last executing test programs: 3.618448486s ago: executing program 3 (id=6923): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$inet_buf(r0, 0x0, 0x27, 0x0, 0x0) 3.189021949s ago: executing program 4 (id=6929): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.742529176s ago: executing program 3 (id=6933): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8d, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 2.699194339s ago: executing program 2 (id=6934): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x4, 0x1, 0x0, 0x0, 0xd}, 0x9c) 2.595761453s ago: executing program 0 (id=6935): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020) 2.262878784s ago: executing program 0 (id=6936): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x118000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.137110902s ago: executing program 4 (id=6937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e24, 0x8}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00B\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) 1.954867578s ago: executing program 4 (id=6938): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000000, 0x7, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getgroups(0x0, 0x0) 1.941585708s ago: executing program 3 (id=6939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_RTT={0x8}]}}]}, 0x44}}, 0x0) 1.673455892s ago: executing program 2 (id=6940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/250, 0xfa}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 1.669677663s ago: executing program 3 (id=6941): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 1.426794027s ago: executing program 2 (id=6942): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="169a", 0x2}, {&(0x7f0000000280)='\x00', 0x1}], 0x2}}], 0x1, 0x0) 1.380970414s ago: executing program 3 (id=6944): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x4}}, 0x10) 1.24952299s ago: executing program 2 (id=6945): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x82, &(0x7f00000000c0), 0x8) 1.072473788s ago: executing program 0 (id=6946): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, 0x0) 1.042076282s ago: executing program 1 (id=6947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="1e8292", 0xfff6}], 0x2) 875.723802ms ago: executing program 1 (id=6948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 737.088036ms ago: executing program 0 (id=6949): unshare(0x20000400) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230a02, 0x0) timerfd_gettime(r0, 0x0) 688.00853ms ago: executing program 1 (id=6950): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1f70696473"], 0x6) 606.805776ms ago: executing program 4 (id=6951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000740)="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", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x27) 560.332167ms ago: executing program 1 (id=6952): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 501.60758ms ago: executing program 0 (id=6953): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x0, 0x0, 0xb, 0x1fd, 0x1}) 418.930147ms ago: executing program 4 (id=6954): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) 361.939211ms ago: executing program 1 (id=6955): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) 187.722593ms ago: executing program 2 (id=6956): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) 179.480505ms ago: executing program 0 (id=6957): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) 138.061335ms ago: executing program 1 (id=6958): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) 108.204732ms ago: executing program 4 (id=6959): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78) 54.85867ms ago: executing program 3 (id=6960): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="770b0098") 0s ago: executing program 2 (id=6961): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="f4", 0x1}], 0x1) kernel console output (not intermixed with test programs): 35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.147200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.287087][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.594416][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5101'. [ 462.780657][ T1066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.789575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.336610][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.876578][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 463.886566][ T29] audit: type=1400 audit(1726242393.193:3049): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16492 comm="syz.0.5117" dest=20000 netif=wpan0 [ 464.052650][T16497] netlink: 'syz.2.5119': attribute type 6 has an invalid length. [ 464.098843][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.118148][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.150930][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 464.181008][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.211672][ T25] usb 2-1: config 0 descriptor?? [ 464.243227][ T29] audit: type=1326 audit(1726242393.563:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 464.288960][ T29] audit: type=1326 audit(1726242393.563:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 464.354772][ T29] audit: type=1326 audit(1726242393.563:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 464.377390][ T5226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.436482][ T29] audit: type=1326 audit(1726242393.563:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 464.506460][ T29] audit: type=1326 audit(1726242393.563:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 464.586217][ T29] audit: type=1326 audit(1726242393.563:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 464.668682][ T29] audit: type=1326 audit(1726242393.563:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 464.700695][ T25] wacom 0003:056A:00B1.0055: unknown main item tag 0x0 [ 464.720518][ T25] wacom 0003:056A:00B1.0055: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 464.733587][ T29] audit: type=1326 audit(1726242393.563:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 464.755935][ T25] wacom 0003:056A:00B1.0055: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.1-1/input0 [ 464.780048][ T25] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B1.0055/input/input57 [ 464.802610][ T29] audit: type=1326 audit(1726242393.563:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.2.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 464.975138][ T25] usb 2-1: USB disconnect, device number 44 [ 464.996486][ T5226] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 465.097176][T16513] tap0: tun_chr_ioctl cmd 1074025677 [ 465.104675][T16513] tap0: linktype set to 8 [ 465.199624][ T5226] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 465.213431][ T5226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.246228][ T5226] usb 4-1: Product: syz [ 465.259177][ T5226] usb 4-1: Manufacturer: syz [ 465.263850][ T5226] usb 4-1: SerialNumber: syz [ 465.285733][ T5226] usb 4-1: config 0 descriptor?? [ 465.295331][ T5226] ch341 4-1:0.0: ch341-uart converter detected [ 465.406906][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.737494][T16526] Process accounting resumed [ 465.969390][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.117533][ T5226] usb 4-1: failed to send control message: -71 [ 466.123830][ T5226] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 466.166874][ T5226] usb 4-1: USB disconnect, device number 59 [ 466.174038][ T5226] ch341 4-1:0.0: device disconnected [ 466.446856][ T5226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.238507][ T5319] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 467.438473][ T5319] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 467.456438][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.486946][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.488127][ T5319] usb 3-1: config 0 descriptor?? [ 467.524484][ T5319] cp210x 3-1:0.0: cp210x converter detected [ 467.750034][T16567] netlink: 'syz.1.5150': attribute type 21 has an invalid length. [ 467.779369][T16567] netlink: 'syz.1.5150': attribute type 1 has an invalid length. [ 467.886977][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.895479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.970746][ T5319] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 468.209776][ T5319] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 468.241256][ T5319] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 468.263117][ T5319] usb 3-1: cp210x converter now attached to ttyUSB0 [ 468.278594][ T5319] usb 3-1: USB disconnect, device number 46 [ 468.297418][ T5319] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 468.305643][ T5319] cp210x 3-1:0.0: device disconnected [ 468.526684][ T5226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.534857][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.543366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.643676][T16579] sit0: entered promiscuous mode [ 468.682051][T16579] netlink: 'syz.3.5155': attribute type 1 has an invalid length. [ 468.721008][T16579] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5155'. [ 469.567510][ T5226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.606673][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.240934][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 471.240955][ T29] audit: type=1326 audit(1726242400.563:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 471.336628][ T29] audit: type=1326 audit(1726242400.563:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 471.416777][ T29] audit: type=1326 audit(1726242400.603:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 471.488632][ T29] audit: type=1326 audit(1726242400.603:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 471.587703][ T29] audit: type=1326 audit(1726242400.613:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 471.649608][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.679883][ T29] audit: type=1326 audit(1726242400.613:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 471.743439][ T29] audit: type=1326 audit(1726242400.613:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 471.794281][ T29] audit: type=1326 audit(1726242400.613:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 471.854734][ T29] audit: type=1326 audit(1726242400.613:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16620 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 472.067797][T16640] bpf: Bad value for 'gid' [ 472.541351][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.563000][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.578947][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.607272][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.615618][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 472.624598][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.638499][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.646060][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.653739][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.665352][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.673544][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 472.687533][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.704561][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.904116][T16648] lo speed is unknown, defaulting to 1000 [ 473.007812][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.016260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.159138][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5189'. [ 473.329882][T16648] chnl_net:caif_netlink_parms(): no params data found [ 473.733962][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.749988][T16648] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.791993][T16648] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.827553][T16648] bridge_slave_0: entered allmulticast mode [ 473.842688][T16648] bridge_slave_0: entered promiscuous mode [ 473.875072][T16648] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.894249][T16648] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.906871][T16648] bridge_slave_1: entered allmulticast mode [ 473.924697][T16648] bridge_slave_1: entered promiscuous mode [ 474.067242][T16648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.109233][T16648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.187860][T16695] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5202'. [ 474.236584][T16695] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5202'. [ 474.296929][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.305371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.306110][T16648] team0: Port device team_slave_0 added [ 474.381399][T16648] team0: Port device team_slave_1 added [ 474.549313][T16648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.573707][T16648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.631665][T16648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.749533][T16648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.766955][ T5231] Bluetooth: hci1: command tx timeout [ 474.767505][T16648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.781282][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.807937][T16648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.936961][T16648] hsr_slave_0: entered promiscuous mode [ 474.953190][T16648] hsr_slave_1: entered promiscuous mode [ 474.969247][T16648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.984112][T16648] Cannot create hsr debugfs directory [ 474.996039][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.006184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.623632][T16648] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.806793][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.950652][T16648] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.155580][T16648] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.266640][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 476.344748][T16648] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.496587][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 476.510984][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 476.526448][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.563885][ T9] usb 2-1: Product: syz [ 476.571422][ T9] usb 2-1: Manufacturer: syz [ 476.586407][ T9] usb 2-1: SerialNumber: syz [ 476.594565][ T9] usb 2-1: config 0 descriptor?? [ 476.629731][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 476.762351][T16648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 476.792879][T16648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 476.847140][ T5231] Bluetooth: hci1: command tx timeout [ 476.860604][T16648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.928653][T16648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.166716][ T5342] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 477.184968][T16648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.237268][T16648] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.266082][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.273596][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.323849][T14820] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.331281][T14820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.358259][ T5342] usb 4-1: Using ep0 maxpacket: 8 [ 477.370834][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 477.401911][ T5342] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 477.435362][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.480978][ T5342] usb 4-1: config 0 descriptor?? [ 477.497868][ T9] gspca_ov534_9: reg_w failed -71 [ 477.724646][ T5342] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 477.889101][ T5342] net_ratelimit: 1 callbacks suppressed [ 477.889125][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.906528][ T9] gspca_ov534_9: Unknown sensor 0000 [ 477.906632][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 477.934252][ T9] usb 2-1: USB disconnect, device number 45 [ 477.971716][T16648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.992022][ T25] usb 4-1: USB disconnect, device number 60 [ 478.015126][ T25] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 478.664528][T16797] cannot load conntrack support for proto=3 [ 478.673618][T16648] veth0_vlan: entered promiscuous mode [ 478.712054][T16648] veth1_vlan: entered promiscuous mode [ 478.769100][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.777659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.811407][T16648] veth0_macvtap: entered promiscuous mode [ 478.845733][T16648] veth1_macvtap: entered promiscuous mode [ 478.926684][ T5231] Bluetooth: hci1: command tx timeout [ 478.933125][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.946942][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.970086][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.986485][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.998962][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.010737][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.022184][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.032354][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.043233][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.054693][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.065981][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.088784][T16648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.110180][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.123619][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.143799][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.157705][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.176506][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.198801][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.227626][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.249908][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.267086][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.286450][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.306429][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.327658][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.348532][T16648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.401129][T16648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.440959][T16648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.470794][T16648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.503147][T16648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.788074][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.833324][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.846750][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 479.920476][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.944518][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.968898][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.060638][T14820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.069223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.088534][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.136508][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.178621][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 480.196462][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.227411][ T9] usb 4-1: config 0 descriptor?? [ 480.678955][ T9] hid-generic 0003:05AC:4262.0056: unbalanced delimiter at end of report description [ 480.725329][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5253'. [ 480.736234][ T9] hid-generic 0003:05AC:4262.0056: probe with driver hid-generic failed with error -22 [ 480.962183][ T5282] usb 4-1: USB disconnect, device number 61 [ 481.006849][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.007660][ T5231] Bluetooth: hci1: command tx timeout [ 481.256455][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 481.447349][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 481.455964][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 481.474065][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 481.491378][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.532869][ T9] usb 3-1: Product: syz [ 481.543970][ T9] usb 3-1: Manufacturer: syz [ 481.565054][ T9] usb 3-1: SerialNumber: syz [ 481.591015][ T9] usb 3-1: config 0 descriptor?? [ 481.620509][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 481.638605][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 482.046875][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.076648][ T46] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 482.239471][ T9] em28xx 3-1:0.0: chip ID is em2800 [ 482.276600][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 482.308009][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 482.323558][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 482.357831][ T46] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 482.371159][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.396647][ T46] usb 4-1: Product: syz [ 482.401051][ T46] usb 4-1: Manufacturer: syz [ 482.405672][ T46] usb 4-1: SerialNumber: syz [ 482.467627][ T46] usb 4-1: config 0 descriptor?? [ 482.477608][ T46] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 482.505547][ T46] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 482.561009][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 482.578393][ T9] em28xx 3-1:0.0: board has no eeprom [ 482.656578][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 482.664498][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 482.692340][ T5319] em28xx 3-1:0.0: Binding DVB extension [ 482.716091][ T9] usb 3-1: USB disconnect, device number 47 [ 482.728225][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 482.783601][ T5319] em28xx 3-1:0.0: Registering input extension [ 482.791467][ T9] em28xx 3-1:0.0: Closing input extension [ 482.901783][ T9] em28xx 3-1:0.0: Freeing device [ 483.065379][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5279'. [ 483.092910][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.102199][ T46] em28xx 4-1:0.0: chip ID is em2874 [ 483.346268][ T9] usb 4-1: USB disconnect, device number 62 [ 483.353285][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 483.371482][ T9] em28xx 4-1:0.0: Freeing device [ 484.025860][ T29] audit: type=1326 audit(1726242413.343:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16911 comm="syz.1.5294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x0 [ 484.101738][ T29] audit: type=1326 audit(1726242413.373:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16911 comm="syz.1.5294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x0 [ 484.127045][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.468822][T16928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5301'. [ 484.496597][T16928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5301'. [ 484.535146][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.543848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.615897][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5312'. [ 485.168172][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.207445][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.587159][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5333'. [ 486.647319][T16997] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 486.668158][T16997] macsec2: entered promiscuous mode [ 486.683405][T16997] macsec2: entered allmulticast mode [ 486.706601][T16997] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 486.958316][ T29] audit: type=1326 audit(1726242416.283:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 487.016573][ T29] audit: type=1326 audit(1726242416.283:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 487.076620][ T29] audit: type=1326 audit(1726242416.313:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 487.149519][ T29] audit: type=1326 audit(1726242416.313:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 487.219758][ T29] audit: type=1326 audit(1726242416.323:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 487.246770][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.274360][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 487.315075][ T29] audit: type=1326 audit(1726242416.323:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 487.381161][ T29] audit: type=1326 audit(1726242416.333:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 487.459475][ T29] audit: type=1326 audit(1726242416.343:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 487.514493][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 487.544310][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.575472][ T9] usb 2-1: Product: syz [ 487.580957][ T9] usb 2-1: Manufacturer: syz [ 487.585607][ T9] usb 2-1: SerialNumber: syz [ 487.613712][ T9] usb 2-1: config 0 descriptor?? [ 487.628048][T17017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5340'. [ 488.287743][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.477369][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 488.485667][ T9] usb 2-1: Please update to version 0.2 or newer [ 488.586971][ T9] usb 2-1: USB disconnect, device number 46 [ 489.327198][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.659468][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.668303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.367221][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.421039][T17102] dvmrp1: entered allmulticast mode [ 490.436435][ T25] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 490.455333][T17102] dvmrp1: left allmulticast mode [ 490.637934][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.676597][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.697134][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 490.706246][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.731328][ T25] usb 2-1: config 0 descriptor?? [ 490.745413][ T25] hub 2-1:0.0: USB hub found [ 490.958770][ T25] hub 2-1:0.0: 1 port detected [ 491.386778][ T25] usb 2-1: USB disconnect, device number 47 [ 491.425089][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.570581][ T1066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.579195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.828484][T17128] netlink: 'syz.3.5390': attribute type 1 has an invalid length. [ 491.858898][T17128] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5390'. [ 492.455153][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.573749][T17152] nbd: device at index 3 is going down [ 492.787801][T17157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.510966][ T25] net_ratelimit: 3 callbacks suppressed [ 493.510987][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.877093][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5417'. [ 493.953107][T17190] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5419'. [ 494.526851][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.107759][T17226] ALSA: mixer_oss: invalid OSS volume '' [ 495.408882][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.417479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.566820][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.586558][ T46] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 495.788526][ T46] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 495.820336][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.838067][ T46] usb 4-1: config 0 descriptor?? [ 496.006592][ T5342] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 496.104064][ T46] [drm] vendor descriptor length:6 data:06 5f 14 24 49 ef 00 00 00 00 00 [ 496.126906][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 496.197028][ T5342] usb 2-1: Using ep0 maxpacket: 32 [ 496.212923][ T5342] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.232909][ T5342] usb 2-1: config 0 has no interface number 0 [ 496.243069][ T5342] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.266842][ T5342] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.290301][ T5342] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 496.315905][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 496.338071][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.370881][ T5342] usb 2-1: config 0 descriptor?? [ 496.391868][ T46] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 496.416600][ T46] [drm] Initialized udl on minor 2 [ 496.445496][ T46] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 496.469025][ T46] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 496.495266][ T5226] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 496.505641][ T46] usb 4-1: USB disconnect, device number 63 [ 496.517360][ T5226] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 496.609145][ T5226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.004088][ T5342] uclogic 0003:28BD:0094.0057: pen parameters not found [ 497.021959][ T5342] uclogic 0003:28BD:0094.0057: interface is invalid, ignoring [ 497.267007][ T46] usb 2-1: USB disconnect, device number 48 [ 497.327275][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.335660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.648211][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.336608][T17312] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 498.610787][T17315] "syz.4.5473" (17315) uses obsolete ecb(arc4) skcipher [ 498.687314][ T5226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.919104][T17334] syz.2.5477 (17334): /proc/17334/oom_adj is deprecated, please use /proc/17334/oom_score_adj instead. [ 499.171788][T17340] dvmrp1: entered allmulticast mode [ 499.241317][T17340] dvmrp1: left allmulticast mode [ 499.736184][ T5226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.879781][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 499.879801][ T29] audit: type=1400 audit(1726242429.203:3082): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=17357 comm="syz.2.5489" daddr=224.0.0.1 dest=20000 netif=wpan0 [ 500.149789][T17368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.243614][T17368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.329563][T17368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.352766][T17368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.436729][T17366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.462102][T17366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.492904][T17366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.528196][ T1066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.156960][T17398] program syz.4.5505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.810833][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.913312][T17426] netlink: 'syz.3.5517': attribute type 10 has an invalid length. [ 501.956817][T17426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5517'. [ 501.980383][T17426] hsr0: entered promiscuous mode [ 501.996947][T17426] hsr0: entered allmulticast mode [ 502.002064][T17426] hsr_slave_0: entered allmulticast mode [ 502.008486][T17426] hsr_slave_1: entered allmulticast mode [ 502.029536][T17426] bridge0: port 4(hsr0) entered blocking state [ 502.054001][T17426] bridge0: port 4(hsr0) entered disabled state [ 502.072250][T17426] bridge0: port 4(hsr0) entered blocking state [ 502.078673][T17426] bridge0: port 4(hsr0) entered forwarding state [ 502.349731][ T29] audit: type=1326 audit(1726242431.673:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 502.415446][ T29] audit: type=1326 audit(1726242431.703:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 502.459158][ T29] audit: type=1326 audit(1726242431.723:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 502.469931][T17447] program syz.1.5527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.493347][ T29] audit: type=1326 audit(1726242431.723:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 502.528257][ T29] audit: type=1326 audit(1726242431.723:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 502.574354][ T29] audit: type=1326 audit(1726242431.723:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 502.607494][ T29] audit: type=1326 audit(1726242431.723:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 502.639329][ T29] audit: type=1326 audit(1726242431.723:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 502.694039][ T29] audit: type=1326 audit(1726242431.733:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17442 comm="syz.3.