last executing test programs: 4m23.86851324s ago: executing program 4 (id=1083): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) 4m23.753634264s ago: executing program 4 (id=1087): syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 4m23.643567506s ago: executing program 4 (id=1089): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000cc0)={r2, &(0x7f0000000340), 0x0}, 0x20) 4m23.522408858s ago: executing program 4 (id=1092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x300, 0x0, 0x0) 4m23.370741192s ago: executing program 4 (id=1095): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0/bus\x00', 0x5) 4m23.183986194s ago: executing program 4 (id=1097): r0 = epoll_create(0x5) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002080)={0x6}) epoll_wait(r0, &(0x7f0000003500)=[{}], 0x1, 0x30) 4m8.021699104s ago: executing program 32 (id=1097): r0 = epoll_create(0x5) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002080)={0x6}) epoll_wait(r0, &(0x7f0000003500)=[{}], 0x1, 0x30) 3m6.480751484s ago: executing program 2 (id=2258): r0 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00') openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000001040)='./file0\x00', 0x0, &(0x7f00000011c0)={[&(0x7f0000000080)='#! ', &(0x7f0000000000)='\x10\\/)%\'&}-\x1a\x00', &(0x7f00000010c0)='.@\x00', &(0x7f0000001100)='\xc8\x05\xb1q#\"g\xba\x89\xd6\xca1\xc43\xa9\xe6\xd0<\xb2<\xb8\xda\xbbr\x82\xb6\xa0\xe2\x00\xc2!\xcc\xe2\x9d q\xa0\x13\xb8K\xaa\xae\x8d\xe6\x85\x13L\x938P\xe4\xe3\xfbB\xa7ix>\xf8i\xa1\xab\x90\x18\xaa\xf7\x83\xd9xm\xf7Jq\xfc\xdeo\xefx\xa9Ui\xdcP\x83\xa3K\xe2y)\xfa\xa0_\xab\xe66\xd68\xacUy\xfd\xf5\xe3RB\xe1\x1d[\n\rc\x81B\xd7I\xabO\xbdm\xa9\xd3\x11\x9e\xda\x80$\xaa\xe0\xb5T\x02\x83\xbb\x96\xc2\x8c<\xe7\x91R\xc4\t;\xab']}) 3m6.33442336s ago: executing program 2 (id=2262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8912, &(0x7f0000000040)={'wg2\x00', @random="09a18a4ffcab"}) 3m6.249844979s ago: executing program 2 (id=2265): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 3m6.153508778s ago: executing program 2 (id=2268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) 3m6.051408946s ago: executing program 2 (id=2272): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 3m5.758962479s ago: executing program 2 (id=2275): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000021000f0000000000000000000a"], 0x24}}, 0x0) 2m50.724365348s ago: executing program 33 (id=2275): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000021000f0000000000000000000a"], 0x24}}, 0x0) 2m49.740611454s ago: executing program 5 (id=2422): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2m49.655543096s ago: executing program 5 (id=2423): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad8900000000001800"/75], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 2m48.005994742s ago: executing program 5 (id=2439): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r0, 0x5}) 2m46.994089235s ago: executing program 5 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) 2m46.647100547s ago: executing program 5 (id=2445): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m46.4974518s ago: executing program 5 (id=2447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[]) 2m31.372885785s ago: executing program 34 (id=2447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[]) 6.772010287s ago: executing program 7 (id=5282): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_extract_tcp_res(0x0, 0x0, 0x0) 5.852002385s ago: executing program 7 (id=5300): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chroot(0x0) 5.068587828s ago: executing program 6 (id=5317): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859224ad54afac1f2875397bdb22d0000b445a1a93c01000000000000007d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2]}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x0, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="1860000000000000f306855925"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 5.01351783s ago: executing program 7 (id=5321): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 4.956453921s ago: executing program 6 (id=5322): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "24001100"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 4.88801947s ago: executing program 7 (id=5325): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 4.818889221s ago: executing program 6 (id=5327): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}]}, 0x34}}, 0x240088c0) 4.756112222s ago: executing program 6 (id=5329): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 4.735317021s ago: executing program 7 (id=5330): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x40, 0xc, 0xc, {0xc, 0x21, "f5b3da68079828108b91"}}, 0x0}, 0x0) 4.629346125s ago: executing program 6 (id=5333): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) 4.333724039s ago: executing program 6 (id=5339): pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f00000002c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4.207698339s ago: executing program 35 (id=5339): pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f00000002c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 3.983366829s ago: executing program 3 (id=5345): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x40012000}) io_uring_enter(r1, 0x1066, 0x0, 0x0, 0x0, 0x0) 3.673195268s ago: executing program 3 (id=5349): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x4008af10, &(0x7f0000000080)) 3.553243802s ago: executing program 0 (id=5351): openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x40000000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 3.466179374s ago: executing program 3 (id=5352): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/21, 0x15}, 0x0) 3.332702037s ago: executing program 0 (id=5353): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="2000de00000000dc86ce17d194a81a6ccfcb8583e43d812ecb816d80c3a509304d2ea13d778ad29b6062ffcb1dbadbc93101000080ee7efa67ff18"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 3.237781171s ago: executing program 3 (id=5354): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) 3.219618579s ago: executing program 3 (id=5355): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00094000010009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 1.667439706s ago: executing program 7 (id=5356): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602002c00000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.385996852s ago: executing program 1 (id=5359): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x8, 0x7, 0x2}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x800, 0x4, 0x10000, '\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) 1.319488029s ago: executing program 3 (id=5360): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x2c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}}, 0x0) 1.101857613s ago: executing program 1 (id=5361): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083598082e59a49e8aefc0b45ff810500000000070058000b480400945f640094272d7061d328b92d000000004c8537db9600f854c8a4487c752f7020847ff67dcae59ba172a685d0", 0x51}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 1.020821685s ago: executing program 1 (id=5362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={r1, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x7, 0x1, 0x8, 0x0, 0x56d2, 0x1}, &(0x7f0000000100)=0x9c) 919.94369ms ago: executing program 1 (id=5363): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x8}, 0x1}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 824.99359ms ago: executing program 1 (id=5364): add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 748.769453ms ago: executing program 1 (id=5366): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 249.874693ms ago: executing program 0 (id=5367): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x20, r1, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0xb}]}]}, 0x20}}, 0x0) 185.341819ms ago: executing program 0 (id=5368): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0x3) 75.782661ms ago: executing program 0 (id=5369): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, 0x5}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000140)="b2ec", 0x2}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000200a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 0s ago: executing program 0 (id=5370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300)) kernel console output (not intermixed with test programs): vated: batadv_slave_0 [ 273.355423][T13457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.375756][T13457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.393584][T13457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.431131][T13457] team0: Port device virt_wifi0 removed [ 273.655141][T13485] netlink: 'syz.0.3078': attribute type 2 has an invalid length. [ 273.918009][T13504] Failed to get privilege flags for destination (handle=0x2:0x0) [ 274.113894][ T5919] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 274.227336][T13515] tap0: tun_chr_ioctl cmd 1074025677 [ 274.232975][ T969] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 274.234181][T13515] tap0: linktype set to 774 [ 274.283050][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 274.290389][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.302045][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.324076][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.338371][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 274.362266][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.372928][ T5919] usb 4-1: config 0 descriptor?? [ 274.411808][ T969] usb 1-1: config 0 has no interfaces? [ 274.435001][ T969] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.456832][ T969] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 274.483688][ T969] usb 1-1: Product: syz [ 274.488350][ T969] usb 1-1: Manufacturer: syz [ 274.504678][ T969] usb 1-1: config 0 descriptor?? [ 274.591009][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 274.597592][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 274.608564][ T5919] usb 4-1: USB disconnect, device number 29 [ 274.718957][ T969] usb 1-1: USB disconnect, device number 21 [ 274.773277][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 274.933482][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 274.940077][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.950250][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.960915][ T25] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.970411][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.978668][ T25] usb 7-1: Product: syz [ 274.982928][ T25] usb 7-1: Manufacturer: syz [ 274.987538][ T25] usb 7-1: SerialNumber: syz [ 275.172258][T13532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.417206][ T25] usb 7-1: 0:2 : does not exist [ 275.822168][ T25] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 275.857643][ T25] usb 7-1: USB disconnect, device number 6 [ 276.326718][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'. [ 276.337084][T13602] netlink: 'syz.1.3131': attribute type 1 has an invalid length. [ 276.345459][T13602] netlink: 'syz.1.3131': attribute type 2 has an invalid length. [ 276.354662][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3131'. [ 277.012963][T13634] program syz.0.3144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.087308][T13633] ceph: missing cluster fsid [ 277.092096][T13633] ceph: separator ':' missing in source [ 277.433790][ T5885] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 277.465426][ T29] audit: type=1326 audit(1730988596.020:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13658 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 277.502162][ T29] audit: type=1326 audit(1730988596.020:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13658 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 277.572914][ T29] audit: type=1326 audit(1730988596.020:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13658 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 277.626278][ T5885] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 277.634529][ T29] audit: type=1326 audit(1730988596.020:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13658 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 277.641316][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.684478][ T5885] usb 4-1: config 0 descriptor?? [ 277.702172][ T5885] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 277.711594][ T29] audit: type=1326 audit(1730988596.020:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13658 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 277.770170][ T29] audit: type=1326 audit(1730988596.020:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13658 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 277.827904][ T29] audit: type=1326 audit(1730988596.020:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13658 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 277.886712][ T29] audit: type=1326 audit(1730988596.020:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13658 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 278.129101][ T5885] cpia1 4-1:0.0: unexpected state after lo power cmd: d0 [ 278.532099][ T5885] gspca_cpia1: usb_control_msg 02, error -71 [ 278.545273][ T5885] gspca_cpia1: usb_control_msg 05, error -71 [ 278.551418][ T5885] cpia1 4-1:0.0: unexpected systemstate: d0 [ 278.563143][ T5885] usb 4-1: USB disconnect, device number 30 [ 278.593347][ T969] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 278.758970][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 278.767857][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.789124][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.811214][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.840224][ T969] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 278.849421][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.859870][T13715] kvm_intel: kvm [13714]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 278.876013][ T969] usb 1-1: config 0 descriptor?? [ 279.033600][ T29] audit: type=1326 audit(1730988597.570:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 279.066142][ T29] audit: type=1326 audit(1730988597.580:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 279.103414][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 279.109459][ T969] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 279.142661][ T969] usb 1-1: USB disconnect, device number 22 [ 279.224979][T13736] sctp: [Deprecated]: syz.1.3192 (pid 13736) Use of int in maxseg socket option. [ 279.224979][T13736] Use struct sctp_assoc_value instead [ 279.710380][T13765] netlink: 'syz.1.3206': attribute type 10 has an invalid length. [ 279.729806][T13765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.745525][T13765] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 280.000762][T13781] Process accounting resumed [ 280.304815][T13791] syz.0.3217 (13791): drop_caches: 1 [ 280.458253][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3226'. [ 280.467063][T13791] syz.0.3217 (13791): drop_caches: 1 [ 280.638299][T13818] vlan2: entered promiscuous mode [ 280.647419][T13818] vlan2: entered allmulticast mode [ 280.712436][T13821] Process accounting resumed [ 280.783509][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 280.946501][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 280.959789][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.974252][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.995060][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 281.017559][ T5840] Bluetooth: hci4: sending frame failed (-49) [ 281.025298][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 281.034851][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.059589][ T25] usb 4-1: config 0 descriptor?? [ 281.256807][T13848] kvm_intel: kvm [13846]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 281.443672][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.507044][ T25] playstation 0003:054C:05C4.0023: unknown main item tag 0x0 [ 281.516659][ T25] playstation 0003:054C:05C4.0023: unknown main item tag 0x0 [ 281.529402][ T25] playstation 0003:054C:05C4.0023: unknown main item tag 0x0 [ 281.537232][ T25] playstation 0003:054C:05C4.0023: unknown main item tag 0x0 [ 281.545926][ T25] playstation 0003:054C:05C4.0023: unknown main item tag 0x0 [ 281.555548][ T25] playstation 0003:054C:05C4.0023: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 281.684671][T13855] vlan2: entered promiscuous mode [ 281.689799][T13855] vlan2: entered allmulticast mode [ 281.695977][T13855] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 281.710040][ T25] playstation 0003:054C:05C4.0023: Invalid byte count transferred, expected 16 got 0 [ 281.720018][T13855] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 281.727640][ T25] playstation 0003:054C:05C4.0023: Failed to retrieve DualShock4 pairing info: -22 [ 281.742094][ T25] playstation 0003:054C:05C4.0023: Failed to get MAC address from DualShock4 [ 281.755175][T13855] team0: Port device vlan2 added [ 281.760272][ T25] playstation 0003:054C:05C4.0023: Failed to create dualshock4. [ 281.783517][ T25] playstation 0003:054C:05C4.0023: probe with driver playstation failed with error -22 [ 281.934051][ T25] usb 4-1: USB disconnect, device number 31 [ 282.158892][ T969] IPVS: starting estimator thread 0... [ 282.212267][T13880] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 282.255372][T13880] syz_tun: entered promiscuous mode [ 282.275504][T13880] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 282.294939][T13883] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 282.303567][T13878] IPVS: using max 24 ests per chain, 57600 per kthread [ 282.348958][T13883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.359168][T13883] team0: Port device bond0 added [ 282.633114][T13898] usb usb1: usbfs: process 13898 (syz.7.3274) did not claim interface 0 before use [ 283.390827][ T25] IPVS: starting estimator thread 0... [ 283.415622][T13912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3280'. [ 283.493232][T13909] IPVS: using max 19 ests per chain, 45600 per kthread [ 283.992419][T13943] netlink: 'syz.7.3285': attribute type 10 has an invalid length. [ 284.018147][T13943] syz_tun: entered promiscuous mode [ 284.029573][T13943] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 284.045690][T13943] netlink: 'syz.7.3285': attribute type 10 has an invalid length. [ 284.061039][T13943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.069859][T13943] team0: Port device bond0 added [ 284.163049][ T5840] Bluetooth: hci4: command 0x1003 tx timeout [ 284.163462][ T5886] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 284.169683][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 284.384096][ T5886] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 284.395952][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.407998][ T5886] usb 2-1: Product: syz [ 284.412370][ T5886] usb 2-1: Manufacturer: syz [ 284.418904][T13957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.431472][ T5886] usb 2-1: SerialNumber: syz [ 284.447864][ T5886] usb 2-1: config 0 descriptor?? [ 284.584347][T13967] usb usb1: usbfs: process 13967 (syz.6.3294) did not claim interface 0 before use [ 284.730316][ T5886] hso 2-1:0.0: Failed to find INT IN ep [ 284.744675][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 284.744693][ T29] audit: type=1400 audit(1730988603.300:161): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13975 comm="syz.6.3300" dest=20000 [ 284.783690][ T5886] usb-storage 2-1:0.0: USB Mass Storage device detected [ 284.902644][T13985] netlink: 'syz.0.3302': attribute type 12 has an invalid length. [ 284.913856][T13985] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.3302'. [ 285.032163][ T46] usb 2-1: USB disconnect, device number 30 [ 285.064520][T14006] @: renamed from vlan0 [ 285.236541][T14014] nicvf0: renamed from bridge_slave_1 [ 285.249165][T14014] netlink: 'syz.3.3312': attribute type 2 has an invalid length. [ 285.257895][T14016] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3313'. [ 285.273392][T14014] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 285.631876][ T29] audit: type=1400 audit(1730988604.180:162): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=14024 comm="syz.1.3314" dest=20000 [ 285.865735][T14038] netlink: 'syz.3.3322': attribute type 12 has an invalid length. [ 285.875032][T14038] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.3322'. [ 285.888303][T14042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.306261][T14064] 9pnet_fd: Insufficient options for proto=fd [ 286.345389][T14067] vcan0: tx drop: invalid da for name 0x000000000000c700 [ 286.476029][T14074] netlink: 'syz.6.3340': attribute type 10 has an invalid length. [ 286.550501][T14074] syz_tun: entered promiscuous mode [ 286.559565][T14084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.568355][T14074] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 286.585351][T14079] netlink: 'syz.1.3351': attribute type 1 has an invalid length. [ 286.594218][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 286.898545][T14104] @: renamed from vlan0 (while UP) [ 287.074624][ T5886] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 287.232865][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 287.245891][ T5886] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 287.271875][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.303615][ T5886] usb 1-1: Product: syz [ 287.307830][ T5886] usb 1-1: Manufacturer: syz [ 287.312460][ T5886] usb 1-1: SerialNumber: syz [ 287.336023][ T5886] usb 1-1: config 0 descriptor?? [ 287.443210][ T5888] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 287.480942][T14137] netlink: 47 bytes leftover after parsing attributes in process `syz.6.3367'. [ 287.558476][ T5886] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 287.593005][ T969] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 287.613525][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.632908][ T5888] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 287.642245][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.656323][ T5888] usb 2-1: config 0 descriptor?? [ 287.753024][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 287.764689][ T969] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.775986][ T969] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.802949][ T969] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.814392][ T969] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.829305][ T969] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.839524][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.962659][ T5886] usb write operation failed. (-71) [ 287.970569][ T5886] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 288.002300][ T5886] dvbdev: DVB: registering new adapter (Terratec H7) [ 288.020847][ T5886] usb 1-1: media controller created [ 288.031260][ T5886] usb read operation failed. (-71) [ 288.042728][ T5886] usb write operation failed. (-71) [ 288.051388][ T5886] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 288.064630][ T5886] usb 1-1: USB disconnect, device number 23 [ 288.073108][ T5888] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 288.114005][ T969] usb 4-1: GET_CAPABILITIES returned 0 [ 288.119537][ T969] usbtmc 4-1:16.0: can't read capabilities [ 288.130310][ T5888] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0024/input/input39 [ 288.245289][ T29] audit: type=1326 audit(1730988606.800:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.7.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 288.288790][ T5888] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 288.297730][ T29] audit: type=1326 audit(1730988606.800:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.7.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 288.333288][ T29] audit: type=1326 audit(1730988606.800:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.7.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 288.340360][ T5888] usb 4-1: USB disconnect, device number 32 [ 288.361189][ T29] audit: type=1326 audit(1730988606.800:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.7.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 288.361230][ T29] audit: type=1326 audit(1730988606.800:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.7.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 288.361260][ T29] audit: type=1326 audit(1730988606.800:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.7.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 288.361288][ T29] audit: type=1326 audit(1730988606.830:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.7.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 288.361319][ T29] audit: type=1326 audit(1730988606.830:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.7.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6cb3756e7 code=0x7ffc0000 [ 288.523839][ T5886] usb 2-1: USB disconnect, device number 31 [ 289.151105][T14181] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.180427][T14183] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3390'. [ 289.678524][T14210] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3411'. [ 289.704285][T14210] openvswitch: netlink: Multiple metadata blocks provided [ 289.842001][T14216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.902996][ T969] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 289.974429][T14222] input: syz0 as /devices/virtual/input/input40 [ 290.065349][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.090017][ T969] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.114254][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.135707][ T969] usb 4-1: config 0 descriptor?? [ 290.209820][T14232] kvm: kvm [14229]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 290.497275][T14250] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3429'. [ 290.575950][ T969] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 290.587353][ T969] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0025/input/input41 [ 290.638534][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 290.638553][ T29] audit: type=1326 audit(1730988609.190:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70be37e719 code=0x7ffc0000 [ 290.704450][ T29] audit: type=1326 audit(1730988609.190:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70be37e719 code=0x7ffc0000 [ 290.753974][ T969] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 290.756798][ T29] audit: type=1326 audit(1730988609.190:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70be37e719 code=0x7ffc0000 [ 290.800075][ T29] audit: type=1326 audit(1730988609.190:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70be37e719 code=0x7ffc0000 [ 290.866229][ T29] audit: type=1326 audit(1730988609.200:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70be37e719 code=0x7ffc0000 [ 290.930297][ T29] audit: type=1326 audit(1730988609.200:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70be37e719 code=0x7ffc0000 [ 290.971814][ T29] audit: type=1326 audit(1730988609.200:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70be37e719 code=0x7ffc0000 [ 291.031993][ T969] usb 4-1: USB disconnect, device number 33 [ 291.043545][ T29] audit: type=1326 audit(1730988609.200:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70be3756e7 code=0x7ffc0000 [ 291.130393][ T29] audit: type=1326 audit(1730988609.200:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70be31a099 code=0x7ffc0000 [ 291.163629][ T29] audit: type=1326 audit(1730988609.200:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14257 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70be3756e7 code=0x7ffc0000 [ 291.362011][T14285] kvm: kvm [14284]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 291.661241][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3445'. [ 291.945740][T14321] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 292.023167][ T5886] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 292.064748][T14328] kvm: kvm [14327]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 292.194177][ T5886] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 292.203801][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.212864][ T5886] usb 4-1: Product: syz [ 292.217247][ T5886] usb 4-1: Manufacturer: syz [ 292.252553][ T5886] usb 4-1: SerialNumber: syz [ 292.263668][ T5886] usb 4-1: config 0 descriptor?? [ 292.284378][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3463'. [ 292.548589][ T5886] hso 4-1:0.0: Failed to find INT IN ep [ 292.571169][ T5886] usb-storage 4-1:0.0: USB Mass Storage device detected [ 292.784565][ T5885] usb 4-1: USB disconnect, device number 34 [ 