last executing test programs: 12m31.754311185s ago: executing program 4 (id=4737): r0 = socket(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x362, @loopback, 0x5}, 0x80, 0x0}}, {{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x2, @rand_addr=' \x01\x00', 0x6, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x4}], 0x10}}], 0x2, 0x20004080) 12m31.563693001s ago: executing program 4 (id=4741): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 12m31.353106826s ago: executing program 4 (id=4746): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x130, 0x12, 0x60a, 0x130, 0x202, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0xffffffff], 'netpci0\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfe}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [0xff], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 12m31.185401151s ago: executing program 4 (id=4750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@remote}}]}, 0x154}}, 0x0) 12m31.006347869s ago: executing program 4 (id=4756): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 12m30.894634475s ago: executing program 4 (id=4758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 12m15.792355759s ago: executing program 32 (id=4758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 6m36.527091898s ago: executing program 5 (id=10711): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f00000008c0)=0x79, 0x4) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 6m36.378436869s ago: executing program 5 (id=10715): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m36.167215906s ago: executing program 5 (id=10721): r0 = socket$inet(0x2, 0xa, 0x20) unshare(0x28020480) bind$inet(r0, 0x0, 0x0) 6m35.9182274s ago: executing program 5 (id=10728): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7ffffe, 0x8d, &(0x7f0000000040)) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, 0x0) 6m35.737830829s ago: executing program 5 (id=10733): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6m35.540377834s ago: executing program 5 (id=10738): syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 6m20.451908555s ago: executing program 33 (id=10738): syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 3m59.428050836s ago: executing program 3 (id=13585): capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000004c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x8971, &(0x7f0000000040)) 3m59.284135738s ago: executing program 3 (id=13588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x3, 0x1e}]}) 3m59.077159989s ago: executing program 3 (id=13592): ioprio_set$pid(0x2, 0x0, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) preadv2(r0, &(0x7f0000002a00)=[{&(0x7f0000002500)=""/198, 0xc6}], 0x1, 0x7, 0x3, 0x8) 3m58.851600982s ago: executing program 3 (id=13598): r0 = epoll_create1(0x80000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x10000000}) 3m58.725772959s ago: executing program 3 (id=13600): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m58.530082758s ago: executing program 3 (id=13605): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m56.699096246s ago: executing program 1 (id=13624): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 3m55.749536314s ago: executing program 1 (id=13626): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edc0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m53.931102708s ago: executing program 1 (id=13644): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x8001, 0x68c864dec95d5b95, 0x0, 0x0}], 0x2}) 3m52.440890307s ago: executing program 1 (id=13660): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) 3m52.25033319s ago: executing program 1 (id=13664): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 3m52.135211948s ago: executing program 1 (id=13666): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xb}}}}}}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 3m43.370471185s ago: executing program 34 (id=13605): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m37.000217449s ago: executing program 35 (id=13666): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xb}}}}}}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 3.981668844s ago: executing program 2 (id=17396): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d105012000020000de010902120001000000000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x95) 2.523400591s ago: executing program 2 (id=17416): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chmod(0x0, 0x4) 2.139785439s ago: executing program 7 (id=17419): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4604, &(0x7f00000005c0)) 2.080373697s ago: executing program 0 (id=17420): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x89, r1, 0x0, 0x0, 0x1}]) 1.927180706s ago: executing program 7 (id=17422): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 1.830460458s ago: executing program 6 (id=17423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000004c0)=ANY=[@ANYBLOB="040000000000000000000000000000000000000006000000000000000300000000000000000000000000000000000006000000000000000000000000000000abf23c2b8000"/81]) 1.751056416s ago: executing program 0 (id=17425): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000001f40), 0x0, 0x41) ioctl$BLKSECDISCARD(r1, 0x5421, 0x0) 1.525895591s ago: executing program 8 (id=17426): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1, 0x0, 0x0, 0x810}, 0x40) 1.502461686s ago: executing program 0 (id=17427): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x800, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643ffe090000fd97f5ff00e5000000b1"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x18}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.474585814s ago: executing program 6 (id=17428): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.327197261s ago: executing program 8 (id=17429): unshare(0x20000400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) 1.213840231s ago: executing program 8 (id=17430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0xff}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0xff, 0x8, 0x1, 0x5, 0x8}}, {0x4}}]}]}, 0x5c}}, 0x4040010) 1.033753506s ago: executing program 2 (id=17431): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0xa) 1.033567793s ago: executing program 6 (id=17432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffff7f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 901.883297ms ago: executing program 7 (id=17433): unshare(0x20040400) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001380)={0x80000080, 0x0, &(0x7f00000000c0), 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r0, r0], 0x2}, 0x58) 640.920901ms ago: executing program 6 (id=17434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff8802"]) 633.961803ms ago: executing program 8 (id=17435): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xfe, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) 571.862511ms ago: executing program 2 (id=17436): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101001, 0x0) 483.994253ms ago: executing program 0 (id=17437): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x4000000}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) 414.431394ms ago: executing program 7 (id=17438): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000280)={0xfeff, 0x8, 0x8, 0xfffe, 0x11, "0100000000000080"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 378.068933ms ago: executing program 8 (id=17439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x7}, {0xd, 0x5, 0x62, 0x6}, {0xfac3, 0x2, 0x4, 0x2}, {0x4, 0x7f, 0x1, 0x7}]}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002"], 0x20}}, 0x0) 250.295021ms ago: executing program 2 (id=17440): eventfd2(0x0, 0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x4000000f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0xe9e3, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x8, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x4, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x9, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0xc, 0x2, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x15, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffff, 0xb1e, 0x5, 0x200, 0xffff3441, 0x40fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 249.968128ms ago: executing program 7 (id=17441): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 238.341357ms ago: executing program 6 (id=17442): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[], 0x30) write(r0, &(0x7f0000000440)="b1118e4ef6a4e608ff08000098ff93da14cd992576d7b365020000000000000067faa180669e4d00", 0x28) 228.805458ms ago: executing program 0 (id=17443): r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x9) 205.298788ms ago: executing program 8 (id=17444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 48.103776ms ago: executing program 2 (id=17445): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r1, 0x0, 0xdc, 0x7, 0x3, 0xfffffffe, {0x8, 0xfff, 0x9, 0x2, 0x7, 0x40, 0x4, 0x9, 0x5, 0x8c, 0x8, 0x5, 0x4ff8e4e9, 0xa2, "79f817c7fc24d0351eaccfbd5df195369c3c9a6fc046151d46edbd8e6eb06b25"}}) 11.733183ms ago: executing program 0 (id=17446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 11.157317ms ago: executing program 6 (id=17447): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000200)="f416", 0x0}, 0x20) 0s ago: executing program 7 (id=17448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000050) kernel console output (not intermixed with test programs): 3-1: config 0 descriptor?? [ 910.535375][T25280] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 910.711369][ T3811] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14046'. [ 910.731412][ T3806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14046'. [ 910.975927][T25280] gspca_cpia1: usb_control_msg 03, error -32 [ 911.011898][T25280] gspca_cpia1: usb_control_msg 03, error -71 [ 911.036595][T25280] gspca_cpia1: usb_control_msg 01, error -71 [ 911.043846][T25280] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 911.080006][T25280] usb 3-1: USB disconnect, device number 98 [ 912.097765][ T3867] netlink: 100 bytes leftover after parsing attributes in process `syz.8.14076'. [ 912.147638][ T3872] ip6tnl3: entered promiscuous mode [ 912.166785][ T3872] ip6tnl3: entered allmulticast mode [ 912.210506][ T3872] team0: Device ip6tnl3 is up. Set it down before adding it as a team port [ 912.304912][ T3880] smb3: Bad value for 'source' [ 912.327591][ T3878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14081'. [ 912.461262][ T30] audit: type=1326 audit(1755642917.810:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3885 comm="syz.8.14085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e9b98ebe9 code=0x0 [ 912.929525][ T3909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14093'. [ 913.221421][ T3917] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 913.413612][ T3928] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 913.700026][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14110'. [ 914.185288][ T3970] program syz.0.14120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 914.621973][ T30] audit: type=1800 audit(1755642919.970:6132): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.14130" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 915.268620][ T30] audit: type=1800 audit(1755642920.620:6133): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.14147" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 915.827425][T21581] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 916.001560][T21581] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 916.029930][T21581] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.060529][T21581] usb 3-1: config 0 interface 0 has no altsetting 0 [ 916.094017][T21581] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 916.118873][T21581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.131621][T21581] usb 3-1: config 0 descriptor?? [ 916.587547][T21581] pantherlord 0003:0810:0002.0082: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 916.624785][T21581] pantherlord 0003:0810:0002.0082: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 916.676939][ T5906] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 916.792757][T21581] usb 3-1: USB disconnect, device number 99 [ 916.822356][ T4087] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14178'. [ 916.847627][ T5906] usb 9-1: Using ep0 maxpacket: 32 [ 916.859359][ T5906] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 916.872577][ T4087] vxcan3: entered promiscuous mode [ 916.878181][ T5906] usb 9-1: config 0 has no interface number 0 [ 916.889739][ T5906] usb 9-1: config 0 interface 12 has no altsetting 0 [ 916.907053][ T5906] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 916.924423][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.933489][ T5906] usb 9-1: Product: syz [ 916.947283][ T5906] usb 9-1: Manufacturer: syz [ 916.951950][ T5906] usb 9-1: SerialNumber: syz [ 916.962368][ T5906] usb 9-1: config 0 descriptor?? [ 916.971512][ T5906] f81534 9-1:0.12: required endpoints missing [ 917.301979][T21581] usb 9-1: USB disconnect, device number 3 [ 917.485145][ T4111] netlink: 'syz.2.14189': attribute type 2 has an invalid length. [ 917.502482][ T4111] netlink: 'syz.2.14189': attribute type 2 has an invalid length. [ 918.697691][ T30] audit: type=1326 audit(1755642924.060:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4167 