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f5712d7def9 code=0x7ffc0000 [ 503.597031][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5539'. [ 503.676593][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5541'. [ 503.722484][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5541'. [ 503.887851][ T46] net_ratelimit: 6 callbacks suppressed [ 503.887876][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.223914][T17487] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 504.378451][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.717482][ T5342] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 504.926730][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.938766][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.957716][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.975987][ T5342] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 504.996918][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.031097][ T5342] usb 3-1: config 0 descriptor?? [ 505.499002][ T5342] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 505.568127][ T5342] cp2112 0003:10C4:EA90.0058: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 505.715675][ T5342] cp2112 0003:10C4:EA90.0058: Part Number: 0x42 Device Version: 0x9C [ 505.926553][ T5342] cp2112 0003:10C4:EA90.0058: error requesting SMBus config [ 505.938710][ T5342] cp2112 0003:10C4:EA90.0058: probe with driver cp2112 failed with error -71 [ 505.967372][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.000657][ T5342] usb 3-1: USB disconnect, device number 48 [ 506.288969][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.297694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.818568][T17531] netlink: 'syz.2.5565': attribute type 10 has an invalid length. [ 506.848766][T17531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5565'. [ 506.882770][T17531] hsr0: entered promiscuous mode [ 506.900526][T17531] hsr0: entered allmulticast mode [ 506.918261][T17531] hsr_slave_0: entered allmulticast mode [ 506.946084][T17531] hsr_slave_1: entered allmulticast mode [ 506.970009][T17531] bridge0: port 3(hsr0) entered blocking state [ 506.997421][T17531] bridge0: port 3(hsr0) entered disabled state [ 507.010259][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.039521][T17531] bridge0: port 3(hsr0) entered blocking state [ 507.045861][T17531] bridge0: port 3(hsr0) entered forwarding state [ 508.046712][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.126981][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.956507][T17562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 508.962496][T17562] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 509.088600][ T46] net_ratelimit: 1 callbacks suppressed [ 509.088623][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.131447][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.181424][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.067054][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.075465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.207133][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.746645][T17701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5617'. [ 512.787555][T17701] hsr_slave_0: entered allmulticast mode [ 512.865489][T17705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.875187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.267071][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.348300][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.286965][ T46] net_ratelimit: 1 callbacks suppressed [ 514.286987][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.795071][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 514.795094][ T29] audit: type=1326 audit(1726242444.113:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17771 comm="syz.1.5641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x0 [ 514.822758][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.338288][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.328683][ T29] audit: type=1326 audit(1726242445.643:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17823 comm="syz.4.5660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fd717def9 code=0x0 [ 516.366975][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.409742][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.809752][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.818936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.971857][T17871] ./bus: Can't lookup blockdev [ 518.004636][T17873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.014363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.397927][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5688'. [ 518.446853][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.848223][T17902] program syz.1.5695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.087831][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.219679][T17917] netlink: 'syz.4.5701': attribute type 1 has an invalid length. [ 519.237008][T17917] netlink: 'syz.4.5701': attribute type 2 has an invalid length. [ 519.495681][ T46] net_ratelimit: 8 callbacks suppressed [ 519.495705][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.745098][T17936] 8021q: VLANs not supported on bridge0 [ 520.406454][ T25] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 520.526667][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.629723][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.649413][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.672574][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 520.702284][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.754031][ T25] usb 3-1: config 0 descriptor?? [ 521.202258][T17947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.248254][T17947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.286033][ T25] wacom 0003:056A:0065.0059: unknown main item tag 0x7 [ 521.307124][ T25] wacom 0003:056A:0065.0059: unknown main item tag 0x4 [ 521.340809][ T25] wacom 0003:056A:0065.0059: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 521.379641][ T25] wacom 0003:056A:0065.0059: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.2-1/input0 [ 521.418888][ T25] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0065.0059/input/input62 [ 521.540069][ T25] usb 3-1: USB disconnect, device number 49 [ 521.567740][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.590295][ T29] audit: type=1400 audit(1726242451.913:3096): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=18001 comm="syz.1.5740" name="1205" dev="tmpfs" ino=6127 [ 522.616556][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.928523][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.937747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.036385][ T29] audit: type=1326 audit(1726242452.353:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18015 comm="syz.1.5747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x0 [ 523.568424][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.597600][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.608932][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.626359][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.318139][T18050] program syz.2.5763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.420522][T18052] debugfs: Directory 'netdev:nicvf0' with parent 'phy6' already present! [ 524.687803][ T25] net_ratelimit: 1 callbacks suppressed [ 524.687825][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.847272][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.855695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.885930][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5774'. [ 525.023966][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5775'. [ 525.734039][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5788'. [ 525.743786][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.949725][T18111] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5792'. [ 526.767948][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.789597][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5805'. [ 526.799330][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5805'. [ 527.154185][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805cc79c00: rx timeout, send abort [ 527.166022][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805cc79c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 527.682592][ T941] kernel read not supported for file /rfkill (pid: 941 comm: kworker/0:2) [ 527.808662][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.441472][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5827'. [ 528.462848][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5827'. [ 528.688620][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.697582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.847396][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.136783][T18210] binder: 18207:18210 ioctl c018620c 200005c0 returned -1 [ 529.465322][T18223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.585759][ T29] audit: type=1326 audit(1726242458.893:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18227 comm="syz.4.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd717def9 code=0x7ffc0000 [ 529.655845][T18231] program syz.1.5848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.659711][ T29] audit: type=1326 audit(1726242458.893:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18227 comm="syz.4.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd717def9 code=0x7ffc0000 [ 529.754864][ T29] audit: type=1326 audit(1726242458.903:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18227 comm="syz.4.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0fd717def9 code=0x7ffc0000 [ 529.826573][ T29] audit: type=1326 audit(1726242458.903:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18227 comm="syz.4.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd717def9 code=0x7ffc0000 [ 529.887671][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.926712][ T29] audit: type=1326 audit(1726242458.933:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18227 comm="syz.4.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f0fd717def9 code=0x7ffc0000 [ 530.004611][ T29] audit: type=1326 audit(1726242458.933:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18227 comm="syz.4.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd717def9 code=0x7ffc0000 [ 530.026509][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.061900][ T29] audit: type=1326 audit(1726242458.933:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18227 comm="syz.4.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd717def9 code=0x7ffc0000 [ 530.176780][T18249] tipc: Started in network mode [ 530.184772][T18249] tipc: Node identity 663a20300a74797, cluster identity 4711 [ 530.200431][T18249] tipc: Enabling of bearer rejected, failed to enable media [ 530.557086][ T941] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 530.606795][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.615353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.702022][T18264] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 530.758657][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 530.806948][ T941] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 530.835315][ T941] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 530.877455][ T941] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 530.899812][ T941] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 530.917212][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.925274][ T941] usb 2-1: Product: syz [ 530.931742][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.954367][ T941] usb 2-1: Manufacturer: syz [ 530.969662][ T941] usb 2-1: SerialNumber: syz [ 531.386896][ T5342] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 531.417123][ T941] adutux 2-1:168.0: interrupt endpoints not found [ 531.444499][ T941] usb 2-1: USB disconnect, device number 49 [ 531.596853][ T5342] usb 4-1: Using ep0 maxpacket: 16 [ 531.623030][ T5342] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 531.640645][ T5342] usb 4-1: config 1 has no interface number 1 [ 531.664316][ T5342] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 531.704169][ T5342] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.726264][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.743848][ T5342] usb 4-1: Product: syz [ 531.751090][ T5342] usb 4-1: Manufacturer: syz [ 531.755833][ T5342] usb 4-1: SerialNumber: syz [ 531.970155][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.250636][ T5342] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 532.655353][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.708410][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.725077][ T9] usb 4-1: USB disconnect, device number 64 [ 532.953629][T18306] syz.1.5881[18306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.953927][T18306] syz.1.5881[18306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.007006][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.236478][ T5342] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 533.429161][ T5342] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.449247][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.477893][ T5342] usb 3-1: config 0 descriptor?? [ 533.508953][ T5342] cp210x 3-1:0.0: cp210x converter detected [ 533.809126][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.818202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.932955][ T5342] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 533.964573][ T5342] usb 3-1: cp210x converter now attached to ttyUSB0 [ 534.047049][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.214161][ T9] usb 3-1: USB disconnect, device number 50 [ 534.232893][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 534.290283][ T9] cp210x 3-1:0.0: device disconnected [ 535.089459][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.956973][ T29] audit: type=1400 audit(1726242465.283:3105): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18405 comm="syz.3.5926" src=1 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 536.127197][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.370610][T14820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.379130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.166898][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.337955][T18438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.347666][T18438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.355904][T18438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.366078][T18438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.375080][T18438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.935026][T18459] netlink: 'syz.2.5946': attribute type 42 has an invalid length. [ 538.689139][ T29] audit: type=1326 audit(1726242468.003:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 538.767148][ T29] audit: type=1326 audit(1726242468.003:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 538.836873][ T29] audit: type=1326 audit(1726242468.013:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 538.862125][ T29] audit: type=1326 audit(1726242468.013:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 538.884719][ T29] audit: type=1326 audit(1726242468.013:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 538.943610][ T29] audit: type=1326 audit(1726242468.013:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 538.998163][ T29] audit: type=1326 audit(1726242468.013:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 539.048338][ T29] audit: type=1326 audit(1726242468.013:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 539.109566][ T29] audit: type=1326 audit(1726242468.013:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18487 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x7ffc0000 [ 539.931541][T18535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5981'. [ 541.356549][T18582] Falling back ldisc for ptm0. [ 542.148590][ T29] audit: type=1326 audit(1726242471.473:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.203862][ T29] audit: type=1326 audit(1726242471.503:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.241825][ T29] audit: type=1326 audit(1726242471.503:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.294820][ T29] audit: type=1326 audit(1726242471.503:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.357256][ T29] audit: type=1326 audit(1726242471.503:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.435654][ T29] audit: type=1326 audit(1726242471.513:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.497568][ T29] audit: type=1326 audit(1726242471.513:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.540898][ T29] audit: type=1326 audit(1726242471.513:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.603360][ T29] audit: type=1326 audit(1726242471.513:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18601 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 542.655224][T18618] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6015'. [ 543.182358][T18641] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 544.690233][ T35] net_ratelimit: 43 callbacks suppressed [ 544.690260][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.707199][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.719325][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.737612][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.246542][ T5342] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 545.335923][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.348774][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.357920][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.367764][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.376889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.482172][ T5342] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 545.492872][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.512877][ T5342] usb 3-1: Product: syz [ 545.523019][ T5342] usb 3-1: Manufacturer: syz [ 545.533241][ T5342] usb 3-1: SerialNumber: syz [ 545.549224][ T5342] usb 3-1: config 0 descriptor?? [ 545.806791][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.901491][ T941] usb 3-1: USB disconnect, device number 51 [ 546.387930][T18698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6055'. [ 546.705090][T18711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6061'. [ 546.744787][T18711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6061'. [ 546.870796][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6063'. [ 549.506110][T18798] syz.1.6100: attempt to access beyond end of device [ 549.506110][T18798] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 549.529194][T18798] FAT-fs (loop1): unable to read boot sector [ 549.977529][ T941] net_ratelimit: 5 callbacks suppressed [ 549.977552][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.018450][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.096664][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.104857][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.113842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.124329][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.150590][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.181257][T18828] netlink: 'syz.2.6112': attribute type 1 has an invalid length. [ 551.190067][T18828] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6112'. [ 551.454174][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6115'. [ 551.463734][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6115'. [ 551.576989][ T941] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 551.591980][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6115'. [ 551.609072][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6115'. [ 551.762341][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6117'. [ 551.788697][ T941] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 551.811461][ T941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.823658][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6115'. [ 551.826572][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6117'. [ 551.842788][ T941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.864386][ T941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.874576][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6115'. [ 551.884068][ T941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.894053][ T941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.916111][ T941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.929504][ T941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.939516][ T941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.951435][ T941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.964489][ T941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.975477][ T941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.996852][ T941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.019817][ T941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.042522][ T941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.055447][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.084930][ T941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.105676][ T941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.125009][ T941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.138597][ T941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.157170][ T941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.168408][ T941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.191748][ T941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.208972][ T941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.229011][ T941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.256930][ T941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.287154][ T941] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 552.306941][ T941] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 552.315495][ T941] usb 3-1: Product: syz [ 552.325622][ T941] usb 3-1: Manufacturer: syz [ 552.331374][ T941] usb 3-1: SerialNumber: syz [ 552.349225][ T941] usb 3-1: config 0 descriptor?? [ 552.368245][ T941] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 552.370658][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.384716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.600764][ T941] usb 3-1: USB disconnect, device number 52 [ 552.619107][ T941] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 552.625125][ T29] audit: type=1400 audit(1726242481.943:3124): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18852 comm="syz.0.6122" dest=20000 netif=wpan0 [ 552.780133][ T29] audit: type=1400 audit(1726242482.103:3125): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18854 comm="syz.0.6123" daddr=255.255.255.255 netif=wpan0 [ 554.176997][ T941] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 554.367340][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 554.374866][ T941] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 554.385755][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 554.398684][ T941] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.411896][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 554.432778][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 554.433913][T18891] netlink: 'syz.0.6140': attribute type 1 has an invalid length. [ 554.447375][ T941] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 554.462982][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 554.486137][ T941] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.507022][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 554.527301][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 554.548240][ T941] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 554.556058][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 554.575646][ T941] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.596911][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 554.620662][ T941] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 554.649604][ T941] usb 3-1: string descriptor 0 read error: -22 [ 554.657207][ T941] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 554.678800][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.712590][ T941] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 554.971013][ T941] usb 3-1: USB disconnect, device number 53 [ 555.167381][ T5319] net_ratelimit: 5 callbacks suppressed [ 555.167403][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.324277][T18911] input: syz1 as /devices/virtual/input/input65 [ 556.210453][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.847689][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.856384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.247003][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.852227][T18956] netlink: 'syz.1.6171': attribute type 12 has an invalid length. [ 557.866831][T18956] netlink: 'syz.1.6171': attribute type 29 has an invalid length. [ 557.882368][T18956] netlink: 'syz.1.6171': attribute type 2 has an invalid length. [ 557.900912][T18956] netlink: 'syz.1.6171': attribute type 2 has an invalid length. [ 557.916488][T18956] netlink: 'syz.1.6171': attribute type 1 has an invalid length. [ 557.935197][T18956] netlink: 'syz.1.6171': attribute type 37 has an invalid length. [ 557.944005][T18956] netlink: 'syz.1.6171': attribute type 2 has an invalid length. [ 558.130787][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.140143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.297303][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.340455][T18974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.358362][T18974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.399453][T18974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.417913][T18978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6179'. [ 558.427480][T18974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.461890][ T29] audit: type=1326 audit(1726242487.783:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.2.6181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c7017def9 code=0x0 [ 558.872147][T18988] tap0: tun_chr_ioctl cmd 2147767519 [ 558.876195][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 558.889619][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 558.902299][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 558.915675][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 558.923687][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 558.935603][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 558.953416][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 558.962420][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 558.973961][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 558.983882][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 558.993581][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 559.026420][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 559.105489][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6185'. [ 559.182070][T18986] lo speed is unknown, defaulting to 1000 [ 559.327313][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.465149][T19003] netlink: 'syz.2.6189': attribute type 1 has an invalid length. [ 559.518450][T19003] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.6189'. [ 559.556849][T19003] netlink: 'syz.2.6189': attribute type 2 has an invalid length. [ 559.585886][T19003] netlink: 'syz.2.6189': attribute type 1 has an invalid length. [ 559.698379][T18986] chnl_net:caif_netlink_parms(): no params data found [ 560.001745][T18986] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.040443][T18986] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.072879][T18986] bridge_slave_0: entered allmulticast mode [ 560.093277][T19020] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6195'. [ 560.119168][T18986] bridge_slave_0: entered promiscuous mode [ 560.145667][T18986] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.165823][T18986] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.195604][T18986] bridge_slave_1: entered allmulticast mode [ 560.218681][T18986] bridge_slave_1: entered promiscuous mode [ 560.330320][T19028] No buffer was provided with the request [ 560.356242][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6198'. [ 