last executing test programs: 10m28.473665163s ago: executing program 1 (id=8630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 10m28.105802415s ago: executing program 1 (id=8636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000208000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 10m27.974115546s ago: executing program 1 (id=8639): r0 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xcc}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x2}}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 10m27.832898232s ago: executing program 1 (id=8641): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f", 0x1}], 0x1) 10m26.861786679s ago: executing program 1 (id=8661): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 10m26.692779581s ago: executing program 1 (id=8665): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0) 10m11.272328427s ago: executing program 32 (id=8665): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0) 3m57.951302418s ago: executing program 3 (id=15617): r0 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x5, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 3m57.731916028s ago: executing program 3 (id=15621): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 3m57.531161133s ago: executing program 3 (id=15625): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x25, 0xa, 0x0, 0x8eb6}]}) 3m57.227311752s ago: executing program 3 (id=15628): setreuid(0x0, 0xee00) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'bond0\x00', @ifru_names='vlan0\x00'}) 3m57.13637023s ago: executing program 3 (id=15633): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m57.007110303s ago: executing program 3 (id=15636): unshare(0x22020600) r0 = socket(0x2b, 0x80801, 0x1) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x13, 0x9, 0xd4, 0x2, 0x1, @random="491c59259436"}, 0x10) 3m41.895522082s ago: executing program 33 (id=15636): unshare(0x22020600) r0 = socket(0x2b, 0x80801, 0x1) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x13, 0x9, 0xd4, 0x2, 0x1, @random="491c59259436"}, 0x10) 1m9.211249149s ago: executing program 2 (id=18534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) setgroups(0x0, 0x0) 1m9.037328424s ago: executing program 2 (id=18538): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) 1m8.783047609s ago: executing program 2 (id=18542): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x11392000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mincore(&(0x7f0000278000/0x2000)=nil, 0x2000, 0x0) 1m7.447466938s ago: executing program 2 (id=18559): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x23cdc43, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m7.277676442s ago: executing program 2 (id=18565): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x8, 0xc, 0xd2, 0x4, 0x5, 0xf4, 0x5, 0x5, 0x5, 0x1, 0x4, 0x4, 0x7, 0x9}, 0xe) 1m6.879343535s ago: executing program 2 (id=18571): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x80000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 1m6.382564954s ago: executing program 34 (id=18571): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x80000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 31.757392784s ago: executing program 6 (id=19029): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 31.32392722s ago: executing program 6 (id=19036): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) write(r0, &(0x7f00000002c0), 0x0) close(r0) 31.244831996s ago: executing program 6 (id=19037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4d0, 0x0, 0x8000000000000001}]}) 31.052801942s ago: executing program 6 (id=19042): r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="f2dd0c7e0715d164023b13fa", 0xc}], 0x1}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 30.92745433s ago: executing program 6 (id=19046): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000040)='./bus\x00') 30.854845473s ago: executing program 6 (id=19047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 15.71239613s ago: executing program 35 (id=19047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 3.259256656s ago: executing program 5 (id=19376): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="f013b2410c"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f00"], 0x48}, 0x1, 0x2}, 0x0) 2.954882124s ago: executing program 5 (id=19381): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000200)) 2.855306441s ago: executing program 0 (id=19384): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.470325072s ago: executing program 5 (id=19388): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100"], 0x30}}, 0x0) 2.394460409s ago: executing program 0 (id=19390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x5, 0x10, 0xa3, 0x0, 0x401, 0x81, 0x3, 0x1, 0xff, 0x9, 0xa3, 0x2, 0x0, 0x1, 0x21, 0x7, 0x10, 0x7, 0x1, '\x00', 0x8, 0xa}) 2.147551771s ago: executing program 0 (id=19393): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 2.061290303s ago: executing program 0 (id=19395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000100)) 1.933177217s ago: executing program 4 (id=19397): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffd3fff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.826014069s ago: executing program 0 (id=19398): mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000300)=""/154, 0x9a) 1.800467031s ago: executing program 4 (id=19400): openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x1c3482, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="e6", 0x1}], 0x1, 0x7, 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x1000000, 0x1000000}) 1.601510032s ago: executing program 0 (id=19402): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x4) 1.531801052s ago: executing program 4 (id=19404): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 1.0473925s ago: executing program 5 (id=19412): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [], 0x6b}}) 989.61351ms ago: executing program 5 (id=19414): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="1acf", 0x2}], 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000002340)) 707.524506ms ago: executing program 8 (id=19419): setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) getresuid(&(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000140)=0x0) setfsuid(r0) 643.756651ms ago: executing program 8 (id=19421): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10002000}) 592.079734ms ago: executing program 4 (id=19422): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000e00)=ANY=[@ANYBLOB='b *:* rmm'], 0x9) 567.593807ms ago: executing program 8 (id=19423): r0 = socket$inet6(0xa, 0x6, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) close_range(r0, 0xffffffffffffffff, 0x0) 487.748069ms ago: executing program 7 (id=19424): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @private=0x7f000001}, "00186371ae9b1c03"}}}}}, 0x0) 456.849198ms ago: executing program 4 (id=19425): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}, 0x0, 0x4, {}, 0x5c000000}) 415.824324ms ago: executing program 8 (id=19426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x10a}]}) 391.671824ms ago: executing program 7 (id=19427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x40}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 345.208279ms ago: executing program 4 (id=19428): timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) timer_gettime(r0, &(0x7f0000000000)) 245.370834ms ago: executing program 7 (id=19429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) 175.168752ms ago: executing program 8 (id=19430): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000040)=""/37, 0x25) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 174.505146ms ago: executing program 7 (id=19431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{r0}, &(0x7f0000000500), &(0x7f0000000940)='%pK \x00'}, 0x20) 124.78224ms ago: executing program 8 (id=19432): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 87.539547ms ago: executing program 7 (id=19433): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x800000, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xe}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0x3ff, 0x1, 0x0, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) 58.877404ms ago: executing program 5 (id=19434): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 0s ago: executing program 7 (id=19435): openat$random(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) kernel console output (not intermixed with test programs): 713784][ T976] nzxt-kraken2 0003:1E71:170E.00AD: unknown main item tag 0x0 [ 919.722535][ T976] nzxt-kraken2 0003:1E71:170E.00AD: unknown main item tag 0x0 [ 919.740756][ T976] nzxt-kraken2 0003:1E71:170E.00AD: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0 [ 919.855895][ T5969] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 919.882342][ T976] usb 5-1: USB disconnect, device number 119 [ 920.027649][ T5969] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 920.046562][ T5969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.064089][ T5969] usb 3-1: config 0 has no interface number 0 [ 920.082193][ T5969] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 920.106213][ T5969] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.137305][ T5969] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 920.148446][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16297'. [ 920.157664][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.172673][ T5969] usb 3-1: Product: syz [ 920.184939][ T5969] usb 3-1: Manufacturer: syz [ 920.200004][ T5969] usb 3-1: SerialNumber: syz [ 920.219577][ T5969] usb 3-1: config 0 descriptor?? [ 920.858975][ T5163] usb 3-1: USB disconnect, device number 119 [ 920.901351][ T30] audit: type=1326 audit(2000000488.149:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.4.16312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32478e169 code=0x7ffc0000 [ 920.922978][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.934578][ T30] audit: type=1326 audit(2000000488.149:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.4.16312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32478e169 code=0x7ffc0000 [ 920.956366][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.964060][ T30] audit: type=1326 audit(2000000488.179:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.4.16312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ff32478e169 code=0x7ffc0000 [ 920.996453][ T30] audit: type=1326 audit(2000000488.179:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.4.16312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32478e169 code=0x7ffc0000 [ 921.022923][ T30] audit: type=1326 audit(2000000488.179:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.4.16312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32478e169 code=0x7ffc0000 [ 921.049362][ T30] audit: type=1326 audit(2000000488.209:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.4.16312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff32478e169 code=0x7ffc0000 [ 921.090344][ T30] audit: type=1326 audit(2000000488.209:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.4.16312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32478e169 code=0x7ffc0000 [ 921.130039][ T30] audit: type=1326 audit(2000000488.209:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.4.16312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32478e169 code=0x7ffc0000 [ 921.284269][ T8836] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 922.650415][ T8902] netlink: 'syz.2.16346': attribute type 1 has an invalid length. [ 922.679162][ T8902] netlink: 220 bytes leftover after parsing attributes in process `syz.2.16346'. [ 922.688482][ T8902] netlink: 'syz.2.16346': attribute type 1 has an invalid length. [ 923.045864][ T976] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 923.216891][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 923.224392][ T976] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.264379][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 923.283509][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 923.297148][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 923.325881][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.336965][ T976] usb 3-1: config 0 descriptor?? [ 923.343096][ T8907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 923.368139][ T976] hub 3-1:0.0: USB hub found [ 923.602147][ T976] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 923.691532][ T8940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16365'. [ 923.804708][ T976] usbhid 3-1:0.0: can't add hid device: -71 [ 923.814543][ T976] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 923.849858][ T8949] netlink: 'syz.4.16369': attribute type 1 has an invalid length. [ 923.887296][ T976] usb 3-1: USB disconnect, device number 120 [ 923.994608][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16372'. [ 924.075346][ T8958] netlink: 'syz.6.16374': attribute type 3 has an invalid length. [ 924.325913][ T5887] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 924.477922][ T5887] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 924.499292][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.532536][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.552729][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 924.584565][ T5887] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 924.597792][ T5887] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 924.608002][ T5887] usb 6-1: Manufacturer: syz [ 924.615479][ T5887] usb 6-1: config 0 descriptor?? [ 925.064012][ T5887] appleir 0003:05AC:8243.00AE: item fetching failed at offset 0/1 [ 925.091245][ T5887] appleir 0003:05AC:8243.00AE: parse failed [ 925.100074][ T5887] appleir 0003:05AC:8243.00AE: probe with driver appleir failed with error -22 [ 925.145717][T15797] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 925.277749][ T976] usb 6-1: USB disconnect, device number 68 [ 925.307858][T15797] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 925.318034][T15797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.330868][T15797] usb 3-1: config 0 descriptor?? [ 925.957678][T15797] usb 3-1: Cannot set autoneg [ 925.967203][T15797] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 926.000938][T15797] usb 3-1: USB disconnect, device number 121 [ 926.636708][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16422'. [ 927.311332][ T9101] bridge5: entered promiscuous mode [ 927.323246][ T9101] bridge5: entered allmulticast mode [ 927.359461][ T9101] team0: Port device bridge5 added [ 928.013410][ T9139] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16463'. [ 928.316142][ T5163] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 928.364298][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16473'. [ 928.378470][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16473'. [ 928.389803][ T9161] netlink: 'syz.4.16473': attribute type 12 has an invalid length. [ 928.401755][ T9161] netlink: 'syz.4.16473': attribute type 11 has an invalid length. [ 928.489435][ T5163] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.510512][ T5163] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 928.527801][ T5163] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 928.555694][ T5163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 928.563753][ T5163] usb 6-1: SerialNumber: syz [ 928.574151][ T9169] tipc: Enabling of bearer rejected, failed to enable media [ 928.583964][ T976] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 928.597297][ T9171] netlink: 44 bytes leftover after parsing attributes in process `syz.6.16479'. [ 928.756150][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 928.769358][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.783967][ T976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 928.804144][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 928.820179][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.821927][ T5163] usb 6-1: 0:2 : does