292.878592][T14378] netlink: 'syz.1.3477': attribute type 1 has an invalid length. [ 292.952649][T14382] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 292.964275][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 293.066008][T14385] program syz.1.3481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.133024][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 293.150072][ T46] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 293.170810][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.193522][ T46] usb 1-1: config 0 descriptor?? [ 293.916436][T14412] tap0: tun_chr_ioctl cmd 1074025672 [ 293.921808][T14412] tap0: ignored: set checksum enabled [ 294.044858][ T46] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.062915][ T46] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 294.106257][ T46] asix 1-1:0.0: probe with driver asix failed with error -71 [ 294.133853][ T46] usb 1-1: USB disconnect, device number 24 [ 294.451187][T14421] Sensor A: ================= START STATUS ================= [ 294.466209][T14421] Sensor A: Test Pattern: 75% Colorbar [ 294.472259][T14421] Sensor A: Show Information: All [ 294.478270][T14421] Sensor A: Vertical Flip: false [ 294.483407][T14421] Sensor A: Horizontal Flip: false [ 294.488863][T14421] Sensor A: Brightness: 128 [ 294.503808][T14421] Sensor A: Contrast: 128 [ 294.508315][T14421] Sensor A: Hue: 0 [ 294.512299][T14421] Sensor A: Saturation: 128 [ 294.522456][T14421] Sensor A: ================== END STATUS ================== [ 295.049379][T14453] program syz.6.3511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.313445][ T5886] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 295.463621][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 295.488375][ T5886] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.498871][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.508226][ T5886] usb 2-1: Product: syz [ 295.524034][ T5886] usb 2-1: Manufacturer: syz [ 295.528679][ T5886] usb 2-1: SerialNumber: syz [ 295.543397][ T5886] r8152-cfgselector 2-1: Unknown version 0x0000 [ 295.549818][ T5886] r8152-cfgselector 2-1: config 0 descriptor?? [ 295.700422][T14495] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 295.712215][T14495] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 295.788774][ T5886] r8152-cfgselector 2-1: Needed 2 retries to read version [ 296.013786][ T5888] r8152-cfgselector 2-1: USB disconnect, device number 32 [ 296.703409][ T46] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 296.855298][ T46] usb 7-1: config 0 has no interfaces? [ 296.863815][ T46] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 296.873447][ T46] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 296.885480][ T46] usb 7-1: Manufacturer: syz [ 296.892952][ T46] usb 7-1: SerialNumber: syz [ 296.912147][ T46] usb 7-1: config 0 descriptor?? [ 297.103907][T14555] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 297.138237][ T46] usb 7-1: USB disconnect, device number 7 [ 297.145148][T14555] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 297.416646][T14569] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.426201][T14569] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 297.461137][T14569] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.478581][T14569] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 297.510339][T14570] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.533152][T14570] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 297.554659][T14570] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.569468][T14570] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 297.658620][T14576] Sensor A: ================= START STATUS ================= [ 297.687924][T14576] Sensor A: Test Pattern: 75% Colorbar [ 297.701617][T14576] Sensor A: Show Information: All [ 297.720245][T14576] Sensor A: Vertical Flip: false [ 297.747181][T14576] Sensor A: Horizontal Flip: false [ 297.762463][T14576] Sensor A: Brightness: 128 [ 297.772670][T14576] Sensor A: Contrast: 128 [ 297.784587][T14576] Sensor A: Hue: 0 [ 297.790766][T14576] Sensor A: Saturation: 128 [ 297.804633][T14576] Sensor A: ================== END STATUS ================== [ 297.821923][T14584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.887949][T14584] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 297.923851][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3572'. [ 298.120692][T14604] netlink: 'syz.1.3579': attribute type 6 has an invalid length. [ 298.126098][T14601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.311301][T14616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.323947][T14616] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 298.523793][ T5888] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 298.674943][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.701107][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.745862][ T5888] usb 2-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 298.767934][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.781412][ T5888] usb 2-1: config 0 descriptor?? [ 299.226581][ T5888] wacom 0003:056A:037E.0026: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 299.449312][ T5885] usb 2-1: USB disconnect, device number 33 [ 299.954261][T14698] netlink: 'syz.6.3623': attribute type 6 has an invalid length. [ 300.026138][ T5886] kernel read not supported for file /dsp (pid: 5886 comm: kworker/0:4) [ 300.060814][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 300.060833][ T29] audit: type=1800 audit(1730988618.610:239): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3624" name="[kvm-gmem]" dev="anon_inodefs" ino=44845 res=0 errno=0 [ 300.135267][T14707] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3627'. [ 300.841905][T14738] IPVS: set_ctl: invalid protocol: 98 172.30.0.1:20003 [ 301.483151][T14768] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 301.977966][T14800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.998085][T14802] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 302.030989][T14802] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 302.392882][ T46] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 302.486821][T14832] tipc: Started in network mode [ 302.495968][T14832] tipc: Node identity id-name-, cluster identity 4711 [ 302.507630][T14832] tipc: Enabling of bearer rejected, failed to enable media [ 302.575710][ T46] usb 2-1: config 0 has no interfaces? [ 302.582689][ T46] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 302.599929][ T46] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 302.629927][ T46] usb 2-1: Manufacturer: syz [ 302.638277][ T46] usb 2-1: SerialNumber: syz [ 302.652369][ T46] usb 2-1: config 0 descriptor?? [ 302.725606][T14841] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3688'. [ 302.789394][T14847] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 302.898891][ T46] usb 2-1: USB disconnect, device number 34 [ 303.201831][ T29] audit: type=1800 audit(1730988621.750:240): pid=14856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3694" name="[kvm-gmem]" dev="anon_inodefs" ino=46106 res=0 errno=0 [ 303.539794][T14873] tipc: Started in network mode [ 303.547593][T14873] tipc: Node identity id-name-, cluster identity 4711 [ 303.558177][T14873] tipc: Enabling of bearer rejected, failed to enable media [ 303.691566][T14883] tipc: Enabling of bearer rejected, failed to enable media [ 304.411333][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3727'. [ 304.764922][T14945] delete_channel: no stack [ 304.770389][T14941] delete_channel: no stack [ 304.779010][T14940] tipc: Enabling of bearer rejected, failed to enable media [ 304.933617][T14952] nr0: tun_chr_ioctl cmd 1074025677 [ 304.939031][T14952] nr0: linktype set to 805 [ 305.105550][T14962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.688056][ T29] audit: type=1326 audit(1730988624.240:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 305.731901][ T29] audit: type=1326 audit(1730988624.260:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 305.778585][ T29] audit: type=1326 audit(1730988624.270:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 305.826451][ T29] audit: type=1326 audit(1730988624.270:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 305.913823][ T29] audit: type=1326 audit(1730988624.270:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 305.980936][ T29] audit: type=1326 audit(1730988624.270:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 306.002544][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.049096][ T29] audit: type=1326 audit(1730988624.270:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa774b756e7 code=0x7ffc0000 [ 306.070572][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.110290][ T29] audit: type=1326 audit(1730988624.270:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa774b1a099 code=0x7ffc0000 [ 306.192069][ T29] audit: type=1326 audit(1730988624.270:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa774b756e7 code=0x7ffc0000 [ 306.253013][ T29] audit: type=1326 audit(1730988624.270:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa774b1a099 code=0x7ffc0000 [ 306.576813][T15028] syz.0.3769: attempt to access beyond end of device [ 306.576813][T15028] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 306.633137][T15028] efs: cannot read volume header [ 307.080820][T15050] xt_bpf: check failed: parse error [ 307.264419][T15062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.390004][T15104] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3802'. [ 310.040184][T15178] program syz.6.3837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.182311][T15186] IPv6: sit1: Disabled Multicast RS [ 310.432905][ T5888] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 310.584464][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 310.601341][ T5888] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 310.619332][ T5888] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.643459][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.653288][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 310.661427][ T5888] usb 4-1: SerialNumber: syz [ 310.670583][T15188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.745740][ T5886] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 310.884787][T15188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.905538][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.917184][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.927467][ T5886] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 310.936999][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.946743][ T5886] usb 7-1: config 0 descriptor?? [ 311.309499][ T5888] cdc_ether 4-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.3-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 311.358119][ T5886] isku 0003:1E7D:319C.0027: item fetching failed at offset 3/7 [ 311.374089][ T5886] isku 0003:1E7D:319C.0027: parse failed [ 311.379830][ T5886] isku 0003:1E7D:319C.0027: probe with driver isku failed with error -22 [ 311.517925][ T5886] usb 4-1: USB disconnect, device number 35 [ 311.528058][ T5886] cdc_ether 4-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.3-1, Mobile Broadband Network Device [ 311.577453][ T46] usb 7-1: USB disconnect, device number 8 [ 312.521678][T15263] IPv6: sit1: Disabled Multicast RS [ 313.133158][ T969] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 313.298522][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.311929][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.327073][ T969] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 313.342651][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.354828][ T969] usb 2-1: config 0 descriptor?? [ 313.443293][ T5907] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.651031][T15311] pim6reg: entered allmulticast mode [ 313.659069][T15311] pim6reg: left allmulticast mode [ 313.776593][ T969] isku 0003:1E7D:319C.0028: item fetching failed at offset 3/7 [ 313.788960][ T969] isku 0003:1E7D:319C.0028: parse failed [ 313.794904][ T969] isku 0003:1E7D:319C.0028: probe with driver isku failed with error -22 [ 313.873283][ T5919] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 313.935358][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 313.986448][ T46] usb 2-1: USB disconnect, device number 35 [ 314.064673][ T5919] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 314.083698][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.103067][ T5919] usb 1-1: config 0 descriptor?? [ 314.520133][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 314.520151][ T29] audit: type=1326 audit(1730988633.070:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15330 comm="syz.3.3904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba76b7e719 code=0x0 [ 314.553901][ T5919] [drm:udl_init] *ERROR* Selecting channel failed [ 314.567666][ T5919] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 314.576088][ T5919] [drm] Initialized udl on minor 2 [ 314.613273][ T5919] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 314.632600][ T5919] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 314.646512][ T46] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 314.655772][ T46] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 314.666330][ T5919] usb 1-1: USB disconnect, device number 25 [ 314.979242][T15353] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 315.011565][T15355] Bluetooth: hci4: Frame reassembly failed (-84) [ 315.029711][ T52] Bluetooth: hci4: Frame reassembly failed (-84) [ 315.257461][T15367] tun0: tun_chr_ioctl cmd 2147767521 [ 315.363407][ T5919] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 315.546644][ T5919] usb 2-1: too many configurations: 35, using maximum allowed: 8 [ 315.600745][ T5919] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=91.b7 [ 315.622877][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.632966][ T5919] usb 2-1: Product: syz [ 315.637163][ T5919] usb 2-1: Manufacturer: syz [ 315.651973][ T5919] usb 2-1: SerialNumber: syz [ 315.694047][ T5919] usb 2-1: config 0 descriptor?? [ 315.701276][ T5919] ch341 2-1:0.0: ch341-uart converter detected [ 316.126988][ T5919] usb 2-1: failed to send control message: -71 [ 316.149109][ T5919] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 316.184295][ T5919] usb 2-1: USB disconnect, device number 36 [ 316.223571][ T5919] ch341 2-1:0.0: device disconnected [ 316.298981][T15410] netlink: 'syz.0.3937': attribute type 10 has an invalid length. [ 316.359713][T15410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.043207][ T5840] Bluetooth: hci4: command 0x1003 tx timeout [ 317.049711][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 317.296044][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.321384][T15459] tun0: tun_chr_ioctl cmd 2147767521 [ 317.610756][T15477] nr0: tun_chr_ioctl cmd 1074025677 [ 317.622728][T15477] nr0: linktype set to 823 [ 317.690430][T15485] netlink: 'syz.3.3973': attribute type 1 has an invalid length. [ 317.702189][T15485] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.3973'. [ 317.720228][T15485] netlink: 'syz.3.3973': attribute type 1 has an invalid length. [ 317.730181][T15485] netlink: 'syz.3.3973': attribute type 2 has an invalid length. [ 317.883996][ T969] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 317.898046][T15498] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 318.057436][ T969] usb 2-1: Using ep0 maxpacket: 16 [ 318.070975][T15508] tap0: tun_chr_ioctl cmd 1074025673 [ 318.076892][ T969] usb 2-1: config 8 has an invalid interface number: 179 but max is 0 [ 318.087236][ T969] usb 2-1: config 8 has no interface number 0 [ 318.103874][ T969] usb 2-1: New USB device found, idVendor=c21c, idProduct=79d3, bcdDevice=56.9d [ 318.118766][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.128395][ T969] usb 2-1: Product: syz [ 318.138542][ T969] usb 2-1: Manufacturer: syz [ 318.143775][ T969] usb 2-1: SerialNumber: syz [ 318.152235][ T969] usb 2-1: bad CDC descriptors [ 318.241950][T15516] bond0: entered promiscuous mode [ 318.247919][T15516] bond_slave_0: entered promiscuous mode [ 318.258918][T15516] bond_slave_1: entered promiscuous mode [ 318.396717][ T969] usb 2-1: USB disconnect, device number 37 [ 318.433309][ T5885] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 318.521970][T15533] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 318.593243][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 318.601378][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.624885][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.660287][ T5885] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 318.682904][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.711229][ T5885] usb 4-1: config 0 descriptor?? [ 319.135581][ T5885] lua 0003:1E7D:2C2E.0029: item fetching failed at offset 5/7 [ 319.149606][ T5885] lua 0003:1E7D:2C2E.0029: parse failed [ 319.169734][ T5885] lua 0003:1E7D:2C2E.0029: probe with driver lua failed with error -22 [ 319.336558][ T5885] usb 4-1: USB disconnect, device number 36 [ 319.492622][T15578] netlink: 'syz.7.4018': attribute type 1 has an invalid length. [ 319.511925][T15578] netlink: 9352 bytes leftover after parsing attributes in process `syz.7.4018'. [ 319.531392][T15580] program syz.1.4027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.536464][T15578] netlink: 'syz.7.4018': attribute type 1 has an invalid length. [ 319.560826][T15578] netlink: 'syz.7.4018': attribute type 2 has an invalid length. [ 320.103883][T15606] mkiss: ax0: crc mode is auto. [ 320.194572][T15609] Falling back ldisc for ttyS3. [ 320.380264][T15621] program syz.3.4033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.759584][T15641] program syz.3.4044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.972085][T15648] QAT: Device 1 not found [ 321.221421][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 321.232239][T15655] Bluetooth: hci4: Frame reassembly failed (-84) [ 322.111345][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4068'. [ 322.323657][ T5919] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 322.485348][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.497166][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.507426][ T5919] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 322.534214][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.573924][ T5919] usb 4-1: config 0 descriptor?? [ 323.005884][ T5919] hid-generic 0003:05AC:4262.002A: unbalanced delimiter at end of report description [ 323.028783][ T5919] hid-generic 0003:05AC:4262.002A: probe with driver hid-generic failed with error -22 [ 323.108438][T15722] netlink: 'syz.0.4082': attribute type 9 has an invalid length. [ 323.120425][T15722] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4082'. [ 323.234030][ T969] usb 4-1: USB disconnect, device number 37 [ 323.283771][ T5840] Bluetooth: hci4: command 0x1003 tx timeout [ 323.291622][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 323.360466][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4085'. [ 323.670503][ T29] audit: type=1326 audit(1730988642.220:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 323.735266][ T29] audit: type=1326 audit(1730988642.250:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 323.777393][ T29] audit: type=1326 audit(1730988642.270:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 323.835268][ T29] audit: type=1326 audit(1730988642.270:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 323.884769][ T29] audit: type=1326 audit(1730988642.270:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 323.948210][ T29] audit: type=1326 audit(1730988642.270:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 324.006641][ T29] audit: type=1326 audit(1730988642.270:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 324.073670][ T29] audit: type=1326 audit(1730988642.270:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa774b756e7 code=0x7ffc0000 [ 324.138326][ T29] audit: type=1326 audit(1730988642.270:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa774b1a099 code=0x7ffc0000 [ 324.243151][ T29] audit: type=1326 audit(1730988642.270:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15743 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa774b756e7 code=0x7ffc0000 [ 324.383353][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4102'. [ 324.791191][T15791] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4112'. [ 324.893405][ T5919] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 324.915593][T15801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4117'. [ 325.049531][ T5919] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 325.060375][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.071052][ T5919] usb 2-1: config 0 descriptor?? [ 325.134827][ T5885] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 325.304579][ T5885] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 325.317666][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.327558][ T5885] usb 7-1: config 0 descriptor?? [ 325.335305][ T5885] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 325.484756][ T5919] [drm:udl_init] *ERROR* Selecting channel failed [ 325.511155][ T5919] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 325.518191][ T5919] [drm] Initialized udl on minor 2 [ 325.527317][ T5919] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 325.537447][ T5919] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 325.547850][ T46] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 325.558346][ T5919] usb 2-1: USB disconnect, device number 38 [ 325.565452][ T46] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 325.747360][ T5885] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 325.837326][T15815] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4123'. [ 325.947879][ T5885] gspca_cpia1: usb_control_msg 01, error -32 [ 325.955862][ T5885] gspca_cpia1: usb_control_msg 01, error -71 [ 325.961978][ T5885] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 325.973871][ T5885] usb 7-1: USB disconnect, device number 9 [ 326.032392][T15821] netlink: 'syz.1.4126': attribute type 4 has an invalid length. [ 326.172992][ T969] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 326.329464][ T969] usb 1-1: config 0 has no interfaces? [ 326.335851][ T969] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 326.346121][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.354398][ T5886] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 326.364136][ T969] usb 1-1: config 0 descriptor?? [ 326.515155][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.530625][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 326.557095][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16349, setting to 64 [ 326.572712][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.608553][ T969] usb 1-1: USB disconnect, device number 26 [ 326.627037][ T5886] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 326.636562][ T5886] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 326.645708][ T5886] usb 2-1: Manufacturer: syz [ 326.657877][ T5886] usb 2-1: config 0 descriptor?? [ 326.670893][T15825] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 326.683581][ T5886] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 326.905642][ T5919] usb 2-1: USB disconnect, device number 39 [ 327.322104][T15855] input: syz0 as /devices/virtual/input/input45 [ 327.653084][T15873] team0: No ports can be present during mode change [ 327.743237][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4154'. [ 328.252511][T15913] Invalid/unusable pipe [ 328.437209][T15925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4176'. [ 328.450427][T15928] could not open pipe file descriptor [ 329.531837][T15983] fuse: Bad value for 'group_id' [ 329.537462][T15983] fuse: Bad value for 'group_id' [ 329.964689][T15997] bond0: Unable to set down delay as MII monitoring is disabled [ 330.910288][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4221'. [ 331.353981][ T969] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 331.514366][ T969] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 331.534664][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.544876][ T969] usb 4-1: config 0 descriptor?? [ 331.970897][ T969] playstation 0003:054C:0DF2.002B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 331.981555][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4241'. [ 332.108972][T16074] netlink: 'syz.0.4244': attribute type 9 has an invalid length. [ 332.161670][ T969] playstation 0003:054C:0DF2.002B: Invalid reportID received, expected 9 got 210 [ 332.186858][ T969] playstation 0003:054C:0DF2.002B: Failed to retrieve DualSense pairing info: -22 [ 332.211851][ T969] playstation 0003:054C:0DF2.002B: Failed to get MAC address from DualSense [ 332.229661][ T969] playstation 0003:054C:0DF2.002B: Failed to create dualsense. [ 332.241856][ T969] playstation 0003:054C:0DF2.002B: probe with driver playstation failed with error -22 [ 332.266903][T16081] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4247'. [ 332.395505][ T969] usb 4-1: USB disconnect, device number 38 [ 332.856788][T16103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.933355][ T5919] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 333.079428][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4263'. [ 333.095916][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 333.120579][ T5919] usb 7-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 333.143424][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.161840][ T5919] usb 7-1: config 0 descriptor?? [ 333.175111][ T5919] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 333.216776][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 333.216795][ T29] audit: type=1326 audit(1730988651.770:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.249289][ T29] audit: type=1326 audit(1730988651.770:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.275105][ T29] audit: type=1326 audit(1730988651.810:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.298721][ T29] audit: type=1326 audit(1730988651.810:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.321914][ T5888] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 333.329823][ T29] audit: type=1326 audit(1730988651.810:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.352637][ T29] audit: type=1326 audit(1730988651.810:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.374206][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.382309][ T29] audit: type=1326 audit(1730988651.810:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.403885][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.410653][ T29] audit: type=1326 audit(1730988651.810:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.427743][ T969] usb 7-1: USB disconnect, device number 10 [ 333.432894][ T29] audit: type=1326 audit(1730988651.810:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa774b7e719 code=0x7ffc0000 [ 333.460375][ T5885] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 333.469466][ T29] audit: type=1326 audit(1730988651.810:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.1.