560.377119][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.448615][T18986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.481663][T18986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.664510][T18986] team0: Port device team_slave_0 added [ 560.685253][T18986] team0: Port device team_slave_1 added [ 560.697018][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.797231][T19040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.807097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.885511][T18986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.911787][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.948970][T19045] loop8: detected capacity change from 0 to 6 [ 560.976549][T19045] Dev loop8: unable to read RDB block 6 [ 560.982307][T18986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.006546][T19045] loop8: unable to read partition table [ 561.017524][T19045] loop8: partition table beyond EOD, truncated [ 561.025144][T19045] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 561.025144][T19045] ) failed (rc=-5) [ 561.034132][T18986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.057897][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.104938][ T5231] Bluetooth: hci6: command tx timeout [ 561.156533][T18986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.407200][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.426475][T18986] hsr_slave_0: entered promiscuous mode [ 561.460341][T18986] hsr_slave_1: entered promiscuous mode [ 561.492712][T18986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.512331][T18986] Cannot create hsr debugfs directory [ 562.156723][T18986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.359843][T18986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.376439][ T941] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 562.458798][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.549940][T18986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.566962][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 562.577617][ T941] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 562.601894][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.607171][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.616358][ T941] usb 2-1: Product: syz [ 562.618957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.630362][ T941] usb 2-1: Manufacturer: syz [ 562.630389][ T941] usb 2-1: SerialNumber: syz [ 562.703346][ T941] usb 2-1: config 0 descriptor?? [ 562.725197][T18986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.950931][ T941] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 562.991595][T18986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 563.040423][T18986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.087777][T18986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.129641][T18986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.166659][ T5231] Bluetooth: hci6: command tx timeout [ 563.252176][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.389623][T18986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.473590][T18986] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.488532][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.498728][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.506021][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.553478][ T941] usb write operation failed. (-71) [ 563.553888][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.562899][ T941] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 563.566636][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.617687][ T941] dvbdev: DVB: registering new adapter (Terratec H7) [ 563.626719][ T941] usb 2-1: media controller created [ 563.637792][ T941] usb read operation failed. (-71) [ 563.649989][ T941] usb write operation failed. (-71) [ 563.659368][ T941] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 563.710557][ T941] usb 2-1: USB disconnect, device number 50 [ 563.888179][T14820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.192836][T18986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.350464][T18986] veth0_vlan: entered promiscuous mode [ 564.392680][T18986] veth1_vlan: entered promiscuous mode [ 564.524435][T18986] veth0_macvtap: entered promiscuous mode [ 564.562145][T18986] veth1_macvtap: entered promiscuous mode [ 564.691010][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.710391][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.746902][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.766944][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.786748][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.816541][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.835272][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.856442][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.894891][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.916597][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.938360][T18986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.971589][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.005529][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.027066][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.046871][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.057522][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.079859][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.105723][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.117444][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.135633][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.157861][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.196927][T18986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.216385][T18986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.246943][ T5231] Bluetooth: hci6: command tx timeout [ 565.249239][T18986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.295156][T18986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.339817][T18986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.376924][T18986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.385703][T18986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.426360][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6240'. [ 565.567284][ T9] net_ratelimit: 2 callbacks suppressed [ 565.567305][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.781389][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.828458][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.860525][T19124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.885904][T19124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.944808][T19124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.954700][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.980842][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.017645][T19124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.074621][T19124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.164717][T19121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.464053][T19131] validate_nla: 1 callbacks suppressed [ 566.464077][T19131] netlink: 'syz.1.6247': attribute type 13 has an invalid length. [ 566.553564][T19131] veth0_macvtap: left promiscuous mode [ 566.575082][T19131] macvtap0: entered allmulticast mode [ 566.617282][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.637576][T19131] macvtap0: refused to change device tx_queue_len [ 567.326751][ T5231] Bluetooth: hci6: command tx timeout [ 567.647774][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.368473][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.453717][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'. [ 570.036934][ T5319] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 570.236955][ T5319] usb 3-1: Using ep0 maxpacket: 8 [ 570.244147][ T5319] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 570.266980][ T5319] usb 3-1: config 179 has no interface number 0 [ 570.277263][ T5319] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 570.320360][ T5319] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 570.346894][ T5319] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 570.376447][ T5319] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 570.397212][ T5319] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 570.428642][ T5319] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 570.447436][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.470334][T19214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 570.769604][ T5319] net_ratelimit: 11 callbacks suppressed [ 570.769626][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.801271][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input66 [ 571.035967][ T9] usb 3-1: USB disconnect, device number 54 [ 571.036025][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 571.050280][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 571.120303][ T9] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 571.436468][ T29] audit: type=1326 audit(1726242500.753:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 571.520993][ T29] audit: type=1326 audit(1726242500.753:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 571.602190][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6296'. [ 571.604137][ T29] audit: type=1326 audit(1726242500.763:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 571.632676][T19247] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6296'. [ 571.662750][T19247] sch_fq: defrate 0 ignored. [ 571.685131][ T29] audit: type=1326 audit(1726242500.763:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 571.746936][ T29] audit: type=1326 audit(1726242500.763:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 571.795258][ T29] audit: type=1326 audit(1726242500.773:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 571.827003][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.885132][ T29] audit: type=1326 audit(1726242500.773:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 571.956896][ T29] audit: type=1326 audit(1726242500.773:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 572.025471][ T29] audit: type=1326 audit(1726242500.773:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 572.116923][ T29] audit: type=1326 audit(1726242500.773:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 572.847574][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.919235][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.065492][T19288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.075389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.126880][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.135363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.768231][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.777214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.244189][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.270953][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.289477][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.308507][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.319971][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 575.328271][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.418289][T19313] netlink: 'syz.3.6325': attribute type 8 has an invalid length. [ 575.459745][T16648] syz-executor (16648) used greatest stack depth: 17240 bytes left [ 575.642014][ T1123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.765019][T19309] lo speed is unknown, defaulting to 1000 [ 575.828052][ T1123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.975313][ T5319] net_ratelimit: 1 callbacks suppressed [ 575.975342][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.062836][ T1123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.234691][ T1123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.958629][T19309] chnl_net:caif_netlink_parms(): no params data found [ 576.983575][ T1123] bridge_slave_1: left allmulticast mode [ 576.996604][ T1123] bridge_slave_1: left promiscuous mode [ 577.002565][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.017631][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.060580][ T1123] bridge_slave_0: left allmulticast mode [ 577.073273][T19359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.076455][ T1123] bridge_slave_0: left promiscuous mode [ 577.085983][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.406849][ T5236] Bluetooth: hci1: command tx timeout [ 578.057240][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.426177][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.454379][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.479048][ T1123] bond0 (unregistering): Released all slaves [ 578.505188][T19371] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 578.665833][ T1123] tipc: Left network mode [ 578.795850][T19378] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6354'. [ 578.915486][T19381] hsr0: Device is already in use. [ 579.090984][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.336415][T19309] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.354301][T19309] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.377553][T19309] bridge_slave_0: entered allmulticast mode [ 579.408361][T19309] bridge_slave_0: entered promiscuous mode [ 579.438855][T19309] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.446066][T19309] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.474742][T19309] bridge_slave_1: entered allmulticast mode [ 579.486897][ T5236] Bluetooth: hci1: command tx timeout [ 579.498391][T19309] bridge_slave_1: entered promiscuous mode [ 579.601795][T19309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.722639][ T1123] hsr_slave_0: left promiscuous mode [ 579.807867][ T1123] hsr_slave_1: left promiscuous mode [ 579.851623][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.874605][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.885542][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.889023][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.895286][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.902043][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.916768][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.925588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.934104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.039524][ T1123] veth0_macvtap: left promiscuous mode [ 580.049342][ T1123] veth1_vlan: left promiscuous mode [ 580.054764][ T1123] veth0_vlan: left promiscuous mode [ 580.128922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.168349][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.339794][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 581.444552][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 581.566911][ T5236] Bluetooth: hci1: command tx timeout [ 582.207322][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.282250][T19309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.292066][T19412] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6368'. [ 582.629694][T19309] team0: Port device team_slave_0 added [ 582.678356][T19309] team0: Port device team_slave_1 added [ 