not exist [ 928.832524][ T976] usb 3-1: config 0 descriptor?? [ 928.860607][ T5163] usb 6-1: USB disconnect, device number 69 [ 928.904760][ T9181] devpts: Bad value for 'uid' [ 928.908596][T15797] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 928.909966][ T9181] devpts: Bad value for 'uid' [ 929.065773][T15797] usb 5-1: Using ep0 maxpacket: 32 [ 929.080725][T15797] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 929.092678][T15797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.103599][T15797] usb 5-1: Product: syz [ 929.110425][T15797] usb 5-1: Manufacturer: syz [ 929.119333][T15797] usb 5-1: SerialNumber: syz [ 929.129483][T15797] usb 5-1: config 0 descriptor?? [ 929.267547][ T976] logitech 0003:046D:C623.00AF: unknown main item tag 0x6 [ 929.286936][ T976] logitech 0003:046D:C623.00AF: collection stack underflow [ 929.294366][ T976] logitech 0003:046D:C623.00AF: item 0 4 0 12 parsing failed [ 929.311903][ T976] logitech 0003:046D:C623.00AF: parse failed [ 929.318596][ T976] logitech 0003:046D:C623.00AF: probe with driver logitech failed with error -22 [ 929.356478][T15797] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 120 [ 929.491697][T15797] usb 3-1: USB disconnect, device number 122 [ 929.543537][ T5887] usb 5-1: USB disconnect, device number 120 [ 930.330975][ T9242] netlink: 'syz.6.16512': attribute type 21 has an invalid length. [ 930.344507][ T9242] netlink: 'syz.6.16512': attribute type 1 has an invalid length. [ 930.624583][ T9258] futex_wake_op: syz.2.16520 tries to shift op by -1; fix this program [ 930.657042][ T9262] cifs: Bad value for 'port' [ 931.061522][ T9281] vlan0: entered promiscuous mode [ 931.077833][ T9281] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 931.110290][ T9284] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 931.375124][ T9298] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 931.808806][ T9319] nvme_fabrics: missing parameter 'transport=%s' [ 931.828399][ T9319] nvme_fabrics: missing parameter 'nqn=%s' [ 931.918805][ T9326] nvme_fabrics: missing parameter 'transport=%s' [ 931.925395][ T9326] nvme_fabrics: missing parameter 'nqn=%s' [ 931.968671][ T9332] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 933.104760][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16585'. [ 933.148576][ T9391] macvtap1: entered promiscuous mode [ 933.674499][ T9414] MTD: Couldn't look up 'mountinfo': -2 [ 934.145021][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16607'. [ 934.608162][ T9461] tipc: Enabling of bearer rejected, failed to enable media [ 935.060662][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16628'. [ 935.170950][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16631'. [ 935.420271][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16637'. [ 936.153937][ T976] kernel write not supported for file /dsp (pid: 976 comm: kworker/0:2) [ 936.156347][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16653'. [ 936.709080][ T976] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 936.854964][ T9573] openvswitch: netlink: Message has 728 unknown bytes. [ 936.879198][ T976] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 936.900913][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.936631][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 936.953597][ T976] usb 5-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 936.967866][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.984789][ T976] usb 5-1: config 0 descriptor?? [ 937.318468][ T9591] »»»»»»XD_h3KI: renamed from lo [ 937.432788][ T976] nzxt-smart2 0003:1E71:2019.00B0: hidraw0: USB HID vff.fd Device [HID 1e71:2019] on usb-dummy_hcd.4-1/input0 [ 937.626986][ T976] usb 5-1: USB disconnect, device number 121 [ 937.969558][ T9619] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.16693'. [ 937.986643][ T9619] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 938.012613][ T9619] openvswitch: netlink: Message has 8454 unknown bytes. [ 939.351889][ T9677] ALSA: mixer_oss: invalid OSS volume 'u' [ 939.771012][ T9690] xt_CT: No such helper "pptp" [ 939.786138][ T9695] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 939.792722][ T9695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 939.812985][ T9695] vhci_hcd vhci_hcd.0: Device attached [ 940.045743][T15793] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 940.676748][ T9745] fuse: Bad value for 'group_id' [ 940.681892][ T9745] fuse: Bad value for 'group_id' [ 940.901249][ T9754] bridge0: port 3(hsr0) entered blocking state [ 940.911617][ T9754] bridge0: port 3(hsr0) entered disabled state [ 940.924818][ T9754] hsr0: entered promiscuous mode [ 940.950107][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16754'. [ 942.825732][ T9696] vhci_hcd: connection reset by peer [ 942.833386][T28558] vhci_hcd: stop threads [ 942.850381][T28558] vhci_hcd: release socket [ 942.869682][T28558] vhci_hcd: disconnect device [ 943.063123][ T9866] netlink: 277 bytes leftover after parsing attributes in process `syz.4.16799'. [ 943.432720][ T9885] loop2: detected capacity change from 0 to 7 [ 943.447577][ T9885] Dev loop2: unable to read RDB block 7 [ 943.465996][ T9885] loop2: AHDI p1 p2 p3 [ 943.470602][ T9885] loop2: partition table partially beyond EOD, truncated [ 943.488041][ T9885] loop2: p1 start 1601398130 is beyond EOD, truncated [ 943.495306][ T9885] loop2: p2 start 1702059890 is beyond EOD, truncated [ 943.536370][T15797] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 943.640620][ T9891] netlink: 'syz.6.16812': attribute type 8 has an invalid length. [ 943.649434][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16812'. [ 943.700178][T15797] usb 5-1: Using ep0 maxpacket: 16 [ 943.734021][T15797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.760218][T15797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.790112][T15797] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 943.805485][T15797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.824880][T15797] usb 5-1: config 0 descriptor?? [ 944.095711][ T976] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 944.257421][T15797] gt683r_led 0003:1770:FF00.00B1: unknown main item tag 0x0 [ 944.262484][ T976] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 944.275123][T15797] gt683r_led 0003:1770:FF00.00B1: unknown main item tag 0x0 [ 944.299554][T15797] gt683r_led 0003:1770:FF00.00B1: unknown main item tag 0x0 [ 944.307086][ T976] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 944.307122][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 944.307174][ T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 944.307204][ T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 944.335871][ T976] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 944.351043][T15797] gt683r_led 0003:1770:FF00.00B1: unknown main item tag 0x0 [ 944.351083][T15797] gt683r_led 0003:1770:FF00.00B1: unknown main item tag 0x0 [ 944.390014][T15797] gt683r_led 0003:1770:FF00.00B1: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 944.427867][ T976] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 944.455954][ T976] usb 3-1: Product: syz [ 944.460187][ T976] usb 3-1: Manufacturer: syz [ 944.460758][T15797] usb 5-1: USB disconnect, device number 122 [ 944.483802][ T5163] gt683r_led 0003:1770:FF00.00B1: failed to send set report request: -19 [ 944.502147][ T5163] gt683r_led 0003:1770:FF00.00B1: failed to send set report request: -19 [ 944.520978][ T976] cdc_wdm 3-1:1.0: skipping garbage [ 944.538994][ T976] cdc_wdm 3-1:1.0: skipping garbage [ 944.562964][ T976] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 944.584848][ T976] cdc_wdm 3-1:1.0: Unknown control protocol [ 944.791264][T15797] usb 3-1: USB disconnect, device number 123 [ 944.876794][ T9927] ALSA: mixer_oss: invalid OSS volume '' [ 945.125817][T15793] vhci_hcd: vhci_device speed not set [ 945.648360][ T9950] block device autoloading is deprecated and will be removed. [ 945.819580][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16846'. [ 945.848283][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16846'. [ 946.192919][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16854'. [ 946.236116][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16854'. [ 946.460529][ T30] audit: type=1326 audit(2000000513.709:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9990 comm="syz.5.16862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x0 [ 947.104464][T10016] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 947.216117][T15797] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 947.400292][T15797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.421440][T15797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 947.508099][T15797] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 947.536221][ T5887] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 947.547624][T15797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.579037][T15797] usb 3-1: config 0 descriptor?? [ 947.701088][ T5887] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 947.723375][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.745887][ T5887] usb 5-1: Product: syz [ 947.750178][ T5887] usb 5-1: Manufacturer: syz [ 947.775361][ T5887] usb 5-1: SerialNumber: syz [ 947.796202][ T5887] usb 5-1: config 0 descriptor?? [ 947.820585][ T5887] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 947.896410][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16881'. [ 948.025815][T15797] hid-led 0003:1294:1320.00B2: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 948.064520][T15797] hid-led 0003:1294:1320.00B2: Riso Kagaku Webmail Notifier initialized [ 948.085895][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16882'. [ 948.231500][T15797] usb 3-1: USB disconnect, device number 124 [ 948.253035][T28558] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 948.277748][T28532] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 948.306054][T28532] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 948.442702][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16884'. [ 948.646009][ T976] usb 5-1: USB disconnect, device number 123 [ 948.805904][T15793] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 948.847074][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16887'. [ 948.981428][T15793] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 948.992858][T15793] usb 6-1: config 0 has no interface number 0 [ 949.003504][T15793] usb 6-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=83.43 [ 949.017128][T15793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.025401][T15793] usb 6-1: Product: syz [ 949.032771][T15793] usb 6-1: Manufacturer: syz [ 949.049991][T15793] usb 6-1: SerialNumber: syz [ 949.066941][T15793] usb 6-1: config 0 descriptor?? [ 949.085237][T15793] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 949.231222][T10058] netlink: 'syz.0.16889': attribute type 1 has an invalid length. [ 949.267166][T10058] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16889'. [ 949.308423][T15793] usb 6-1: USB disconnect, device number 70 [ 949.375129][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16893'. [ 949.604557][ T30] audit: type=1326 audit(2000000516.849:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10078 comm="syz.4.16899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff32478e169 code=0x0 [ 950.361688][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16910'. [ 950.948219][T10130] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 950.964234][T10130] batadv1: entered promiscuous mode [ 950.983107][T10130] batadv1: entered allmulticast mode [ 950.996791][T10130] team0: Port device batadv1 added [ 951.411342][T28532] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 951.421832][T28532] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 951.525134][T10151] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16932'. [ 951.950268][T10174] netlink: 44 bytes leftover after parsing attributes in process `syz.6.16943'. [ 952.009654][T10174] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16943'. [ 952.243455][T10182] tap0: tun_chr_ioctl cmd 1074025677 [ 952.258649][T10182] tap0: linktype set to 776 [ 954.815035][T10307] blkio.reset_stats is deprecated [ 955.603788][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17018'. [ 955.607674][ T30] audit: type=1326 audit(2000000522.859:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 955.682126][ T30] audit: type=1326 audit(2000000522.859:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 955.760488][ T30] audit: type=1326 audit(2000000522.859:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 955.812249][ T30] audit: type=1326 audit(2000000522.859:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 955.841077][ T30] audit: type=1326 audit(2000000522.859:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 955.870449][ T30] audit: type=1326 audit(2000000522.859:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 955.960977][ T30] audit: type=1326 audit(2000000522.879:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 956.044010][ T30] audit: type=1326 audit(2000000522.879:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 956.135790][ T30] audit: type=1326 audit(2000000522.879:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 956.161679][ T30] audit: type=1326 audit(2000000522.879:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10341 comm="syz.0.17020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 956.313621][T10362] loop6: detected capacity change from 0 to 524287999 [ 956.934211][T10387] wireguard0: entered promiscuous mode [ 956.939906][T10387] wireguard0: entered allmulticast mode [ 957.612997][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17058'. [ 957.725048][T10428] syzkaller0: tun_chr_ioctl cmd 35111 [ 957.742270][T10432] loop6: detected capacity change from 0 to 8 [ 957.760519][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 957.769959][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 957.779879][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 957.789115][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 957.797470][T10432] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 957.810649][T10432] Buffer I/O error on dev loop6, logical block 0, async page read [ 957.819217][T10432] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 957.854593][T10432] Buffer I/O error on dev loop6, logical block 0, async page read [ 957.874917][T10432] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 957.899524][T10432] Buffer I/O error on dev loop6, logical block 0, async page read [ 957.916017][T10432] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 957.932947][T10432] Buffer I/O error on dev loop6, logical block 0, async page read [ 957.942715][T10432] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 957.981932][T10432] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.003349][T10441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 958.004433][T10432] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 958.053467][T10432] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.084969][T10432] ldm_validate_partition_table(): Disk read failed. [ 958.111392][T10432] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 958.135431][T10432] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.159007][T10432] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 958.181591][T10432] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.210816][T10432] Dev loop6: unable to read RDB block 0 [ 958.226149][T10432] loop6: unable to read partition table [ 958.232133][T10432] loop6: partition table beyond EOD, truncated [ 958.278055][T10432] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 959.517113][T10489] lo speed is unknown, defaulting to 1000 [ 960.635972][T10549] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.644749][T10549] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.654626][T10549] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.664099][T10549] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.248528][ T30] audit: type=1326 audit(2000000528.499:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10569 comm="syz.4.17125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32478e169 code=0x0 [ 961.269627][ C1] vkms_vblank_simulate: vblank timer overrun [ 962.255874][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 963.224407][T10642] Failed to get privilege flags for destination (handle=0x2:0x9) [ 964.588670][T10707] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 964.807557][T10721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17194'. [ 964.827919][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17194'. [ 965.021209][T10730] netlink: 68 bytes leftover after parsing attributes in process `syz.6.17199'. [ 965.168570][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17202'. [ 965.213544][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17202'. [ 967.278909][T10806] serio: Serial port ttyS3 [ 968.026627][T10835] netlink: 'syz.6.17246': attribute type 10 has an invalid length. [ 968.070815][T10835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 968.123316][T10837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 968.580254][T10856] Context (ID=0x1) not attached to queue pair (handle=0x2:0x784e) [ 969.039691][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17266'. [ 969.062993][T10876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 969.077081][T10876] bond0: (slave bond4): Enslaving as an active interface with an up link [ 969.133899][T10881] team_slave_0 (unregistering): left promiscuous mode [ 969.149865][T10881] team0: Port device team_slave_0 removed [ 970.206112][T15793] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 970.366658][T15793] usb 6-1: Using ep0 maxpacket: 32 [ 970.374389][T15793] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 970.383375][T15793] usb 6-1: config 0 has no interface number 0 [ 970.395755][T15793] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 970.415700][T15793] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 970.427243][T15793] usb 6-1: config 0 interface 126 has no altsetting 0 [ 970.448215][T15793] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 970.465642][T15793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.485885][T15793] usb 6-1: Product: syz [ 970.490115][T15793] usb 6-1: Manufacturer: syz [ 970.494733][T15793] usb 6-1: SerialNumber: syz [ 970.503148][T15793] usb 6-1: config 0 descriptor?? [ 970.509110][T10916] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 970.523810][T10916] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 970.789540][T10950] input: syz0 as /devices/virtual/input/input85 [ 970.978640][T15793] ir_usb 6-1:0.126: IR Dongle converter detected [ 971.174299][T15793] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 971.277338][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17309'. [ 971.294600][T10975] bridge4: port 1(batadv1) entered blocking state [ 971.301864][T10975] bridge4: port 1(batadv1) entered disabled state [ 971.311549][T10975] batadv1: entered allmulticast mode [ 971.320312][T10975] batadv1: entered promiscuous mode [ 971.403315][T15793] usb 6-1: USB disconnect, device number 71 [ 971.439250][T15793] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 971.457147][T15793] ir_usb 6-1:0.126: device disconnected [ 971.797255][T28532] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 971.806881][T28532] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 972.183461][T11010] loop9: detected capacity change from 0 to 7 [ 972.192696][T11013] kernel read not supported for file /]--.\- (pid: 11013 comm: syz.5.17322) [ 972.213531][T11010] Dev loop9: unable to read RDB block 7 [ 972.220460][ T30] audit: type=1800 audit(2000000539.469:513): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.17322" name="]--.\-" dev="mqueue" ino=139111 res=0 errno=0 [ 972.240475][T11010] loop9: unable to read partition table [ 972.240735][T11010] loop9: partition table beyond EOD, truncated [ 972.240760][T11010] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 972.827879][T11029] batman_adv: batadv0: Adding interface: dummy0 [ 972.850551][T11029] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.899561][T11029] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 973.810880][T11060] netlink: 'syz.5.17345': attribute type 3 has an invalid length. [ 974.287700][T11076] vxcan0: tx address claim with dest, not broadcast [ 974.770164][T11088] tipc: Resetting bearer [ 974.797450][T15797] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 974.812854][T11088] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 974.814789][T11090] netlink: 104 bytes leftover after parsing attributes in process `syz.6.17359'. [ 975.255868][ T5887] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 976.326313][T15797] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 976.489992][T15797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.509305][T15797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.537757][T15797] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 976.549896][T15797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.626367][T15797] usb 3-1: config 0 descriptor?? [ 977.272835][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17391'. [ 977.326629][T15797] usb 3-1: language id specifier not provided by device, defaulting to English [ 977.529686][T15797] uclogic 0003:256C:006D.00B3: failed retrieving Huion firmware version: -71 [ 977.553688][T15797] uclogic 0003:256C:006D.00B3: failed probing parameters: -71 [ 977.575787][T15797] uclogic 0003:256C:006D.00B3: probe with driver uclogic failed with error -71 [ 977.599176][T15797] usb 3-1: USB disconnect, device number 125 [ 978.405047][T11208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.145140][T11280] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 980.524230][T11298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 980.531539][T11298] IPv6: NLM_F_CREATE should be set when creating new route [ 980.538882][T11298] IPv6: NLM_F_CREATE should be set when creating new route [ 980.546160][T11298] IPv6: NLM_F_CREATE should be set when creating new route [ 980.745972][ T5885] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 980.932145][ T5885] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 980.943950][T11317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.966506][ T5885] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 980.986058][ T5885] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 981.025240][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.040887][T11297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 981.070378][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 981.370407][ T5885] usb 3-1: USB disconnect, device number 126 [ 981.636828][T11341] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 981.717105][T11349] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 981.723708][T11349] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 981.756470][T11349] vhci_hcd vhci_hcd.0: Device attached [ 981.771945][T11350] vhci_hcd: connection closed [ 981.772245][T28532] vhci_hcd: stop threads [ 981.790420][T28532] vhci_hcd: release socket [ 981.795018][T28532] vhci_hcd: disconnect device [ 981.967406][T11361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17481'. [ 982.349684][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17490'. [ 983.180546][T11399] cifs: Unknown parameter 'mpol' [ 984.603414][T11448] overlay: filesystem on ./bus not supported [ 984.756548][ T5887] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 984.862157][T11457] netlink: 'syz.5.17525': attribute type 1 has an invalid length. [ 984.910255][ T5887] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 984.935945][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.948463][ T5887] usb 3-1: Product: syz [ 984.952731][ T5887] usb 3-1: Manufacturer: syz [ 984.963184][ T5887] usb 3-1: SerialNumber: syz [ 984.978027][ T5887] usb 3-1: config 0 descriptor?? [ 985.529634][T11476] netlink: 'syz.6.17534': attribute type 10 has an invalid length. [ 985.535822][T11474] netlink: 180 bytes leftover after parsing attributes in process `syz.5.17533'. [ 985.573504][T11476] syz_tun: entered promiscuous mode [ 985.594235][T11476] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 985.816156][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 985.836815][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 985.870832][ T5887] asix 3-1:0.0: probe with driver asix failed with error -71 [ 985.880790][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17539'. [ 985.893432][ T5887] usb 3-1: USB disconnect, device number 127 [ 985.917849][T11486] netlink: 'syz.5.17539': attribute type 15 has an invalid length. [ 985.946312][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17539'. [ 986.402852][T11503] mkiss: ax0: crc mode is auto. [ 986.739933][T11512] bridge_slave_0: invalid flags given to default FDB implementation [ 986.927373][T11519] netlink: 'syz.5.17555': attribute type 1 has an invalid length. [ 986.956622][T11519] nbd: error processing sock list [ 986.969941][T11519] block nbd0: shutting down sockets [ 986.998306][T11522] usb usb8: usbfs: process 11522 (syz.6.17557) did not claim interface 0 before use [ 987.636791][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17568'. [ 989.186013][T15797] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 989.358434][T15797] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 989.384206][T15797] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 989.418584][T15797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 989.465935][T15797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 989.497912][T15797] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.544624][T15797] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 989.566443][T15797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.594855][T15797] usb 6-1: Product: syz [ 989.615153][T15797] usb 6-1: Manufacturer: syz [ 989.625260][T15797] usb 6-1: SerialNumber: syz [ 989.639959][T15797] usb 6-1: config 0 descriptor?? [ 989.653681][T15797] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input86 [ 989.768276][T11613] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17596'. [ 989.874000][T15797] usb 6-1: USB disconnect, device number 72 [ 990.170671][ T30] audit: type=1326 audit(2000000557.409:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11601 comm="syz.2.17593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607c18e169 code=0x7fc00000 [ 990.413058][T11635] program syz.4.17607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.462272][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17608'. [ 990.567351][T11641] loop7: detected capacity change from 0 to 2 [ 990.622058][T11641] Dev loop7: unable to read RDB block 2 [ 990.633561][T11641] loop7: unable to read partition table [ 990.654052][T11641] loop7: partition table beyond EOD, truncated [ 990.682285][T11641] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 990.682285][T11641] ) failed (rc=-5) [ 991.024220][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17618'. [ 991.076127][T11660] nbd: couldn't find device at index 131080 [ 991.114279][T11665] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 991.714390][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17631'. [ 991.763236][T11692] netlink: 'syz.5.17632': attribute type 15 has an invalid length. [ 993.085527][T11751] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17662'. [ 993.220040][T11757] netlink: 'syz.2.17665': attribute type 21 has an invalid length. [ 993.231355][T11757] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17665'. [ 993.246418][T11757] netlink: 'syz.2.17665': attribute type 4 has an invalid length. [ 993.264842][T11757] netlink: 'syz.2.17665': attribute type 5 has an invalid length. [ 993.275472][T11757] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17665'. [ 994.056524][T11787] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 994.073180][T11787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 994.086739][T11787] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 994.105914][T11787] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 995.105083][T11829] netlink: 'syz.4.17696': attribute type 33 has an invalid length. [ 995.122898][T11829] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17696'. [ 995.698091][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17705'. [ 995.906127][T11859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.937081][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 996.097043][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 996.724348][T15794] kernel write not supported for file /zero (pid: 15794 comm: kworker/0:13) [ 997.026467][T11890] ipip1: entered allmulticast mode [ 997.198909][T11899] bridge_slave_0: left allmulticast mode [ 997.227920][T11899] bridge_slave_0: left promiscuous mode [ 997.233891][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.281062][T11899] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 997.326035][ T5885] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 997.522551][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 997.538470][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.567856][ T5885] usb 6-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 997.605406][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.627640][ T5885] usb 6-1: config 0 descriptor?? [ 998.054756][ T5885] thrustmaster 0003:044F:B300.00B4: report_id 0 is invalid [ 998.067847][T11928] bridge_slave_0: invalid flags given to default FDB implementation [ 998.081897][ T5885] thrustmaster 0003:044F:B300.00B4: item 0 0 1 8 parsing failed [ 998.109467][ T5885] thrustmaster 0003:044F:B300.00B4: parse failed [ 998.137096][ T5885] thrustmaster 0003:044F:B300.00B4: probe with driver thrustmaster failed with error -22 [ 998.177159][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 998.264621][ T5885] usb 6-1: USB disconnect, device number 73 [ 998.498569][ T30] audit: type=1326 audit(2000000565.749:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 998.536823][T11943] futex_wake_op: syz.0.17746 tries to shift op by 36; fix this program [ 998.555505][ T30] audit: type=1326 audit(2000000565.749:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 998.619574][ T30] audit: type=1326 audit(2000000565.769:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 998.704040][ T30] audit: type=1326 audit(2000000565.769:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 998.758502][ T30] audit: type=1326 audit(2000000565.769:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 998.851158][ T30] audit: type=1326 audit(2000000565.769:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 998.915260][ T30] audit: type=1326 audit(2000000565.779:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 998.962695][T11815] syz.6.17690 (11815): drop_caches: 3 [ 998.990687][ T30] audit: type=1326 audit(2000000565.779:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 999.053633][ T30] audit: type=1326 audit(2000000565.789:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 999.090087][ T30] audit: type=1326 audit(2000000565.789:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.0.17746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 999.533055][T11965] openvswitch: netlink: IP tunnel TTL not specified. [ 999.565340][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17757'. [ 999.601477][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17758'. [ 999.803426][T11977] use of bytesused == 0 is deprecated and will be removed in the future, [ 999.815108][T11977] use the actual size instead. [ 1000.256765][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 1000.273595][T15793] kernel read not supported for file /dsp (pid: 15793 comm: kworker/0:12) [ 1000.841583][T11982] lo speed is unknown, defaulting to 1000 [ 1001.040735][T12006] tipc: Enabling of