comm="syz.6.14216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa419d8ebe9 code=0x0 [ 918.883351][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14220'. [ 918.895364][ T4178] netlink: 'syz.7.14219': attribute type 1 has an invalid length. [ 918.901693][ T4177] macvlan2: entered promiscuous mode [ 918.935571][ T4177] macvlan2: entered allmulticast mode [ 918.951193][ T4177] erspan0: entered allmulticast mode [ 919.721939][ T30] audit: type=1326 audit(1755642925.080:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4213 comm="syz.0.14237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 919.743738][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.754925][T25279] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 919.773024][ T30] audit: type=1326 audit(1755642925.080:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4213 comm="syz.0.14237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 919.837531][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14238'. [ 919.855953][ T30] audit: type=1326 audit(1755642925.090:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4213 comm="syz.0.14237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 919.916238][ T30] audit: type=1326 audit(1755642925.090:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4213 comm="syz.0.14237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 919.962540][T25279] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.003486][T25279] usb 9-1: config 0 interface 0 has no altsetting 0 [ 920.017473][ T30] audit: type=1326 audit(1755642925.090:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4213 comm="syz.0.14237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 920.040003][T25279] usb 9-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 920.054711][T25279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.066942][ T4227] netlink: 372 bytes leftover after parsing attributes in process `syz.7.14243'. [ 920.078742][ T30] audit: type=1326 audit(1755642925.090:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4213 comm="syz.0.14237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 920.102940][T25279] usb 9-1: config 0 descriptor?? [ 920.534105][T25279] lenovo 0003:17EF:6067.0083: item fetching failed at offset 0/2 [ 920.543906][T25279] lenovo 0003:17EF:6067.0083: hid_parse failed [ 920.556404][T25279] lenovo 0003:17EF:6067.0083: probe with driver lenovo failed with error -22 [ 920.707504][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14256'. [ 920.757476][ T5906] usb 9-1: USB disconnect, device number 4 [ 920.969899][ T4261] lo speed is unknown, defaulting to 1000 [ 923.613389][ T4337] sp0: Synchronizing with TNC [ 924.216566][T21581] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 924.406234][T21581] usb 9-1: Using ep0 maxpacket: 8 [ 924.441235][T21581] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 924.481637][T21581] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.516659][T21581] usb 9-1: Product: syz [ 924.521175][T21581] usb 9-1: Manufacturer: syz [ 924.525923][T21581] usb 9-1: SerialNumber: syz [ 924.555504][T21581] usb 9-1: config 0 descriptor?? [ 924.580523][T21581] gspca_main: se401-2.14.0 probing 047d:5003 [ 924.945568][ T30] audit: type=1326 audit(1755642930.300:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4396 comm="syz.6.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 925.006520][ T30] audit: type=1326 audit(1755642930.300:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4396 comm="syz.6.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 925.011657][T21581] gspca_se401: Bayer format not supported! [ 925.059916][ T30] audit: type=1326 audit(1755642930.350:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4396 comm="syz.6.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 925.113657][ T30] audit: type=1326 audit(1755642930.350:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4396 comm="syz.6.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 925.166462][ T30] audit: type=1326 audit(1755642930.350:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4396 comm="syz.6.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 925.235432][ T30] audit: type=1326 audit(1755642930.350:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4396 comm="syz.6.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 925.244853][T21581] usb 9-1: USB disconnect, device number 5 [ 925.298868][ T30] audit: type=1326 audit(1755642930.350:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4396 comm="syz.6.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 925.349460][ T30] audit: type=1326 audit(1755642930.350:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4396 comm="syz.6.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 926.644446][ T4453] program syz.6.14350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 928.824466][ T4548] tipc: Started in network mode [ 928.832414][ T4548] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 928.845724][ T4548] tipc: Enabling of bearer rejected, failed to enable media [ 929.276481][ T977] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 929.473222][ T977] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 929.491117][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.531756][ T977] usb 3-1: config 0 descriptor?? [ 929.562090][ T977] cp210x 3-1:0.0: cp210x converter detected [ 929.734796][ T4583] netlink: 'syz.8.14412': attribute type 1 has an invalid length. [ 929.753075][ T4583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.996665][ T977] usb 3-1: cp210x converter now attached to ttyUSB0 [ 930.180373][ T5906] usb 3-1: USB disconnect, device number 100 [ 930.215287][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 930.259041][ T5906] cp210x 3-1:0.0: device disconnected [ 931.825602][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.841967][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.119481][ T4667] netlink: 'syz.8.14452': attribute type 1 has an invalid length. [ 932.467259][ T4687] netlink: 36 bytes leftover after parsing attributes in process `syz.7.14461'. [ 932.721313][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14467'. [ 932.944268][ T4707] netlink: 36 bytes leftover after parsing attributes in process `syz.7.14471'. [ 935.411132][ T4826] Bluetooth: MGMT ver 1.23 [ 936.136579][T25280] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 936.266372][ T30] audit: type=1326 audit(1755642941.620:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4867 comm="syz.8.14550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 936.310536][ T30] audit: type=1326 audit(1755642941.630:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4867 comm="syz.8.14550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 936.332494][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.349129][T25280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.360833][T25280] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 936.370474][ T30] audit: type=1326 audit(1755642941.630:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4867 comm="syz.8.14550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 936.395798][T25280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.406883][ T30] audit: type=1326 audit(1755642941.630:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4867 comm="syz.8.14550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 936.430311][T25280] usb 3-1: config 0 descriptor?? [ 936.449841][ T30] audit: type=1326 audit(1755642941.630:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4867 comm="syz.8.14550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 936.536617][ T30] audit: type=1326 audit(1755642941.690:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4867 comm="syz.8.14550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 936.593928][ T30] audit: type=1326 audit(1755642941.690:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4867 comm="syz.8.14550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 936.864239][T25280] input: HID 28bd:0933 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.0084/input/input87 [ 936.966808][T25280] uclogic 0003:28BD:0933.0084: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 937.075954][ T5906] usb 3-1: USB disconnect, device number 101 [ 937.499991][T25280] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 937.676952][T25280] usb 9-1: Using ep0 maxpacket: 8 [ 937.695340][T25280] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 937.713449][T25280] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.746286][T25280] usb 9-1: Product: syz [ 937.750531][T25280] usb 9-1: Manufacturer: syz [ 937.755589][T25280] usb 9-1: SerialNumber: syz [ 937.782765][ T4912] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 937.795443][T25280] usb 9-1: config 0 descriptor?? [ 937.814361][T25280] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244) [ 938.097526][ T4925] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 938.457793][T25280] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 938.469593][T25280] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 938.480710][T25280] usb 9-1: USB disconnect, device number 6 [ 938.520758][ T4940] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14583'. [ 938.692172][ T4946] tipc: Enabling of bearer rejected, media not registered [ 938.822765][ T4953] sp0: Synchronizing with TNC [ 939.203074][ T30] audit: type=1326 audit(1755642944.560:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4962 comm="syz.6.14593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 939.252173][ T30] audit: type=1326 audit(1755642944.560:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4962 comm="syz.6.14593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 939.287369][ T30] audit: type=1326 audit(1755642944.600:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4962 comm="syz.6.14593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 939.529378][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14601'. [ 939.565070][ T4982] dummy0: entered promiscuous mode [ 939.594415][ T4982] dummy0: left promiscuous mode [ 939.807020][ T4993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14607'. [ 939.838230][ T4991] delete_channel: no stack [ 940.662165][ T5033] vlan2: entered promiscuous mode [ 940.671879][ T5033] macvtap0: entered promiscuous mode [ 941.706715][T21581] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 941.885601][T21581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.909408][T21581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.949375][T21581] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 941.986722][T21581] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 942.016488][T21581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.038716][T21581] usb 3-1: config 0 descriptor?? [ 942.143838][ T5096] bridge2: entered promiscuous mode [ 942.167532][ T5096] bridge2: entered allmulticast mode [ 942.236064][ T5096] team0: Port device bridge2 added [ 942.340588][ T5105] netlink: 'syz.8.14661': attribute type 3 has an invalid length. [ 942.439823][ T5107] netdevsim netdevsim8: Firmware load for '../file0' refused, path contains '..' component [ 942.468423][T21581] ryos 0003:1E7D:3232.0085: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 942.583987][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 942.597416][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 942.629011][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 942.646658][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 942.669803][T25279] usb 3-1: USB disconnect, device number 102 [ 942.685561][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 942.702565][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 942.721397][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 942.747996][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 942.769087][ T5115] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 943.397828][ T5151] autofs4:pid:5151:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 943.883082][ T5180] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.14695'. [ 944.078499][ T5188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14699'. [ 944.418929][ T5208] usb usb6: usbfs: process 5208 (syz.0.14707) did not claim interface 63 before use [ 944.588741][ T5215] netlink: 36 bytes leftover after parsing attributes in process `syz.8.14711'. [ 945.045345][ T5237] Invalid ELF header magic: != ELF [ 945.738663][ T5272] autofs: Bad value for 'fd' [ 945.885270][ T5280] binder: 5279:5280 ioctl c018620c 200000000000 returned -22 [ 946.946431][ T5906] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 947.108635][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 947.138961][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 947.161146][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 947.178001][ T5906] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 947.194612][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.226279][ T5906] usb 3-1: Product: syz [ 947.232393][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 947.232412][ T30] audit: type=1326 audit(1755642952.590:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5330 comm="syz.8.14767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 947.269042][ T5906] usb 3-1: Manufacturer: syz [ 947.279270][ T5906] usb 3-1: SerialNumber: syz [ 947.301647][ T5906] usb 3-1: config 0 descriptor?? [ 947.326773][ T5311] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 