582.838904][T19309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.876451][T19309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.934432][T19309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.996223][T19309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.003565][T19309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.037841][T19437] syz.1.6380 (19437) used greatest stack depth: 17072 bytes left [ 583.086041][T19309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.141029][T19446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.171381][T19446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.190847][T19446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.248646][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.253410][T19451] sctp: [Deprecated]: syz.0.6382 (pid 19451) Use of int in max_burst socket option deprecated. [ 583.253410][T19451] Use struct sctp_assoc_value instead [ 583.360336][T19309] hsr_slave_0: entered promiscuous mode [ 583.426916][T19309] hsr_slave_1: entered promiscuous mode [ 583.445106][T19309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.469793][T19309] Cannot create hsr debugfs directory [ 583.647174][ T5236] Bluetooth: hci1: command tx timeout [ 583.870889][T19458] lo speed is unknown, defaulting to 1000 [ 584.297410][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.583231][ T29] audit: type=1326 audit(1726242513.903:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 584.634333][ T29] audit: type=1326 audit(1726242513.933:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 584.700316][ T29] audit: type=1326 audit(1726242513.943:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb3197c890 code=0x7ffc0000 [ 584.735428][T19309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 584.754104][ T29] audit: type=1326 audit(1726242513.943:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3197dafb code=0x7ffc0000 [ 584.788002][ T29] audit: type=1326 audit(1726242513.943:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3197dafb code=0x7ffc0000 [ 584.805135][T19309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 584.863948][T19309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 584.873897][ T29] audit: type=1326 audit(1726242513.943:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3197dafb code=0x7ffc0000 [ 584.897036][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 584.928307][T19309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 584.945991][ T29] audit: type=1326 audit(1726242513.943:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3197dafb code=0x7ffc0000 [ 585.012937][ T29] audit: type=1326 audit(1726242514.063:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3197dafb code=0x7ffc0000 [ 585.105029][ T29] audit: type=1326 audit(1726242514.143:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3197dafb code=0x7ffc0000 [ 585.167004][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 585.174139][ T29] audit: type=1326 audit(1726242514.223:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19471 comm="syz.1.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3197dafb code=0x7ffc0000 [ 585.190117][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.256570][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.288852][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 585.293212][T19309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.315788][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.337153][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.358359][ T9] usb 2-1: config 0 descriptor?? [ 585.368075][ T9] hub 2-1:0.0: USB hub found [ 585.395822][T19309] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.463823][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.471281][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.495299][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.502635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.580465][ T9] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 585.648809][ T1066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.657695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.985656][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 586.004335][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 586.067728][ T9] usb 2-1: USB disconnect, device number 51 [ 586.171021][T19309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.369380][ T9] net_ratelimit: 2 callbacks suppressed [ 586.369404][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.648372][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6410'. [ 587.082566][T19309] veth0_vlan: entered promiscuous mode [ 587.099641][T19309] veth1_vlan: entered promiscuous mode [ 587.230115][T19309] veth0_macvtap: entered promiscuous mode [ 587.293142][T19309] veth1_macvtap: entered promiscuous mode [ 587.378264][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.411830][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.422500][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.443189][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.465359][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.485030][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.496907][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.525274][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.546040][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.573724][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.594574][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.617201][T19309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.627468][T19542] @: renamed from veth0_vlan (while UP) [ 587.704983][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.731752][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.746498][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.767110][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.785683][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.806139][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.833205][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.864239][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.893858][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.926681][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.956421][T19309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.993402][T19309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.023601][T19309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.060505][T19309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.091664][T19309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.109996][T19309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.124198][T19309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.235461][T19564] netlink: 'syz.3.6432': attribute type 14 has an invalid length. [ 588.257092][ T9] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 588.264959][T19564] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6432'. [ 588.378294][T14820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.416510][T14820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.457020][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.468939][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.492058][T14820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.498864][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.501864][T14820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.550446][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 588.567380][T19572] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 588.586623][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.607551][ T9] usb 2-1: config 0 descriptor?? [ 588.626922][ T9] hub 2-1:0.0: USB hub found [ 588.855453][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 588.955143][T19582] ieee802154 phy0 wpan0: encryption failed: -90 [ 589.065206][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 589.092923][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 589.170456][ T9] usb 2-1: USB disconnect, device number 52 [ 589.494904][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.503237][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.659418][T19596] mkiss: ax0: crc mode is auto. [ 589.847473][T19596] Falling back ldisc for ttyS3. [ 591.064918][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6470'. [ 591.230221][T19658] netlink: 'syz.1.6472': attribute type 16 has an invalid length. [ 591.257163][T19658] netlink: 'syz.1.6472': attribute type 3 has an invalid length. [ 591.282206][T19658] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.6472'. [ 592.506884][ T5342] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 592.696911][ T5342] usb 4-1: Using ep0 maxpacket: 32 [ 592.704675][ T5342] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 592.738856][ T5342] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 592.756453][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.781750][ T5342] usb 4-1: Product: syz [ 592.796445][ T5342] usb 4-1: Manufacturer: syz [ 592.796477][ T5342] usb 4-1: SerialNumber: syz [ 592.807552][ T5342] usb 4-1: config 0 descriptor?? [ 592.808463][T19695] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 592.809716][ T5342] hub 4-1:0.0: bad descriptor, ignoring hub [ 592.809751][ T5342] hub 4-1:0.0: probe with driver hub failed with error -5 [ 592.813302][ T5342] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 593.066480][ C1] hrtimer: interrupt took 257868 ns [ 593.253686][ T5278] usb 4-1: USB disconnect, device number 65 [ 593.253806][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 593.562394][T19729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6502'. [ 593.603879][T19729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6502'. [ 593.699047][T19731] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 593.727753][T19733] netlink: 'syz.2.6505': attribute type 12 has an invalid length. [ 593.745273][T19733] netlink: 'syz.2.6505': attribute type 11 has an invalid length. [ 593.770245][T19733] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.6505'. [ 594.230514][T19749] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 594.353442][T19752] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 594.408736][T19752] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.416771][T19752] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.458477][T19752] bridge0: entered allmulticast mode [ 594.485202][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6517'. [ 595.579329][ T5278] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 595.788304][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.816428][ T5278] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 595.840886][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.856486][ T5342] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 595.862497][ T5278] usb 2-1: config 0 descriptor?? [ 596.036417][ T5342] usb 4-1: Using ep0 maxpacket: 16 [ 596.043999][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.067758][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.095695][ T5342] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 596.123891][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.165686][ T5342] usb 4-1: config 0 descriptor?? [ 596.309798][ T5278] keytouch 0003:0926:3333.005A: fixing up Keytouch IEC report descriptor [ 596.331345][ T5278] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.005A/input/input68 [ 596.437252][ T5278] keytouch 0003:0926:3333.005A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 596.607401][ T5278] usb 2-1: USB disconnect, device number 53 [ 596.618159][T19803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.647246][T19826] option changes via remount are deprecated (pid=19823 comm=syz.0.6545) [ 596.682360][T19803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.894968][T19832] netlink: 201400 bytes leftover after parsing attributes in process `syz.2.6549'. [ 596.935268][ T5342] usb 4-1: string descriptor 0 read error: -71 [ 596.972608][ T5342] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 596.983089][ T5342] letsketch 0003:6161:4D15.005B: probe with driver letsketch failed with error -32 [ 597.007310][ T5342] usb 4-1: USB disconnect, device number 66 [ 597.418103][T19852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6557'. [ 598.867469][T19902] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 599.400468][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6587'. [ 599.487068][T19920] netlink: 'syz.3.6590': attribute type 5 has an invalid length. [ 599.679507][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 599.679526][ T29] audit: type=1326 audit(1726242529.003:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 599.805026][ T29] audit: type=1326 audit(1726242529.043:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 599.883666][ T29] audit: type=1326 audit(1726242529.063:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 599.959873][ T29] audit: type=1326 audit(1726242529.063:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 600.017586][ T29] audit: type=1326 audit(1726242529.063:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 600.072898][ T29] audit: type=1326 audit(1726242529.063:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 600.167993][ T29] audit: type=1326 audit(1726242529.063:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 600.238053][T19946] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6603'. [ 600.256688][ T29] audit: type=1326 audit(1726242529.063:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 600.317290][ T29] audit: type=1326 audit(1726242529.063:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x7ffc0000 [ 600.466693][ T5278] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 600.658749][ T5278] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 600.726509][ T5278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.735731][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 600.744978][ T5278] usb 4-1: SerialNumber: syz [ 601.217980][T19970] netlink: 'syz.2.6613': attribute type 1 has an invalid length. [ 601.226159][T19970] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.6613'. [ 601.240407][T19970] netlink: 'syz.2.6613': attribute type 1 has an invalid length. [ 601.416121][ T5278] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 601.590122][ T5278] usb 4-1: USB disconnect, device number 67 [ 601.599440][ T5278] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 603.834847][T20023] lo speed is unknown, defaulting to 1000 [ 604.128053][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 604.317236][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 604.331171][ T9] usb 3-1: config 0 has no interfaces? [ 604.344780][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 604.375482][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.396463][ T9] usb 3-1: Product: syz [ 604.413366][ T9] usb 3-1: Manufacturer: syz [ 604.423394][ T9] usb 3-1: SerialNumber: syz [ 604.449408][ T9] usb 3-1: config 0 descriptor?? [ 604.824403][ T25] usb 3-1: USB disconnect, device number 55 [ 604.854316][T20060] bond0: option miimon: invalid value (18446744073072082944) [ 604.887119][T20060] bond0: option miimon: allowed values 0 - 2147483647 [ 605.098568][T20069] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6659'. [ 