.477950][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.516236][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 621.557484][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input36 [ 621.595079][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.604011][ C1] mceusb 9-1:0.0: long-range (0x1) receiver active [ 621.623143][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.655092][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.692319][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.725627][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.760105][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.795364][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.826613][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.867733][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.894989][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 621.917212][ T24] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 621.954883][ T24] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 621.995272][ T24] usb 9-1: USB disconnect, device number 4 [ 622.622900][T22527] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.630831][T22527] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.938496][T22534] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 623.000450][T22534] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 623.177323][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7410'. [ 623.590520][T22555] netlink: 'syz.8.7419': attribute type 10 has an invalid length. [ 623.611864][T22555] veth0_vlan: left promiscuous mode [ 623.620866][T22555] veth0_vlan: entered promiscuous mode [ 623.631283][T22555] team0: Device veth0_vlan failed to register rx_handler [ 624.216806][T11884] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 624.397474][T11884] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 624.414164][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.443429][T11884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.457221][T11884] usb 2-1: config 0 descriptor?? [ 624.684511][T11884] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 624.887987][T11884] [drm:udl_init] *ERROR* Selecting channel failed [ 624.936190][T11884] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 624.956691][T11884] [drm] Initialized udl on minor 2 [ 624.967005][T11884] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 624.988698][T11884] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 625.023538][T11887] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 625.038148][T11884] usb 2-1: USB disconnect, device number 50 [ 625.066739][T11887] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 625.193040][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7456'. [ 625.790850][T22667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7452'. [ 625.935505][ T979] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 626.106024][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 626.123764][ T979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 626.145506][ T979] usb 2-1: config 0 has no interface number 0 [ 626.152212][ T979] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.175826][ T979] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.186362][ T979] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 626.196070][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.227547][ T979] usb 2-1: config 0 descriptor?? [ 626.390128][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7458'. [ 626.405552][T22678] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7458'. [ 626.850019][ T979] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.005A/input/input37 [ 626.972416][ T979] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.005A/input/input38 [ 627.017490][ T979] uclogic 0003:28BD:0071.005A: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 627.087515][ T979] usb 2-1: USB disconnect, device number 51 [ 627.140916][T22703] netlink: 'syz.8.7469': attribute type 1 has an invalid length. [ 627.314187][T22709] evm: overlay not supported [ 627.382567][T22713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7474'. [ 627.392639][T22713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7474'. [ 627.797837][T11887] kernel write not supported for file /snd/midiC2D0 (pid: 11887 comm: kworker/0:10) [ 628.926922][T22746] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 629.720015][T22798] lo speed is unknown, defaulting to 1000 [ 629.797667][T22803] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7514'. [ 629.845609][T11884] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 629.955553][ T979] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 630.115281][T11884] usb 9-1: Using ep0 maxpacket: 32 [ 630.117548][ T979] usb 2-1: config 0 has no interfaces? [ 630.132215][T11884] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 630.150516][T11884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.154190][ T979] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 630.179104][T11884] usb 9-1: config 0 descriptor?? [ 630.182089][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.200208][ T979] usb 2-1: Product: syz [ 630.204734][ T979] usb 2-1: Manufacturer: syz [ 630.210176][ T979] usb 2-1: SerialNumber: syz [ 630.220671][T22812] bridge0: entered promiscuous mode [ 630.229897][T22812] macvlan2: entered promiscuous mode [ 630.247191][ T979] usb 2-1: config 0 descriptor?? [ 630.403474][T11884] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 630.430143][T11884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 630.458390][T11884] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 630.470241][T11884] usb 9-1: media controller created [ 630.530219][T11884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.591559][ T979] usb 2-1: USB disconnect, device number 52 [ 630.610857][T11884] az6027: usb out operation failed. (-71) [ 630.636800][T11884] az6027: usb out operation failed. (-71) [ 630.643302][T11884] stb0899_attach: Driver disabled by Kconfig [ 630.652717][T11884] az6027: no front-end attached [ 630.652717][T11884] [ 630.667883][T11884] az6027: usb out operation failed. (-71) [ 630.673907][T11884] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 630.684503][T11884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input39 [ 630.698546][T11884] dvb-usb: schedule remote query interval to 400 msecs. [ 630.705942][T11884] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 630.716225][T11884] usb 9-1: USB disconnect, device number 5 [ 630.752819][T11884] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 631.308679][T22837] netlink: 'syz.0.7530': attribute type 4 has an invalid length. [ 631.573512][ T979] IPVS: starting estimator thread 0... [ 631.675138][T22850] IPVS: using max 27 ests per chain, 64800 per kthread [ 632.077586][ T30] audit: type=1326 audit(1755820242.075:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e158ebe9 code=0x7ffc0000 [ 632.113462][ T30] audit: type=1326 audit(1755820242.075:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e158ebe9 code=0x7ffc0000 [ 