947.336783][ T30] audit: type=1326 audit(1755642952.590:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5330 comm="syz.8.14767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 947.360533][ T5311] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 947.411906][ T5906] usb 3-1: ucan: probing device on interface #0 [ 947.446813][ T30] audit: type=1326 audit(1755642952.630:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5330 comm="syz.8.14767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 947.511824][ T30] audit: type=1326 audit(1755642952.630:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5330 comm="syz.8.14767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 947.544814][ T30] audit: type=1326 audit(1755642952.630:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5330 comm="syz.8.14767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 947.578512][ T30] audit: type=1326 audit(1755642952.640:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5330 comm="syz.8.14767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 947.654198][ T5906] usb 3-1: ucan: device protocol version 42020 is not supported [ 947.685545][ T5906] usb 3-1: ucan: probe failed; try to update the device firmware [ 947.721697][ T30] audit: type=1326 audit(1755642952.640:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5330 comm="syz.8.14767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 947.771807][ T30] audit: type=1326 audit(1755642952.640:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5330 comm="syz.8.14767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 947.908839][T25279] usb 3-1: USB disconnect, device number 103 [ 948.657014][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14792'. [ 948.704034][ T5384] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 948.714714][ T5384] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 948.721806][ T5384] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 948.734307][ T5384] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 948.752139][ T5384] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 948.763941][ T5384] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 948.783142][ T5384] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 948.806595][ T5384] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 948.821566][ T5384] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 948.847324][ T5384] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 948.847384][ T5384] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 948.847496][ T5384] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 949.286539][ T5409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.866237][T25280] IPVS: starting estimator thread 0... [ 949.956457][ T5428] IPVS: using max 25 ests per chain, 60000 per kthread [ 950.508843][ T5457] sp0: Synchronizing with TNC [ 950.525151][ T5455] [U] è [ 950.760336][ T5467] xt_socket: unknown flags 0xd0 [ 950.786061][ T5469] pim6reg527: entered allmulticast mode [ 950.925955][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14835'. [ 952.916372][ T5570] comedi comedi3: pcl726: I/O port conflict (0x101,16) [ 952.931646][ T5571] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 953.078443][ T5577] MPI: mpi too large (130952 bits) [ 954.020179][ T5616] overlayfs: missing 'workdir' [ 954.114379][ T5622] sctp: [Deprecated]: syz.2.14902 (pid 5622) Use of int in maxseg socket option. [ 954.114379][ T5622] Use struct sctp_assoc_value instead [ 954.546536][T21581] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 954.710829][T21581] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 954.729893][T21581] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.744946][T21581] usb 9-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 954.759412][T21581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.773757][T21581] usb 9-1: config 0 descriptor?? [ 954.914031][ T5656] program syz.6.14918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 955.213060][T21581] hid-u2fzero 0003:10C4:8ACF.0086: unknown main item tag 0x3 [ 955.246269][T21581] hid-u2fzero 0003:10C4:8ACF.0086: item fetching failed at offset 4/5 [ 955.255625][T21581] hid-u2fzero 0003:10C4:8ACF.0086: probe with driver hid-u2fzero failed with error -22 [ 955.447856][ T5906] usb 9-1: USB disconnect, device number 7 [ 955.653424][ T30] audit: type=1326 audit(1755642961.010:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5684 comm="syz.2.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 955.725081][ T30] audit: type=1326 audit(1755642961.010:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5684 comm="syz.2.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 955.789171][ T30] audit: type=1326 audit(1755642961.040:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5684 comm="syz.2.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 955.849625][ T30] audit: type=1326 audit(1755642961.040:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5684 comm="syz.2.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 955.936577][ T30] audit: type=1326 audit(1755642961.040:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5684 comm="syz.2.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 956.009811][ T30] audit: type=1326 audit(1755642961.040:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5684 comm="syz.2.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 956.036678][ T30] audit: type=1326 audit(1755642961.050:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5684 comm="syz.2.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 956.059458][ T30] audit: type=1326 audit(1755642961.050:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5684 comm="syz.2.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 956.175091][ T5705] ALSA: mixer_oss: invalid OSS volume 'öœ"g„L–Ê' [ 956.890641][ T5737] sp0: Synchronizing with TNC [ 956.912932][ T5735] [U] è` [ 957.232510][ T5756] usb usb8: usbfs: process 5756 (syz.7.14967) did not claim interface 0 before use [ 957.233165][ T5757] nbd: couldn't find a device at index 2 [ 957.428129][ T5763] gretap0: entered promiscuous mode [ 957.434426][ T5763] vlan2: entered promiscuous mode [ 957.831989][ T5784] sp0: Synchronizing with TNC [ 958.083529][ T5797] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14987'. [ 958.225746][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14990'. [ 959.496452][ T5766] Bluetooth: hci5: command 0x0406 tx timeout [ 959.813369][ T30] audit: type=1326 audit(1755642965.170:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5847 comm="syz.2.15007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 959.850338][ T30] audit: type=1326 audit(1755642965.170:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5847 comm="syz.2.15007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 960.812536][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15021'. [ 961.535128][ T5906] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 961.711223][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.736303][ T5906] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.768688][ T5906] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 961.779415][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.792053][ T5906] usb 9-1: config 0 descriptor?? [ 962.114466][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15049'. [ 962.229725][ T5906] kye 0003:0458:5011.0087: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 962.265631][ T5906] kye 0003:0458:5011.0087: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 962.306516][ T5906] kye 0003:0458:5011.0087: tablet-enabling feature report not found [ 962.331548][ T5906] kye 0003:0458:5011.0087: tablet enabling failed [ 962.455561][ T5906] usb 9-1: USB disconnect, device number 8 [ 962.936893][ T5906] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 963.000195][ T5996] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 963.010452][ T5996] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 963.096775][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 963.118471][ T5906] usb 3-1: config 0 has no interfaces? [ 963.138637][ T5906] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 963.175810][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.191482][ T6004] netlink: 32 bytes leftover after parsing attributes in process `syz.8.15071'. [ 963.200716][ T5906] usb 3-1: Product: syz [ 963.205745][ T5906] usb 3-1: Manufacturer: syz [ 963.216204][ T5906] usb 3-1: SerialNumber: syz [ 963.237579][ T5906] usb 3-1: config 0 descriptor?? [ 963.449770][ T977] usb 3-1: USB disconnect, device number 104 [ 963.649443][ T6024] sp0: Synchronizing with TNC [ 964.302783][ T6040] __vm_enough_memory: pid: 6040, comm: syz.2.15089, bytes: 21200145035264 not enough memory for the allocation [ 964.709574][ T6030] syz.8.15085: vmalloc error: size 70778880, failed to allocated page array size 138240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 964.728362][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.8.15085 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 964.728392][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 964.728406][ T6030] Call Trace: [ 964.728416][ T6030] [ 964.728426][ T6030] dump_stack_lvl+0x189/0x250 [ 964.728461][ T6030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 964.728487][ T6030] ? __pfx__printk+0x10/0x10 [ 964.728515][ T6030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 964.728543][ T6030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 964.728573][ T6030] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 964.728604][ T6030] warn_alloc+0x214/0x310 [ 964.728638][ T6030] ? __pfx_warn_alloc+0x10/0x10 [ 964.728676][ T6030] ? __get_vm_area_node+0x28f/0x300 [ 964.728701][ T6030] ? vb2_vmalloc_alloc+0xef/0x340 [ 964.728739][ T6030] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 964.728803][ T6030] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 964.728836][ T6030] ? __kasan_kmalloc+0x93/0xb0 [ 964.728863][ T6030] vmalloc_user_noprof+0xad/0xf0 [ 964.728888][ T6030] ? vb2_vmalloc_alloc+0xef/0x340 [ 964.728920][ T6030] vb2_vmalloc_alloc+0xef/0x340 [ 964.728952][ T6030] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 964.728982][ T6030] __vb2_queue_alloc+0x9c2/0x15a0 [ 964.729043][ T6030] vb2_core_reqbufs+0xc31/0x1420 [ 964.729071][ T6030] ? __pfx___mutex_trylock_common+0x10/0x10 [ 964.729121][ T6030] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 964.729164][ T6030] ? vb2_verify_memory_type+0x1fc/0x570 [ 964.729197][ T6030] vb2_ioctl_reqbufs+0x4c0/0x830 [ 964.729253][ T6030] __video_do_ioctl+0xc9b/0xdb0 [ 964.729299][ T6030] ? __pfx___video_do_ioctl+0x10/0x10 [ 964.729367][ T6030] video_usercopy+0x871/0x14f0 [ 964.729413][ T6030] ? __pfx___video_do_ioctl+0x10/0x10 [ 964.729453][ T6030] ? __pfx_video_usercopy+0x10/0x10 [ 964.729490][ T6030] ? smack_file_ioctl+0x2a9/0x340 [ 964.729534][ T6030] ? __fget_files+0x2a/0x420 [ 964.729558][ T6030] ? __fget_files+0x3a0/0x420 [ 964.729587][ T6030] v4l2_ioctl+0x18a/0x1e0 [ 964.729619][ T6030] ? __pfx_v4l2_ioctl+0x10/0x10 [ 964.729650][ T6030] __se_sys_ioctl+0xfc/0x170 [ 964.729687][ T6030] do_syscall_64+0xfa/0x3b0 [ 964.729711][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.729733][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.729756][ T6030] ? clear_bhb_loop+0x60/0xb0 [ 964.729783][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.729804][ T6030] RIP: 0033:0x7f4e9b98ebe9 [ 964.729823][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.729842][ T6030] RSP: 002b:00007f4e9c7c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 964.729866][ T6030] RAX: ffffffffffffffda RBX: 00007f4e9bbb5fa0 RCX: 00007f4e9b98ebe9 [ 964.729882][ T6030] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000003 [ 964.729897][ T6030] RBP: 00007f4e9ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 964.729910][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.729924][ T6030] R13: 00007f4e9bbb6038 R14: 00007f4e9bbb5fa0 R15: 00007ffdac80a518 [ 964.729962][ T6030] [ 964.729971][ T6030] Mem-Info: [ 965.050515][ T6030] active_anon:276 inactive_anon:4952 isolated_anon:0 [ 965.050515][ T6030] active_file:14367 inactive_file:39712 isolated_file:0 [ 965.050515][ T6030] unevictable:768 dirty:353 writeback:0 [ 965.050515][ T6030] slab_reclaimable:10370 slab_unreclaimable:156394 [ 965.050515][ T6030] mapped:29232 shmem:1380 pagetables:1436 [ 965.050515][ T6030] sec_pagetables:0 bounce:0 [ 965.050515][ T6030] kernel_misc_reclaimable:0 [ 965.050515][ T6030] free:1219593 free_pcp:8541 free_cma:0 [ 965.097659][ T6030] Node 0 active_anon:1104kB inactive_anon:19816kB active_file:57176kB inactive_file:158848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116820kB dirty:1412kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12548kB pagetables:5680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 965.131655][ T6030] Node 1 active_anon:0kB inactive_anon:0kB active_file:292kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 965.164392][ T6030] Node 0 DMA free:15248kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:64kB free_cma:0kB [ 965.194355][ T6030] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 965.200681][ T6030] Node 0 DMA32 free:954308kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1100kB inactive_anon:19776kB active_file:55404kB inactive_file:158788kB unevictable:1536kB writepending:1412kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:22148kB