bearer rejected, failed to enable media [ 1001.197690][T12010] netlink: 47 bytes leftover after parsing attributes in process `syz.5.17776'. [ 1001.996055][ T5885] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1002.156178][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 1002.172484][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.193667][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.221686][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1002.275447][ T5885] usb 5-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1002.286726][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.299136][ T5885] usb 5-1: config 0 descriptor?? [ 1002.517369][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.558694][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.590892][T12052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1002.831524][ T5885] hid-multitouch 0003:045E:9994.00B5: unknown main item tag 0x2 [ 1002.868736][ T5885] hid-multitouch 0003:045E:9994.00B5: unknown main item tag 0x0 [ 1002.878150][ T5885] hid-multitouch 0003:045E:9994.00B5: unknown main item tag 0x0 [ 1002.895022][ T5885] hid-multitouch 0003:045E:9994.00B5: unknown main item tag 0x0 [ 1002.909154][ T5885] hid-multitouch 0003:045E:9994.00B5: unknown main item tag 0x0 [ 1002.921806][ T5885] hid-multitouch 0003:045E:9994.00B5: unknown main item tag 0x0 [ 1002.976903][ T5885] hid-multitouch 0003:045E:9994.00B5: unbalanced collection at end of report description [ 1002.997294][ T5885] hid-multitouch 0003:045E:9994.00B5: probe with driver hid-multitouch failed with error -22 [ 1003.069177][ T5885] usb 5-1: USB disconnect, device number 124 [ 1004.411355][T12098] input: syz1 as /devices/virtual/input/input87 [ 1004.469363][T12101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1005.017490][ C1] sd 0:0:1:0: [sda] tag#289 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1005.027918][ C1] sd 0:0:1:0: [sda] tag#289 CDB: Read(6) 08 12 00 00 03 00 00 00 01 00 00 00 [ 1005.162007][ T5885] kernel write not supported for file /binder/transactions (pid: 5885 comm: kworker/1:4) [ 1005.326260][T15793] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1005.516865][T15793] usb 6-1: Using ep0 maxpacket: 16 [ 1005.529520][T15793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.542096][T15793] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1005.551668][T15793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.562783][T15793] usb 6-1: config 0 descriptor?? [ 1005.589964][T15794] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1005.765866][ T976] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1005.781763][T15794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1005.801601][T15794] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1005.811912][T15794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.824108][T15794] usb 3-1: config 0 descriptor?? [ 1005.940123][ T976] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1005.949638][ T976] usb 5-1: no configurations [ 1005.954369][ T976] usb 5-1: can't read configurations, error -22 [ 1006.001179][T15793] mcp2221 0003:04D8:00DD.00B6: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1006.245510][T15794] aquacomputer_d5next 0003:0C70:F00B.00B7: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 1006.412178][ T5885] usb 6-1: USB disconnect, device number 74 [ 1006.457322][T15797] usb 3-1: USB disconnect, device number 2 [ 1006.780755][T12175] random: crng reseeded on system resumption [ 1006.973178][T12175] Restarting kernel threads ... done. [ 1007.073958][T12181] netlink: 'syz.5.17854': attribute type 44 has an invalid length. [ 1007.103575][T12182] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1007.177365][T12184] syz_tun: entered allmulticast mode [ 1007.189523][T12183] syz_tun: left allmulticast mode [ 1007.558529][ T976] kernel write not supported for file /uinput (pid: 976 comm: kworker/0:2) [ 1007.616611][T15797] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1007.769951][T15797] usb 3-1: Using ep0 maxpacket: 16 [ 1007.811515][T15797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.845784][T15797] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1007.855361][T15797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.888771][T15797] usb 3-1: config 0 descriptor?? [ 1008.012342][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17872'. [ 1008.089726][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17872'. [ 1008.315343][T15797] pantherlord 0003:0E8F:0003.00B8: item fetching failed at offset 4/5 [ 1008.367457][T15797] pantherlord 0003:0E8F:0003.00B8: parse failed [ 1008.373839][T15797] pantherlord 0003:0E8F:0003.00B8: probe with driver pantherlord failed with error -22 [ 1008.559789][T15797] usb 3-1: USB disconnect, device number 3 [ 1008.716687][ T976] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1008.896197][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 1008.922480][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.956977][ T976] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1008.997147][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.021254][ T976] usb 6-1: config 0 descriptor?? [ 1009.106381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1009.469848][ T976] mcp2221 0003:04D8:00DD.00B9: unknown main item tag 0x0 [ 1009.499369][ T976] mcp2221 0003:04D8:00DD.00B9: unknown main item tag 0x0 [ 1009.519611][ T976] mcp2221 0003:04D8:00DD.00B9: unknown main item tag 0x0 [ 1009.536806][ T976] mcp2221 0003:04D8:00DD.00B9: unknown main item tag 0x0 [ 1009.554281][ T976] mcp2221 0003:04D8:00DD.00B9: unknown main item tag 0x0 [ 1009.577748][ T976] mcp2221 0003:04D8:00DD.00B9: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1009.662244][ C0] usb 6-1: input irq status -75 received [ 1009.879752][ T976] usb 6-1: USB disconnect, device number 75 [ 1012.215969][T15797] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1012.351172][T12344] block nbd0: shutting down sockets [ 1012.388406][T15797] usb 3-1: Using ep0 maxpacket: 16 [ 1012.400775][T15797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1012.427951][T15797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1012.462421][T15797] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1012.490449][T15797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.530716][T15797] usb 3-1: config 0 descriptor?? [ 1012.877767][T12359] loop4: detected capacity change from 0 to 7 [ 1012.911226][T12359] Dev loop4: unable to read RDB block 7 [ 1012.931631][T12359] loop4: unable to read partition table [ 1012.967692][T12367] bpf: Bad value for 'gid' [ 1012.970871][T15797] kovaplus 0003:1E7D:2D50.00BA: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1012.975885][T12359] loop4: partition table beyond EOD, truncated [ 1013.031045][T12359] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1013.127167][T12373] tun0: tun_chr_ioctl cmd 1074025675 [ 1013.132772][T12373] tun0: persist enabled [ 1013.379154][T15797] kovaplus 0003:1E7D:2D50.00BA: couldn't init struct kovaplus_device [ 1013.389421][T15797] kovaplus 0003:1E7D:2D50.00BA: couldn't install mouse [ 1013.404066][T15797] kovaplus 0003:1E7D:2D50.00BA: probe with driver kovaplus failed with error -71 [ 1013.437212][T15797] usb 3-1: USB disconnect, device number 4 [ 1014.372689][T12423] gtp1: entered promiscuous mode [ 1014.386303][T12423] gtp1: entered allmulticast mode [ 1014.673035][T12436] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17971'. [ 1014.697321][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17971'. [ 1014.996534][T12451] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17978'. [ 1015.810926][T12484] netlink: 'syz.2.17992': attribute type 21 has an invalid length. [ 1015.832507][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17992'. [ 1016.654490][T12527] vlan0: entered allmulticast mode [ 1016.672678][T12527] batadv0: entered allmulticast mode [ 1016.691571][T12529] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1016.914994][T12538] sctp: [Deprecated]: syz.5.18016 (pid 12538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1016.914994][T12538] Use struct sctp_sack_info instead [ 1017.238562][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18023'. [ 1017.311437][T12557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.172375][T12598] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18044'. [ 1020.325791][ T976] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1020.490179][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 1020.504169][ T976] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1020.517992][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.531340][T15794] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1020.542316][ T976] usb 3-1: Product: syz [ 1020.550329][ T976] usb 3-1: Manufacturer: syz [ 1020.555095][ T976] usb 3-1: SerialNumber: syz [ 1020.565466][ T976] usb 3-1: config 0 descriptor?? [ 1020.577051][ T976] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1020.705866][T15794] usb 6-1: Using ep0 maxpacket: 16 [ 1020.715183][T15794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.741615][T15794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.759252][T15794] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1020.782508][T15794] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1020.793852][T15794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.867045][T15794] usb 6-1: config 0 descriptor?? [ 1021.167075][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1021.167095][ T30] audit: type=1326 audit(2000000588.419:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.6.18085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f870bb8e169 code=0x0 [ 1021.202940][ T976] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1021.221226][ T976] usb 3-1: USB disconnect, device number 5 [ 1021.309629][T15794] microsoft 0003:045E:07DA.00BB: ignoring exceeding usage max [ 1021.338995][T15794] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00BB/input/input88 [ 1021.447182][T15794] microsoft 0003:045E:07DA.00BB: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1021.530257][T15794] usb 6-1: USB disconnect, device number 76 [ 1022.590312][T15794] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1022.792180][T15794] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1022.825662][T15794] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1022.850288][T15794] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1022.885822][T15794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1022.892511][T15794] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1022.913810][T12758] loop9: detected capacity change from 0 to 7 [ 1022.925386][T15794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.933834][T12758] Dev loop9: unable to read RDB block 7 [ 1022.940213][T12758] loop9: unable to read partition table [ 1022.948948][T15794] usb 3-1: config 0 descriptor?? [ 1022.954862][T12758] loop9: partition table beyond EOD, truncated [ 1022.961790][T12758] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 1022.971716][T12732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1023.419962][T15794] uclogic 0003:28BD:0094.00BC: interface is invalid, ignoring [ 1023.623354][ T5885] usb 3-1: USB disconnect, device number 6 [ 1023.927790][T15797] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1024.074781][T12808] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1024.085314][T12808] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 1024.096181][T12808] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1024.105281][T12808] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 1024.113846][T15797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1024.124818][T15797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1024.139874][T12808] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1024.156200][T15797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1024.176199][T12808] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 1024.184481][T12808] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1024.192409][T15797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1024.205210][T12808] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 1024.218281][T15797] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1024.229414][T15797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.238781][T15797] usb 5-1: Product: syz [ 1024.243306][T15797] usb 5-1: Manufacturer: syz [ 1024.256259][T15797] usb 5-1: SerialNumber: syz [ 1024.267061][T15797] usb 5-1: config 0 descriptor?? [ 1024.278660][T15797] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1024.522501][T15797] scsi host1: usb-storage 5-1:0.0 [ 1024.602078][T12831] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18147'. [ 1024.734811][T15797] usb 5-1: USB disconnect, device number 127 [ 1024.935890][T15794] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1025.095927][T15794] usb 6-1: Using ep0 maxpacket: 32 [ 1025.110246][T15794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.143153][T15794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.171459][T15794] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1025.181010][T15794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.213376][T15794] usb 6-1: config 0 descriptor?? [ 1025.223330][T15794] hub 6-1:0.0: USB hub found [ 1025.429745][T15794] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 1025.455454][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18160'. [ 1025.471173][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18160'. [ 1025.644669][T15794] usbhid 6-1:0.0: can't add hid device: -71 [ 1025.655699][T15794] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1025.681583][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18163'. [ 1025.694305][T15794] usb 6-1: USB disconnect, device number 77 [ 1026.018854][T12878] openvswitch: netlink: Message has 744 unknown bytes. [ 1027.086310][T15797] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1027.256088][T15797] usb 5-1: Using ep0 maxpacket: 32 [ 1027.266715][T15797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1027.290735][T15797] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1027.303053][T15797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.324190][T15797] usb 5-1: Product: syz [ 1027.332069][T15797] usb 5-1: Manufacturer: syz [ 1027.346133][T15797] usb 5-1: SerialNumber: syz [ 1027.359855][T15797] usb 5-1: config 0 descriptor?? [ 1027.370749][T12918] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1027.392715][T15797] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input89 [ 1027.711758][T15797] usb 5-1: USB disconnect, device number 2 [ 1027.718428][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1028.738140][T12983] bio_check_eod: 14 callbacks suppressed [ 1028.738162][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.738162][T12983] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1028.778601][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.778601][T12983] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1028.798410][T12983] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1028.812345][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.812345][T12983] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1028.828091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1028.841798][T12983] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1028.852887][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.852887][T12983] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1028.866517][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.866517][T12983] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1028.880395][T12983] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1028.890542][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.890542][T12983] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1028.904468][T12983] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1028.914971][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.914971][T12983] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1028.928072][T12985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1028.931708][T12985] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1028.936883][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.936883][T12983] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1028.957777][T12983] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1028.968685][T12983] syz.4.18213: attempt to access beyond end of device [ 1028.968685][T12983] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1028.990647][T12983] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1029.003567][T12983] syz.4.18213: attempt to access beyond end of device [ 1029.003567][T12983] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1029.056145][T12983] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1029.087132][T12983] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1029.115159][T12983] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1033.547121][T13182] netlink: 128 bytes leftover after parsing attributes in process `syz.6.18301'. [ 1033.563211][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18301'. [ 1034.156792][T15797] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1034.170000][ T30] audit: type=1800 audit(2000000601.419:527): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.18318" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1034.315965][T15797] usb 3-1: Using ep0 maxpacket: 32 [ 1034.324374][T15797] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1034.335947][T15797] usb 3-1: config 0 has no interface number 0 [ 1034.346560][T15797] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1034.365628][T15797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.373946][T15797] usb 3-1: Product: syz [ 1034.379142][T15797] usb 3-1: Manufacturer: syz [ 1034.384072][T15797] usb 3-1: SerialNumber: syz [ 1034.393742][T15797] usb 3-1: config 0 descriptor?? [ 1034.409333][T15797] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1034.636993][T15797] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1034.668179][T15797] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1034.847978][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.885048][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.064803][T13245] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18330'. [ 1035.114897][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1035.116131][T15793] usb 3-1: USB disconnect, device number 7 [ 1035.172120][T15793] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1035.199766][T15793] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1035.250555][T15793] quatech2 3-1:0.51: device disconnected [ 1035.992876][T13283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18349'. [ 1036.354411][T13297] dummy0: entered allmulticast mode [ 1036.382756][T13296] dummy0: left allmulticast mode [ 1036.684150][T13313] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1036.879574][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18367'. [ 1036.913301][T13322] netlink: 'syz.5.18369': attribute type 2 has an invalid length. [ 1036.926925][T13322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18369'. [ 1036.963114][T13319] nbd: socks must be embedded in a SOCK_ITEM attr [ 1037.296247][T23824] Bluetooth: hci1: command 0x0c1a tx timeout [ 1038.048154][T13370] team0: No ports can be present during mode change [ 1038.847955][T13413] netlink: 88 bytes leftover after parsing attributes in process `syz.4.18404'. [ 1040.006691][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18420'. [ 1040.374285][T13458] netlink: 'syz.4.18422': attribute type 1 has an invalid length. [ 1040.414737][T13458] netlink: 'syz.4.18422': attribute type 2 has an invalid length. [ 1040.789394][T13474] sctp: [Deprecated]: syz.5.18429 (pid 13474) Use of int in max_burst socket option deprecated. [ 1040.789394][T13474] Use struct sctp_assoc_value instead [ 1041.406452][T13503] netlink: 71 bytes leftover after parsing attributes in process `syz.4.18444'. [ 1041.755223][T13522] loop7: detected capacity change from 0 to 2 [ 1041.783251][T13522] Dev loop7: unable to read RDB block 2 [ 1041.817036][T13522] loop7: unable to read partition table [ 1041.822974][T13522] loop7: partition table beyond EOD, truncated [ 1041.847362][T13522] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1041.847362][T13522] ) failed (rc=-5) [ 1042.044041][T13535] netlink: 'syz.6.18459': attribute type 21 has an invalid length. [ 1042.085827][T13535] netlink: 'syz.6.18459': attribute type 1 has an invalid length. [ 1042.887703][T13577] [U] [ 1042.891105][T13577] [U] [ 1042.893850][T13577] [U] [ 1042.896583][T13577] [U] [ 1042.916063][T13577] [U] [ 1042.918842][T13577] [U] [ 1042.921596][T13577] [U] [ 1042.924321][T13577] [U] [ 1042.945810][T13577] [U] [ 1042.948587][T13577] [U] [ 1042.951321][T13577] [U] [ 1042.976358][T13575] [U] [ 1043.963107][T13616] program syz.6.18498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.140614][ T30] audit: type=1326 audit(2000000611.389:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 1044.185107][ T30] audit: type=1326 audit(2000000611.409:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 1044.253950][ T30] audit: type=1326 audit(2000000611.449:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 1044.290658][ T30] audit: type=1326 audit(2000000611.449:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 1044.374049][ T30] audit: type=1326 audit(2000000611.449:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 1044.416461][ T30] audit: type=1326 audit(2000000611.459:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 1044.443913][ T30] audit: type=1326 audit(2000000611.459:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa098e169 code=0x7ffc0000 [ 1044.495981][ T30] audit: type=1326 audit(2000000611.459:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feaa0985127 code=0x7ffc0000 [ 1044.518504][ T30] audit: type=1326 audit(2000000611.459:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feaa092a359 code=0x7ffc0000 [ 1044.540418][ T30] audit: type=1326 audit(2000000611.459:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13624 comm="syz.0.18501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feaa0985127 code=0x7ffc0000 [ 1044.546230][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1044.754424][T13648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18513'. [ 1044.793292][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.833946][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.862719][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1044.890092][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.908227][ T5885] usb 5-1: config 0 descriptor?? [ 1045.341973][ T5885] hid-generic 0003:05AC:4262.00BD: unbalanced delimiter at end of report description [ 1045.374889][ T5885] hid-generic 0003:05AC:4262.00BD: probe with driver hid-generic failed with error -22 [ 1045.539076][ T5885] usb 5-1: USB disconnect, device number 3 [ 1047.752652][T13730] mkiss: ax0: crc mode is auto. [ 1047.868589][T13730] mkiss: ax0: crc mode is auto. [ 1049.382287][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18576'. [ 1049.621058][T28538] hsr0: left promiscuous mode [ 1049.638832][T28538] bridge0: port 3(hsr0) entered disabled state [ 1049.687378][T28538] team0: left allmulticast mode [ 1049.702666][T28538] team_slave_0: left allmulticast mode [ 1049.728758][T28538] team_slave_1: left allmulticast mode [ 1049.741017][T28538] bond3: left allmulticast mode [ 1049.758973][T28538] team0: left promiscuous mode [ 1049.771435][T28538] team_slave_0: left promiscuous mode [ 1049.798017][T28538] team_slave_1: left promiscuous mode [ 1049.817414][T28538] bond3: left promiscuous mode [ 1049.832504][T28538] bridge0: port 2(team0) entered disabled state [ 1050.374398][T23824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1050.395486][T23824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1050.409514][T23824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1050.421025][T23824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1050.431036][T23824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1051.115018][T28538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.129292][T28538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.141447][T28538] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1051.153348][T28538] bond0 (unregistering): (slave bond4): Releasing backup interface [ 1051.162552][T28538] bond0 (unregistering): Released all slaves [ 1051.177985][T28538] bond1 (unregistering): Released all slaves [ 1051.332316][T28538] bond2 (unregistering): Released all slaves [ 1051.478235][T28538] team0: Port device bond3 removed [ 1051.484783][T28538] bond3 (unregistering): Released all slaves [ 1051.631573][T28538] bond4 (unregistering): Released all slaves [ 1051.646657][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18587'. [ 1051.787207][T28538] tipc: Disabling bearer [ 1051.793384][T28538] tipc: Left network mode [ 1052.062539][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1052.062561][ T30] audit: type=1326 audit(2000000619.309:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.5.18591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1052.117813][ T30] audit: type=1326 audit(2000000619.309:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.5.18591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1052.141061][ T30] audit: type=1326 audit(2000000619.349:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.5.18591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1052.163441][ T30] audit: type=1326 audit(2000000619.349:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.5.18591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1052.192636][ T30] audit: type=1326 audit(2000000619.349:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.5.18591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1052.222818][T13801] lo speed is unknown, defaulting to 1000 [ 1052.231886][ T30] audit: type=1326 audit(2000000619.349:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.5.18591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1052.301703][ T30] audit: type=1326 audit(2000000619.349:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.5.18591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1052.328271][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18595'. [ 1052.342190][ T30] audit: type=1326 audit(2000000619.349:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.5.18591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1052.387756][T13821] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1052.495829][ T5838] Bluetooth: hci0: command tx timeout [ 1052.765847][ T5885] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1052.925628][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 1052.953043][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.988616][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.050760][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1053.121753][ T5885] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1053.154133][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.236044][ T5885] usb 6-1: config 0 descriptor?? [ 1053.621616][T28538] hsr_slave_0: left promiscuous mode [ 1053.666652][T28538] hsr_slave_1: left promiscuous mode [ 1053.674403][T28538] batman_adv: batadv0: Removing interface: dummy0 [ 1053.707036][ T5885] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0 [ 1053.716013][T28538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.731367][T28538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.738901][ T5885] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0 [ 1053.748046][ T5885] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0 [ 1053.770909][ T5885] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0 [ 1053.779449][ T5885] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0 [ 1053.797862][T28538] pimreg (unregistering): left allmulticast mode [ 1053.805721][ T5885] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0 [ 1053.813084][ T5885] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0 [ 1053.836101][ T5885] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0 [ 1053.880595][ T5885] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00BE/input/input90 [ 1053.997539][ T5885] microsoft 0003:045E:07DA.00BE: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1054.039789][T28936] smc: removing ib device syz1 [ 1054.040094][ T5885] usb 6-1: USB disconnect, device number 78 [ 1054.241798][T28538] hsr0 (unregistering): left allmulticast mode [ 1054.444130][T28538] team0 (unregistering): Port device team_slave_1 removed [ 1054.475151][T28538] team0 (unregistering): Port device team_slave_0 removed [ 1054.575880][ T5838] Bluetooth: hci0: command tx timeout [ 1054.767779][T13859] netlink: 'syz.0.18610': attribute type 10 has an invalid length. [ 1055.392975][T13801] chnl_net:caif_netlink_parms(): no params data found [ 1055.424795][T13851] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 1055.581282][T13871] netlink: 'syz.6.18615': attribute type 4 has an invalid length. [ 1055.616437][T13871] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.18615'. [ 1056.412446][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.445215][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.453366][T13801] bridge_slave_0: entered allmulticast mode [ 1056.517799][T13801] bridge_slave_0: entered promiscuous mode [ 1056.526736][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.533986][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.565835][T13801] bridge_slave_1: entered allmulticast mode [ 1056.638081][T13801] bridge_slave_1: entered promiscuous mode [ 1056.659170][ T5838] Bluetooth: hci0: command tx timeout [ 1057.001553][T13801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.114912][T13801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.593218][T13801] team0: Port device team_slave_0 added [ 1057.659262][T13801] team0: Port device team_slave_1 added [ 1057.968440][T13801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.009949][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.066758][T13801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.098170][T13801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.135606][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.229104][T13801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.738615][ T5838] Bluetooth: hci0: command tx timeout [ 1058.901276][T13801] hsr_slave_0: entered promiscuous mode [ 1058.919165][T13801] hsr_slave_1: entered promiscuous mode [ 1058.930586][T13801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.940748][T13801] Cannot create hsr debugfs directory [ 1058.977356][T28538] IPVS: stop unused estimator thread 0... [ 1059.156225][T15793] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1059.214538][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18668'. [ 1059.315789][T15793] usb 6-1: Using ep0 maxpacket: 8 [ 1059.338789][T15793] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.363931][T15793] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1059.388102][T15793] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1059.419177][T15793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.449606][T15793] usb 6-1: config 0 descriptor?? [ 1059.602092][T13801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1059.652470][T13801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1059.694892][T13801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1059.736402][T13801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1059.920342][T15793] steelseries 0003:1038:12B6.00BF: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 1059.975840][T14008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.142330][T13801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.224246][T13801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.303251][ T5163] usb 6-1: USB disconnect, device number 79 [ 1060.310164][T28558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.317390][T28558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.378247][T28538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.385438][T28538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.513481][T13801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1060.960070][T14037] dummy0: mtu less than device minimum [ 1061.051296][T13801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.336478][T14045] Falling back ldisc for ttyS3. [ 1061.689011][T13801] veth0_vlan: entered promiscuous mode [ 1061.732181][T13801] veth1_vlan: entered promiscuous mode [ 1061.831845][T13801] veth0_macvtap: entered promiscuous mode [ 1061.882387][T13801] veth1_macvtap: entered promiscuous mode [ 1061.931928][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.960747][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.971603][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.005876][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.041562][T13801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.069351][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.116043][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.136007][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.166193][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.193223][T13801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.211635][T14079] vivid-000: disconnect [ 1062.233668][T13801] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.251177][T14078] vivid-000: reconnect [ 1062.266391][T13801] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.275155][T13801] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.303394][T13801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.352595][T14077] lo speed is unknown, defaulting to 1000 [ 1062.584614][T28538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.604796][T28538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.693679][T28558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.713069][T28558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.201751][ T30] audit: type=1326 audit(2000000631.449:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14145 comm="syz.5.18735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1064.279453][ T30] audit: type=1326 audit(2000000631.449:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14145 comm="syz.5.18735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1064.332821][ T30] audit: type=1326 audit(2000000631.469:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14145 comm="syz.5.18735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1064.387373][ T30] audit: type=1326 audit(2000000631.469:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14145 comm="syz.5.18735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1064.409625][ T30] audit: type=1326 audit(2000000631.479:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14145 comm="syz.5.18735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1064.491926][ T30] audit: type=1326 audit(2000000631.479:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14145 comm="syz.5.18735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ff98e169 code=0x7ffc0000 [ 1065.071497][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18755'. [ 1065.098603][T14189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18755'. [ 1065.122723][T14189] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18755'. [ 1065.176500][T14194] netlink: 'syz.0.18758': attribute type 11 has an invalid length. [ 1065.184589][T14194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18758'. [ 1065.402171][T14204] loop5: detected capacity change from 0 to 63 [ 1065.749438][T14221] netlink: 'syz.6.18772': attribute type 10 has an invalid length. [ 1065.791009][T14221] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1066.961071][T14277] sctp: [Deprecated]: syz.6.18796 (pid 14277) Use of int in max_burst socket option. [ 1066.961071][T14277] Use struct sctp_assoc_value instead [ 1067.383551][T14289] dvmrp0: entered allmulticast mode [ 1067.411783][T14289] dvmrp0: left allmulticast mode [ 1069.098119][T14358] ref_ctr_offset mismatch. inode: 0x4f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 1069.145738][T15793] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1069.313519][T15793] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1069.333376][T15793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.363734][T15793] usb 5-1: Product: syz [ 1069.369621][T15793] usb 5-1: Manufacturer: syz [ 1069.384797][T15793] usb 5-1: SerialNumber: syz [ 1069.411279][T15793] usb 5-1: config 0 descriptor?? [ 1069.852799][T15793] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1069.893238][T15793] usb 5-1: Firmware version (0.0) predates our first public release. [ 1069.912563][T15793] usb 5-1: Please update to version 0.2 or newer [ 1070.143676][T15793] usb 5-1: USB disconnect, device number 4 [ 1070.711797][T14409] Bluetooth: MGMT ver 1.23 [ 1071.758553][ T30] audit: type=1326 audit(2000000640.003:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.7.18877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a5418e169 code=0x0 [ 1072.281440][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18884'. [ 1072.375666][ T5887] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1072.525768][T14483] netlink: 'syz.0.18888': attribute type 1 has an invalid length. [ 1072.533954][T14483] netlink: 'syz.0.18888': attribute type 3 has an invalid length. [ 1072.546928][T14483] netlink: 216 bytes leftover after parsing attributes in process `syz.0.18888'. [ 1072.567380][ T5887] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1072.575430][ T5887] usb 6-1: config 0 has no interface number 0 [ 1072.584207][T14483] NCSI netlink: No device for ifindex 813332851 [ 1072.604670][ T5887] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1072.626604][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.650259][ T5887] usb 6-1: config 0 descriptor?? [ 1072.666666][ T5887] usb 6-1: selecting invalid altsetting 1 [ 1072.696104][ T5887] dvb_ttusb_budget: ttusb_init_controller: error [ 1072.720545][ T5887] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1072.865931][ T5887] DVB: Unable to find symbol cx22700_attach() [ 1072.974311][ T5887] DVB: Unable to find symbol tda10046_attach() [ 1072.997706][ T5887] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1073.036533][ T5887] usb 6-1: USB disconnect, device number 80 [ 1073.997615][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18913'. [ 1074.624822][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18927'. [ 1074.791405][ T30] audit: type=1326 audit(2000000643.033:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1074.813111][ C1] vkms_vblank_simulate: vblank timer overrun [ 1074.895807][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1074.906923][ T30] audit: type=1326 audit(2000000643.033:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1074.928580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1074.999463][ T30] audit: type=1326 audit(2000000643.083:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1075.085761][ T30] audit: type=1326 audit(2000000643.083:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1075.179475][ T30] audit: type=1326 audit(2000000643.083:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1075.285959][ T30] audit: type=1326 audit(2000000643.083:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1075.357324][ T30] audit: type=1326 audit(2000000643.083:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1075.379374][ C1] vkms_vblank_simulate: vblank timer overrun [ 1075.386306][T14585] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 1075.496029][ T30] audit: type=1326 audit(2000000643.083:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1075.586509][ T30] audit: type=1326 audit(2000000643.083:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.6.18929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f870bb8e169 code=0x7ffc0000 [ 1076.505729][ T5887] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1076.690957][ T5887] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1076.724711][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1076.760045][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1076.778261][ T5887] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1076.794983][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1076.828597][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1076.850140][ T5887] usb 5-1: SerialNumber: syz [ 1077.112052][ T5887] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1077.136701][ T5887] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1077.185772][ T5887] usb 5-1: USB disconnect, device number 5 [ 1077.198573][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1077.198593][ T30] audit: type=1326 audit(2000000645.443:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14634 comm="syz.7.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5418e169 code=0x7ffc0000 [ 1077.284698][ T30] audit: type=1326 audit(2000000645.443:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14634 comm="syz.7.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5418e169 code=0x7ffc0000 [ 1077.394762][ T30] audit: type=1326 audit(2000000645.483:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14634 comm="syz.7.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2a5418e169 code=0x7ffc0000 [ 1077.459509][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 1077.495839][ T30] audit: type=1326 audit(2000000645.483:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14634 comm="syz.7.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5418e169 code=0x7ffc0000 [ 1077.605737][ T30] audit: type=1326 audit(2000000645.483:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14634 comm="syz.7.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5418e169 code=0x7ffc0000 [ 1077.659567][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18962'. [ 1077.712197][ T30] audit: type=1326 audit(2000000645.483:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14634 comm="syz.7.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2a5418e169 code=0x7ffc0000 [ 1077.795310][ T30] audit: type=1326 audit(2000000645.483:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14634 comm="syz.7.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5418e169 code=0x7ffc0000 [ 1077.832589][ T30] audit: type=1326 audit(2000000645.493:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14634 comm="syz.7.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5418e169 code=0x7ffc0000 [ 1077.948125][T14661] netlink: 'syz.0.18968': attribute type 25 has an invalid length. [ 1078.206792][T14670] block device autoloading is deprecated and will be removed. [ 1078.222457][T14670] bio_check_eod: 2 callbacks suppressed [ 1078.234553][T14670] syz.0.18971: attempt to access beyond end of device [ 1078.234553][T14670] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1079.750197][T14727] netlink: 'syz.5.18994': attribute type 1 has an invalid length. [ 1079.792770][T14729] netlink: 'syz.6.18995': attribute type 10 has an invalid length. [ 1079.820567][T14727] netlink: 'syz.5.18994': attribute type 4 has an invalid length. [ 1079.832470][T14727] netlink: 188 bytes leftover after parsing attributes in process `syz.5.18994'. [ 1079.849176][T14727] NCSI netlink: No device for ifindex 458760 [ 1079.932571][T14729] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1080.123741][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19004'. [ 1082.175802][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 1082.175964][T14740] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1083.012666][T14740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1083.021540][T14740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1083.028032][T14740] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1083.037705][T14740] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1083.305687][ T5885] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1083.373679][T14775] omfs: Invalid superblock (0) [ 1083.420125][T14777] block nbd6: NBD_DISCONNECT [ 1083.439256][T14779] can0: slcan on ttyS3. [ 1083.458019][ T5885] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1083.470103][ T5885] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1083.514955][ T5885] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1083.544038][T14779] can0 (unregistered): slcan off ttyS3. [ 1083.550827][T14779] Falling back ldisc for ttyS3. [ 1083.556444][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.598555][ T5885] usb 6-1: can't set config #27, error -71 [ 1083.630126][ T5885] usb 6-1: USB disconnect, device number 81 [ 1083.925035][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19027'. [ 1083.944357][T14802] loop6: detected capacity change from 0 to 524287999 [ 1083.955105][ C0] blk_print_req_error: 6 callbacks suppressed [ 1083.955120][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1083.970428][ C0] buffer_io_error: 6 callbacks suppressed [ 1083.970452][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.984255][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1083.993533][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.016310][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.025747][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.034700][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.043972][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.052513][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.061749][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.070522][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.079964][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.090847][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.100120][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.108606][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.117845][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.132784][T14802] ldm_validate_partition_table(): Disk read failed. [ 1084.139898][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.149133][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.157440][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.166753][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.181907][T14802] Dev loop6: unable to read RDB block 0 [ 1084.188808][T14802] loop6: unable to read partition table [ 1084.194758][T14802] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1084.269520][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 1085.059217][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1087.136121][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1087.624914][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19080'. [ 1087.713114][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19080'. [ 1087.723773][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19080'. [ 1088.800477][T14963] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1089.217015][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1089.664627][T14995] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1089.694920][T14997] program syz.0.19120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1090.654284][T15031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19136'. [ 1091.006076][T15040] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19139'. [ 1091.523321][ T30] audit: type=1800 audit(2000000659.763:627): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.19147" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=160070 res=0 errno=0 [ 1091.821878][T15061] IPVS: persistence engine module ip_vs_pe_ not found [ 1091.874013][T15064] netlink: 788 bytes leftover after parsing attributes in process `syz.0.19150'. [ 1092.400450][T15078] loop6: detected capacity change from 0 to 524288000 [ 1092.855936][T15091] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19163'. [ 