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 333.491272][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.502932][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 333.510359][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.521715][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.534787][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 333.545023][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 333.554864][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.570049][ T5888] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 333.579412][ T5888] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 333.587526][ T5888] usb 1-1: Manufacturer: syz [ 333.592997][ T5919] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 333.594779][ T5888] usb 1-1: config 0 descriptor?? [ 333.614898][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.629201][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.639490][ T5885] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 333.650060][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 333.658328][ T5885] usb 4-1: SerialNumber: syz [ 333.753161][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 333.760359][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 333.771670][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.781983][ T5919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.791888][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 333.801750][ T5919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 333.818382][ T5919] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 333.828514][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.843974][ T5919] usb 2-1: config 0 descriptor?? [ 333.869888][ T5851] Bluetooth: hci4: urb ffff8880118f4b00 submission failed (90) [ 333.875483][ T5885] usb 4-1: 0:2 : does not exist [ 333.882964][ T5888] rc_core: IR keymap rc-hauppauge not found [ 333.882984][ T5888] Registered IR keymap rc-empty [ 333.883063][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.904933][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.916540][ T5885] usb 4-1: USB disconnect, device number 39 [ 333.933803][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 333.946225][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input46 [ 333.984512][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.003780][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.022907][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.044046][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.063097][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.081376][ T25] usb 2-1: USB disconnect, device number 40 [ 334.083647][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.134019][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.153484][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.172914][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.194308][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.214284][ T5888] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 334.228268][ T5888] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 334.241130][T16135] ALSA: mixer_oss: invalid OSS volume '' [ 334.410374][T16141] bridge0: entered promiscuous mode [ 334.420056][ T5888] usb 1-1: USB disconnect, device number 27 [ 334.434203][T16141] macsec1: entered promiscuous mode [ 334.452395][T16141] bridge0: left promiscuous mode [ 334.750973][T16162] input: syz1 as /devices/virtual/input/input47 [ 335.587524][T16217] pim6reg: entered allmulticast mode [ 335.612902][T16217] pim6reg: left allmulticast mode [ 336.711996][T16245] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 337.353003][ T5885] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 337.503181][ T25] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 337.511063][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 337.522242][ T5885] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 337.551445][ T5885] usb 1-1: config 179 has no interface number 0 [ 337.568423][ T5885] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 337.603266][ T5885] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 337.624930][ T5885] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.647915][ T5885] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 337.673249][ T25] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 337.705364][ T5885] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 337.721533][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 337.741166][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.749592][ T5885] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 337.767959][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.790744][T16259] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 337.835764][ T25] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 337.918058][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4338'. [ 338.028626][ T25] usb 4-1: USB disconnect, device number 40 [ 338.106652][ T5885] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input48 [ 338.356952][ T25] usb 1-1: USB disconnect, device number 28 [ 338.357024][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 338.357066][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 338.389079][ T25] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 338.402014][ T5885] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 338.566051][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 338.589510][ T5908] Bluetooth: hci4: Frame reassembly failed (-84) [ 338.592241][ T5885] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 338.612335][T16295] Bluetooth: hci4: Frame reassembly failed (-84) [ 338.632849][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.663076][ T5885] usb 2-1: Product: syz [ 338.667289][ T5885] usb 2-1: Manufacturer: syz [ 338.671908][ T5885] usb 2-1: SerialNumber: syz [ 338.734994][ T5885] usb 2-1: config 0 descriptor?? [ 339.063538][ T5885] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 339.092281][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4345'. [ 339.703321][ T5852] Bluetooth: hci6: sending frame failed (-49) [ 339.711343][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 339.736914][ T5908] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 339.952976][ T5885] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 339.994735][ T5885] usb 2-1: USB disconnect, device number 41 [ 340.644133][ T5840] Bluetooth: hci4: command 0x1003 tx timeout [ 340.652052][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 341.135381][ T5919] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 341.162912][ T5919] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 341.188085][ T5919] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 341.488143][T16362] pim6reg: entered allmulticast mode [ 341.523058][T16362] pim6reg: left allmulticast mode [ 341.573984][T16364] netlink: 'syz.1.4376': attribute type 15 has an invalid length. [ 342.241805][T16402] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4391'. [ 342.323523][T16403] pim6reg: entered allmulticast mode [ 342.343276][T16403] pim6reg: left allmulticast mode [ 342.540155][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 342.557188][ T11] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 343.005797][ T5919] hid-generic 0005:0C45:1010.002D: item fetching failed at offset 0/1 [ 343.015486][ T5919] hid-generic 0005:0C45:1010.002D: probe with driver hid-generic failed with error -22 [ 343.174167][T16445] pim6reg: entered allmulticast mode [ 343.182503][T16445] pim6reg: left allmulticast mode [ 343.527732][T16464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4418'. [ 343.619445][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 343.619464][ T29] audit: type=1400 audit(1730988662.170:453): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=16467 comm="syz.1.4421" dest=20002 [ 343.816611][T16477] syz.3.4425 (16477): /proc/16477/oom_adj is deprecated, please use /proc/16477/oom_score_adj instead. [ 343.998596][T16488] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4428'. [ 344.404048][ T5888] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 344.562993][ T5840] Bluetooth: hci4: command 0x1003 tx timeout [ 344.563404][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 344.571302][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 344.586281][ T5888] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 344.601045][ T5888] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 344.644706][ T5888] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 344.668699][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.683874][ T5888] usb 2-1: Product: syz [ 344.688423][ T5888] usb 2-1: Manufacturer: syz [ 344.696896][ T5888] usb 2-1: SerialNumber: syz [ 344.717849][ T1103] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 344.745021][ T5888] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 344.766628][ T5888] dvb-usb: bulk message failed: -22 (3/0) [ 344.786226][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.796287][ T5888] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 344.809647][ T5888] usb 2-1: media controller created [ 344.835745][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.888700][T16523] overlay: Unknown parameter '/' [ 344.900002][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 344.912988][ T5888] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 344.934800][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input49 [ 344.958575][ T5888] dvb-usb: schedule remote query interval to 150 msecs. [ 344.969961][ T5888] dvb-usb: bulk message failed: -22 (3/0) [ 344.998356][ T5888] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 345.125154][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 345.131319][ T5888] dvb-usb: error while querying for an remote control event. [ 345.189417][ T5888] usb 2-1: USB disconnect, device number 42 [ 345.236452][ T5888] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 345.444047][ T5907] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.701218][T16546] use of bytesused == 0 is deprecated and will be removed in the future, [ 345.711643][T16546] use the actual size instead. [ 346.283594][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 346.433764][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 346.444476][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.452607][ T8] usb 2-1: config 0 has no interface number 0 [ 346.458956][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.478758][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.489939][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 346.503255][ T25] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 346.505305][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.524210][ T8] usb 2-1: config 0 descriptor?? [ 346.663191][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 346.677871][ T25] usb 7-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 346.696624][ T25] usb 7-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 346.719558][ T25] usb 7-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 346.729524][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 346.743009][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.752788][ T25] usb 7-1: Product: syz [ 346.756983][ T25] usb 7-1: Manufacturer: syz [ 346.761599][ T25] usb 7-1: SerialNumber: syz [ 346.795373][ T25] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 346.807020][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 346.834606][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 346.844900][ T25] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 346.861364][ T25] usb 7-1: media controller created [ 346.886851][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.902973][T16591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4474'. [ 346.925727][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 346.935129][ T25] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 346.965949][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input50 [ 346.988905][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 347.001551][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 347.032188][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 347.102970][ T5919] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 347.160225][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 347.166539][ T25] dvb-usb: error while querying for an remote control event. [ 347.233703][ T8] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.002E/input/input51 [ 347.281031][ T5919] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 347.289827][ T5919] usb 1-1: can't read configurations, error -71 [ 347.304264][ T969] usb 7-1: USB disconnect, device number 11 [ 347.313034][ T8] uclogic 0003:28BD:0094.002E: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 347.358900][ T969] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 347.429166][ T25] usb 2-1: USB disconnect, device number 43 [ 347.556774][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4484'. [ 347.571720][T16612] macsec1: entered promiscuous mode [ 347.578289][T16612] vlan0: entered promiscuous mode [ 347.590836][T16612] vlan0: left promiscuous mode [ 348.461158][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'. [ 348.477979][T16649] netpci0: tun_chr_ioctl cmd 1074025677 [ 348.494967][T16649] netpci0: linktype set to 6 [ 348.821216][T16668] netlink: 'syz.0.4510': attribute type 14 has an invalid length. [ 349.231215][T16690] input: syz0 as /devices/virtual/input/input52 [ 349.246763][ T29] audit: type=1326 audit(1730988667.800:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.328833][ T29] audit: type=1326 audit(1730988667.800:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.383706][ T29] audit: type=1326 audit(1730988667.830:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.425890][ T29] audit: type=1326 audit(1730988667.830:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.483002][ T29] audit: type=1326 audit(1730988667.830:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.521052][ T29] audit: type=1326 audit(1730988667.840:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.543994][ T29] audit: type=1326 audit(1730988667.840:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.614212][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4527'. [ 349.626286][ T29] audit: type=1326 audit(1730988667.840:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.685825][ T29] audit: type=1326 audit(1730988667.840:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 349.740732][ T29] audit: type=1326 audit(1730988667.840:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.7.