local_pcp:15620kB free_cma:0kB [ 965.234321][ T6030] lowmem_reserve[]: 0 0 1 1 1 [ 965.239278][ T6030] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 965.270034][ T6030] lowmem_reserve[]: 0 0 0 0 0 [ 965.274852][ T6030] Node 1 Normal free:3908712kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:292kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11744kB local_pcp:5184kB free_cma:0kB [ 965.306716][ T6030] lowmem_reserve[]: 0 0 0 0 0 [ 965.311475][ T6030] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15248kB [ 965.325674][ T6030] Node 0 DMA32: 1146*4kB (UM) 802*8kB (UME) 474*16kB (ME) 365*32kB (UME) 164*64kB (ME) 13*128kB (UME) 6*256kB (ME) 48*512kB (UM) 69*1024kB (UM) 18*2048kB (UME) 190*4096kB (UM) = 954296kB [ 965.344792][ T6030] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 965.358003][ T6030] Node 1 Normal: 86*4kB (UME) 10*8kB (UME) 40*16kB (UME) 198*32kB (UME) 74*64kB (UME) 22*128kB (UME) 12*256kB (UME) 7*512kB (UM) 2*1024kB (ME) 3*2048kB (UE) 947*4096kB (UM) = 3908712kB [ 965.377381][ T6030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 965.388846][ T6030] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=2 hugepages_size=2048kB [ 965.398403][ T6030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 965.432596][ T6030] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 965.442870][ T6030] 55480 total pagecache pages [ 965.451376][ T6030] 25 pages in swap cache [ 965.467941][ T6030] Free swap = 124896kB [ 965.476219][ T6030] Total swap = 124996kB [ 965.480443][ T6030] 2097051 pages RAM [ 965.484392][ T6030] 0 pages HighMem/MovableOnly [ 965.490219][ T6030] 424695 pages reserved [ 965.494620][ T6030] 0 pages cma reserved [ 966.137306][ T6062] syz.2.15100 (6062) used greatest stack depth: 17992 bytes left [ 966.565975][ T6077] Bluetooth: MGMT ver 1.23 [ 966.863237][ T6091] tmpfs: Cannot change global quota limit on remount [ 966.917568][ T6094] No buffer was provided with the request [ 967.256773][ T977] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 967.286865][T21581] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 967.421431][ T977] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 967.433423][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.439419][T21581] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 967.453793][ T977] usb 3-1: config 0 has no interface number 0 [ 967.465010][ T977] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 967.465613][T21581] usb 9-1: config 8 has no interface number 0 [ 967.477117][ T977] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.517163][T21581] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 967.519560][ T977] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 967.532337][T21581] usb 9-1: config 8 interface 177 has no altsetting 0 [ 967.543774][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.553484][ T977] usb 3-1: Product: syz [ 967.557435][T21581] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 967.575141][T21581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.597098][ T977] usb 3-1: Manufacturer: syz [ 967.602207][ T6103] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 967.611567][ T977] usb 3-1: SerialNumber: syz [ 967.657874][ T977] usb 3-1: config 0 descriptor?? [ 968.069947][ C1] ir_toy 9-1:8.177: out urb status: -71 [ 968.335696][ T977] usb 3-1: USB disconnect, device number 105 [ 968.454321][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15142'. [ 968.522587][ T6152] siw: device registration error -23 [ 968.578308][T21581] ir_toy 9-1:8.177: could not write reset command: -110 [ 968.585810][T21581] ir_toy 9-1:8.177: probe with driver ir_toy failed with error -110 [ 968.606003][T21581] usb 9-1: USB disconnect, device number 9 [ 969.090378][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15154'. [ 969.276566][ T6186] validate_nla: 47 callbacks suppressed [ 969.276590][ T6186] netlink: 'syz.6.15160': attribute type 1 has an invalid length. [ 969.409909][ T6193] devtmpfs: Too few inodes for current use [ 969.490483][ T6190] can: request_module (can-proto-0) failed. [ 969.618565][T25279] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 969.789421][T25279] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 969.808719][T25279] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 969.833764][T25279] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 969.866440][T25279] usb 3-1: config 220 has no interface number 2 [ 969.883857][T25279] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 969.927549][T25279] usb 3-1: config 220 interface 0 has no altsetting 0 [ 969.937059][T25279] usb 3-1: config 220 interface 76 has no altsetting 0 [ 969.944072][T25279] usb 3-1: config 220 interface 1 has no altsetting 0 [ 969.992122][T25279] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 970.009728][T25279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.047298][T25279] usb 3-1: Product: syz [ 970.051629][T25279] usb 3-1: Manufacturer: syz [ 970.090260][T25279] usb 3-1: SerialNumber: syz [ 970.332258][T25279] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 970.347345][T25279] usb 3-1: No valid video chain found. [ 970.360037][T25279] usb 3-1: selecting invalid altsetting 0 [ 970.395024][T25279] usb 3-1: selecting invalid altsetting 0 [ 970.396492][ T6228] fuse: Bad value for 'user_id' [ 970.401055][T25279] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 970.407226][ T6228] fuse: Bad value for 'user_id' [ 970.418046][T25279] usb 3-1: USB disconnect, device number 106 [ 971.622823][ T6282] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 972.252110][ T6301] netlink: 40 bytes leftover after parsing attributes in process `syz.8.15213'. [ 972.458014][ T6312] program syz.8.15218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 972.899015][T25280] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 973.062764][T25280] usb 9-1: Using ep0 maxpacket: 32 [ 973.070472][T25280] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.093702][T25280] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.105465][T25280] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 973.123002][T25280] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.156247][T25280] usb 9-1: config 0 descriptor?? [ 973.165431][T25280] hub 9-1:0.0: USB hub found [ 973.378037][T25280] hub 9-1:0.0: config failed, hub has too many ports! (err -19) [ 973.581062][T25280] usbhid 9-1:0.0: can't add hid device: -71 [ 973.592392][T25280] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 973.618255][T25280] usb 9-1: USB disconnect, device number 10 [ 973.796206][ T5906] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 973.930982][ T6346] netlink: 'syz.7.15234': attribute type 62 has an invalid length. [ 973.956852][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 973.965653][ T5906] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 973.978340][ T5906] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 973.988737][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.998918][ T5906] usb 3-1: Product: syz [ 974.003306][ T5906] usb 3-1: Manufacturer: syz [ 974.011222][ T5906] usb 3-1: SerialNumber: syz [ 974.020329][ T5906] usb 3-1: config 0 descriptor?? [ 974.029572][ T5906] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 974.037839][ T5906] usb 3-1: setting power ON [ 974.042549][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 974.050580][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 974.062084][ T5906] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 974.070917][ T5906] usb 3-1: media controller created [ 974.093030][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 974.123365][ T5906] usb 3-1: selecting invalid altsetting 6 [ 974.136901][ T5906] usb 3-1: digital interface selection failed (-22) [ 974.156315][ T5906] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 974.167046][ T5906] usb 3-1: setting power OFF [ 974.171808][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 974.182695][ T5906] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 974.192190][ T5906] (NULL device *): no alternate interface [ 974.219968][ T5906] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 974.302504][ T5906] usb 3-1: USB disconnect, device number 107 [ 975.168032][ T6395] dvmrp1: entered allmulticast mode [ 975.178179][ T6395] dvmrp1: left allmulticast mode [ 975.985995][ T6425] netlink: 104 bytes leftover after parsing attributes in process `syz.7.15270'. [ 976.935532][ T6466] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 976.945287][ T6466] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 976.954312][ T6466] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 976.965384][ T6466] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 976.975622][ T6466] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 976.992487][ T6466] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 976.999145][ T6466] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 977.014511][ T6466] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 977.030454][ T6466] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 977.038472][ T6466] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 977.056328][ T6466] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 977.169599][ T6478] vlan3: entered promiscuous mode [ 977.174718][ T6478] macvtap0: entered promiscuous mode [ 978.293961][ T6499] netlink: 'syz.2.15305': attribute type 3 has an invalid length. [ 978.319755][ T6501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.373359][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15307'. [ 978.386568][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15307'. [ 978.395781][ T6503] netlink: 'syz.2.15307': attribute type 7 has an invalid length. [ 978.583422][ T6512] nbd: must specify a size in bytes for the device [ 978.872834][ T6525] tipc: Enabling of bearer rejected, failed to enable media [ 978.905472][ T6527] erofs (device nullb0): cannot find valid erofs superblock [ 979.282875][ T6548] macsec2: entered promiscuous mode [ 979.288722][ T6548] macsec2: entered allmulticast mode [ 979.498898][T25280] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 979.659049][T25280] usb 9-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.678873][T25280] usb 9-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.695465][T25280] usb 9-1: config 0 interface 0 has no altsetting 0 [ 979.709304][T25280] usb 9-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 979.722620][T25280] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.737920][T25280] usb 9-1: config 0 descriptor?? [ 979.896512][T25278] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 980.056513][T25278] usb 3-1: Using ep0 maxpacket: 16 [ 980.063765][T25278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.074849][T25278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.096311][T25278] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 980.117029][T25278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.131792][T25278] usb 3-1: config 0 descriptor?? [ 980.162163][T25280] acrux 0003:1A34:F705.0088: item fetching failed at offset 3/7 [ 980.184626][T25280] acrux 0003:1A34:F705.0088: parse failed [ 980.195516][T25280] acrux 0003:1A34:F705.0088: probe with driver acrux failed with error -22 [ 980.284503][ T6576] can0: slcan on ttyS3. [ 980.291527][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 980.291547][ T30] audit: type=1326 audit(1755642986.650:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.7.15344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8070f8ebe9 code=0x0 [ 980.362831][ T5927] usb 9-1: USB disconnect, device number 11 [ 980.370101][ T6575] can0 (unregistered): slcan off ttyS3. [ 980.607166][T25278] gt683r_led 0003:1770:FF00.0089: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 980.831083][ T5906] usb 3-1: USB disconnect, device number 108 [ 980.853117][ T5927] gt683r_led 0003:1770:FF00.0089: failed to send set report request: -19 [ 981.145079][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15357'. [ 981.334963][ T30] audit: type=1326 audit(1755642987.690:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.0.15361" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3614b8ebe9 code=0x0 [ 981.611379][ T6625] Bluetooth: MGMT ver 1.23 [ 982.306397][ T6653] netlink: 'syz.0.15380': attribute type 41 has an invalid length. [ 982.912009][ T6673] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 983.246235][T25278] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 983.305567][ T6695] tipc: Enabling of bearer rejected, failed to enable media [ 983.433879][T25278] usb 3-1: Using ep0 maxpacket: 32 [ 983.448372][T25278] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.481159][T25278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 983.535277][T25278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 983.576555][T25278] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 983.610456][T25278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.653807][T25278] usb 3-1: config 0 descriptor?? [ 983.694329][ T6678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 983.713935][T25278] hub 3-1:0.0: USB hub found [ 983.945684][T25278] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 984.156394][T25278] usbhid 3-1:0.0: can't add hid device: -71 [ 984.162495][T25278] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 984.235717][T25278] usb 3-1: USB disconnect, device number 