632.140776][T22870] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7543'. [ 632.141240][ T30] audit: type=1326 audit(1755820242.105:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78e158ebe9 code=0x7ffc0000 [ 632.184381][ T30] audit: type=1326 audit(1755820242.115:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e158ebe9 code=0x7ffc0000 [ 632.213069][ T30] audit: type=1326 audit(1755820242.115:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e158ebe9 code=0x7ffc0000 [ 632.283223][ T30] audit: type=1326 audit(1755820242.155:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78e158ebe9 code=0x7ffc0000 [ 632.329828][ T30] audit: type=1326 audit(1755820242.235:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e158ebe9 code=0x7ffc0000 [ 632.358541][ T30] audit: type=1326 audit(1755820242.235:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78e1585ba7 code=0x7ffc0000 [ 632.403504][ T30] audit: type=1326 audit(1755820242.235:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78e152ade9 code=0x7ffc0000 [ 632.440413][T22872] xt_CT: No such helper "snmp" [ 632.478427][ T30] audit: type=1326 audit(1755820242.235:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22867 comm="syz.7.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78e1585ba7 code=0x7ffc0000 [ 632.577498][T22877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7546'. [ 633.378900][T22916] input: syz1 as /devices/virtual/input/input40 [ 633.717004][T22928] vxcan3: entered allmulticast mode [ 634.974935][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 635.130178][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 635.163946][ T24] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 635.174211][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.205877][ T24] usb 9-1: config 0 descriptor?? [ 635.460849][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 635.501431][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 635.526194][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 635.545163][ T24] usb 9-1: media controller created [ 635.622952][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 635.704454][ T24] az6027: usb out operation failed. (-71) [ 635.751209][ T24] az6027: usb out operation failed. (-71) [ 635.765018][ T24] stb0899_attach: Driver disabled by Kconfig [ 635.773603][ T24] az6027: no front-end attached [ 635.773603][ T24] [ 635.795729][ T24] az6027: usb out operation failed. (-71) [ 635.805290][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 635.818947][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input41 [ 635.834411][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 635.841945][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 635.871155][ T24] usb 9-1: USB disconnect, device number 6 [ 635.921920][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 635.992368][T23021] hsr0: entered promiscuous mode [ 635.998678][T23021] macvtap1: entered promiscuous mode [ 636.004234][T23021] macvtap1: entered allmulticast mode [ 636.010057][T23021] hsr0: entered allmulticast mode [ 636.016568][T23021] hsr_slave_0: entered allmulticast mode [ 636.022427][T23021] hsr_slave_1: entered allmulticast mode [ 636.031852][T23021] hsr0: left allmulticast mode [ 636.036988][T23021] hsr_slave_0: left allmulticast mode [ 636.042594][T23021] hsr_slave_1: left allmulticast mode [ 636.781261][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7622'. [ 637.587798][T23081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.629244][T23081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.665646][ T43] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 637.783325][T23081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.799163][T23081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.826596][ T43] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 637.846004][ T43] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 637.865166][ T43] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 637.887523][ T43] usb 9-1: config 220 has no interface number 2 [ 637.898737][ T43] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 637.954945][ T43] usb 9-1: config 220 interface 0 has no altsetting 0 [ 637.967951][ T43] usb 9-1: config 220 interface 76 has no altsetting 0 [ 638.006284][ T43] usb 9-1: config 220 interface 1 has no altsetting 0 [ 638.022301][T23081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.047532][ T43] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 638.061278][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.075002][T23081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.105101][ T43] usb 9-1: Product: syz [ 638.109382][ T43] usb 9-1: Manufacturer: syz [ 638.114026][ T43] usb 9-1: SerialNumber: syz [ 638.241833][T23081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.275003][T23081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.369356][ T43] usb 9-1: selecting invalid altsetting 0 [ 638.390743][ T43] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 638.411166][ T43] usb 9-1: No valid video chain found. [ 638.445360][ T43] usb 9-1: selecting invalid altsetting 0 [ 638.451194][ T43] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 638.498918][ T43] usb 9-1: USB disconnect, device number 7 [ 638.607623][T11884] IPVS: starting estimator thread 0... [ 638.624433][T23081] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.634746][T23081] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.654281][T23081] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.663232][T23081] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.715442][T23118] IPVS: using max 28 ests per chain, 67200 per kthread [ 638.728697][T23081] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.753196][T23081] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.784129][T23081] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.793366][T23081] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.024572][T23133] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 639.036089][T23133] macsec1: entered allmulticast mode [ 639.042461][T23133] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 639.068622][T23133] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 639.076565][T23133] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 640.230309][T23175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.509247][ T5837] cgroup: fork rejected by pids controller in /syz0 [ 640.555362][T23184] mkiss: ax0: crc mode is auto. [ 641.028123][T23198] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7695'. [ 641.677259][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 641.677280][ T30] audit: type=1326 audit(1755820251.675:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e12f8ebe9 code=0x7ffc0000 [ 641.708280][ T30] audit: type=1326 audit(1755820251.675:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e12f8ebe9 code=0x7ffc0000 [ 641.732931][ T30] audit: type=1326 audit(1755820251.675:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e12f8ebe9 code=0x7ffc0000 [ 641.784640][ T30] audit: type=1326 audit(1755820251.675:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e12f8ebe9 code=0x7ffc0000 [ 641.807922][ T30] audit: type=1326 audit(1755820251.675:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e12f8ebe9 code=0x7ffc0000 [ 641.830496][ T30] audit: type=1326 audit(1755820251.755:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e12f8ebe9 code=0x7ffc0000 [ 641.854198][ T30] audit: type=1326 audit(1755820251.765:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e12f85ba7 code=0x7ffc0000 [ 641.875786][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.882680][ T30] audit: type=1326 audit(1755820251.765:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e12f2ade9 code=0x7ffc0000 [ 641.907338][ T30] audit: type=1326 audit(1755820251.765:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e12f85ba7 code=0x7ffc0000 [ 641.928872][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.935963][ T30] audit: type=1326 audit(1755820251.765:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23223 comm="syz.1.