1092.883084][T15091] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 1093.009931][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19165'. [ 1093.061529][T15095] netlink: 'syz.5.19165': attribute type 20 has an invalid length. [ 1093.070574][T15095] netlink: 'syz.5.19165': attribute type 21 has an invalid length. [ 1093.786274][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19174'. [ 1095.466435][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1095.485992][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19189'. [ 1095.511368][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19189'. [ 1095.539888][T15150] gretap0: entered promiscuous mode [ 1095.578456][T15150] gretap0: left promiscuous mode [ 1095.655606][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 1095.684347][ T5885] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1095.715881][ T5885] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1095.754797][ T5885] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1095.791263][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1095.831710][ T5885] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1095.857164][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1095.901051][ T5885] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1095.910526][T15158] netlink: 'syz.7.19191': attribute type 16 has an invalid length. [ 1095.922230][T15155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.933367][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.951564][T15158] netlink: 'syz.7.19191': attribute type 17 has an invalid length. [ 1095.957609][T15155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.982815][ T5885] usb 5-1: config 0 descriptor?? [ 1096.223306][T15158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.230562][T15158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.266124][ T5885] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1096.277331][T15158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.284543][T15158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.543440][T15793] usb 5-1: USB disconnect, device number 6 [ 1096.586902][T15793] usblp0: removed [ 1097.097555][ T30] audit: type=1326 audit(2000000665.343:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15179 comm="syz.0.19201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feaa098e169 code=0x0 [ 1097.275499][T15184] netlink: 40 bytes leftover after parsing attributes in process `syz.7.19203'. [ 1098.097158][T15200] ISOFS: Unable to identify CD-ROM format. [ 1098.194880][T15206] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19214'. [ 1098.233920][T15206] netem: unknown loss type 13 [ 1098.258578][T15206] netem: change failed [ 1098.713008][T15216] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19218'. [ 1098.786300][T15214] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19218'. [ 1098.806326][T15218] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19218'. [ 1099.003982][T15220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.459206][T15248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1100.471551][T15248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1100.488527][T15248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1100.498745][T10651] bond0: (slave syz_tun): Releasing backup interface [ 1100.507065][T15248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1100.519903][T15248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1100.629604][T15255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19235'. [ 1100.693552][T28538] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.881596][T28538] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.903174][T15247] lo speed is unknown, defaulting to 1000 [ 1101.093915][T28538] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.113585][T15271] dlm: no local IP address has been set [ 1101.136398][T15271] dlm: cannot start dlm midcomms -107 [ 1101.320810][T28538] bond0: (slave netdevsim0): Releasing backup interface [ 1101.361636][T28538] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.375917][T15794] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1101.545673][T15794] usb 5-1: Using ep0 maxpacket: 8 [ 1101.559423][T15794] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.605602][T15794] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.636014][T15794] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.655697][T15794] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1101.662441][T15794] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1101.684155][T15794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.709733][T28538] bridge_slave_1: left allmulticast mode [ 1101.729928][T28538] bridge_slave_1: left promiscuous mode [ 1101.740690][T15794] usb 5-1: config 0 descriptor?? [ 1101.751607][T28538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.790346][T28538] bridge_slave_0: left allmulticast mode [ 1101.803747][T28538] bridge_slave_0: left promiscuous mode [ 1101.818840][T28538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.868357][ T5885] IPVS: starting estimator thread 0... [ 1101.923549][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19253'. [ 1101.955751][T15300] IPVS: using max 25 ests per chain, 60000 per kthread [ 1102.182788][T15794] chicony 0003:04F2:1421.00C0: unbalanced delimiter at end of report description [ 1102.194321][T15794] chicony 0003:04F2:1421.00C0: Chicony hid parse failed: -22 [ 1102.207579][T15794] chicony 0003:04F2:1421.00C0: probe with driver chicony failed with error -22 [ 1102.382699][T15794] usb 5-1: USB disconnect, device number 7 [ 1102.535057][T28538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.553318][T28538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.565872][T28538] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1102.575305][T28538] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1102.584282][ T5838] Bluetooth: hci3: command tx timeout [ 1102.594339][T28538] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1102.610230][T28538] bond0 (unregistering): Released all slaves [ 1102.624942][T28538] bond1 (unregistering): Released all slaves [ 1102.771367][T28538] bond2 (unregistering): Released all slaves [ 1103.189936][T15247] chnl_net:caif_netlink_parms(): no params data found [ 1103.331206][T15325] syzkaller1: tun_chr_ioctl cmd 21731 [ 1103.390517][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19267'. [ 1103.401794][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19267'. [ 1103.502977][T15331] bridge0: port 5(vlan0) entered blocking state [ 1103.518295][T15334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19268'. [ 1103.543180][T15331] bridge0: port 5(vlan0) entered disabled state [ 1103.569014][T15331] vlan0: entered allmulticast mode [ 1103.575407][T15331] bridge0: entered allmulticast mode [ 1103.584613][T15331] vlan0: left allmulticast mode [ 1103.589651][T15331] bridge0: left allmulticast mode [ 1104.038071][T15247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.045377][T15247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.122305][T15247] bridge_slave_0: entered allmulticast mode [ 1104.137699][T15247] bridge_slave_0: entered promiscuous mode [ 1104.158905][T15357] input: syz0 as /devices/virtual/input/input91 [ 1104.236389][T28538] hsr_slave_0: left promiscuous mode [ 1104.258805][T28538] hsr_slave_1: left promiscuous mode [ 1104.265107][T28538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.293027][T28538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.317402][ T5838] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 1104.325473][T28538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.343366][T28538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.428219][T28538] veth1_vlan: left promiscuous mode [ 1104.439176][T28538] veth0_vlan: left promiscuous mode [ 1104.656559][ T5838] Bluetooth: hci3: command tx timeout [ 1105.659164][T28538] team0 (unregistering): Port device team_slave_1 removed [ 1105.714518][T28538] team0 (unregistering): Port device team_slave_0 removed [ 1106.320508][T15247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.333645][T15247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.342467][T15247] bridge_slave_1: entered allmulticast mode [ 1106.350696][T15247] bridge_slave_1: entered promiscuous mode [ 1106.414218][T15374] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 1106.434712][T15374] macsec1: entered promiscuous mode [ 1106.442520][T15374] macsec1: entered allmulticast mode [ 1106.456938][T15374] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 1106.592905][T15247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.633650][T15247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.720706][T15404] kvm: kvm [15403]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1106.747880][ T5838] Bluetooth: hci3: command tx timeout [ 1106.819068][ T5885] kernel write not supported for file /sequencer (pid: 5885 comm: kworker/1:4) [ 1106.851644][T15247] team0: Port device team_slave_0 added [ 1106.887870][T15247] team0: Port device team_slave_1 added [ 1107.094715][T15413] vxcan1: entered allmulticast mode [ 1107.104254][T15416] vxcan1: left allmulticast mode [ 1107.113258][T15247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.140227][T15247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.166193][ C1] vkms_vblank_simulate: vblank timer overrun [ 1107.250472][T15247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.351058][T15247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.383401][T15247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.425847][T15247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.644681][T15247] hsr_slave_0: entered promiscuous mode [ 1107.660168][T15247] hsr_slave_1: entered promiscuous mode [ 1107.667912][T15247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.675999][T15247] Cannot create hsr debugfs directory [ 1107.842573][T15441] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1108.214730][T15247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1108.237186][T15247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1108.261234][T15247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1108.274436][T15247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1108.294651][T15452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1108.396454][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1108.450947][T15247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.491247][T15247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.523167][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.530456][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.555999][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 1108.595824][ T5885] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1108.619254][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.626534][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.640996][ T5885] usb 5-1: config 0 has no interface number 0 [ 1108.675471][ T5885] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1108.702998][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.734270][ T5885] usb 5-1: Product: syz [ 1108.745254][ T5885] usb 5-1: Manufacturer: syz [ 1108.752353][ T5885] usb 5-1: SerialNumber: syz [ 1108.770094][ T5885] usb 5-1: config 0 descriptor?? [ 1108.783732][ T5885] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1108.813855][ T5885] usb 5-1: selecting invalid altsetting 1 [ 1108.826267][ T5838] Bluetooth: hci3: command tx timeout [ 1108.826556][ T5885] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1108.865384][ T5885] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1108.914231][ T5885] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1108.944412][ T5885] usb 5-1: media controller created [ 1109.037153][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1109.056539][ T5969] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1109.103825][ T5885] usb 5-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1109.127350][ T5885] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1109.183698][T15247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.222982][ T5885] DVB: Unable to find symbol mxl5005s_attach() [ 1109.236918][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 1109.253249][ T5969] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1109.285614][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.342861][ T5969] usb 6-1: config 0 descriptor?? [ 1109.361581][ T5969] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1109.384521][T15482] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 1109.616348][ T5885] usb 5-1: USB disconnect, device number 8 [ 1109.689473][T15247] veth0_vlan: entered promiscuous mode [ 1109.730672][T15247] veth1_vlan: entered promiscuous mode [ 1109.799085][T15247] veth0_macvtap: entered promiscuous mode [ 1109.811752][T15247] veth1_macvtap: entered promiscuous mode [ 1109.857885][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.874379][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.891847][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.903892][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.923385][T15247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.947890][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.964493][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.981932][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.992786][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.008540][T15247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.031337][T15247] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.042461][T15247] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.052757][T15247] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.067795][T15247] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.170623][ T5969] gspca_nw80x: reg_r err -71 [ 1110.175360][ T5969] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 1110.209015][ T5969] usb 6-1: USB disconnect, device number 82 [ 1110.319451][T28538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.355893][T28538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.424652][T28550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.443249][T28550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.060522][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19353'. [ 1111.104033][T15536] vlan2: entered allmulticast mode [ 1111.114999][T15536] dummy0: entered allmulticast mode [ 1111.342567][T15545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.358155][T15545] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1111.383794][T15545] bond0: (slave gre0): Error -95 calling set_mac_address [ 1111.484245][T15549] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1111.854605][T15569] macsec2: entered promiscuous mode [ 1111.891462][T15569] bond0: entered promiscuous mode [ 1111.906019][T15569] bond_slave_0: entered promiscuous mode [ 1111.929421][T15569] bond_slave_1: entered promiscuous mode [ 1111.939623][T15569] macsec2: entered allmulticast mode [ 1111.949943][T15569] bond0: entered allmulticast mode [ 1111.968482][T15569] bond_slave_0: entered allmulticast mode [ 1111.984895][T15569] bond_slave_1: entered allmulticast mode [ 1112.264208][T15587] input: syz0 as /devices/virtual/input/input92 [ 1112.804660][T15605] input: syz1 as /devices/virtual/input/input93 [ 1113.445861][ T5969] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1113.605916][ T5885] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1113.645666][ T5969] usb 6-1: Using ep0 maxpacket: 16 [ 1113.669262][ T5969] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1113.681563][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.699464][ T5969] usb 6-1: Product: syz [ 1113.703709][ T5969] usb 6-1: Manufacturer: syz [ 1113.726154][ T5969] usb 6-1: SerialNumber: syz [ 1113.758621][ T5969] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1113.764946][ T5969] r8152-cfgselector 6-1: config 0 descriptor?? [ 1113.778975][ T5885] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1113.815589][ T5885] usb 9-1: config 0 has no interface number 0 [ 1113.847430][ T5885] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1113.872432][ T5885] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1113.884807][ T5885] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1113.895961][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.907489][ T5885] usb 9-1: config 0 descriptor?? [ 1113.914640][T15626] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1113.935483][ T5885] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1113.984980][ T5969] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1114.001092][ T5969] r8152-cfgselector 6-1: bad CDC descriptors [ 1114.041881][ T5969] r8152-cfgselector 6-1: USB disconnect, device number 83 [ 1114.168861][ T5885] usb 9-1: USB disconnect, device number 2 [ 1114.194863][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19405'. [ 1114.204346][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19405'. [ 1115.323598][ T30] audit: type=1326 audit(2000000683.563:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15705 comm="syz.4.19428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff32478e169 code=0x0 [ 1115.600807][T15716] sp0: Synchronizing with TNC [ 1115.614970][T28538] [ 1115.617337][T28538] ===================================================== [ 1115.624294][T28538] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1115.631774][T28538] 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 Not tainted [ 1115.639003][T28538] ----------------------------------------------------- [ 1115.645959][T28538] kworker/u8:17/28538 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1115.653955][T28538] ffffffff8f8ccaf8 (disc_data_lock#2){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x440 [ 1115.663655][T28538] [ 1115.663655][T28538] and this task is already holding: [ 1115.671010][T28538] ffffffff9aa48458 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 1115.679724][T28538] which would create a new lock dependency: [ 1115.685620][T28538] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.