109 [ 984.947222][ T5906] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 985.076709][ T5927] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 985.106736][ T5906] usb 9-1: Using ep0 maxpacket: 8 [ 985.125997][ T5906] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 985.150219][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.178291][ T5906] usb 9-1: Product: syz [ 985.192870][ T5906] usb 9-1: Manufacturer: syz [ 985.197971][ T5906] usb 9-1: SerialNumber: syz [ 985.222100][ T5906] usb 9-1: config 0 descriptor?? [ 985.231901][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.249929][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.266749][ T5906] gspca_main: sq930x-2.14.0 probing 2770:930c [ 985.284408][ T5927] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 985.301335][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.332626][ T5927] usb 3-1: config 0 descriptor?? [ 985.793444][ T5927] hid-steam 0003:28DE:1142.008A: unknown main item tag 0x1 [ 985.830579][ T5927] hid-steam 0003:28DE:1142.008A: item fetching failed at offset 4/5 [ 985.846055][ T5927] hid-steam 0003:28DE:1142.008A: steam_probe:parse of hid interface failed [ 985.855228][ T5927] hid-steam 0003:28DE:1142.008A: probe with driver hid-steam failed with error -22 [ 985.926264][ T5906] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 985.943591][ T6801] program syz.7.15451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.006530][T25278] usb 3-1: USB disconnect, device number 110 [ 986.013017][ T6804] program syz.7.15451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.050618][ T6804] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 986.159530][ T5906] gspca_sq930x: Sensor ov9630 not yet treated [ 986.165793][ T5906] sq930x 9-1:0.0: probe with driver sq930x failed with error -22 [ 986.193769][ T5906] usb 9-1: USB disconnect, device number 12 [ 986.376818][ T6818] ALSA: mixer_oss: invalid OSS volume '' [ 986.779597][ T6830] program syz.2.15465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.207357][ T6848] [U]  [ 987.210678][ T6848] [U] K{‘ [ 987.213768][ T6848] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 987.220756][ T6848] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 987.220765][ T5906] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 987.236316][ T6848] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 987.236379][ T6848] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 987.236431][ T6848] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 987.236454][ T6848] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 987.236471][ T6848] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 987.236494][ T6848] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÏaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 987.433761][ T6848] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 987.442368][ T6848] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 987.456346][ T6848] [U] 22½“Æ©Ðû©x?0;3u± [ 987.460515][ T6848] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 987.485550][ T6848] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 987.494869][ T6848] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 987.503748][ T6848] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 987.510002][ T6848] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 987.522327][ T6848] [U] ¹ ec [ 987.525452][ T6848] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 987.537831][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.618197][ T6845] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 987.707295][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 987.722546][ T5906] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 987.741750][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.795967][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 987.805031][ T6858] netlink: 'syz.6.15478': attribute type 10 has an invalid length. [ 987.824348][ T6861] program syz.7.15479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.841213][ T5906] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 987.865833][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.873402][ T6863] random: crng reseeded on system resumption [ 987.905328][ T5906] usb 3-1: config 0 descriptor?? [ 987.921764][ T6858] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 987.961860][ T5906] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input90 [ 987.971493][ T6857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.221036][ T5927] usb 3-1: USB disconnect, device number 111 [ 988.332962][ T6880] bond0: option ad_select: unable to set because the bond device is up [ 988.602254][ T6890] vlan2: entered promiscuous mode [ 988.615385][ T6890] bridge0: entered promiscuous mode [ 988.962489][ T6907] tmpfs: Cannot retroactively limit inodes [ 989.156446][ T5927] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 989.326289][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 989.331702][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15510'. [ 989.343687][ T5927] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 989.345197][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15510'. [ 989.358829][ T5927] usb 3-1: config 0 has no interface number 0 [ 989.368362][ T5927] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.392136][ T6925] netlink: 'syz.6.15510': attribute type 6 has an invalid length. [ 989.398515][ T5927] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 989.427687][ T5927] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 989.446280][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 989.464820][ T5927] usb 3-1: Product: syz [ 989.474990][ T5927] usb 3-1: SerialNumber: syz [ 989.490503][ T5927] usb 3-1: config 0 descriptor?? [ 989.508341][ T5927] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 989.535998][ T5927] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input91 [ 989.764285][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 989.771594][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 989.779949][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 989.787498][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 989.794714][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 989.801955][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 989.809251][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 989.816385][ T5927] usb 3-1: USB disconnect, device number 112 [ 989.816736][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 989.829974][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 acpid: input dev[ 989.856676][ T5927] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 ice has been disconnected, fd 3 [ 990.853464][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15541'. [ 991.300856][ T7007] tracefs: Bad value for 'gid' [ 991.314440][ T7007] tracefs: Bad value for 'gid' [ 992.026716][ T7042] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 992.356202][T25278] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 992.467484][ T7064] bridge0: port 1(syz_tun) entered blocking state [ 992.481130][ T7064] bridge0: port 1(syz_tun) entered disabled state [ 992.493155][ T7064] syz_tun: entered allmulticast mode [ 992.511858][ T7064] syz_tun: entered promiscuous mode [ 992.530823][T25278] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 992.553986][T25278] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 992.571971][T25278] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 992.606050][T25278] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.633140][T25278] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 992.665335][T25278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.707696][T25278] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 992.728099][T25278] usb 3-1: invalid MIDI out EP 0 [ 992.855507][T25278] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 992.984331][T25278] usb 3-1: USB disconnect, device number 113 [ 993.147599][ T7092] program syz.6.15591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 993.262320][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.277044][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.936732][ T30] audit: type=1326 audit(1755643000.290:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.2.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 994.010525][ T30] audit: type=1326 audit(1755643000.290:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.2.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 994.076690][ T30] audit: type=1326 audit(1755643000.330:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.2.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 994.176526][ T30] audit: type=1326 audit(1755643000.330:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.2.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 994.280230][ T30] audit: type=1326 audit(1755643000.330:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.2.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 994.334236][ T30] audit: type=1326 audit(1755643000.330:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.2.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 994.388993][ T30] audit: type=1326 audit(1755643000.330:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.2.15610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3858ebe9 code=0x7ffc0000 [ 994.410941][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.482195][ T7156] netlink: 'syz.2.15623': attribute type 29 has an invalid length. [ 994.495819][ T7156] netlink: 'syz.2.15623': attribute type 29 has an invalid length. [ 994.693834][ T7168] nbd: must specify a device to reconfigure [ 995.370991][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15644'. [ 995.382163][ T7198] tipc: Enabling of bearer rejected, failed to enable media [ 995.942227][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15659'. [ 996.006687][ T5927] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 996.176189][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 996.193327][ T5927] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.204298][ T5927] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 996.217353][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.230878][ T5927] usb 9-1: config 0 descriptor?? [ 996.424999][ T7250] overlayfs: missing 'lowerdir' [ 996.661122][ T5927] arvo 0003:1E7D:30D4.008B: unknown main item tag 0x0 [ 996.669821][ T5927] arvo 0003:1E7D:30D4.008B: unknown main item tag 0x0 [ 996.681155][ T5927] arvo 0003:1E7D:30D4.008B: unknown main item tag 0x0 [ 996.689469][ T5927] arvo 0003:1E7D:30D4.008B: unknown main item tag 0x0 [ 996.697612][ T5927] arvo 0003:1E7D:30D4.008B: unknown main item tag 0x0 [ 996.715817][ T5927] arvo 0003:1E7D:30D4.008B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 996.829129][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15675'. [ 996.839672][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15675'. [ 996.865740][ T977] usb 9-1: USB disconnect, device number 13 [ 997.722831][ T7299] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 998.112409][ T5927] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 998.123148][ T5927] hid-generic 0000:0000:0000.008C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 998.544558][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15707'. [ 998.832433][ T7334] random: crng reseeded on system resumption [ 999.334179][ T977] hid-generic 0000:0D17:0000.008D: unknown main item tag 0x0 [ 999.356676][ T977] hid-generic 0000:0D17:0000.008D: unknown main item tag 0x0 [ 999.374998][ T977] hid-generic 0000:0D17:0000.008D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 999.539784][ T7360] iso9660: Bad value for 'gid' [ 999.562210][ T7360] iso9660: Bad value for 'gid' [ 1000.030839][ T7382] IPVS: Error joining to the multicast group [ 1000.348509][ T7397] netlink: 60 bytes leftover after parsing attributes in process `syz.8.15739'. [ 1001.738405][ T7470] netlink: 'syz.2.15774': attribute type 1 has an invalid length. [ 1001.916627][ T7477] netlink: 209592 bytes leftover after parsing attributes in process `syz.8.15778'. [ 1002.032973][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15780'. [ 1002.246503][ T5906] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 1002.400107][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1002.418739][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.430280][ T5906] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1002.439576][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.452621][ T5906] usb 9-1: config 0 descriptor?? [ 1002.474854][ T7502] sp0: Synchronizing with TNC [ 1002.487605][ T7501] [U] è` [ 1002.596438][ T5927] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 1002.752850][ T5927] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1002.764335][ T5927] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1002.775695][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1002.782682][ T5927] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1002.792389][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.804811][ T5927] usb 3-1: config 0 descriptor?? [ 1002.811140][ T7498] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1002.881880][ T5906] lenovo 0003:17EF:6047.008E: unknown main item tag 0x0 [ 1002.891298][ T5906] lenovo 0003:17EF:6047.008E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 1003.091295][T25278] usb 9-1: USB disconnect, device number 14 [ 