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e12f2ade9 code=0x7ffc0000 [ 642.265077][T11887] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 642.429615][T11887] usb 2-1: Using ep0 maxpacket: 16 [ 642.441597][T11887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.454478][T11887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 642.466148][T11887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 642.476574][T11887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 642.487508][T11887] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.503463][T11887] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 642.513369][T11887] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 642.522560][T11887] usb 2-1: Manufacturer: syz [ 642.539654][T11887] usb 2-1: config 0 descriptor?? [ 642.834961][T11887] rc_core: IR keymap rc-hauppauge not found [ 642.842798][T11887] Registered IR keymap rc-empty [ 642.854566][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.885629][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.907695][T11887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 642.925574][T11887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 642.946743][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.979359][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.001691][T21567] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.014026][T21567] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.037426][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.065442][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.093215][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.115964][T21567] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.136188][T21567] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.155046][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.185161][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.207905][T21567] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.219463][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.229037][T21567] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.254988][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.275920][T11887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.302412][T21567] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.317560][T11887] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 643.326775][T11887] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.335615][T21567] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.375774][T11887] usb 2-1: USB disconnect, device number 53 [ 643.598883][T21567] bridge_slave_1: left allmulticast mode [ 643.620450][T21567] bridge_slave_1: left promiscuous mode [ 643.633846][T21567] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.660493][T21567] bridge_slave_0: left promiscuous mode [ 643.666590][T21567] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.100985][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 644.112018][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 644.123188][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 644.156749][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 644.175595][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 644.802780][T21567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.814665][T21567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.832913][T21567] bond0 (unregistering): Released all slaves [ 644.847497][T23263] netlink: 152 bytes leftover after parsing attributes in process `syz.8.7725'. [ 644.889529][T23268] lo speed is unknown, defaulting to 1000 [ 644.994844][T21567] : left promiscuous mode [ 645.007186][T23283] loop6: detected capacity change from 0 to 63 [ 645.030871][T23283] buffer_io_error: 60 callbacks suppressed [ 645.030891][T23283] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.065057][T23283] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.073080][T23283] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.107343][T23283] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.136274][T23283] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.160207][T21567] tipc: Disabling bearer [ 645.161545][T23283] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.176128][T23283] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.189416][T23283] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.207555][T21567] tipc: Left network mode [ 645.218116][T23287] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 645.273347][T23283] loop6: unable to read partition table [ 645.294206][T21567] IPVS: stopping master sync thread 9458 ... [ 645.301321][T23287] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 645.334401][T23283] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 645.815642][T23268] chnl_net:caif_netlink_parms(): no params data found [ 646.058175][T23310] ip6gre1: entered promiscuous mode [ 646.063520][T23310] ip6gre1: entered allmulticast mode [ 646.222685][T21567] hsr_slave_0: left promiscuous mode [ 646.242642][T21567] hsr_slave_1: left promiscuous mode [ 646.249161][ T5843] Bluetooth: hci0: command tx timeout [ 646.269567][T21567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.285788][T21567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.296475][T21567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.310957][T21567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.367105][T21567] veth1_macvtap: left promiscuous mode [ 646.372873][T21567] veth0_macvtap: left promiscuous mode [ 646.378756][T21567] veth1_vlan: left promiscuous mode [ 646.386348][T21567] veth0_vlan: left promiscuous mode [ 646.535488][T11884] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 646.728201][T11884] usb 9-1: Using ep0 maxpacket: 16 [ 646.761834][T11884] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.779624][T11884] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.816956][T11884] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.842930][T11884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.855616][T11884] usb 9-1: Product: syz [ 646.859849][T11884] usb 9-1: Manufacturer: syz [ 646.864476][T11884] usb 9-1: SerialNumber: syz [ 647.102965][T11884] usb 9-1: 0:2 : does not exist [ 647.149219][T11884] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 647.199472][T11884] usb 9-1: USB disconnect, device number 8 [ 647.241740][T21567] team0 (unregistering): Port device team_slave_1 removed [ 647.293520][T21567] team0 (unregistering): Port device team_slave_0 removed [ 648.325676][ T5843] Bluetooth: hci0: command tx timeout [ 648.416127][T23268] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.424282][T23268] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.432119][T23268] bridge_slave_0: entered allmulticast mode [ 648.440872][T23268] bridge_slave_0: entered promiscuous mode [ 648.463461][T23268] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.474993][T23268] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.482236][T23268] bridge_slave_1: entered allmulticast mode [ 648.502378][T23268] bridge_slave_1: entered promiscuous mode [ 648.738140][T23268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.767769][T23268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.825115][ T5961] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 648.899958][T23268] team0: Port device team_slave_0 added [ 648.924229][T23268] team0: Port device team_slave_1 added [ 648.978211][ T5961] usb 9-1: Using ep0 maxpacket: 16 [ 648.990815][ T5961] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.011980][T21567] IPVS: stop unused estimator thread 0... [ 649.015249][ T5961] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.058869][ T5961] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 649.072865][T23268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.089281][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.089455][T23268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.124208][ T5961] usb 9-1: Product: syz [ 649.129170][ T5961] usb 9-1: Manufacturer: syz [ 649.143125][T23268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.144963][ T5961] usb 9-1: SerialNumber: syz [ 649.171602][T23268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.199375][T23268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.225441][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.277267][T23268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.464290][T23268] hsr_slave_0: entered promiscuous mode [ 649.498535][T23268] hsr_slave_1: entered promiscuous mode [ 649.516568][T23268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.524222][T23268] Cannot create hsr debugfs directory [ 649.628269][ T5961] usb 9-1: cannot find UAC_HEADER [ 649.673602][ T5961] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 649.690524][ T5961] usb 9-1: USB disconnect, device number 9 [ 650.118913][T23388] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 650.173496][T23388] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 650.404989][ T5843] Bluetooth: hci0: command tx timeout [ 650.482085][T23268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 650.497732][T23268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 650.513056][T23268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 650.524474][T23268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 650.729559][T23407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7781'. [ 650.770950][T23268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.811551][T23268] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.843542][T21558] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.850815][T21558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.884481][T21588] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.891743][T21588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.309256][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7789'. [ 651.479140][T23268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.542964][T23438] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.550762][T23438] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.668253][T23442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7797'. [ 651.689387][T23268] veth0_vlan: entered promiscuous mode [ 651.728283][T23268] veth1_vlan: entered promiscuous mode [ 651.819977][T23268] veth0_macvtap: entered promiscuous mode [ 651.847759][T23268] veth1_macvtap: entered promiscuous mode [ 651.923117][T23268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.957399][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7800'. [ 651.980854][T23450] netlink: 3 bytes leftover after parsing attributes in process `syz.8.7800'. [ 652.019176][T23268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.051665][T23268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.077543][T23268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.107237][T23268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.124968][T23268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.357945][T21588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.394292][T21588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.470699][T21556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.485181][ T5843] Bluetooth: hci0: command tx timeout [ 652.487579][T21556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.050265][T23490] netlink: 'syz.1.7816': attribute type 1 has an invalid length. [ 654.075705][T23525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7831'. [ 654.975673][T23574] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7849'. [ 655.045890][ T5843] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 655.055402][ T5843] Bluetooth: hci3: Injecting HCI hardware error event [ 655.066439][ T5843] Bluetooth: hci3: hardware error 0x00 [ 655.213283][T23580] netlink: 'syz.7.7863': attribute type 11 has an invalid length. [ 655.514187][T23591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7867'. [ 656.142730][T23607] lo speed is unknown, defaulting to 1000 [ 656.715361][T11887] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 656.895960][T11887] usb 9-1: Using ep0 maxpacket: 8 [ 656.915776][T11887] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 656.931817][T11887] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 656.952108][T11887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.978202][T11887] usb 9-1: Product: syz [ 656.989388][T11887] usb 9-1: Manufacturer: syz [ 657.002795][T11887] usb 9-1: SerialNumber: syz [ 657.021359][T11887] usb 9-1: config 0 descriptor?? [ 657.036555][T11887] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 657.068295][T11887] usb 9-1: setting power ON [ 657.077468][T11887] dvb-usb: bulk message failed: -22 (2/0) [ 657.100065][T11887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 657.121734][T11887] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 657.146621][T11887] usb 9-1: media controller created [ 657.209772][T11887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.211023][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 657.294446][T11887] usb 9-1: selecting invalid altsetting 6 [ 657.331010][T11887] usb 9-1: digital interface selection failed (-22) [ 657.360089][T23645] netlink: 'syz.0.7876': attribute