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cb37e719 code=0x7ffc0000 [ 350.083547][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 350.312869][ T969] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 350.484250][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 350.500154][ T969] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.506696][T16745] netlink: 'syz.0.4543': attribute type 1 has an invalid length. [ 350.522848][ T969] usb 4-1: config 0 has no interface number 0 [ 350.526735][T16745] netlink: 'syz.0.4543': attribute type 4 has an invalid length. [ 350.536007][ T969] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.538229][T16745] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4543'. [ 350.557371][ T969] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.557404][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.559208][ T969] usb 4-1: config 0 descriptor?? [ 350.583244][T16745] NCSI netlink: No device for ifindex 458760 [ 350.595405][ T969] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 350.829962][ T969] usb 4-1: USB disconnect, device number 41 [ 350.838224][ T969] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 351.304444][T16794] wireguard0: entered promiscuous mode [ 351.309962][T16794] wireguard0: entered allmulticast mode [ 351.330069][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4567'. [ 351.656601][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4574'. [ 351.732390][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4576'. [ 351.778556][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.883641][T16815] bridge_slave_0 (unregistering): left allmulticast mode [ 351.898890][T16815] bridge_slave_0 (unregistering): left promiscuous mode [ 351.913062][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.062920][ T8] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 352.227211][ T8] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 352.242942][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.261233][ T8] usb 7-1: Product: syz [ 352.269326][ T8] usb 7-1: Manufacturer: syz [ 352.280725][ T8] usb 7-1: SerialNumber: syz [ 352.295806][ T8] usb 7-1: config 0 descriptor?? [ 352.376462][T16846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4591'. [ 352.404775][T16846] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4591'. [ 352.460482][T16851] program syz.3.4594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.564468][ T25] usb 7-1: USB disconnect, device number 12 [ 353.025409][T16887] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.034761][T16887] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.037950][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 353.043658][T16887] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.043735][T16887] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.405442][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 353.443277][ T8] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 353.452362][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.463494][ T8] usb 2-1: config 0 descriptor?? [ 353.679210][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 353.696307][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.716465][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 353.732645][ T8] usb 2-1: media controller created [ 353.805452][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.982559][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4634'. [ 354.344481][T16953] netlink: 'syz.0.4641': attribute type 6 has an invalid length. [ 354.353939][ T8] az6027: usb out operation failed. (-71) [ 354.360143][ T8] stb0899_attach: Driver disabled by Kconfig [ 354.367203][ T8] az6027: no front-end attached [ 354.367203][ T8] [ 354.377323][ T8] az6027: usb out operation failed. (-71) [ 354.397121][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 354.424310][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 354.446401][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 354.459157][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 354.488330][ T8] usb 2-1: USB disconnect, device number 44 [ 354.541332][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 354.782402][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'. [ 355.083164][ T5888] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 355.244592][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.260866][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.271728][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.286129][ T5888] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.295311][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.305445][ T5888] usb 7-1: config 0 descriptor?? [ 355.715814][T17018] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 355.716996][ T5888] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 355.730382][T17018] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 355.741399][ T5888] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 355.920058][ T5919] usb 7-1: USB disconnect, device number 13 [ 356.020149][T17032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4679'. [ 356.152978][T17032] syz_tun: left promiscuous mode [ 356.166913][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.433147][T17032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.461660][T17032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.547557][T17050] netlink: 4072 bytes leftover after parsing attributes in process `syz.6.4682'. [ 356.571735][T17050] openvswitch: netlink: Actions may not be safe on all matching packets [ 356.706824][T17032] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.716481][T17032] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.753648][T17032] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.772919][T17032] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.799443][T17032] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 356.965458][T17032] veth3: left allmulticast mode [ 356.976089][T17032] veth5: left promiscuous mode [ 356.980903][T17032] veth5: left allmulticast mode [ 357.813133][T17098] tap0: tun_chr_ioctl cmd 2147767520 [ 357.828728][T17101] input: syz0 as /devices/virtual/input/input54 [ 357.843065][T17102] input: syz0 as /devices/virtual/input/input55 [ 358.207330][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 358.412941][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 358.454318][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 358.479489][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.490545][ T9] usb 1-1: Product: syz [ 358.506405][ T9] usb 1-1: Manufacturer: syz [ 358.518328][ T9] usb 1-1: SerialNumber: syz [ 358.543645][ T9] usb 1-1: config 0 descriptor?? [ 358.765559][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 359.170295][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 359.183855][ T9] usb 1-1: USB disconnect, device number 31 [ 359.233680][T17175] netlink: 340 bytes leftover after parsing attributes in process `syz.7.4736'. [ 359.542624][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4745'. [ 359.772863][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4752'. [ 359.991658][T17216] sch_fq: defrate 0 ignored. [ 360.081079][T17228] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4761'. [ 360.101417][T17228] Κό: entered promiscuous mode [ 360.213126][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 360.384329][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 360.393489][ T9] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 360.422928][ T9] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.453360][ T9] usb 1-1: config 64 interface 0 has no altsetting 0 [ 360.463242][T17250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4772'. [ 360.471267][ T9] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 360.483644][ T9] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.509780][ T9] usb 1-1: config 64 interface 0 has no altsetting 0 [ 360.526838][ T9] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 360.547693][ T9] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.583410][ T9] usb 1-1: config 64 interface 0 has no altsetting 0 [ 360.608182][ T9] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 360.623551][ T9] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.643197][ T9] usb 1-1: config 64 interface 0 has no altsetting 0 [ 360.661824][ T9] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 360.671120][ T9] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.692558][ T9] usb 1-1: config 64 interface 0 has no altsetting 0 [ 360.708809][ T9] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 360.732270][ T9] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.773771][ T9] usb 1-1: config 64 interface 0 has no altsetting 0 [ 360.790064][ T9] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 360.799600][ T9] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.823862][ T9] usb 1-1: config 64 interface 0 has no altsetting 0 [ 360.843947][ T9] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 360.853327][ T9] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.894099][ T9] usb 1-1: config 64 interface 0 has no altsetting 0 [ 360.914282][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 360.924808][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 360.942965][ T9] usb 1-1: Product: syz [ 360.947984][ T9] usb 1-1: Manufacturer: syz [ 360.952676][ T9] usb 1-1: SerialNumber: syz [ 360.989753][ T9] yurex 1-1:64.0: USB YUREX device now attached to Yurex #0 [ 361.023101][ T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 361.175259][ T25] usb 7-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 361.186703][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.202583][ T25] usb 7-1: config 0 descriptor?? [ 361.274566][ T9] usb 1-1: USB disconnect, device number 32 [ 361.283825][ T9] yurex 1-1:64.0: USB YUREX #0 now disconnected [ 362.024138][ T25] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 362.039772][ T25] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 362.056319][ T25] asix 7-1:0.0: probe with driver asix failed with error -71 [ 362.069584][ T25] usb 7-1: USB disconnect, device number 14 [ 362.111597][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4795'. [ 362.310647][T17314] bridge_slave_0: default FDB implementation only supports local addresses [ 362.337005][T17313] wireguard0: entered promiscuous mode [ 362.357680][T17313] wireguard0: entered allmulticast mode [ 362.773188][ T1638] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 362.937063][ T1638] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 362.947245][ T1638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.956070][ T1638] usb 1-1: Product: syz [ 362.960877][ T1638] usb 1-1: Manufacturer: syz [ 362.966623][ T1638] usb 1-1: SerialNumber: syz [ 362.973562][ T1638] usb 1-1: config 0 descriptor?? [ 363.020998][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4814'. [ 363.587390][ T1638] usb 1-1: Firmware version (0.0) predates our first public release. [ 363.600211][ T1638] usb 1-1: Please update to version 0.2 or newer [ 363.665185][ T1638] usb 1-1: USB disconnect, device number 33 [ 363.894673][T17378] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4827'. [ 363.904143][T17378] netlink: 'syz.6.4827': attribute type 1 has an invalid length. [ 363.913821][T17378] netlink: 'syz.6.4827': attribute type 2 has an invalid length. [ 363.936033][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4827'. [ 364.068612][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4832'. [ 364.248319][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4838'. [ 364.443132][ T5887] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 364.459363][T17414] loop6: detected capacity change from 0 to 524288000 [ 364.597514][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.640378][ T5887] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 364.652847][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.681577][ T5887] usb 1-1: config 0 descriptor?? [ 364.717463][ T5887] comedi comedi0: Wrong number of endpoints [ 364.736183][ T5887] dt9812 1-1:0.0: driver 'dt9812' failed to auto-configure device. [ 364.880522][T17442] program syz.6.4855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.916750][ T5887] usb 1-1: USB disconnect, device number 34 [ 366.234807][T17514] Bluetooth: MGMT ver 1.23 [ 366.863635][ T5887] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 366.939423][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4898'. [ 367.025338][ T5887] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 367.062932][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.075462][ T5887] usb 1-1: config 0 descriptor?? [ 367.095877][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input56 [ 367.425862][ T1638] usb 1-1: USB disconnect, device number 35 [ 367.963090][ T5887] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 368.112904][T17560] netlink: 'syz.7.4909': attribute type 18 has an invalid length. [ 368.123600][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 368.135467][ T5887] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 368.144472][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.165218][T17560] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.172798][ T5887] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.174142][T17560] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.191726][T17560] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.201005][T17560] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.204871][ T5887] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.238918][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.272225][ T5887] usb 7-1: Product: syz [ 368.292939][ T5887] usb 7-1: Manufacturer: syz [ 368.297597][ T5887] usb 7-1: SerialNumber: syz [ 368.733841][T17568] netlink: 'syz.7.4913': attribute type 1 has an invalid length. [ 368.750915][ T5887] usb 7-1: 0:2 : does not exist [ 368.751941][T17568] netlink: 9116 bytes leftover after parsing attributes in process `syz.7.4913'. [ 368.782888][T17568] netlink: 225 bytes leftover after parsing attributes in process `syz.7.4913'. [ 369.173739][ T5887] usb 7-1: USB disconnect, device number 15 [ 370.264454][T17607] trusted_key: syz.7.4929 sent an empty control message without MSG_MORE. [ 370.401350][T17615] input: syz0 as /devices/virtual/input/input57 [ 370.497354][T17620] netlink: 'syz.0.4937': attribute type 1 has an invalid length. [ 370.505735][T17620] netlink: 9332 bytes leftover after parsing attributes in process `syz.0.4937'. [ 370.515044][T17620] netlink: 'syz.0.4937': attribute type 1 has an invalid length. [ 370.523902][T17620] netlink: 'syz.0.4937': attribute type 1 has an invalid length. [ 370.648606][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 370.648624][ T29] audit: type=1400 audit(1730988689.200:465): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="N" object="_" requested=w pid=17625 comm="syz.7.4938" name="vcsa" dev="devtmpfs" ino=16 [ 371.898894][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 372.021627][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4966'. [ 373.147365][ T29] audit: type=1326 audit(1730988691.680:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17740 comm="syz.0.4988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x0 [ 373.988954][T17777] program syz.1.5005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.169546][ T29] audit: type=1326 audit(1730988692.720:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7fc00000 [ 374.202048][ T29] audit: type=1326 audit(1730988692.720:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa774b7e719 code=0x7fc00000 [ 374.236407][T17789] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 