1003.233274][ T5927] uclogic 0003:5543:0005.008F: unknown main item tag 0x0 [ 1003.241309][ T5927] uclogic 0003:5543:0005.008F: unknown main item tag 0x0 [ 1003.248955][ T5927] uclogic 0003:5543:0005.008F: unknown main item tag 0x0 [ 1003.256241][ T5927] uclogic 0003:5543:0005.008F: unknown main item tag 0x0 [ 1003.263349][ T5927] uclogic 0003:5543:0005.008F: unknown main item tag 0x0 [ 1003.271023][ T5927] uclogic 0003:5543:0005.008F: unknown main item tag 0x0 [ 1003.282008][ T5927] uclogic 0003:5543:0005.008F: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 [ 1003.450773][T25278] usb 3-1: USB disconnect, device number 114 [ 1003.702116][ T5845] Bluetooth: hci4: link tx timeout [ 1003.708423][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1003.973714][ T7530] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.15803'. [ 1003.996597][ T7530] netlink: zone id is out of range [ 1004.001797][ T7530] netlink: get zone limit has 8 unknown bytes [ 1004.047266][T25278] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1004.217219][T25278] usb 9-1: Using ep0 maxpacket: 8 [ 1004.238200][T25278] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.270124][T25278] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.288673][T25278] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1004.298429][T25278] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1004.313018][T25278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.337767][T25278] usb 9-1: config 0 descriptor?? [ 1004.793603][T25278] steelseries 0003:1038:1410.0090: unknown main item tag 0x0 [ 1004.824617][T25278] steelseries 0003:1038:1410.0090: unknown main item tag 0x0 [ 1004.843614][T25278] steelseries 0003:1038:1410.0090: unknown main item tag 0x0 [ 1004.869375][T25278] steelseries 0003:1038:1410.0090: unknown main item tag 0x0 [ 1004.902417][T25278] steelseries 0003:1038:1410.0090: unknown main item tag 0x0 [ 1004.920378][T25278] steelseries 0003:1038:1410.0090: missing HID_OUTPUT_REPORT 0 [ 1005.026799][T25278] usb 9-1: USB disconnect, device number 15 [ 1005.739168][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 1006.459769][ T7611] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15841'. [ 1006.656871][ T7620] IPVS: stopping backup sync thread 7621 ... [ 1006.666328][ T7621] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1006.677086][T25280] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1006.763183][ T7627] netlink: 5636 bytes leftover after parsing attributes in process `syz.7.15848'. [ 1006.856529][T25280] usb 3-1: Using ep0 maxpacket: 32 [ 1006.865018][T25280] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1006.886236][T25280] usb 3-1: config 0 has no interface number 0 [ 1006.900859][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15851'. [ 1006.920780][T25280] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.955403][T25280] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.004646][T25280] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1007.025392][T25280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.059330][T25280] usb 3-1: config 0 descriptor?? [ 1007.164026][ T7641] CUSE: DEVNAME unspecified [ 1007.695350][T25280] uclogic 0003:28BD:0094.0091: failed retrieving string descriptor #100: -71 [ 1007.723586][T25280] uclogic 0003:28BD:0094.0091: failed retrieving pen parameters: -71 [ 1007.751010][T25280] uclogic 0003:28BD:0094.0091: pen probing failed: -71 [ 1007.772651][T25280] uclogic 0003:28BD:0094.0091: failed probing parameters: -71 [ 1007.801014][T25280] uclogic 0003:28BD:0094.0091: probe with driver uclogic failed with error -71 [ 1007.856441][T25280] usb 3-1: USB disconnect, device number 115 [ 1009.718896][ T7735] Invalid logical block size (-5) [ 1009.726213][T25278] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1009.888761][T25278] usb 3-1: config 9 has an invalid interface number: 88 but max is 1 [ 1009.906247][T25278] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1009.916349][T25278] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.934128][T25278] usb 3-1: config 9 has no interface number 1 [ 1009.941152][T25278] usb 3-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1009.959140][T25278] usb 3-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1009.981218][T25278] usb 3-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1010.014080][T25278] usb 3-1: config 9 interface 88 has no altsetting 0 [ 1010.039735][T25278] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 1010.066571][T25278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.085948][T25278] usb 3-1: Product: syz [ 1010.093583][T25278] usb 3-1: Manufacturer: syz [ 1010.103791][T25278] usb 3-1: SerialNumber: syz [ 1010.285997][ T7751] netlink: 'syz.0.15909': attribute type 83 has an invalid length. [ 1010.339473][T25278] qmi_wwan 3-1:9.88: skipping garbage [ 1010.376969][T25278] qmi_wwan 3-1:9.88: probe with driver qmi_wwan failed with error -22 [ 1010.426379][T25278] usb 3-1: Could not set interface, error -71 [ 1010.446423][T25278] usb 3-1: USB disconnect, device number 116 [ 1010.693105][ T7767] tipc: Enabled bearer , priority 10 [ 1011.082545][ T7778] tmpfs: Bad value for 'mpol' [ 1011.483009][ T7802] mmap: syz.7.15933 (7802): VmData 37474304 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 1011.806505][ T5906] tipc: Node number set to 4278321153 [ 1012.696552][ T7853] program syz.6.15957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.250735][ T7878] program syz.2.15969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.779706][ T7904] usb usb8: usbfs: process 7904 (syz.2.15982) did not claim interface 63 before use [ 1013.792055][ T7903] smc: net device bond0 applied user defined pnetid SYZ2 [ 1014.804880][ T7942] netlink: 'syz.8.16000': attribute type 58 has an invalid length. [ 1014.814396][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16000'. [ 1015.638169][ T7980] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1015.668050][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16022'. [ 1015.668908][ T7983] syz_tun: tun_net_xmit 86 [ 1015.677620][ T7986] openvswitch: netlink: Unknown nsh attribute 0 [ 1015.689516][ T7986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.892715][ T7995] netlink: 'syz.8.16026': attribute type 1 has an invalid length. [ 1015.916532][ T7995] NCSI netlink: No device for ifindex 0 [ 1016.696391][ C1] syz_tun: tun_net_xmit 86 [ 1016.803893][ T8033] netlink: 'syz.2.16044': attribute type 2 has an invalid length. [ 1016.820910][ T8033] bridge: entered promiscuous mode [ 1016.916873][T25280] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1016.969620][ T8037] sp0: Synchronizing with TNC [ 1017.086299][T25280] usb 9-1: Using ep0 maxpacket: 8 [ 1017.106661][T25280] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1017.126269][T25280] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.126607][ T8043] netlink: 'syz.2.16049': attribute type 5 has an invalid length. [ 1017.141521][T25280] usb 9-1: Product: syz [ 1017.146790][T25280] usb 9-1: Manufacturer: syz [ 1017.152613][T25280] usb 9-1: SerialNumber: syz [ 1017.168854][T25280] usb 9-1: config 0 descriptor?? [ 1017.181619][T25280] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1017.384229][ T8051] tmpfs: Cannot disable swap on remount [ 1017.736635][ C1] syz_tun: tun_net_xmit 86 [ 1017.826932][T25280] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 1017.853635][T25280] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 1017.874302][T25280] usb 9-1: USB disconnect, device number 16 [ 1018.059535][ T5906] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1018.142992][ T8080] smc: net device bond0 applied user defined pnetid S [ 1018.218597][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.230692][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.240781][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1018.250067][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.261755][ T5906] usb 3-1: config 0 descriptor?? [ 1018.699910][ T5906] lg-g15 0003:046D:C222.0092: unknown main item tag 0x0 [ 1018.734183][ T5906] lg-g15 0003:046D:C222.0092: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1018.890987][ T5927] usb 3-1: USB disconnect, device number 117 [ 1018.960734][ T8108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.976630][T25278] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1019.080417][ T8114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16083'. [ 1019.157006][T25278] usb 9-1: Using ep0 maxpacket: 16 [ 1019.174819][T25278] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.186652][T25278] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.186684][T25278] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1019.186733][T25278] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1019.186760][T25278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.207356][T25278] usb 9-1: config 0 descriptor?? [ 1019.510914][ T8128] ucma_write: process 6998 (syz.2.16090) changed security contexts after opening file descriptor, this is not allowed. [ 1019.640506][ T8134] program syz.2.16093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.687950][T25278] hid-multitouch 0003:0457:07DA.0093: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0 [ 1019.773212][ T8140] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16096'. [ 1019.798986][ T8140] vlan2: entered allmulticast mode [ 1019.804361][ T8140] gretap0: entered allmulticast mode [ 1019.899014][T25278] usb 9-1: USB disconnect, device number 17 [ 1020.459865][ T8170] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1020.459865][ T8170] program syz.0.16111 not setting count and/or reply_len properly [ 1021.414195][ T8218] tipc: Enabling of bearer rejected, failed to enable media [ 1021.932160][ T8243] netlink: 'syz.8.16148': attribute type 1 has an invalid length. [ 1021.946431][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16148'. [ 1022.681795][ T8282] sctp: [Deprecated]: syz.7.16166 (pid 8282) Use of int in maxseg socket option. [ 1022.681795][ T8282] Use struct sctp_assoc_value instead [ 1022.785858][ T30] audit: type=1326 audit(1755643029.140:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8288 comm="syz.8.16169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e9b98ebe9 code=0x0 [ 1023.325713][ T8311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.844343][ T8335] binder: 8334:8335 ioctl c0306201 0 returned -14 [ 1023.963643][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16192'. [ 1023.974340][ T8340] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1024.156951][ T8348] netlink: 'syz.8.16195': attribute type 49 has an invalid length. [ 1024.827331][ T8382] netlink: 100 bytes leftover after parsing attributes in process `syz.7.16213'. [ 1024.944713][ T30] audit: type=1326 audit(1755643031.300:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.7.16216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8070f8ebe9 code=0x0 [ 1025.357743][ T5927] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1025.516215][ T5927] usb 9-1: Using ep0 maxpacket: 32 [ 1025.533861][ T5927] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.545337][ T5927] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.558579][ T5927] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1025.565792][ T5927] usb 9-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1025.575652][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.587709][ T5927] usb 9-1: config 0 descriptor?? [ 1026.013312][ T5927] dragonrise 0003:0079:0011.0094: unknown main item tag 0x0 [ 1026.023065][ T5927] dragonrise 0003:0079:0011.0094: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.8-1/input0 [ 1026.170786][ T8430] netlink: 'syz.2.16234': attribute type 1 has an invalid length. [ 1026.247297][ T5927] usb 9-1: USB disconnect, device number 18 [ 1026.792533][ T30] audit: type=1326 audit(1755643034.145:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8422 comm="syz.7.16231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8070f8ebe9 code=0x7fc00000 [ 1027.867483][ T8503] random: crng reseeded on system resumption [ 1027.958909][ T8508] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1027.981280][ T8508] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1028.169599][ T8520] loop6: detected capacity change from 0 to 63 [ 1028.606722][ T44] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1028.778545][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.795120][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.805658][ T44] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1028.815321][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.830717][ T44] usb 3-1: config 0 descriptor?? [ 1028.854228][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16293'. [ 1029.453439][ T44] hid-led 0003:1D34:0004.0095: probe with driver hid-led failed with error -71 [ 1029.465938][ T44] usb 3-1: USB disconnect, device number 118 [ 1029.626866][T21581] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1029.788296][T21581] usb 9-1: config 0 has an invalid interface number: 98 but max is 0 [ 1029.807398][T21581] usb 9-1: config 0 has no interface number 0 [ 1029.813667][T21581] usb 9-1: config 0 interface 98 has no altsetting 0 [ 1029.835502][T21581] usb 9-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1029.851314][T21581] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.859637][T21581] usb 9-1: Product: syz [ 1029.866704][T21581] usb 