type 2 has an invalid length. [ 657.367924][T11887] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 657.369921][T11887] usb 9-1: setting power OFF [ 657.435189][T11887] dvb-usb: bulk message failed: -22 (2/0) [ 657.441010][T11887] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 657.461441][T11887] (NULL device *): no alternate interface [ 657.527630][T11887] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 657.563784][T11887] usb 9-1: USB disconnect, device number 10 [ 658.606498][T23659] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 659.285560][T11887] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 660.088683][T23742] input: syz1 as /devices/virtual/input/input43 [ 660.583167][T23760] netlink: 'syz.8.7929': attribute type 2 has an invalid length. [ 660.599682][T23760] netlink: 'syz.8.7929': attribute type 8 has an invalid length. [ 660.612632][T23760] netlink: 1160 bytes leftover after parsing attributes in process `syz.8.7929'. [ 661.883044][T23785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7941'. [ 663.085412][ T5961] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 663.202514][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 663.202532][ T30] audit: type=1326 audit(1755820273.195:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bbe185ba7 code=0x7ffc0000 [ 663.254932][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 663.262677][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 663.273191][ T30] audit: type=1326 audit(1755820273.225:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bbe12ade9 code=0x7ffc0000 [ 663.294688][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.305834][ T5961] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 663.321447][ T5961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.349131][ T5961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.351903][ T30] audit: type=1326 audit(1755820273.225:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bbe18ebe9 code=0x7ffc0000 [ 663.361996][ T5961] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.411350][ T30] audit: type=1326 audit(1755820273.225:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bbe185ba7 code=0x7ffc0000 [ 663.439864][ T30] audit: type=1326 audit(1755820273.225:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bbe12ade9 code=0x7ffc0000 [ 663.461372][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.476458][ T30] audit: type=1326 audit(1755820273.225:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bbe185ba7 code=0x7ffc0000 [ 663.479374][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.498418][ T30] audit: type=1326 audit(1755820273.225:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bbe12ade9 code=0x7ffc0000 [ 663.498472][ T30] audit: type=1326 audit(1755820273.235:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6bbe18ebe9 code=0x7ffc0000 [ 663.498538][ T30] audit: type=1326 audit(1755820273.235:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bbe185ba7 code=0x7ffc0000 [ 663.498582][ T30] audit: type=1326 audit(1755820273.235:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23845 comm="syz.0.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bbe12ade9 code=0x7ffc0000 [ 663.630784][ T5961] usb 2-1: Product: syz [ 663.635098][ T5961] usb 2-1: Manufacturer: syz [ 663.640474][ T5961] usb 2-1: SerialNumber: syz [ 663.716104][T23858] tap0: tun_chr_ioctl cmd 1074025677 [ 663.722753][T23858] tap0: linktype set to 805 [ 663.869440][T23831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.885544][T23831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.956416][ T5961] usb 2-1: 0:2 : does not exist [ 663.987077][ T5961] usb 2-1: USB disconnect, device number 54 [ 664.504962][ T5961] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 664.628532][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7987'. [ 664.676831][ T5961] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 664.694568][ T5961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.715116][ T5961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.739840][ T5961] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 664.759831][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.769037][ T5961] usb 2-1: Product: syz [ 664.773297][ T5961] usb 2-1: Manufacturer: syz [ 664.779959][ T5961] usb 2-1: SerialNumber: syz [ 665.003858][ T5961] usb 2-1: 0:2 : does not exist [ 665.045580][ T43] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 665.071080][ T5961] usb 2-1: USB disconnect, device number 55 [ 665.205081][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 665.218662][ T43] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 665.228665][ T43] usb 9-1: New USB device strings: Mfr=0, Product=151, SerialNumber=247 [ 665.238067][ T43] usb 9-1: Product: syz [ 665.242379][ T43] usb 9-1: SerialNumber: syz [ 665.249321][ T43] usb 9-1: config 0 descriptor?? [ 665.464340][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 665.473636][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 665.484215][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 665.491460][ T43] usb 9-1: media controller created [ 665.511641][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.667708][ T43] az6027: usb out operation failed. (-71) [ 665.676146][ T43] az6027: usb out operation failed. (-71) [ 665.681920][ T43] stb0899_attach: Driver disabled by Kconfig [ 665.688447][ T43] az6027: no front-end attached [ 665.688447][ T43] [ 665.696087][ T43] az6027: usb out operation failed. (-71) [ 665.701974][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 665.711454][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input44 [ 665.724129][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 665.731413][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 665.742175][ T43] usb 9-1: USB disconnect, device number 11 [ 665.772467][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 665.825254][ T5961] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 665.978895][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 665.990086][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 666.002870][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 666.020408][ T5961] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 666.030190][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.038291][ T5961] usb 2-1: Product: syz [ 666.042476][ T5961] usb 2-1: Manufacturer: syz [ 666.047582][ T5961] usb 2-1: SerialNumber: syz [ 666.055500][ T5961] usb 2-1: config 0 descriptor?? [ 666.061275][T23889] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 666.068832][T23889] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 666.078628][ T5961] usb 2-1: ucan: probing device on interface #0 [ 666.346328][T23893] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.7994'. [ 666.701172][ T5961] ucan 2-1:0.0: probe with driver ucan failed with error -22 [ 666.920234][ T5961] usb 2-1: USB disconnect, device number 56 [ 667.172614][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8005'. [ 667.798631][T23942] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.8017'. [ 