605.289459][T20074] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 605.628468][T20081] IPv6: NLM_F_REPLACE set, but no existing node found! [ 606.007507][T20094] bond0: option resend_igmp: invalid value (7540) [ 606.037078][T20094] bond0: option resend_igmp: allowed values 0 - 255 [ 606.098213][T20097] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 606.492054][T20108] tun0: tun_chr_ioctl cmd 1074025677 [ 606.515381][T20108] tun0: linktype set to 776 [ 607.937313][ T46] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 608.147249][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 608.170152][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 608.201880][ T46] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 608.227080][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.235180][ T46] usb 3-1: Product: syz [ 608.260075][ T46] usb 3-1: Manufacturer: syz [ 608.264760][ T46] usb 3-1: SerialNumber: syz [ 608.293862][ T46] usb 3-1: config 0 descriptor?? [ 608.309218][T20164] tap0: tun_chr_ioctl cmd 1074025677 [ 608.318810][ T46] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 608.335290][T20164] tap0: linktype set to 780 [ 608.350810][ T46] usb 3-1: Detected FT232R [ 608.541203][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 608.793337][ T46] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 608.992887][ T25] usb 3-1: USB disconnect, device number 56 [ 609.037519][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 609.050100][T20191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.077623][ T25] ftdi_sio 3-1:0.0: device disconnected [ 609.713151][T20212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.715084][T20213] Cannot find set identified by id 0 to match [ 609.926168][T20217] netlink: 'syz.4.6727': attribute type 1 has an invalid length. [ 609.944210][T20217] netlink: 9320 bytes leftover after parsing attributes in process `syz.4.6727'. [ 609.956841][T20217] netlink: 'syz.4.6727': attribute type 1 has an invalid length. [ 610.022752][T20217] netlink: 'syz.4.6727': attribute type 2 has an invalid length. [ 610.085230][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6729'. [ 610.115937][T20224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6729'. [ 610.935751][T20259] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6743'. [ 611.947246][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6758'. [ 612.136051][T20297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.244774][ T29] audit: type=1400 audit(1726242541.563:3181): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20300 comm="syz.3.6763" dest=20000 netif=wpan0 [ 613.077590][ T25] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 613.276966][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 613.300378][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 613.310497][T20339] program syz.3.6780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.316786][ T25] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 613.357078][ T25] usb 2-1: Product: syz [ 613.362233][ T25] usb 2-1: Manufacturer: syz [ 613.370545][ T29] audit: type=1326 audit(1726242542.683:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.4.6781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8433b7def9 code=0x0 [ 613.391613][ T25] usb 2-1: SerialNumber: syz [ 613.418152][ T25] usb 2-1: config 0 descriptor?? [ 613.439103][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 614.075043][ T25] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 614.158393][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6791'. [ 614.349526][ T9] usb 2-1: USB disconnect, device number 54 [ 614.997671][ T5342] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 615.217357][ T5342] usb 3-1: Using ep0 maxpacket: 8 [ 615.233111][ T5342] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.257037][ T5342] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.280702][ T5342] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.300334][ T5342] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.318503][ T5342] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 615.328817][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.354156][T20401] ɶƣ0GCTw: entered promiscuous mode [ 615.371199][T20402] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 615.536602][ T5278] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 615.567820][ T5342] usb 3-1: GET_CAPABILITIES returned 0 [ 615.575919][ T5342] usbtmc 3-1:16.0: can't read capabilities [ 615.727220][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 615.729768][ T5231] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 615.742239][ T5231] Bluetooth: hci6: Injecting HCI hardware error event [ 615.754538][ T5231] Bluetooth: hci6: hardware error 0x00 [ 615.759819][ T5278] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 615.796913][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.836529][ T5278] usb 4-1: Product: syz [ 615.847185][ T5278] usb 4-1: Manufacturer: syz [ 615.852035][ T5278] usb 4-1: SerialNumber: syz [ 615.862736][ T5278] usb 4-1: config 0 descriptor?? [ 615.868513][ T25] usb 3-1: USB disconnect, device number 57 [ 615.971062][T18990] Bluetooth: hci1: command 0x0405 tx timeout [ 616.536774][ T5278] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 616.550835][ T5278] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 616.563607][ T5278] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 616.703680][ T5278] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 616.845085][ T5278] usb 4-1: USB disconnect, device number 68 [ 616.953612][T20433] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6825'. [ 617.025493][T20437] tun0: tun_chr_ioctl cmd 2147767517 [ 617.845581][T20467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6837'. [ 617.871580][T20467] netlink: 'syz.3.6837': attribute type 1 has an invalid length. [ 617.888458][ T5231] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 617.907397][T20467] netlink: 'syz.3.6837': attribute type 2 has an invalid length. [ 617.919383][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6837'. [ 618.403701][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6840'. [ 620.723317][ T29] audit: type=1400 audit(1726242550.043:3183): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20549 comm="syz.4.6875" dest=20000 netif=wpan0 [ 620.767315][ T29] audit: type=1400 audit(1726242550.073:3184): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20549 comm="syz.4.6875" dest=20000 netif=wpan0 [ 621.013233][T20562] netlink: 428 bytes leftover after parsing attributes in process `syz.2.6880'. [ 621.069787][T20562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6880'. [ 621.180739][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6881'. [ 621.808596][T20582] devtmpfs: Cannot change global quota limit on remount [ 622.079962][T20596] netlink: 'syz.3.6897': attribute type 19 has an invalid length. [ 622.381820][T20603] netlink: 'syz.4.6900': attribute type 11 has an invalid length. [ 623.197193][ T29] audit: type=1326 audit(1726242552.523:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20631 comm="syz.1.6912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3197def9 code=0x0 [ 624.695269][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.205869][ T29] audit: type=1326 audit(1726242554.523:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20672 comm="syz.4.6929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8433b7def9 code=0x0 [ 628.235268][T20747] [ 628.237764][T20747] ===================================================== [ 628.244728][T20747] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 628.252220][T20747] 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 Not tainted [ 628.259368][T20747] ----------------------------------------------------- [ 628.266333][T20747] syz.4.6959/20747 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 628.267779][T20749] vivid-000: disconnect [ 628.274069][T20747] ffff888028a9b018 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x19e/0x4d0 [ 628.274144][T20747] [ 628.274144][T20747] and this task is already holding: [ 628.274153][T20747] ffff88802a838230 [ 628.282622][T20748] vivid-000: reconnect [ 628.286949][T20747] (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 628.287012][T20747] which would create a new lock dependency: [ 628.287020][T20747] (&dev->event_lock#2){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 628.287077][T20747] [ 628.287077][T20747] but this new dependency connects a SOFTIRQ-irq-safe lock: SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 628.287088][T20747] (&dev->event_lock#2){..-.}-{2:2} [ 628.287115][T20747] [ 628.287115][T20747] ... which became SOFTIRQ-irq-safe at: [ 628.287126][T20747] lock_acquire+0x1ed/0x550 [ 628.287157][T20747] _raw_spin_lock_irqsave+0xd5/0x120 [ 628.287187][T20747] input_inject_event+0xc5/0x340 [ 628.287205][T20747] led_trigger_event+0x138/0x210 [ 628.287226][T20747] kbd_bh+0x1b5/0x290 [ 628.287246][T20747] tasklet_action_common+0x321/0x4d0 [ 628.287276][T20747] handle_softirqs+0x2c4/0x970 [ 628.287300][T20747] run_ksoftirqd+0xca/0x130 [ 628.287328][T20747] smpboot_thread_fn+0x544/0xa30 [ 628.287354][T20747] kthread+0x2f0/0x390 [ 628.287384][T20747] ret_from_fork+0x4b/0x80 [ 628.400072][T20747] ret_from_fork_asm+0x1a/0x30 [ 628.405068][T20747] [ 628.405068][T20747] to a SOFTIRQ-irq-unsafe lock: [ 628.412114][T20747] (tasklist_lock){.+.+}-{2:2} [ 628.412158][T20747] [ 628.412158][T20747] ... which became SOFTIRQ-irq-unsafe at: [ 628.424836][T20747] ... [ 628.424850][T20747] lock_acquire+0x1ed/0x550 [ 628.432122][T20747] _raw_read_lock+0x36/0x50 [ 628.436759][T20747] __do_wait+0x12d/0x850 [ 628.441125][T20747] do_wait+0x1e9/0x560 [ 628.445316][T20747] kernel_wait+0xe9/0x240 [ 628.449769][T20747] call_usermodehelper_exec_work+0xbd/0x230 [ 628.455804][T20747] process_scheduled_works+0xa2c/0x1830 [ 628.461489][T20747] worker_thread+0x870/0xd30 [ 628.466210][T20747] kthread+0x2f0/0x390 [ 628.470432][T20747] ret_from_fork+0x4b/0x80 [ 628.474985][T20747] ret_from_fork_asm+0x1a/0x30 [ 628.479881][T20747] [ 628.479881][T20747] other info that might help us debug this: [ 628.479881][T20747] [ 628.490151][T20747] Chain exists of: [ 628.490151][T20747] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 628.490151][T20747] [ 628.503239][T20747] Possible interrupt unsafe locking scenario: [ 628.503239][T20747] [ 628.511559][T20747] CPU0 CPU1 [ 628.517017][T20747] ---- ---- [ 628.522394][T20747] lock(tasklist_lock); [ 628.526648][T20747] local_irq_disable(); [ 628.533407][T20747] lock(&dev->event_lock#2); [ 628.540628][T20747] lock(&new->fa_lock); [ 628.547410][T20747] [ 628.550865][T20747] lock(&dev->event_lock#2); [ 628.555730][T20747] [ 628.555730][T20747] *** DEADLOCK *** [ 628.555730][T20747] [ 628.563872][T20747] 6 locks held by syz.4.6959/20747: [ 628.569078][T20747] #0: ffff88802a83a110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x272/0x7c0 [ 628.578254][T20747] #1: ffff88802a838230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 628.588380][T20747] #2: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 628.598051][T20747] #3: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 628.607672][T20747] #4: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2a/0xc80 [ 628.617783][T20747] #5: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x55/0x4d0 [ 628.626945][T20747] [ 628.626945][T20747] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 628.637354][T20747] -> (&dev->event_lock#2){..-.}-{2:2} { [ 628.642938][T20747] IN-SOFTIRQ-W at: [ 628.646923][T20747] lock_acquire+0x1ed/0x550 [ 628.653090][T20747] _raw_spin_lock_irqsave+0xd5/0x120 [ 628.660039][T20747] input_inject_event+0xc5/0x340 [ 628.666635][T20747] led_trigger_event+0x138/0x210 [ 628.673322][T20747] kbd_bh+0x1b5/0x290 [ 628.678960][T20747] tasklet_action_common+0x321/0x4d0 [ 628.686006][T20747] handle_softirqs+0x2c4/0x970 [ 628.692518][T20747] run_ksoftirqd+0xca/0x130 [ 628.698712][T20747] smpboot_thread_fn+0x544/0xa30 [ 628.705334][T20747] kthread+0x2f0/0x390 [ 628.711159][T20747] ret_from_fork+0x4b/0x80 [ 628.717248][T20747] ret_from_fork_asm+0x1a/0x30 [ 628.723761][T20747] INITIAL USE at: [ 628.727746][T20747] lock_acquire+0x1ed/0x550 [ 628.733823][T20747] _raw_spin_lock_irqsave+0xd5/0x120 [ 628.740786][T20747] input_inject_event+0xc5/0x340 [ 628.747475][T20747] kbd_led_trigger_activate+0xb8/0x100 [ 628.754501][T20747] led_trigger_set+0x582/0x9c0 [ 628.760831][T20747] led_trigger_set_default+0x229/0x260 [ 628.767859][T20747] led_classdev_register_ext+0x6e6/0x8a0 [ 628.775085][T20747] input_leds_connect+0x489/0x630 [ 628.781675][T20747] input_register_device+0xd3b/0x1110 [ 628.788632][T20747] atkbd_connect+0x752/0xa00 [ 628.794796][T20747] serio_driver_probe+0x7f/0xa0 [ 628.801216][T20747] really_probe+0x2b8/0xad0 [ 628.807292][T20747] __driver_probe_device+0x1a2/0x390 [ 628.814142][T20747] driver_probe_device+0x50/0x430 [ 628.820733][T20747] __driver_attach+0x45f/0x710 [ 628.827061][T20747] bus_for_each_dev+0x239/0x2b0 [ 628.833589][T20747] serio_handle_event+0x1c7/0x920 [ 628.840191][T20747] process_scheduled_works+0xa2c/0x1830 [ 628.847315][T20747] worker_thread+0x870/0xd30 [ 628.853478][T20747] kthread+0x2f0/0x390 [ 628.859117][T20747] ret_from_fork+0x4b/0x80 [ 628.865105][T20747] ret_from_fork_asm+0x1a/0x30 [ 628.871444][T20747] } [ 628.874023][T20747] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 628.883157][T20747] [ 628.883157][T20747] the dependencies between the lock to be acquired [ 628.883167][T20747] and SOFTIRQ-irq-unsafe lock: [ 628.896694][T20747] -> (tasklist_lock){.+.+}-{2:2} { [ 628.902004][T20747] HARDIRQ-ON-R at: [ 628.906154][T20747] lock_acquire+0x1ed/0x550 [ 628.912749][T20747] _raw_read_lock+0x36/0x50 [ 628.919266][T20747] __do_wait+0x12d/0x850 [ 628.925507][T20747] do_wait+0x1e9/0x560 [ 628.931580][T20747] kernel_wait+0xe9/0x240 [ 628.937923][T20747] call_usermodehelper_exec_work+0xbd/0x230 [ 628.945820][T20747] process_scheduled_works+0xa2c/0x1830 [ 628.953371][T20747] worker_thread+0x870/0xd30 [ 628.960054][T20747] kthread+0x2f0/0x390 [ 628.966151][T20747] ret_from_fork+0x4b/0x80 [ 628.972600][T20747] ret_from_fork_asm+0x1a/0x30 [ 628.979376][T20747] SOFTIRQ-ON-R at: [ 628.983532][T20747] lock_acquire+0x1ed/0x550 [ 628.990136][T20747] _raw_read_lock+0x36/0x50 [ 628.996737][T20747] __do_wait+0x12d/0x850 [ 629.002977][T20747] do_wait+0x1e9/0x560 [ 629.009050][T20747] kernel_wait+0xe9/0x240 [ 629.015385][T20747] call_usermodehelper_exec_work+0xbd/0x230 [ 629.023286][T20747] process_scheduled_works+0xa2c/0x1830 [ 629.030936][T20747] worker_thread+0x870/0xd30 [ 629.037538][T20747] kthread+0x2f0/0x390 [ 629.043625][T20747] ret_from_fork+0x4b/0x80 [ 629.050049][T20747] ret_from_fork_asm+0x1a/0x30 [ 629.056831][T20747] INITIAL USE at: [ 629.060992][T20747] lock_acquire+0x1ed/0x550 [ 629.067414][T20747] _raw_write_lock_irq+0xd3/0x120 [ 629.074361][T20747] copy_process+0x228b/0x3dc0 [ 629.080957][T20747] kernel_clone+0x223/0x880 [ 629.087381][T20747] user_mode_thread+0x132/0x1a0 [ 629.094151][T20747] rest_init+0x23/0x300 [ 629.100222][T20747] start_kernel+0x47a/0x500 [ 629.106651][T20747] x86_64_start_reservations+0x2a/0x30 [ 629.114023][T20747] x86_64_start_kernel+0x9f/0xa0 [ 629.120876][T20747] common_startup_64+0x13e/0x147 [ 629.127733][T20747] INITIAL READ USE at: [ 629.132236][T20747] lock_acquire+0x1ed/0x550 [ 629.139094][T20747] _raw_read_lock+0x36/0x50 [ 629.145951][T20747] __do_wait+0x12d/0x850 [ 629.152540][T20747] do_wait+0x1e9/0x560 [ 629.158977][T20747] kernel_wait+0xe9/0x240 [ 629.165668][T20747] call_usermodehelper_exec_work+0xbd/0x230 [ 629.173916][T20747] process_scheduled_works+0xa2c/0x1830 [ 629.181813][T20747] worker_thread+0x870/0xd30 [ 629.188856][T20747] kthread+0x2f0/0x390 [ 629.195290][T20747] ret_from_fork+0x4b/0x80 [ 629.202067][T20747] ret_from_fork_asm+0x1a/0x30 [ 629.209211][T20747] } [ 629.211883][T20747] ... key at: [] tasklist_lock+0x18/0x40 [ 629.219782][T20747] ... acquired at: [ 629.223758][T20747] lock_acquire+0x1ed/0x550 [ 629.228445][T20747] _raw_read_lock+0x36/0x50 [ 629.233153][T20747] send_sigio+0xfc/0x360 [ 629.237611][T20747] dnotify_handle_event+0x13c/0x440 [ 629.243006][T20747] fsnotify+0x18ab/0x1f70 [ 629.247603][T20747] fsnotify_change+0x24f/0x2a0 [ 629.252589][T20747] notify_change+0xc0c/0xe90 [ 629.257384][T20747] chmod_common+0x2ab/0x4c0 [ 629.262078][T20747] __x64_sys_fchmod+0xf8/0x160 [ 629.267019][T20747] do_syscall_64+0xf3/0x230 [ 629.271698][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.277780][T20747] [ 629.280104][T20747] -> (&f->f_owner.lock){....