374.272152][ T29] audit: type=1326 audit(1730988692.720:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7fc00000 [ 374.295159][ T29] audit: type=1326 audit(1730988692.720:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7fc00000 [ 374.317298][ T29] audit: type=1326 audit(1730988692.720:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7fc00000 [ 374.340186][ T29] audit: type=1326 audit(1730988692.720:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7fc00000 [ 374.364702][ T29] audit: type=1326 audit(1730988692.720:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7fc00000 [ 374.386437][ T29] audit: type=1326 audit(1730988692.720:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa774b7e719 code=0x7fc00000 [ 375.029426][T17827] tap0: tun_chr_ioctl cmd 1074025694 [ 375.401051][T17851] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.5039'. [ 375.631717][T17859] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 375.659233][T17858] vlan4: entered promiscuous mode [ 375.665757][T17858] vlan4: entered allmulticast mode [ 375.671132][T17858] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 375.701471][T17858] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 375.722418][T17858] team0: Port device vlan4 added [ 375.727000][T17866] netlink: 'syz.3.5046': attribute type 11 has an invalid length. [ 375.742006][T17866] netlink: 'syz.3.5046': attribute type 3 has an invalid length. [ 375.742236][T17861] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.759506][T17861] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.768540][T17861] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.777338][T17861] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.793944][T17861] vxlan0: entered promiscuous mode [ 375.799126][T17861] vxlan0: entered allmulticast mode [ 375.966327][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5047'. [ 376.003227][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5047'. [ 376.038790][T17878] netem: incorrect ge model size [ 376.059218][T17878] netem: change failed [ 376.318163][T17894] dvmrp0: left allmulticast mode [ 376.333126][ T1638] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 376.504650][ T1638] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 376.513621][ T1638] usb 1-1: config 0 has no interface number 0 [ 376.525397][ T1638] usb 1-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.555808][ T1638] usb 1-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 376.581724][ T1638] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 376.608363][ T1638] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 376.628661][ T1638] usb 1-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.658712][ T1638] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 376.668204][ T1638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.676558][ T1638] usb 1-1: Product: syz [ 376.685570][ T1638] usb 1-1: Manufacturer: syz [ 376.694684][ T1638] usb 1-1: SerialNumber: syz [ 376.711887][ T1638] usb 1-1: config 0 descriptor?? [ 376.722156][T17883] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 376.733728][ T1638] ums-alauda 1-1:0.189: USB Mass Storage device detected [ 376.759527][ T1638] scsi host1: usb-storage 1-1:0.189 [ 376.783815][T17916] netlink: 'syz.1.5067': attribute type 10 has an invalid length. [ 376.805165][T17916] team0: Port device netdevsim0 added [ 376.837494][T17916] netlink: 'syz.1.5067': attribute type 10 has an invalid length. [ 376.856859][T17916] team0: Port device netdevsim0 removed [ 376.881700][T17916] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 376.898833][T17918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.957021][ T5887] usb 1-1: USB disconnect, device number 36 [ 377.009509][T17924] netlink: 'syz.1.5071': attribute type 1 has an invalid length. [ 377.018004][T17924] netlink: 9116 bytes leftover after parsing attributes in process `syz.1.5071'. [ 377.032642][T17924] netlink: 'syz.1.5071': attribute type 1 has an invalid length. [ 377.040620][T17924] netlink: 217 bytes leftover after parsing attributes in process `syz.1.5071'. [ 378.018715][T17986] program syz.1.5099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.072217][T17989] netlink: 'syz.0.5100': attribute type 1 has an invalid length. [ 378.093835][T17989] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.5100'. [ 378.610638][T18024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.678641][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 378.678659][ T29] audit: type=1326 audit(1730988697.230:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 378.740266][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.749106][ T29] audit: type=1326 audit(1730988697.250:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 378.801452][ T29] audit: type=1326 audit(1730988697.270:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 378.859036][ T29] audit: type=1326 audit(1730988697.270:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 378.889374][ T29] audit: type=1326 audit(1730988697.270:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 378.945045][ T29] audit: type=1326 audit(1730988697.270:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 379.036247][ T29] audit: type=1326 audit(1730988697.270:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 379.078495][ T29] audit: type=1326 audit(1730988697.270:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 379.160656][ T29] audit: type=1326 audit(1730988697.270:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 379.219674][ T29] audit: type=1326 audit(1730988697.270:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.3.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba76b7e719 code=0x7ffc0000 [ 379.280952][T18055] netlink: 'syz.0.5131': attribute type 2 has an invalid length. [ 379.558245][T18077] ipt_ECN: cannot use operation on non-tcp rule [ 379.675569][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5144'. [ 379.698507][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5144'. [ 380.054618][ T5887] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 380.215336][ T5887] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 380.240469][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.264087][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 380.282335][ T5887] usb 1-1: SerialNumber: syz [ 380.755765][T18125] pimreg: entered allmulticast mode [ 380.840570][T18125] pimreg: left allmulticast mode [ 380.942665][ T5887] cdc_ether 1-1:1.0 eth13: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 381.131276][T17044] usb 1-1: USB disconnect, device number 37 [ 381.138865][T17044] cdc_ether 1-1:1.0 eth13: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 381.452857][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 381.623926][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.637483][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.660714][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.675964][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.713213][ T25] usb 2-1: SerialNumber: syz [ 381.810268][T18167] Cannot find set identified by id 0 to match [ 381.947086][ T25] usb 2-1: 0:2 : does not exist [ 382.025642][ T25] usb 2-1: USB disconnect, device number 45 [ 382.283781][ T9] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 382.434542][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 382.454465][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.493143][ T9] usb 1-1: config 0 descriptor?? [ 382.941907][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 382.953736][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 382.960459][ T9] [drm] Initialized udl on minor 2 [ 382.967552][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 382.976653][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 382.988614][ T5839] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 383.013008][ T5839] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 383.041606][ T9] usb 1-1: USB disconnect, device number 38 [ 383.359198][T18232] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.368259][T18232] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.377147][T18232] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.386949][T18232] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.710366][ T29] audit: type=1326 audit(1730988702.260:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 383.809062][ T29] audit: type=1326 audit(1730988702.310:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 383.830636][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.964205][ T29] audit: type=1326 audit(1730988702.310:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 384.052115][ T29] audit: type=1326 audit(1730988702.320:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 384.172512][ T29] audit: type=1326 audit(1730988702.320:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 384.281373][ T29] audit: type=1326 audit(1730988702.320:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 384.320898][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 384.329816][T18270] IPVS: stopping backup sync thread 18266 ... [ 384.330145][T18266] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 384.361105][ T29] audit: type=1326 audit(1730988702.320:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 384.389568][ T29] audit: type=1326 audit(1730988702.320:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 384.432605][ T29] audit: type=1326 audit(1730988702.320:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 384.493234][ T29] audit: type=1326 audit(1730988702.320:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.0.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 384.631719][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.643454][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.749792][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 384.751217][T18293] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 384.759818][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.774756][ T9] usb 7-1: SerialNumber: syz [ 385.000472][ T9] usb 7-1: 0:2 : does not exist [ 385.018645][ T9] usb 7-1: USB disconnect, device number 16 [ 385.957182][T18360] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5266'. [ 385.968268][T18360] bond0: option ad_select: unable to set because the bond device is up [ 386.466804][T18387] bond0: option resend_igmp: invalid value (7540) [ 386.474370][T18387] bond0: option resend_igmp: allowed values 0 - 255 [ 387.033418][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 387.183137][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 387.191043][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.204347][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 387.214325][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 387.229992][ T9] usb 4-1: SerialNumber: syz [ 387.237973][ T9] usb 4-1: config 0 descriptor?? [ 387.247429][ T9] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 387.256562][ T9] usb 4-1: No valid video chain found. [ 387.545688][ T25] usb 4-1: USB disconnect, device number 42 [ 388.830194][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5335'. [ 388.904446][T15398] bond0: (slave syz_tun): Releasing backup interface [ 389.025738][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.046786][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.175775][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.186694][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.378616][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.398480][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.458674][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 389.458691][ T29] audit: type=1326 audit(1730988708.010:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.520825][ T29] audit: type=1326 audit(1730988708.050:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.571258][ T29] audit: type=1326 audit(1730988708.050:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.622195][ T35] team0: Port device vlan2 removed [ 389.633056][ T29] audit: type=1326 audit(1730988708.050:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.668126][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.678707][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.692006][ T29] audit: type=1326 audit(1730988708.050:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.762852][ T29] audit: type=1326 audit(1730988708.050:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.806903][ T29] audit: type=1326 audit(1730988708.050:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.829668][ T29] audit: type=1326 audit(1730988708.050:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.851746][ T29] audit: type=1326 audit(1730988708.050:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.873960][ T29] audit: type=1326 audit(1730988708.050:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d577e719 code=0x7ffc0000 [ 389.914108][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.937237][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.976546][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.981779][ T35] bridge_slave_1: left allmulticast mode [ 389.989323][ T35] bridge_slave_1: left promiscuous mode [ 389.996522][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.022194][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.078837][ T35] bridge_slave_0: left allmulticast mode [ 390.108856][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 390.120355][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.130239][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.344356][T18550] syz.1.5350 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 390.386142][ T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 390.393052][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 390.556479][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 390.562826][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 390.570823][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.571710][ T9] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 390.582220][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.590397][ T9] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.613838][ T9] usb 4-1: config 64 interface 0 has no altsetting 0 [ 390.621690][ T9] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 390.631748][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 