668.098755][T23954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.361679][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8028'. [ 669.737090][T24025] netlink: 'syz.7.8056': attribute type 2 has an invalid length. [ 669.745383][T24025] netlink: 'syz.7.8056': attribute type 1 has an invalid length. [ 670.040681][T24035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8060'. [ 670.346471][T24045] syz_tun: entered promiscuous mode [ 670.359934][T24045] macvtap1: entered allmulticast mode [ 670.375031][T24045] syz_tun: entered allmulticast mode [ 670.401155][T24045] syz_tun: left allmulticast mode [ 670.415063][T24045] syz_tun: left promiscuous mode [ 671.027123][T24077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8080'. [ 671.410989][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 671.411009][ T30] audit: type=1326 audit(1755820281.405:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24099 comm="syz.0.8088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bbe18ebe9 code=0x0 [ 671.778630][ T43] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 671.944969][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 671.952044][ T43] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 671.964133][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.982045][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 671.989543][ T43] pvrusb2: ********** [ 671.993660][ T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 672.033437][ T43] pvrusb2: Important functionality might not be entirely working. [ 672.047366][ T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 672.073752][ T43] pvrusb2: ********** [ 672.190345][ T2345] pvrusb2: Invalid write control endpoint [ 672.348773][ T2345] pvrusb2: Invalid write control endpoint [ 672.367447][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 672.392478][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 672.416083][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 672.416730][ T43] usb 9-1: USB disconnect, device number 12 [ 672.448405][ T2345] pvrusb2: Device being rendered inoperable [ 672.476997][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 672.502139][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 672.545845][ T2345] pvrusb2: Attached sub-driver cx25840 [ 672.559474][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 672.560713][T24136] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.585048][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 672.707937][T24136] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.747617][T24146] netlink: 'syz.0.8109': attribute type 1 has an invalid length. [ 672.760367][T24146] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8109'. [ 672.772646][T24144] dvmrp0: tun_chr_ioctl cmd 2148553947 [ 672.825606][T24136] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.948465][T24136] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.980966][T24151] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8111'. [ 673.006508][T24151] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8111'. [ 673.197117][T24136] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.264367][T24136] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.378537][T24136] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.409653][T24136] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.757089][T24174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8121'. [ 674.263434][T24195] netlink: 'syz.0.8130': attribute type 83 has an invalid length. [ 674.389350][T24196] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.597590][T24196] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.686320][T24196] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.770968][T24196] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.918999][T24196] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.944691][T24196] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.972596][T24196] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.997670][T24196] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.623874][T24238] Bluetooth: MGMT ver 1.23 [ 675.997131][T24246] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.157605][T24246] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.339562][T24246] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.443187][T24269] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8162'. [ 676.530139][T24246] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.744407][T24246] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.767526][T24246] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.825772][T24246] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.875985][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8169'. [ 676.919093][T24246] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.688402][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 677.798387][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8183'. [ 677.917788][T24315] macsec2: entered allmulticast mode [ 677.923217][T24315] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 677.948662][T24315] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 679.043470][T24351] lo speed is unknown, defaulting to 1000 [ 679.272617][T24361] input: syz0 as /devices/virtual/input/input45 [ 679.500023][T24365] netlink: 'syz.1.8205': attribute type 11 has an invalid length. [ 679.731795][T24349] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 679.877907][T24372] lo speed is unknown, defaulting to 1000 [ 679.914007][T24378] netlink: 'syz.7.8209': attribute type 10 has an invalid length. [ 679.981316][T24378] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.016580][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8211'. [ 680.019250][T24378] bond0: (slave team0): Enslaving as an active interface with an up link [ 680.030914][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8211'. [ 680.135060][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 680.339164][ T24] usb 9-1: config 0 has no interfaces? [ 680.347289][ T24] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 680.356997][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.365247][ T24] usb 9-1: Product: syz [ 680.369539][ T24] usb 9-1: Manufacturer: syz [ 680.374197][ T24] usb 9-1: SerialNumber: syz [ 680.382039][ T24] usb 9-1: config 0 descriptor?? [ 680.651643][ T24] usb 9-1: USB disconnect, device number 13 [ 681.202611][T24407] xt_CT: No such helper "snmp" [ 681.473136][T24416] vxcan3: entered allmulticast mode [ 681.589743][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8227'. [ 682.399331][T24445] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8236'. [ 682.735227][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 682.829101][ T30] audit: type=1400 audit(1755820292.825:383): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=24463 comm="syz.7.8247" opid=24463 ocomm="syz.7.8247" [ 682.909066][T24468] netlink: 'syz.7.8249': attribute type 6 has an invalid length. [ 682.917382][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 682.928461][ T24] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 682.938377][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 682.950186][ T24] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 682.985072][ T24] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 683.008554][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 683.027911][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 683.047916][ T24] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 683.065081][ T24] usb 9-1: Product: syz [ 683.075142][ T24] usb 9-1: Manufacturer: syz [ 683.084839][ T24] usb 9-1: SerialNumber: syz [ 683.098037][ T24] usb 9-1: config 0 descriptor?? [ 683.120873][ T24] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 683.152669][ T24] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 683.418858][T24483] sp0: Synchronizing with TNC [ 684.182072][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8272'. [ 684.804096][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8283'. [ 685.435458][T24571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8296'. [ 685.553667][ T5948] usb 9-1: USB disconnect, device number 14 [ 685.578944][ T5948] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 685.852306][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.007655][T24584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8301'. [ 686.034976][T24584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8301'. [ 686.177944][T24589] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 686.725292][T24606] program syz.7.8313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.859887][T24612] xt_hashlimit: max too large, truncated to 1048576 [ 687.049539][T24618] netlink: 'syz.0.8317': attribute type 10 has an invalid length. [ 688.402848][ T30] audit: type=1326 audit(1755820298.395:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67dd8ebe9 code=0x7ffc0000 [ 688.424500][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.493077][ T30] audit: type=1326 audit(1755820298.395:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67dd8ebe9 code=0x7ffc0000 [ 688.516537][ T30] audit: type=1326 audit(1755820298.435:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67dd8ebe9 code=0x7ffc0000 [ 688.592816][ T30] audit: type=1326 audit(1755820298.435:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67dd8ebe9 code=0x7ffc0000 [ 688.651103][ T30] audit: type=1326 audit(1755820298.435:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67dd8ebe9 code=0x7ffc0000 [ 688.672742][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.724256][ T30] audit: type=1326 audit(1755820298.455:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67dd8ebe9 code=0x7ffc0000 [ 688.774746][ T30] audit: type=1326 audit(1755820298.455:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67dd8ebe9 code=0x7ffc0000 [ 688.803483][ T30] audit: type=1326 audit(1755820298.455:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff67dd85ba7 code=0x7ffc0000 [ 688.825025][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.908511][ T30] audit: type=1326 audit(1755820298.455:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67dd2ade9 code=0x7ffc0000 [ 688.976383][ T30] audit: type=1326 audit(1755820298.455:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24677 comm="syz.8.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff67dd85ba7 code=0x7ffc0000 [ 689.030645][T24705] batman_adv: batadv0: Adding interface: ipvlan0 [ 689.038516][T24705] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.064100][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.075213][T24705] batman_adv: batadv0: Interface activated: ipvlan0 [ 689.343272][T24719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8364'. [ 690.735233][ T5948] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 690.825185][T24782] netlink: 'syz.7.8394': attribute type 12 has an invalid length. [ 690.848074][T24782] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.8394'. [ 690.899206][ T5948] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 690.915361][ T5948] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 690.925751][ T5948] usb 9-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 690.941106][ T5948] usb 9-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 690.953251][ T5948] usb 9-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 690.994556][ T5948] usb 9-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 691.005492][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.013566][ T5948] usb 9-1: Product: syz [ 691.018063][ T5948] usb 9-1: Manufacturer: syz [ 691.023185][ T5948] usb 9-1: SerialNumber: syz [ 691.032350][T24767] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 691.041374][ T5948] usb 9-1: ucan: probing device on interface #0 [ 691.050415][ T5948] usb 9-1: ucan: invalid out_ep MaxPacketSize [ 691.056908][ T5948] usb 9-1: ucan: probe failed; try to update the device firmware [ 691.247212][ T5948] usb 9-1: USB disconnect, device number 15 [ 691.546479][T24810] Dead loop on virtual device ip6_vti0, fix it urgently! [ 691.554691][T24810] Dead loop on virtual device ip6_vti0, fix it urgently! [ 691.562271][T24810] Dead loop on virtual device ip6_vti0, fix it urgently! [ 691.569781][T24810] Dead loop on virtual device ip6_vti0, fix it urgently! [ 691.577300][T24810] Dead loop on virtual device ip6_vti0, fix it urgently! [ 691.584701][T24810] Dead loop on virtual device ip6_vti0, fix it urgently! [ 692.169382][T24834] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 692.426467][T24845] IPv6: Can't replace route, no match found [ 692.724401][T24863] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8431'. [ 692.943592][T24872] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8435'. [ 692.981739][T24872] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8435'. [ 693.086833][T24878] netem: incorrect gi model size [ 693.102650][T24878] netem: change failed [ 693.125892][T11887] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 693.135164][T24882] macvtap1: entered allmulticast mode [ 693.142916][T24882] bridge0: entered allmulticast mode [ 693.154342][T24882] bridge0: port 3(macvtap1) entered blocking state [ 693.162580][T24882] bridge0: port 3(macvtap1) entered disabled state [ 693.191612][T24882] bridge0: left allmulticast mode [ 693.301005][T11887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.315067][T11887] usb 2-1: config 0 has no interfaces? [ 693.320630][T11887] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 693.333605][T11887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.374447][T11887] usb 2-1: config 0 descriptor?? [ 693.533734][ T5843] block nbd0: Receive control failed (result -32) [ 693.604640][T11887] usb 2-1: USB disconnect, device number 57 [ 693.700530][T24906] vivid-002: disconnect [ 693.706033][T24905] vivid-002: reconnect [ 695.018573][T24948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8470'. [ 695.160827][T24950] syzkaller1: tun_chr_ioctl cmd 35108 [ 695.589699][T24969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.656246][T24976] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8481'. [ 