+.+}-{3:3} [ 1115.693473][T28538] [ 1115.693473][T28538] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1115.702928][T28538] (&port_lock_key){-.-.}-{3:3} [ 1115.702953][T28538] [ 1115.702953][T28538] ... which became HARDIRQ-irq-safe at: [ 1115.715495][T28538] lock_acquire+0x116/0x2f0 [ 1115.720097][T28538] _raw_spin_lock_irqsave+0xd8/0x130 [ 1115.725488][T28538] serial8250_handle_irq+0x6d/0xb80 [ 1115.731316][T28538] serial8250_default_handle_irq+0xd1/0x1f0 [ 1115.737592][T28538] serial8250_interrupt+0xa9/0x1f0 [ 1115.742803][T28538] __handle_irq_event_percpu+0x29c/0xa60 [ 1115.748535][T28538] handle_irq_event+0x89/0x1f0 [ 1115.753385][T28538] handle_edge_irq+0x25f/0xc20 [ 1115.758228][T28538] __common_interrupt+0x136/0x230 [ 1115.763383][T28538] common_interrupt+0xb4/0xd0 [ 1115.768159][T28538] asm_common_interrupt+0x26/0x40 [ 1115.773369][T28538] _raw_spin_unlock_irqrestore+0xd9/0x140 [ 1115.779208][T28538] uart_write+0x3e4/0xa40 [ 1115.783652][T28538] n_tty_write+0xd81/0x1270 [ 1115.788247][T28538] file_tty_write+0x543/0x9d0 [ 1115.793006][T28538] vfs_write+0x70f/0xd10 [ 1115.797329][T28538] ksys_write+0x19d/0x2d0 [ 1115.801737][T28538] do_syscall_64+0xf3/0x210 [ 1115.806321][T28538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.812293][T28538] [ 1115.812293][T28538] to a HARDIRQ-irq-unsafe lock: [ 1115.819320][T28538] (disc_data_lock#2){.+.+}-{3:3} [ 1115.819354][T28538] [ 1115.819354][T28538] ... which became HARDIRQ-irq-unsafe at: [ 1115.832224][T28538] ... [ 1115.832231][T28538] lock_acquire+0x116/0x2f0 [ 1115.839386][T28538] _raw_read_lock+0x36/0x50 [ 1115.843991][T28538] sixpack_receive_buf+0x57/0x1420 [ 1115.849234][T28538] tty_ldisc_receive_buf+0x11f/0x170 [ 1115.854617][T28538] tty_port_default_receive_buf+0x6d/0xa0 [ 1115.860439][T28538] flush_to_ldisc+0x32b/0x860 [ 1115.865203][T28538] process_scheduled_works+0xac3/0x18e0 [ 1115.870834][T28538] worker_thread+0x870/0xd50 [ 1115.875528][T28538] kthread+0x7b7/0x940 [ 1115.879689][T28538] ret_from_fork+0x4b/0x80 [ 1115.884272][T28538] ret_from_fork_asm+0x1a/0x30 [ 1115.889155][T28538] [ 1115.889155][T28538] other info that might help us debug this: [ 1115.889155][T28538] [ 1115.899539][T28538] Possible interrupt unsafe locking scenario: [ 1115.899539][T28538] [ 1115.907951][T28538] CPU0 CPU1 [ 1115.913332][T28538] ---- ---- [ 1115.918705][T28538] lock(disc_data_lock#2); [ 1115.923248][T28538] local_irq_disable(); [ 1115.930001][T28538] lock(&port_lock_key); [ 1115.936866][T28538] lock(disc_data_lock#2); [ 1115.943934][T28538] [ 1115.947380][T28538] lock(&port_lock_key); [ 1115.951880][T28538] [ 1115.951880][T28538] *** DEADLOCK *** [ 1115.951880][T28538] [ 1115.960010][T28538] 6 locks held by kworker/u8:17/28538: [ 1115.965457][T28538] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1115.977123][T28538] #1: ffffc9000b587c60 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1115.988792][T28538] #2: ffff888025320ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x860 [ 1115.997857][T28538] #3: ffff8880251ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1116.007209][T28538] #4: ffffffff9aa48458 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 1116.016406][T28538] #5: ffff8880251ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1116.025759][T28538] [ 1116.025759][T28538] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1116.036159][T28538] -> (&port_lock_key){-.-.}-{3:3} { [ 1116.041396][T28538] IN-HARDIRQ-W at: [ 1116.045576][T28538] lock_acquire+0x116/0x2f0 [ 1116.051817][T28538] _raw_spin_lock_irqsave+0xd8/0x130 [ 1116.058868][T28538] serial8250_handle_irq+0x6d/0xb80 [ 1116.065726][T28538] serial8250_default_handle_irq+0xd1/0x1f0 [ 1116.073288][T28538] serial8250_interrupt+0xa9/0x1f0 [ 1116.080070][T28538] __handle_irq_event_percpu+0x29c/0xa60 [ 1116.087442][T28538] handle_irq_event+0x89/0x1f0 [ 1116.093880][T28538] handle_edge_irq+0x25f/0xc20 [ 1116.100326][T28538] __common_interrupt+0x136/0x230 [ 1116.107008][T28538] common_interrupt+0xb4/0xd0 [ 1116.113339][T28538] asm_common_interrupt+0x26/0x40 [ 1116.120021][T28538] _raw_spin_unlock_irqrestore+0xd9/0x140 [ 1116.127403][T28538] uart_write+0x3e4/0xa40 [ 1116.133380][T28538] n_tty_write+0xd81/0x1270 [ 1116.139544][T28538] file_tty_write+0x543/0x9d0 [ 1116.145987][T28538] vfs_write+0x70f/0xd10 [ 1116.151897][T28538] ksys_write+0x19d/0x2d0 [ 1116.157878][T28538] do_syscall_64+0xf3/0x210 [ 1116.164032][T28538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.171599][T28538] IN-SOFTIRQ-W at: [ 1116.175578][T28538] lock_acquire+0x116/0x2f0 [ 1116.181815][T28538] _raw_spin_lock_irqsave+0xd8/0x130 [ 1116.188767][T28538] serial8250_handle_irq+0x6d/0xb80 [ 1116.195692][T28538] serial8250_default_handle_irq+0xd1/0x1f0 [ 1116.203285][T28538] serial8250_interrupt+0xa9/0x1f0 [ 1116.210073][T28538] __handle_irq_event_percpu+0x29c/0xa60 [ 1116.217352][T28538] handle_irq_event+0x89/0x1f0 [ 1116.223762][T28538] handle_edge_irq+0x25f/0xc20 [ 1116.230168][T28538] __common_interrupt+0x136/0x230 [ 1116.236845][T28538] common_interrupt+0x5e/0xd0 [ 1116.243169][T28538] asm_common_interrupt+0x26/0x40 [ 1116.249835][T28538] rcu_is_watching+0x44/0xb0 [ 1116.256066][T28538] lock_release+0x4e/0x3e0 [ 1116.262133][T28538] _raw_spin_unlock+0x16/0x50 [ 1116.268480][T28538] __free_frozen_pages+0x810/0x10a0 [ 1116.275326][T28538] __tlb_remove_table+0x36b/0x460 [ 1116.281990][T28538] tlb_remove_table_rcu+0x79/0xf0 [ 1116.288673][T28538] rcu_core+0xaac/0x17a0 [ 1116.294584][T28538] handle_softirqs+0x2d6/0x9b0 [ 1116.301006][T28538] __irq_exit_rcu+0xfb/0x220 [ 1116.307251][T28538] irq_exit_rcu+0x9/0x30 [ 1116.313140][T28538] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1116.320468][T28538] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1116.328117][T28538] pv_native_safe_halt+0x13/0x20 [ 1116.334736][T28538] default_idle+0x13/0x20 [ 1116.340738][T28538] default_idle_call+0x74/0xb0 [ 1116.347328][T28538] do_idle+0x22e/0x5d0 [ 1116.353067][T28538] cpu_startup_entry+0x42/0x60 [ 1116.359484][T28538] rest_init+0x2dc/0x300 [ 1116.365374][T28538] start_kernel+0x484/0x510 [ 1116.371526][T28538] x86_64_start_reservations+0x2a/0x30 [ 1116.378627][T28538] x86_64_start_kernel+0x66/0x70 [ 1116.385205][T28538] common_startup_64+0x13e/0x147 [ 1116.391791][T28538] INITIAL USE at: [ 1116.395681][T28538] lock_acquire+0x116/0x2f0 [ 1116.401743][T28538] _raw_spin_lock_irqsave+0xd8/0x130 [ 1116.408590][T28538] serial8250_do_set_termios+0x4dc/0x1c70 [ 1116.415868][T28538] uart_set_options+0x439/0x780 [ 1116.422292][T28538] serial8250_console_setup+0x3dd/0x670 [ 1116.429423][T28538] univ8250_console_setup+0x429/0x530 [ 1116.436374][T28538] try_enable_preferred_console+0x46b/0x5c0 [ 1116.443830][T28538] register_console+0x37d/0x1080 [ 1116.450330][T28538] univ8250_console_init+0x52/0x90 [ 1116.457002][T28538] console_init+0x1b8/0x6f0 [ 1116.463080][T28538] start_kernel+0x2dd/0x510 [ 1116.469149][T28538] x86_64_start_reservations+0x2a/0x30 [ 1116.476165][T28538] x86_64_start_kernel+0x66/0x70 [ 1116.482656][T28538] common_startup_64+0x13e/0x147 [ 1116.489157][T28538] } [ 1116.491645][T28538] ... key at: [] port_lock_key+0x0/0x20 [ 1116.499291][T28538] [ 1116.499291][T28538] the dependencies between the lock to be acquired [ 1116.499304][T28538] and HARDIRQ-irq-unsafe lock: [ 1116.512826][T28538] -> (disc_data_lock#2){.+.+}-{3:3} { [ 1116.518233][T28538] HARDIRQ-ON-R at: [ 1116.522229][T28538] lock_acquire+0x116/0x2f0 [ 1116.528393][T28538] _raw_read_lock+0x36/0x50 [ 1116.534549][T28538] sixpack_receive_buf+0x57/0x1420 [ 1116.541320][T28538] tty_ldisc_receive_buf+0x11f/0x170 [ 1116.548251][T28538] tty_port_default_receive_buf+0x6d/0xa0 [ 1116.555618][T28538] flush_to_ldisc+0x32b/0x860 [ 1116.561958][T28538] process_scheduled_works+0xac3/0x18e0 [ 1116.569153][T28538] worker_thread+0x870/0xd50 [ 1116.575397][T28538] kthread+0x7b7/0x940 [ 1116.581110][T28538] ret_from_fork+0x4b/0x80 [ 1116.587167][T28538] ret_from_fork_asm+0x1a/0x30 [ 1116.593607][T28538] SOFTIRQ-ON-R at: [ 1116.597599][T28538] lock_acquire+0x116/0x2f0 [ 1116.603748][T28538] _raw_read_lock+0x36/0x50 [ 1116.609901][T28538] sixpack_receive_buf+0x57/0x1420 [ 1116.616743][T28538] tty_ldisc_receive_buf+0x11f/0x170 [ 1116.623688][T28538] tty_port_default_receive_buf+0x6d/0xa0 [ 1116.631070][T28538] flush_to_ldisc+0x32b/0x860 [ 1116.637390][T28538] process_scheduled_works+0xac3/0x18e0 [ 1116.644583][T28538] worker_thread+0x870/0xd50 [ 1116.650822][T28538] kthread+0x7b7/0x940 [ 1116.656622][T28538] ret_from_fork+0x4b/0x80 [ 1116.662676][T28538] ret_from_fork_asm+0x1a/0x30 [ 1116.669134][T28538] INITIAL USE at: [ 1116.673062][T28538] lock_acquire+0x116/0x2f0 [ 1116.679158][T28538] _raw_write_lock_irq+0xd3/0x120 [ 1116.686276][T28538] sixpack_close+0x2c/0x280 [ 1116.692340][T28538] tty_ldisc_kill+0xa3/0x1a0 [ 1116.698489][T28538] tty_ldisc_release+0x1a1/0x200 [ 1116.704983][T28538] tty_release_struct+0x2b/0xe0 [ 1116.711392][T28538] tty_release+0xd07/0x12c0 [ 1116.717465][T28538] __fput+0x3e9/0x9f0 [ 1116.723007][T28538] task_work_run+0x251/0x310 [ 1116.729156][T28538] syscall_exit_to_user_mode+0x13f/0x340 [ 1116.736344][T28538] do_syscall_64+0x100/0x210 [ 1116.742489][T28538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.749940][T28538] INITIAL READ USE at: [ 1116.754263][T28538] lock_acquire+0x116/0x2f0 [ 1116.760777][T28538] _raw_read_lock+0x36/0x50 [ 1116.767301][T28538] sixpack_receive_buf+0x57/0x1420 [ 1116.774416][T28538] tty_ldisc_receive_buf+0x11f/0x170 [ 1116.781697][T28538] tty_port_default_receive_buf+0x6d/0xa0 [ 1116.789415][T28538] flush_to_ldisc+0x32b/0x860 [ 1116.796090][T28538] process_scheduled_works+0xac3/0x18e0 [ 1116.803632][T28538] worker_thread+0x870/0xd50 [ 1116.810218][T28538] kthread+0x7b7/0x940 [ 1116.816291][T28538] ret_from_fork+0x4b/0x80 [ 1116.822698][T28538] ret_from_fork_asm+0x1a/0x30 [ 1116.829459][T28538] } [ 1116.831949][T28538] ... key at: [] disc_data_lock+0x18/0x100 [ 1116.839838][T28538] ... acquired at: [ 1116.843631][T28538] lock_acquire+0x116/0x2f0 [ 1116.848330][T28538] _raw_read_lock+0x36/0x50 [ 1116.853118][T28538] sixpack_write_wakeup+0x30/0x440 [ 1116.858414][T28538] tty_wakeup+0xbb/0x100 [ 1116.862844][T28538] tty_port_default_wakeup+0xa6/0xf0 [ 1116.868305][T28538] serial8250_tx_chars+0x6e2/0x930 [ 1116.873851][T28538] __start_tx+0x32e/0x470 [ 1116.878370][T28538] __uart_start+0x2bc/0x450 [ 1116.883076][T28538] uart_write+0x280/0xa40 [ 1116.887878][T28538] sixpack_receive_buf+0x447/0x1420 [ 1116.893877][T28538] tty_ldisc_receive_buf+0x11f/0x170 [ 1116.899451][T28538] tty_port_default_receive_buf+0x6d/0xa0 [ 1116.905361][T28538] flush_to_ldisc+0x32b/0x860 [ 1116.910223][T28538] process_scheduled_works+0xac3/0x18e0 [ 1116.915950][T28538] worker_thread+0x870/0xd50 [ 1116.920720][T28538] kthread+0x7b7/0x940 [ 1116.924978][T28538] ret_from_fork+0x4b/0x80 [ 1116.929739][T28538] ret_from_fork_asm+0x1a/0x30 [ 1116.934675][T28538] [ 1116.936987][T28538] [ 1116.936987][T28538] stack backtrace: [ 1116.942876][T28538] CPU: 0 UID: 0 PID: 28538 Comm: kworker/u8:17 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 1116.942897][T28538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1116.942910][T28538] Workqueue: events_unbound flush_to_ldisc [ 1116.942935][T28538] Call Trace: [ 1116.942943][T28538] [ 1116.942952][T28538] dump_stack_lvl+0x241/0x360 [ 1116.942974][T28538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.942994][T28538] ? __pfx__printk+0x10/0x10 [ 1116.943018][T28538] validate_chain+0x22bb/0x24e0 [ 1116.943053][T28538] __lock_acquire+0xad5/0xd80 [ 1116.943077][T28538] lock_acquire+0x116/0x2f0 [ 1116.943095][T28538] ? sixpack_write_wakeup+0x30/0x440 [ 1116.943116][T28538] _raw_read_lock+0x36/0x50 [ 1116.943138][T28538] ? sixpack_write_wakeup+0x30/0x440 [ 1116.943152][T28538] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1116.943167][T28538] sixpack_write_wakeup+0x30/0x440 [ 1116.943183][T28538] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1116.943199][T28538] tty_wakeup+0xbb/0x100 [ 1116.943213][T28538] tty_port_default_wakeup+0xa6/0xf0 [ 1116.943233][T28538] serial8250_tx_chars+0x6e2/0x930 [ 1116.943256][T28538] __start_tx+0x32e/0x470 [ 1116.943274][T28538] __uart_start+0x2bc/0x450 [ 1116.943291][T28538] uart_write+0x280/0xa40 [ 1116.943309][T28538] sixpack_receive_buf+0x447/0x1420 [ 1116.943330][T28538] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1116.943354][T28538] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 1116.943370][T28538] tty_ldisc_receive_buf+0x11f/0x170 [ 1116.943394][T28538] tty_port_default_receive_buf+0x6d/0xa0 [ 1116.943415][T28538] flush_to_ldisc+0x32b/0x860 [ 1116.943438][T28538] ? process_scheduled_works+0x9cb/0x18e0 [ 1116.943458][T28538] process_scheduled_works+0xac3/0x18e0 [ 1116.943492][T28538] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.943518][T28538] ? assign_work+0x367/0x3d0 [ 1116.943540][T28538] worker_thread+0x870/0xd50 [ 1116.943568][T28538] ? __kthread_parkme+0x1a8/0x200 [ 1116.943592][T28538] ? __pfx_worker_thread+0x10/0x10 [ 1116.943614][T28538] kthread+0x7b7/0x940 [ 1116.943630][T28538] ? __pfx_worker_thread+0x10/0x10 [ 1116.943653][T28538] ? __pfx_kthread+0x10/0x10 [ 1116.943667][T28538] ? __pfx_kthread+0x10/0x10 [ 1116.943682][T28538] ? __pfx_kthread+0x10/0x10 [ 1116.943696][T28538] ? __pfx_kthread+0x10/0x10 [ 1116.943711][T28538] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.943732][T28538] ? lockdep_hardirqs_on+0x9d/0x150 [ 1116.943746][T28538] ? __pfx_kthread+0x10/0x10 [ 1116.943762][T28538] ret_from_fork+0x4b/0x80 [ 1116.943774][T28538] ? __pfx_kthread+0x10/0x10 [ 1116.943789][T28538] ret_from_fork_asm+0x1a/0x30 [ 1116.943818][T28538] [ 1116.944033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1117.200614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1117.251153][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19434'.