}-{2:2} { [ 629.285600][T20747] INITIAL USE at: [ 629.289587][T20747] lock_acquire+0x1ed/0x550 [ 629.295858][T20747] _raw_write_lock_irq+0xd3/0x120 [ 629.302659][T20747] f_modown+0x38/0x340 [ 629.308485][T20747] f_setown+0x14f/0x200 [ 629.314384][T20747] do_fcntl+0x67d/0x1730 [ 629.320370][T20747] __se_sys_fcntl+0xd2/0x1c0 [ 629.326707][T20747] do_syscall_64+0xf3/0x230 [ 629.332960][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.340623][T20747] INITIAL READ USE at: [ 629.345049][T20747] lock_acquire+0x1ed/0x550 [ 629.351743][T20747] _raw_read_lock_irqsave+0xdd/0x130 [ 629.359227][T20747] send_sigurg+0x29/0x3c0 [ 629.365735][T20747] sk_send_sigurg+0x75/0x2f0 [ 629.372514][T20747] queue_oob+0x572/0x730 [ 629.378932][T20747] unix_stream_sendmsg+0xd24/0xf80 [ 629.386224][T20747] __sock_sendmsg+0x221/0x270 [ 629.393167][T20747] ____sys_sendmsg+0x525/0x7d0 [ 629.400113][T20747] __sys_sendmsg+0x2b0/0x3a0 [ 629.406878][T20747] do_syscall_64+0xf3/0x230 [ 629.413558][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.421713][T20747] } [ 629.424295][T20747] ... key at: [] init_file.__key+0x0/0x20 [ 629.432197][T20747] ... acquired at: [ 629.436108][T20747] lock_acquire+0x1ed/0x550 [ 629.440804][T20747] _raw_read_lock_irqsave+0xdd/0x130 [ 629.446318][T20747] send_sigio+0x33/0x360 [ 629.450859][T20747] kill_fasync+0x23a/0x4d0 [ 629.455499][T20747] lease_break_callback+0x26/0x30 [ 629.460705][T20747] __break_lease+0x6d5/0x1820 [ 629.465574][T20747] do_dentry_open+0x8be/0x1440 [ 629.470547][T20747] vfs_open+0x3e/0x330 [ 629.474793][T20747] path_openat+0x2b3e/0x3470 [ 629.479567][T20747] do_filp_open+0x235/0x490 [ 629.484254][T20747] do_sys_openat2+0x13e/0x1d0 [ 629.489112][T20747] __x64_sys_open+0x225/0x270 [ 629.493968][T20747] do_syscall_64+0xf3/0x230 [ 629.498652][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.504730][T20747] [ 629.507068][T20747] -> (&new->fa_lock){....}-{2:2} { [ 629.512295][T20747] INITIAL USE at: [ 629.516192][T20747] lock_acquire+0x1ed/0x550 [ 629.522448][T20747] _raw_write_lock_irq+0xd3/0x120 [ 629.529052][T20747] fasync_remove_entry+0xff/0x1d0 [ 629.535662][T20747] pipe_fasync+0xb5/0x1f0 [ 629.541563][T20747] __fput+0x73e/0x8a0 [ 629.547118][T20747] __x64_sys_close+0x7f/0x110 [ 629.553412][T20747] do_syscall_64+0xf3/0x230 [ 629.559492][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.566957][T20747] INITIAL READ USE at: [ 629.571289][T20747] lock_acquire+0x1ed/0x550 [ 629.577817][T20747] _raw_read_lock_irqsave+0xdd/0x130 [ 629.585133][T20747] kill_fasync+0x19e/0x4d0 [ 629.591562][T20747] lease_break_callback+0x26/0x30 [ 629.598597][T20747] __break_lease+0x6d5/0x1820 [ 629.605278][T20747] do_dentry_open+0x8be/0x1440 [ 629.612043][T20747] vfs_open+0x3e/0x330 [ 629.618113][T20747] path_openat+0x2b3e/0x3470 [ 629.624708][T20747] do_filp_open+0x235/0x490 [ 629.631219][T20747] do_sys_openat2+0x13e/0x1d0 [ 629.637902][T20747] __x64_sys_open+0x225/0x270 [ 629.644589][T20747] do_syscall_64+0xf3/0x230 [ 629.651097][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.658996][T20747] } [ 629.661489][T20747] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 629.670167][T20747] ... acquired at: [ 629.673965][T20747] lock_acquire+0x1ed/0x550 [ 629.678650][T20747] _raw_read_lock_irqsave+0xdd/0x130 [ 629.684116][T20747] kill_fasync+0x19e/0x4d0 [ 629.688736][T20747] mousedev_notify_readers+0x719/0xc80 [ 629.694374][T20747] mousedev_event+0x5d9/0x1390 [ 629.699321][T20747] input_handler_events_default+0x107/0x1c0 [ 629.705397][T20747] input_pass_values+0x286/0x860 [ 629.710519][T20747] input_event_dispose+0x30f/0x600 [ 629.715802][T20747] input_handle_event+0xa71/0xbe0 [ 629.720997][T20747] input_inject_event+0x22f/0x340 [ 629.726198][T20747] evdev_write+0x672/0x7c0 [ 629.730899][T20747] vfs_write+0x2a2/0xc90 [ 629.735349][T20747] ksys_write+0x1a0/0x2c0 [ 629.739862][T20747] do_syscall_64+0xf3/0x230 [ 629.744547][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.750624][T20747] [ 629.752945][T20747] [ 629.752945][T20747] stack backtrace: [ 629.758831][T20747] CPU: 1 UID: 0 PID: 20747 Comm: syz.4.6959 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 629.769591][T20747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 629.779650][T20747] Call Trace: [ 629.782929][T20747] [ 629.785864][T20747] dump_stack_lvl+0x241/0x360 [ 629.790563][T20747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.795769][T20747] ? __pfx__printk+0x10/0x10 [ 629.800370][T20747] ? print_shortest_lock_dependencies+0xf2/0x160 [ 629.806714][T20747] validate_chain+0x4de0/0x5900 [ 629.811586][T20747] ? __pfx_validate_chain+0x10/0x10 [ 629.816819][T20747] ? __pfx_validate_chain+0x10/0x10 [ 629.822028][T20747] ? register_lock_class+0x102/0x980 [ 629.827328][T20747] ? __pfx_register_lock_class+0x10/0x10 [ 629.833061][T20747] ? mark_lock+0x9a/0x350 [ 629.837425][T20747] __lock_acquire+0x137a/0x2040 [ 629.842391][T20747] lock_acquire+0x1ed/0x550 [ 629.846917][T20747] ? kill_fasync+0x19e/0x4d0 [ 629.851528][T20747] ? __pfx_lock_acquire+0x10/0x10 [ 629.856574][T20747] ? __pfx_lock_acquire+0x10/0x10 [ 629.861701][T20747] _raw_read_lock_irqsave+0xdd/0x130 [ 629.867005][T20747] ? kill_fasync+0x19e/0x4d0 [ 629.871692][T20747] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 629.877605][T20747] kill_fasync+0x19e/0x4d0 [ 629.882120][T20747] ? kill_fasync+0x55/0x4d0 [ 629.886636][T20747] mousedev_notify_readers+0x719/0xc80 [ 629.892162][T20747] ? mousedev_notify_readers+0x2a/0xc80 [ 629.897746][T20747] mousedev_event+0x5d9/0x1390 [ 629.902519][T20747] ? __pfx_mousedev_event+0x10/0x10 [ 629.907748][T20747] input_handler_events_default+0x107/0x1c0 [ 629.913742][T20747] input_pass_values+0x286/0x860 [ 629.918692][T20747] ? input_pass_values+0x8f/0x860 [ 629.923730][T20747] input_event_dispose+0x30f/0x600 [ 629.928856][T20747] input_handle_event+0xa71/0xbe0 [ 629.933977][T20747] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 629.939453][T20747] ? __pfx_input_handle_event+0x10/0x10 [ 629.945043][T20747] input_inject_event+0x22f/0x340 [ 629.950118][T20747] ? input_inject_event+0xd6/0x340 [ 629.955299][T20747] evdev_write+0x672/0x7c0 [ 629.959843][T20747] ? __pfx_evdev_write+0x10/0x10 [ 629.964797][T20747] ? bpf_lsm_file_permission+0x9/0x10 [ 629.970392][T20747] ? security_file_permission+0x7f/0xa0 [ 629.975988][T20747] ? rw_verify_area+0x1d2/0x6b0 [ 629.980855][T20747] ? __pfx_evdev_write+0x10/0x10 [ 629.985806][T20747] vfs_write+0x2a2/0xc90 [ 629.990268][T20747] ? __pfx_vfs_write+0x10/0x10 [ 629.995307][T20747] ? do_futex+0x33b/0x560 [ 629.999659][T20747] ? __fget_files+0x29/0x470 [ 630.004254][T20747] ? __fget_files+0x3f6/0x470 [ 630.008945][T20747] ? __fget_files+0x29/0x470 [ 630.013551][T20747] ksys_write+0x1a0/0x2c0 [ 630.017913][T20747] ? __pfx_ksys_write+0x10/0x10 [ 630.022845][T20747] ? do_syscall_64+0x100/0x230 [ 630.027710][T20747] ? do_syscall_64+0xb6/0x230 [ 630.032555][T20747] do_syscall_64+0xf3/0x230 [ 630.037073][T20747] ? clear_bhb_loop+0x35/0x90 [ 630.041776][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.047683][T20747] RIP: 0033:0x7f8433b7def9 [ 630.052107][T20747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.071823][T20747] RSP: 002b:00007f8434911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 630.080427][T20747] RAX: ffffffffffffffda RBX: 00007f8433d35f80 RCX: 00007f8433b7def9 [ 630.088447][T20747] RDX: 0000000000000078 RSI: 00000000200003c0 RDI: 0000000000000004 [ 630.096479][T20747] RBP: 00007f8433bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 630.104452][T20747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.112426][T20747] R13: 0000000000000000 R14: 00007f8433d35f80 R15: 00007ffd6e49c948 [ 630.120414][T20747] [ 630.123558][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.741943][ T1123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.994784][ T1123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.133097][ T1123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.289614][ T1123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.423532][ T1123] bridge_slave_1: left allmulticast mode [ 631.429416][ T1123] bridge_slave_1: left promiscuous mode [ 631.435218][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.450334][ T1123] bridge_slave_0: left allmulticast mode [ 631.456058][ T1123] bridge_slave_0: left promiscuous mode [ 631.464823][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.717317][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.729495][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.740610][ T1123] bond0 (unregistering): Released all slaves [ 632.079073][ T1123] hsr_slave_0: left promiscuous mode [ 632.085061][ T1123] hsr_slave_1: left promiscuous mode [ 632.091125][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.098629][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.106671][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.114134][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.125733][ T1123] veth1_macvtap: left promiscuous mode [ 632.133596][ T1123] veth0_macvtap: left promiscuous mode [ 632.139435][ T1123] veth1_vlan: left promiscuous mode [ 632.144768][ T1123] veth0_vlan: left promiscuous mode [ 632.531107][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 632.583407][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 633.171114][ T1123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.245714][ T1123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.330791][ T1123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.415482][ T1123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.527734][ T1123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.586711][ T1123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.646893][ T1123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.714117][ T1123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.824086][ T1123] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.882000][ T1123] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.947511][ T1123] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.003831][ T1123] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.105298][ T1123] bridge_slave_1: left allmulticast mode [ 634.111721][ T1123] bridge_slave_1: left promiscuous mode [ 634.120840][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.131179][ T1123] bridge_slave_1: left allmulticast mode [ 634.139532][ T1123] bridge_slave_1: left promiscuous mode [ 634.145286][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.159647][ T1123] bridge_slave_0: left allmulticast mode [ 634.165332][ T1123] bridge_slave_0: left promiscuous mode [ 634.171594][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.187571][ T1123] bridge_slave_1: left allmulticast mode [ 634.193261][ T1123] bridge_slave_1: left promiscuous mode [ 634.202671][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.212196][ T1123] bridge_slave_0: left allmulticast mode [ 634.222017][ T1123] bridge_slave_0: left promiscuous mode [ 634.228958][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.050343][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.082301][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.110650][ T1123] bond0 (unregistering): Released all slaves [ 635.141074][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.154486][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.165306][ T1123] bond0 (unregistering): Released all slaves [ 635.200367][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.212191][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.225393][ T1123] bond0 (unregistering): Released all slaves [ 635.380166][ T1123] ɶƣ0GCTw: left promiscuous mode [ 635.442432][ T1123] tipc: Left network mode [ 635.448476][ T1123] tipc: Disabling bearer [ 635.469793][ T1123] tipc: Left network mode [ 635.588499][ T1123] IPVS: stopping backup sync thread 11395 ... [ 635.597529][ T1123] IPVS: stopping backup sync thread 8323 ... [ 636.017982][ T1123] mac80211_hwsim hwsim12 wlan0 (unregistering): left allmulticast mode [ 636.130824][ T1123] hsr_slave_0: left promiscuous mode [ 636.137022][ T1123] hsr_slave_1: left promiscuous mode [ 636.143038][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.156656][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.164661][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.172494][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.183658][ T1123] hsr_slave_0: left promiscuous mode [ 636.189877][ T1123] hsr_slave_1: left promiscuous mode [ 636.195851][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.209921][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.218723][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.226149][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.240589][ T1123] hsr_slave_0: left promiscuous mode [ 636.247191][ T1123] hsr_slave_1: left promiscuous mode [ 636.261490][ T1123] veth1_macvtap: left promiscuous mode [ 636.267183][ T1123] veth0_macvtap: left promiscuous mode [ 636.273018][ T1123] veth1_vlan: left promiscuous mode [ 636.280142][ T1123] veth0_vlan: left promiscuous mode [ 636.287215][ T1123] veth1_macvtap: left promiscuous mode [ 636.293158][ T1123] veth0_macvtap: left promiscuous mode [ 636.302180][ T1123] veth1_vlan: left promiscuous mode [ 636.307713][ T1123] veth0_vlan: left promiscuous mode [ 636.314000][ T1123] veth1_macvtap: left promiscuous mode [ 636.322671][ T1123] veth1_vlan: left promiscuous mode [ 636.328065][ T1123] veth0_vlan: left promiscuous mode [ 636.661135][ T5278] infiniband syz2: ib_query_port failed (-19) [ 637.469765][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 637.519938][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 638.023984][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 638.068836][ T1123] team0 (unregistering): Port device team_slave_0 removed