695.871696][T24982] [ 695.874104][T24982] ====================================================== [ 695.881149][T24982] WARNING: possible circular locking dependency detected [ 695.888215][T24982] 6.16.0-syzkaller #0 Not tainted [ 695.893265][T24982] ------------------------------------------------------ [ 695.900347][T24982] syz.1.8483/24982 is trying to acquire lock: [ 695.906435][T24982] ffff8880253cf358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 695.915748][T24982] [ 695.915748][T24982] but task is already holding lock: [ 695.923138][T24982] ffff8880253ce368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 695.932789][T24982] [ 695.932789][T24982] which lock already depends on the new lock. [ 695.932789][T24982] [ 695.943231][T24982] [ 695.943231][T24982] the existing dependency chain (in reverse order) is: [ 695.952274][T24982] [ 695.952274][T24982] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 695.960757][T24982] lock_acquire+0x120/0x360 [ 695.965820][T24982] down_write+0x96/0x1f0 [ 695.970629][T24982] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 695.976916][T24982] nbd_start_device+0x16c/0xac0 [ 695.982344][T24982] nbd_genl_connect+0x135b/0x18f0 [ 695.987938][T24982] genl_family_rcv_msg_doit+0x215/0x300 [ 695.994040][T24982] genl_rcv_msg+0x60e/0x790 [ 695.999102][T24982] netlink_rcv_skb+0x205/0x470 [ 696.004425][T24982] genl_rcv+0x28/0x40 [ 696.008959][T24982] netlink_unicast+0x75c/0x8e0 [ 696.014276][T24982] netlink_sendmsg+0x805/0xb30 [ 696.014864][T24987] netlink: 212296 bytes leftover after parsing attributes in process `syz.8.8485'. [ 696.019590][T24982] __sock_sendmsg+0x21c/0x270 [ 696.019617][T24982] ____sys_sendmsg+0x505/0x830 [ 696.039417][T24982] ___sys_sendmsg+0x21f/0x2a0 [ 696.044650][T24982] __x64_sys_sendmsg+0x19b/0x260 [ 696.050149][T24982] do_syscall_64+0xfa/0x3b0 [ 696.055211][T24982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.061669][T24982] [ 696.061669][T24982] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 696.069529][T24982] lock_acquire+0x120/0x360 [ 696.074594][T24982] __mutex_lock+0x182/0xe80 [ 696.079663][T24982] refcount_dec_and_mutex_lock+0x30/0xa0 [ 696.085841][T24982] nbd_config_put+0x2c/0x790 [ 696.090964][T24982] nbd_release+0xfe/0x140 [ 696.095828][T24982] bdev_release+0x533/0x650 [ 696.100868][T24982] blkdev_release+0x15/0x20 [ 696.105917][T24982] __fput+0x449/0xa70 [ 696.110438][T24982] fput_close_sync+0x119/0x200 [ 696.115740][T24982] __x64_sys_close+0x7f/0x110 [ 696.120955][T24982] do_syscall_64+0xfa/0x3b0 [ 696.126002][T24982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.132446][T24982] [ 696.132446][T24982] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 696.140343][T24982] validate_chain+0xb9b/0x2140 [ 696.145651][T24982] __lock_acquire+0xab9/0xd20 [ 696.150856][T24982] lock_acquire+0x120/0x360 [ 696.155901][T24982] __mutex_lock+0x182/0xe80 [ 696.160941][T24982] __del_gendisk+0x129/0x9e0 [ 696.166069][T24982] del_gendisk+0xe8/0x160 [ 696.170937][T24982] loop_remove+0x42/0xc0 [ 696.175721][T24982] loop_control_ioctl+0x4ac/0x5a0 [ 696.181274][T24982] __se_sys_ioctl+0xfc/0x170 [ 696.186403][T24982] do_syscall_64+0xfa/0x3b0 [ 696.191436][T24982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.197857][T24982] [ 696.197857][T24982] other info that might help us debug this: [ 696.197857][T24982] [ 696.208093][T24982] Chain exists of: [ 696.208093][T24982] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 696.208093][T24982] [ 696.222281][T24982] Possible unsafe locking scenario: [ 696.222281][T24982] [ 696.229776][T24982] CPU0 CPU1 [ 696.235151][T24982] ---- ---- [ 696.240523][T24982] rlock(&set->update_nr_hwq_lock); [ 696.245831][T24982] lock(&nbd->config_lock); [ 696.252970][T24982] lock(&set->update_nr_hwq_lock); [ 696.260706][T24982] lock(&disk->open_mutex); [ 696.265313][T24982] [ 696.265313][T24982] *** DEADLOCK *** [ 696.265313][T24982] [ 696.273461][T24982] 1 lock held by syz.1.8483/24982: [ 696.278614][T24982] #0: ffff8880253ce368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 696.288661][T24982] [ 696.288661][T24982] stack backtrace: [ 696.294578][T24982] CPU: 1 UID: 0 PID: 24982 Comm: syz.1.8483 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 696.294601][T24982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.294616][T24982] Call Trace: [ 696.294626][T24982] [ 696.294647][T24982] dump_stack_lvl+0x189/0x250 [ 696.294671][T24982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.294689][T24982] ? __pfx__printk+0x10/0x10 [ 696.294712][T24982] ? print_lock_name+0xde/0x100 [ 696.294735][T24982] print_circular_bug+0x2ee/0x310 [ 696.294759][T24982] check_noncircular+0x134/0x160 [ 696.294787][T24982] validate_chain+0xb9b/0x2140 [ 696.294808][T24982] ? stack_depot_save_flags+0x40/0x900 [ 696.294834][T24982] __lock_acquire+0xab9/0xd20 [ 696.294852][T24982] ? __del_gendisk+0x129/0x9e0 [ 696.294873][T24982] lock_acquire+0x120/0x360 [ 696.294892][T24982] ? __del_gendisk+0x129/0x9e0 [ 696.294917][T24982] ? lockdep_unlock+0x89/0x120 [ 696.294944][T24982] __mutex_lock+0x182/0xe80 [ 696.294963][T24982] ? __del_gendisk+0x129/0x9e0 [ 696.294988][T24982] ? __del_gendisk+0x129/0x9e0 [ 696.295010][T24982] ? __pfx___mutex_lock+0x10/0x10 [ 696.295029][T24982] ? __pfx___might_resched+0x10/0x10 [ 696.295050][T24982] ? __lock_acquire+0xab9/0xd20 [ 696.295065][T24982] ? disk_del_events+0xb5/0x210 [ 696.295088][T24982] ? __del_gendisk+0xc1/0x9e0 [ 696.295110][T24982] __del_gendisk+0x129/0x9e0 [ 696.295131][T24982] ? del_gendisk+0xe0/0x160 [ 696.295154][T24982] ? __pfx___del_gendisk+0x10/0x10 [ 696.295177][T24982] ? down_read+0x1ad/0x2e0 [ 696.295198][T24982] del_gendisk+0xe8/0x160 [ 696.295220][T24982] loop_remove+0x42/0xc0 [ 696.295247][T24982] loop_control_ioctl+0x4ac/0x5a0 [ 696.295265][T24982] ? __pfx_loop_control_ioctl+0x10/0x10 [ 696.295279][T24982] ? __fget_files+0x2a/0x420 [ 696.295299][T24982] ? bpf_lsm_file_ioctl+0x9/0x20 [ 696.295319][T24982] ? __pfx_loop_control_ioctl+0x10/0x10 [ 696.295333][T24982] __se_sys_ioctl+0xfc/0x170 [ 696.295360][T24982] do_syscall_64+0xfa/0x3b0 [ 696.295378][T24982] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.295395][T24982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.295411][T24982] ? clear_bhb_loop+0x60/0xb0 [ 696.295430][T24982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.295447][T24982] RIP: 0033:0x7f4e12f8ebe9 [ 696.295467][T24982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.295500][T24982] RSP: 002b:00007f4e13ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.295518][T24982] RAX: ffffffffffffffda RBX: 00007f4e131b5fa0 RCX: 00007f4e12f8ebe9 [ 696.295531][T24982] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 696.295542][T24982] RBP: 00007f4e13011e19 R08: 0000000000000000 R09: 0000000000000000 [ 696.295553][T24982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.295563][T24982] R13: 00007f4e131b6038 R14: 00007f4e131b5fa0 R15: 00007ffeb4132288 [ 696.295583][T24982] [ 696.582823][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.682925][T24990] lo speed is unknown, defaulting to 1000