390.631777][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 390.631801][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.632884][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 390.641768][ T9] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.669905][ T25] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 390.677832][ T9] usb 4-1: config 64 interface 0 has no altsetting 0 [ 390.701347][ T25] usb 1-1: Manufacturer: syz [ 390.703493][ T9] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 390.716577][ T9] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.719507][ T25] usb 1-1: config 0 descriptor?? [ 390.734520][ T9] usb 4-1: config 64 interface 0 has no altsetting 0 [ 390.742431][ T9] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 390.751751][ T9] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.764207][ T9] usb 4-1: config 64 interface 0 has no altsetting 0 [ 390.771938][ T9] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 390.781308][ T9] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.800290][ T9] usb 4-1: config 64 interface 0 has no altsetting 0 [ 390.808348][ T9] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 390.817969][ T9] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.830473][ T9] usb 4-1: config 64 interface 0 has no altsetting 0 [ 390.838736][ T9] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 390.847943][ T9] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.859801][ T9] usb 4-1: config 64 interface 0 has no altsetting 0 [ 390.867882][ T9] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 390.882214][ T9] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.894574][ T9] usb 4-1: config 64 interface 0 has no altsetting 0 [ 390.904533][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 390.918658][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 390.928142][ T9] usb 4-1: Product: syz [ 390.932323][ T9] usb 4-1: Manufacturer: syz [ 390.937983][ T9] usb 4-1: SerialNumber: syz [ 390.963332][ T9] yurex 4-1:64.0: USB YUREX device now attached to Yurex #0 [ 390.994485][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.009918][ T35] bond_slave_0: left promiscuous mode [ 391.021818][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.033039][ T25] rc_core: IR keymap rc-hauppauge not found [ 391.038955][ T25] Registered IR keymap rc-empty [ 391.040816][ T35] bond_slave_1: left promiscuous mode [ 391.050964][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.060090][ T35] bond0 (unregistering): Released all slaves [ 391.079328][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.103278][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 391.132975][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input58 [ 391.148766][ T35] Κό: left promiscuous mode [ 391.149684][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.202354][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.232439][ T9] usb 4-1: USB disconnect, device number 43 [ 391.240051][ T9] yurex 4-1:64.0: USB YUREX #0 now disconnected [ 391.246585][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.287650][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.306111][ T35] tipc: Left network mode [ 391.332836][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.363791][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.377916][T18546] chnl_net:caif_netlink_parms(): no params data found [ 391.399349][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.424447][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.453313][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.465799][T18546] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.473336][T18546] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.480507][T18546] bridge_slave_0: entered allmulticast mode [ 391.487509][T18546] bridge_slave_0: entered promiscuous mode [ 391.493457][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.514799][ T25] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 391.525634][ T25] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 391.542263][T18546] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.549900][T18546] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.557340][T18546] bridge_slave_1: entered allmulticast mode [ 391.565462][T18546] bridge_slave_1: entered promiscuous mode [ 391.610498][T18546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.628664][ T35] hsr_slave_0: left promiscuous mode [ 391.635638][ T35] hsr_slave_1: left promiscuous mode [ 391.645237][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.652665][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.683520][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.690977][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.717581][T18574] syz.1.5365 uses obsolete (PF_INET,SOCK_PACKET) [ 391.741440][ T35] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 391.748976][ T35] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 391.756329][ T35] veth1_macvtap: left promiscuous mode [ 391.762104][ T35] veth0_macvtap: left promiscuous mode [ 391.768522][ T35] veth1_vlan: left promiscuous mode [ 391.778171][ T35] veth0_vlan: left promiscuous mode [ 392.062424][ T35] team0 (unregistering): Port device vlan4 removed [ 392.252823][ T5840] Bluetooth: hci4: command tx timeout [ 392.269070][T18587] program syz.1.5361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.671993][ T35] team0 (unregistering): Port device team_slave_1 removed [ 392.719252][ T35] team0 (unregistering): Port device team_slave_0 removed [ 393.079450][ T9] usb 1-1: USB disconnect, device number 39 [ 393.125667][T18598] netlink: 'syz.0.5367': attribute type 11 has an invalid length. [ 393.320698][T18546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.330589][T18575] netlink: 'syz.7.5356': attribute type 10 has an invalid length. [ 393.342885][T18575] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 393.355772][T18575] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 393.368904][T18575] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 393.392649][T18575] team0: Port device netdevsim0 added [ 393.398752][T18576] netlink: 'syz.7.5356': attribute type 10 has an invalid length. [ 393.411710][T18576] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 393.418944][T18576] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 393.427380][T18576] [ 393.429725][T18576] ============================================ [ 393.435855][T18576] WARNING: possible recursive locking detected [ 393.441993][T18576] 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 Not tainted [ 393.449094][T18576] -------------------------------------------- [ 393.455265][T18576] syz.7.5356/18576 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 393.461318][T18576] ffff88805fec0d40 (team->team_lock_key#8){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 393.471583][T18576] [ 393.471583][T18576] but task is already holding lock: [ 393.478954][T18576] ffff88805fec0d40 (team->team_lock_key#8){+.+.}-{3:3}, at: team_del_slave+0x32/0x1d0 [ 393.488574][T18576] [ 393.488574][T18576] other info that might help us debug this: [ 393.496639][T18576] Possible unsafe locking scenario: [ 393.496639][T18576] [ 393.504094][T18576] CPU0 [ 393.507378][T18576] ---- [ 393.510661][T18576] lock(team->team_lock_key#8); [ 393.515634][T18576] lock(team->team_lock_key#8); [ 393.520603][T18576] [ 393.520603][T18576] *** DEADLOCK *** [ 393.520603][T18576] [ 393.528753][T18576] May be due to missing lock nesting notation [ 393.528753][T18576] [ 393.537079][T18576] 2 locks held by syz.7.5356/18576: [ 393.542286][T18576] #0: ffffffff8fcc13c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 393.551727][T18576] #1: ffff88805fec0d40 (team->team_lock_key#8){+.+.}-{3:3}, at: team_del_slave+0x32/0x1d0 [ 393.561782][T18576] [ 393.561782][T18576] stack backtrace: [ 393.567676][T18576] CPU: 1 UID: 0 PID: 18576 Comm: syz.7.5356 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 393.578449][T18576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 393.588502][T18576] Call Trace: [ 393.591791][T18576] [ 393.594732][T18576] dump_stack_lvl+0x241/0x360 [ 393.599430][T18576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.604646][T18576] ? __pfx__printk+0x10/0x10 [ 393.609258][T18576] ? lockdep_unlock+0x16a/0x300 [ 393.614135][T18576] print_deadlock_bug+0x483/0x620 [ 393.619181][T18576] validate_chain+0x15e2/0x5920 [ 393.624047][T18576] ? __pfx_validate_chain+0x10/0x10 [ 393.629273][T18576] ? mark_lock+0x9a/0x360 [ 393.633615][T18576] ? __pfx_validate_chain+0x10/0x10 [ 393.638828][T18576] ? __lock_acquire+0x1384/0x2050 [ 393.643875][T18576] ? mark_lock+0x9a/0x360 [ 393.648236][T18576] ? __lock_acquire+0x1384/0x2050 [ 393.648272][T18576] ? mark_lock+0x9a/0x360 [ 393.648292][T18576] __lock_acquire+0x1384/0x2050 [ 393.648323][T18576] lock_acquire+0x1ed/0x550 [ 393.648348][T18576] ? team_port_change_check+0x51/0x1e0 [ 393.648372][T18576] ? __pfx_lock_acquire+0x10/0x10 [ 393.648396][T18576] ? lockdep_hardirqs_on+0x99/0x150 [ 393.648417][T18576] ? __pfx___might_resched+0x10/0x10 [ 393.648439][T18576] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 393.648458][T18576] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 393.648481][T18576] ? lock_timer_base+0x220/0x240 [ 393.648505][T18576] __mutex_lock+0x136/0xd70 [ 393.648525][T18576] ? team_port_change_check+0x51/0x1e0 [ 393.648548][T18576] ? bond_netdev_event+0xdd/0xf20 [ 393.648568][T18576] ? __timer_delete_sync+0x15c/0x310 [ 393.648589][T18576] ? team_port_change_check+0x51/0x1e0 [ 393.648610][T18576] ? __pfx___mutex_lock+0x10/0x10 [ 393.648634][T18576] ? __asan_memset+0x23/0x50 [ 393.648658][T18576] team_port_change_check+0x51/0x1e0 [ 393.648685][T18576] team_device_event+0x161/0x5b0 [ 393.648704][T18576] ? notifier_call_chain+0x162/0x3e0 [ 393.648729][T18576] notifier_call_chain+0x19f/0x3e0 [ 393.648755][T18576] dev_close_many+0x33c/0x4c0 [ 393.648777][T18576] ? __pfx_dev_close_many+0x10/0x10 [ 393.648799][T18576] vlan_device_event+0x18b7/0x1de0 [ 393.648823][T18576] ? br_device_event+0x148/0x970 [ 393.648848][T18576] ? __pfx_phonet_device_notify+0x10/0x10 [ 393.648869][T18576] ? __pfx_vlan_device_event+0x10/0x10 [ 393.648889][T18576] ? __pfx_br_device_event+0x10/0x10 [ 393.648914][T18576] ? raw_notifier+0x9d/0x740 [ 393.648937][T18576] ? cgw_notifier+0xd8/0x3b0 [ 393.648953][T18576] ? packet_notifier+0x76/0xa30 [ 393.648979][T18576] notifier_call_chain+0x19f/0x3e0 [ 393.649006][T18576] dev_close_many+0x33c/0x4c0 [ 393.649026][T18576] ? __pfx_dev_close_many+0x10/0x10 [ 393.649045][T18576] ? __local_bh_enable_ip+0x168/0x200 [ 393.649069][T18576] dev_close+0x1c0/0x2c0 [ 393.649087][T18576] ? __pfx_dev_close+0x10/0x10 [ 393.649104][T18576] ? _raw_spin_unlock+0x28/0x50 [ 393.649124][T18576] team_port_del+0x517/0xcc0 [ 393.649146][T18576] ? __pfx_team_port_del+0x10/0x10 [ 393.649164][T18576] ? __dev_change_flags+0x515/0x6f0 [ 393.649183][T18576] ? team_del_slave+0x32/0x1d0 [ 393.649207][T18576] ? __pfx___mutex_lock+0x10/0x10 [ 393.649229][T18576] ? vprintk_emit+0x7ed/0xa10 [ 393.649250][T18576] ? __pfx_vprintk_emit+0x10/0x10 [ 393.649272][T18576] team_del_slave+0x3d/0x1d0 [ 393.649299][T18576] do_setlink+0xeff/0x41f0 [ 393.649321][T18576] ? _printk+0xd5/0x120 [ 393.649341][T18576] ? __nla_validate_parse+0x4f4/0x3090 [ 393.649364][T18576] ? __pfx__printk+0x10/0x10 [ 393.649385][T18576] ? __pfx_do_setlink+0x10/0x10 [ 393.649405][T18576] ? __nla_validate_parse+0x26ce/0x3090 [ 393.649426][T18576] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 393.649446][T18576] ? rtnl_newlink+0xf2/0x20a0 [ 393.649475][T18576] ? __pfx___nla_validate_parse+0x10/0x10 [ 393.649510][T18576] ? validate_linkmsg+0x71e/0x900 [ 393.649534][T18576] rtnl_newlink+0x180d/0x20a0 [ 393.649568][T18576] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.649591][T18576] ? do_raw_spin_unlock+0x13c/0x8b0 [ 393.649616][T18576] ? __mutex_lock+0x9ab/0xd70 [ 393.649638][T18576] ? __mutex_lock+0x52a/0xd70 [ 393.649666][T18576] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.649694][T18576] rtnetlink_rcv_msg+0x73f/0xcf0 [ 393.649712][T18576] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 393.649731][T18576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.649752][T18576] ? ref_tracker_free+0x643/0x7e0 [ 393.649775][T18576] netlink_rcv_skb+0x1e3/0x430 [ 393.649796][T18576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.649815][T18576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.649844][T18576] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.649866][T18576] netlink_unicast+0x7f6/0x990 [ 393.649887][T18576] ? __pfx_netlink_unicast+0x10/0x10 [ 393.649905][T18576] ? __virt_addr_valid+0x183/0x530 [ 393.649925][T18576] ? __check_object_size+0x48e/0x900 [ 393.649952][T18576] netlink_sendmsg+0x8e4/0xcb0 [ 393.649978][T18576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.650003][T18576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.650023][T18576] __sock_sendmsg+0x221/0x270 [ 393.650043][T18576] ____sys_sendmsg+0x52a/0x7e0 [ 393.650069][T18576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.650097][T18576] __sys_sendmsg+0x292/0x380 [ 393.650120][T18576] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.650153][T18576] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 393.650182][T18576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.650206][T18576] ? exc_page_fault+0x590/0x8c0 [ 393.650227][T18576] ? do_syscall_64+0xb6/0x230 [ 393.650250][T18576] do_syscall_64+0xf3/0x230 [ 393.650270][T18576] ? clear_bhb_loop+0x35/0x90 [ 393.650293][T18576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.650327][T18576] RIP: 0033:0x7ff6cb37e719 [ 393.650353][T18576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.650371][T18576] RSP: 002b:00007ff6cc0f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.650392][T18576] RAX: ffffffffffffffda RBX: 00007ff6cb536058 RCX: 00007ff6cb37e719 [ 393.650408][T18576] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 393.650422][T18576] RBP: 00007ff6cb3f139e R08: 0000000000000000 R09: 0000000000000000 [ 393.650434][T18576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.650447][T18576] R13: 0000000000000001 R14: 00007ff6cb536058 R15: 00007ffecf50dff8 [ 393.650468][T18576] [ 394.322858][ T5840] Bluetooth: hci4: command tx timeout [ 396.402913][ T5840] Bluetooth: hci4: command tx timeout [ 398.482850][ T5840] Bluetooth: hci4: command tx timeout