9-1: Manufacturer: syz [ 1029.871644][T21581] usb 9-1: SerialNumber: syz [ 1029.889594][T21581] usb 9-1: config 0 descriptor?? [ 1030.109184][T21581] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1030.241342][ T8591] usb usb8: usbfs: process 8591 (syz.2.16311) did not claim interface 0 before use [ 1030.770376][T21581] usb 9-1: reset high-speed USB device number 19 using dummy_hcd [ 1030.908014][ T30] audit: type=1326 audit(1755643038.275:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8622 comm="syz.0.16327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 1030.970110][ T30] audit: type=1326 audit(1755643038.275:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8622 comm="syz.0.16327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 1031.014722][ T30] audit: type=1326 audit(1755643038.275:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8622 comm="syz.0.16327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 1031.040248][ T30] audit: type=1326 audit(1755643038.275:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8622 comm="syz.0.16327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 1031.071813][ T30] audit: type=1326 audit(1755643038.275:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8622 comm="syz.0.16327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x7ffc0000 [ 1031.199581][T21581] usb 9-1: failed to restore interface 98 altsetting 4 (error=-71) [ 1031.227509][T21581] usb 9-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1031.235326][T21581] usb 9-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1031.244032][ T5927] usb 9-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1031.272035][ T5927] usb 9-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1031.291188][T21581] usb 9-1: USB disconnect, device number 19 [ 1031.720618][ T8657] netlink: 'syz.6.16343': attribute type 1 has an invalid length. [ 1033.175791][ T8726] netlink: 'syz.0.16376': attribute type 1 has an invalid length. [ 1033.186563][ T8726] netlink: 208 bytes leftover after parsing attributes in process `syz.0.16376'. [ 1033.195835][ T8726] netlink: 'syz.0.16376': attribute type 1 has an invalid length. [ 1033.205385][ T8726] netlink: 'syz.0.16376': attribute type 2 has an invalid length. [ 1033.265625][ T8730] netlink: 'syz.6.16377': attribute type 3 has an invalid length. [ 1033.435958][ T8738] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16380'. [ 1033.458501][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16380'. [ 1033.956049][ T8765] netlink: 240 bytes leftover after parsing attributes in process `syz.2.16394'. [ 1033.999437][ T8765] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16394'. [ 1036.536197][ T5766] Bluetooth: hci4: command 0x0406 tx timeout [ 1036.874053][ T8852] netlink: 11 bytes leftover after parsing attributes in process `syz.0.16434'. [ 1036.982405][ T8844] xt_CT: No such helper "pptp" [ 1037.277913][T25280] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1037.311625][ T8866] sp0: Synchronizing with TNC [ 1037.459838][T25280] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.478952][T25280] usb 9-1: config 0 has no interfaces? [ 1037.488858][T25280] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1037.498532][T25280] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1037.508834][T25280] usb 9-1: Product: syz [ 1037.513262][T25280] usb 9-1: Manufacturer: syz [ 1037.526013][T25280] usb 9-1: config 0 descriptor?? [ 1037.763337][ T44] usb 9-1: USB disconnect, device number 20 [ 1037.874855][ T8880] macsec1: entered promiscuous mode [ 1037.883838][ T8880] macsec1: entered allmulticast mode [ 1038.056472][ T30] audit: type=1800 audit(1755643045.415:6203): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.16450" name=03 dev="tmpfs" ino=2558 res=0 errno=0 [ 1038.227071][ T8896] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 1038.233179][ T8896] syzkaller0: ignored: set checksum disabled [ 1038.387642][ T8904] netlink: 10 bytes leftover after parsing attributes in process `syz.8.16456'. [ 1038.528087][ T8908] overlayfs: workdir and upperdir must be separate subtrees [ 1038.683358][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16462'. [ 1038.998659][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16469'. [ 1039.044341][ T8929] vlan4: entered promiscuous mode [ 1039.070777][ T8929] gretap0: entered promiscuous mode [ 1039.295200][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16476'. [ 1039.304531][ T8944] netlink: 'syz.6.16476': attribute type 9 has an invalid length. [ 1039.320877][ T8944] macvlan2: entered allmulticast mode [ 1039.326752][ T8944] veth0_macvtap: entered allmulticast mode [ 1040.054319][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16485'. [ 1040.516681][T25280] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1040.692690][T25280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.723885][T25280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.746299][T25280] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1040.755459][T25280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.790839][T25280] usb 3-1: config 0 descriptor?? [ 1041.227546][T25280] samsung 0003:0419:0600.0096: item fetching failed at offset 5/7 [ 1041.249518][T25280] samsung 0003:0419:0600.0096: parse failed [ 1041.255597][T25280] samsung 0003:0419:0600.0096: probe with driver samsung failed with error -22 [ 1041.458288][T25280] usb 3-1: USB disconnect, device number 119 [ 1042.082403][ T9033] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 1045.146899][T25280] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1045.160490][ T9104] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1045.179364][ T9104] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1045.318602][T25280] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1045.346177][T25280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.367428][T25280] usb 3-1: config 0 descriptor?? [ 1045.394570][T25280] cp210x 3-1:0.0: cp210x converter detected [ 1045.714549][ T9123] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1046.007449][T25280] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1046.023942][T25280] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1046.053536][T25280] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1046.073081][T25280] usb 3-1: USB disconnect, device number 120 [ 1046.091839][T25280] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1046.116928][T25280] cp210x 3-1:0.0: device disconnected [ 1047.061539][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16575'. [ 1047.210158][ T9160] netlink: 'syz.6.16576': attribute type 29 has an invalid length. [ 1047.570243][ T9171] netlink: 830 bytes leftover after parsing attributes in process `syz.2.16581'. [ 1047.777850][ T9179] loop7: detected capacity change from 0 to 524255232 [ 1048.016283][T25280] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1048.173951][ T9199] netem: incorrect gi model size [ 1048.187944][ T9199] netem: change failed [ 1048.206332][T25280] usb 3-1: Using ep0 maxpacket: 16 [ 1048.219897][T25280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1048.238812][T25280] usb 3-1: config 8 has an invalid interface number: 187 but max is 0 [ 1048.258912][T25280] usb 3-1: config 8 has no interface number 0 [ 1048.265252][T25280] usb 3-1: config 8 interface 187 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1048.300597][T25280] usb 3-1: config 8 interface 187 altsetting 7 bulk endpoint 0xC has invalid maxpacket 16 [ 1048.317178][T25280] usb 3-1: config 8 interface 187 has no altsetting 0 [ 1048.332632][T25280] usb 3-1: string descriptor 0 read error: -22 [ 1048.343582][T25280] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=f2.91 [ 1048.352996][T25280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.365964][ T9181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1048.374444][ T9181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1048.384038][T25280] kvaser_usb 3-1:8.187: error -ENODEV: Cannot get usb endpoint(s) [ 1048.562147][ T9211] siw: device registration error -23 [ 1048.599133][ T5906] usb 3-1: USB disconnect, device number 121 [ 1049.172077][ T5906] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1049.331461][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16614'. [ 1049.346695][ T5906] usb 9-1: Using ep0 maxpacket: 32 [ 1049.374141][ T5906] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1049.396647][ T5906] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1049.405442][ T5906] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1049.436415][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1049.456709][ T5906] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1049.467182][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1049.496412][ T5906] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1049.517362][ T9241] netlink: 88 bytes leftover after parsing attributes in process `syz.7.16616'. [ 1049.533190][ T5906] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1049.554253][ T5906] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1049.565082][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.587524][ T5906] usb 9-1: config 0 descriptor?? [ 1049.764585][ T9245] netlink: 'syz.7.16618': attribute type 11 has an invalid length. [ 1049.839721][ T5906] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1050.100508][ T5906] usb 9-1: USB disconnect, device number 21 [ 1050.113382][ T5906] usblp0: removed [ 1050.172895][ T9256] @: renamed from vlan0 [ 1050.985423][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16629'. [ 1051.577622][ T9291] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1052.638142][ T9334] netlink: 84 bytes leftover after parsing attributes in process `syz.0.16657'. [ 1053.586679][ T9366] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1053.954827][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16680'. [ 1054.707802][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1054.717571][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.133706][ T9419] netlink: 'syz.2.16696': attribute type 21 has an invalid length. [ 1055.161341][ T9419] netlink: 'syz.2.16696': attribute type 1 has an invalid length. [ 1055.199576][ T9419] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.16696'. [ 1055.845684][ T9444] ipvlan3: entered promiscuous mode [ 1055.852599][ T9444] ipvlan3: entered allmulticast mode [ 1055.858363][ T9444] macvlan1: entered allmulticast mode [ 1055.863941][ T9444] veth1_vlan: entered allmulticast mode [ 1056.395539][ T9466] vlan5: entered allmulticast mode [ 1056.406366][ T9466] hsr0: entered allmulticast mode [ 1056.418336][ T9466] hsr_slave_0: entered allmulticast mode [ 1056.427159][ T9466] hsr_slave_1: entered allmulticast mode [ 1057.954267][ T9520] syz.7.16744 (9520): /proc/9519/oom_adj is deprecated, please use /proc/9519/oom_score_adj instead. [ 1057.998701][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16745'. [ 1058.013263][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16746'. [ 1058.774297][ T9548] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1059.125115][ T9568] input: syz0 as /devices/virtual/input/input93 [ 1059.236417][ T44] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1059.367555][ T9575] lo speed is unknown, defaulting to 1000 [ 1059.384319][T25279] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1059.408591][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.436700][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1059.480455][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1059.502444][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.531769][ T44] usb 3-1: Product: syz [ 1059.536020][ T44] usb 3-1: Manufacturer: syz [ 1059.546645][T25279] usb 9-1: Using ep0 maxpacket: 32 [ 1059.558099][T25279] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1059.558414][ T44] usb 3-1: SerialNumber: syz [ 1059.588633][T25279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.638242][T25279] usb 9-1: config 0 descriptor?? [ 1059.824733][ T44] usb 3-1: 0:2 : does not exist [ 1059.856720][T25279] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1059.858744][ T44] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1059.911383][T25279] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1059.932978][T25279] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1059.962356][T25279] usb 9-1: media controller created [ 1059.970217][ T44] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1060.034266][ T44] usb 3-1: USB disconnect, device number 122 [ 1060.080548][T25279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1060.137835][T25279] az6027: usb out operation failed. (-71) [ 1060.144125][T25279] az6027: usb out operation failed. (-71) [ 1060.150091][T25279] stb0899_attach: Driver disabled by Kconfig [ 1060.173475][T25279] az6027: no front-end attached [ 1060.173475][T25279] [ 1060.202518][T25279] az6027: usb out operation failed. (-71) [ 1060.227676][T25279] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1060.271545][T25279] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input94 [ 1060.318398][T25279] dvb-usb: schedule remote query interval to 400 msecs. [ 1060.335762][T25279] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1060.375343][T25279] usb 9-1: USB disconnect, device number 22 [ 1060.558499][T25279] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1060.996441][ T44] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1061.167025][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1061.185736][ T44] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1061.216160][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.247654][ T44] usb 3-1: config 0 descriptor?? [ 1061.319522][ T9635] netlink: 440 bytes leftover after parsing attributes in process `syz.0.16797'. [ 1061.344607][ T9635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16797'. [ 1061.354805][ T9635] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16797'. [ 1061.477334][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1061.519826][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1061.523143][ T9640] syz_tun: tun_net_xmit 86 [ 1061.560848][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1061.581023][ T44] usb 3-1: media controller created [ 1061.639058][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1061.722892][ T44] az6027: usb out operation failed. (-71) [ 1061.729533][ T44] az6027: usb out operation failed. (-71) [ 1061.740572][ T44] stb0899_attach: Driver disabled by Kconfig [ 1061.747354][ T44] az6027: no front-end attached [ 1061.747354][ T44] [ 1061.754970][ T44] az6027: usb out operation failed. (-71) [ 1061.764198][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1061.774989][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input95 [ 1061.796550][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 1061.803606][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1061.831503][ T44] usb 3-1: USB disconnect, device number 123 [ 1061.864648][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1062.536401][ C0] syz_tun: tun_net_xmit 86 [ 1062.590957][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16812'. [ 1062.659054][ T5906] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1062.831349][ T5906] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1062.842013][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.855739][ T5906] usb 3-1: Product: syz [ 1062.862626][ T5906] usb 3-1: Manufacturer: syz [ 1062.886169][ T5906] usb 3-1: SerialNumber: syz [ 1062.895725][ T5906] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1062.949521][T21581] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1063.363589][ T9679] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1063.576401][ C0] syz_tun: tun_net_xmit 86 [ 1063.794719][ T5906] usb 3-1: USB disconnect, device number 124 [ 1064.456590][T21581] usb 3-1: Service connection timeout for: 257 [ 1064.463222][T21581] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1064.472133][T21581] ath9k_htc: Failed to initialize the device [ 1064.480606][ T9708] nbd: socks must be embedded in a SOCK_ITEM attr [ 1064.488574][ T9708] block nbd4: shutting down sockets [ 1064.494502][ T5906] usb 3-1: ath9k_htc: USB layer deinitialized [ 1065.401028][ T9743] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1065.677296][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16853'. [ 1067.121137][ T30] audit: type=1326 audit(1755643074.485:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1067.158100][ T30] audit: type=1326 audit(1755643074.505:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1067.209194][ T30] audit: type=1326 audit(1755643074.515:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1067.234952][ T30] audit: type=1326 audit(1755643074.525:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1067.259000][ T30] audit: type=1326 audit(1755643074.525:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1067.305829][ T30] audit: type=1326 audit(1755643074.545:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1067.327917][ T30] audit: type=1326 audit(1755643074.545:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1067.351378][ T30] audit: type=1326 audit(1755643074.545:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e9b985ba7 code=0x7ffc0000 [ 1067.373340][ T30] audit: type=1326 audit(1755643074.545:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e9b92add9 code=0x7ffc0000 [ 1067.395829][ T30] audit: type=1326 audit(1755643074.545:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.8.16876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e9b985ba7 code=0x7ffc0000 [ 1067.786611][T21581] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1067.936457][T21581] usb 9-1: Using ep0 maxpacket: 16 [ 1067.947454][T21581] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.963084][T21581] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1067.981248][T21581] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1067.990440][T21581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.002055][T21581] usb 9-1: config 0 descriptor?? [ 1068.217817][T21581] usbhid 9-1:0.0: can't add hid device: -71 [ 1068.230188][T21581] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1068.259036][T21581] usb 9-1: USB disconnect, device number 23 [ 1069.058088][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1069.122368][ T9836] team0: Port device batadv1 added [ 1069.962429][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16906'. [ 1070.808251][ T9896] input: syz0 as /devices/virtual/input/input96 [ 1070.874176][ T9897] block device autoloading is deprecated and will be removed. [ 1072.396822][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16945'. [ 1073.057682][ T977] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1073.270195][ T977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.306644][ T977] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1073.315898][ T977] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1073.381745][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.409898][ T977] usb 9-1: config 0 descriptor?? [ 1073.448516][ T977] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1073.455347][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 1073.479214][ T977] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1073.511499][ T977] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1073.533351][ T977] usb 9-1: media controller created [ 1073.545325][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1073.566839][ T9981] netlink: 'syz.7.16962': attribute type 1 has an invalid length. [ 1073.594729][ T977] dvb-usb: bulk message failed: -22 (6/0) [ 1073.616475][ T977] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1073.639596][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input97 [ 1073.703549][ T9983] tap0: tun_chr_ioctl cmd 2148553947 [ 1073.719657][ T977] dvb-usb: schedule remote query interval to 150 msecs. [ 1073.734974][ T977] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1073.820044][ T5845] Bluetooth: hci2: command 0x1003 tx timeout [ 1073.831775][ T5766] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1073.892428][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 1073.966153][ T977] dvb-usb: error while querying for an remote control event. [ 1074.128318][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 1074.144674][ T977] dvb-usb: error while querying for an remote control event. [ 1074.326265][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 1074.332169][ T977] dvb-usb: error while querying for an remote control event. [ 1074.371161][T10000] usb usb8: usbfs: process 10000 (syz.2.16971) did not claim interface 0 before use [ 1074.414459][ T977] usb 9-1: USB disconnect, device number 24 acpid: input device has been disconnected, fd 3 [ 1074.488167][ T977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1075.372499][T10020] sp0: Synchronizing with TNC [ 1075.656652][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16983'. [ 1076.058463][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16990'. [ 1076.097335][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16991'. [ 1077.024948][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1077.024968][ T30] audit: type=1326 audit(1755643084.385:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10094 comm="syz.0.17008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3614b8ebe9 code=0x0 [ 1077.091860][T10097] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1077.129676][ T5906] syz_tun: tun_net_xmit 110 [ 1077.384540][T10110] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17015'. [ 1077.532228][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17018'. [ 1077.817145][ T5906] syz_tun: tun_net_xmit 110 [ 1078.027832][ T30] audit: type=1326 audit(1755643085.385:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10134 comm="syz.6.17027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 1078.146447][ T30] audit: type=1326 audit(1755643085.385:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10134 comm="syz.6.17027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x7ffc0000 [ 1078.537395][T10152] Falling back ldisc for ptm0. [ 1078.777858][T10161] input: syz0 as /devices/virtual/input/input98 [ 1079.848676][T10196] netlink: 'syz.8.17055': attribute type 2 has an invalid length. [ 1079.876121][T10196] netlink: 'syz.8.17055': attribute type 8 has an invalid length. [ 1079.904400][T10196] netlink: 1160 bytes leftover after parsing attributes in process `syz.8.17055'. [ 1081.727252][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17082'. [ 1082.880818][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17097'. [ 1083.535009][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17107'. [ 1084.114420][T10327] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1084.848311][T10356] syz.2.17132: attempt to access beyond end of device [ 1084.848311][T10356] loop5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1084.900340][T10356] SQUASHFS error: Failed to read block 0x0: -5 [ 1085.359095][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17140'. [ 1085.446746][T25279] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1085.479078][T10376] block nbd4: server does not support multiple connections per device. [ 1085.501302][T10376] block nbd4: shutting down sockets [ 1086.006686][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17146'. [ 1086.036659][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17146'. [ 1086.217037][ T977] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1086.329083][ T4951] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1086.382457][T10399] input: syz1 as /devices/virtual/input/input99 [ 1086.649929][T10409] tipc: New replicast peer: 255.255.255.255 [ 1086.665770][T10409] tipc: Enabled bearer , priority 1 [ 1086.683461][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17155'. [ 1087.343133][ T3294] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1087.371292][ T3294] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1087.616652][ T5906] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1087.776260][ T977] tipc: Node number set to 4194305 [ 1087.876511][ T30] audit: type=1326 audit(1755643095.215:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.8.17173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1087.951782][ T30] audit: type=1326 audit(1755643095.215:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.8.17173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1087.973834][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.031689][ T30] audit: type=1326 audit(1755643095.285:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.8.17173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4e9b98ebe9 code=0x7ffc0000 [ 1088.068902][T10446] netlink: 'syz.2.17174': attribute type 10 has an invalid length. [ 1088.127103][T10446] geneve0: entered promiscuous mode [ 1088.154380][ T30] audit: type=1326 audit(1755643095.285:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.8.17173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b98ebe9 code=0x0 [ 1088.178449][T10446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.242013][T10446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.264982][T10446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.328277][T10446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.369487][T10446] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1088.600160][T10459] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1088.966597][T25279] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1089.146263][T25279] usb 3-1: Using ep0 maxpacket: 16 [ 1089.158687][T25279] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.178159][T10477] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1089.186629][T25279] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.206296][T25279] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1089.218640][T25279] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1089.235477][T25279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.248821][T25279] usb 3-1: config 0 descriptor?? [ 1089.378577][ T30] audit: type=1326 audit(1755643096.745:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10480 comm="syz.6.17189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa419d8ebe9 code=0x0 [ 1089.561997][T10488] netlink: 724 bytes leftover after parsing attributes in process `syz.0.17192'. [ 1089.573208][T10488] netlink: 724 bytes leftover after parsing attributes in process `syz.0.17192'. [ 1089.690612][T25279] cougar 0003:060B:500A.0097: unexpected long global item [ 1089.698841][T25279] cougar 0003:060B:500A.0097: parse failed [ 1089.704887][T25279] cougar 0003:060B:500A.0097: probe with driver cougar failed with error -22 [ 1089.885858][T25279] usb 3-1: USB disconnect, device number 125 [ 1091.014217][T10524] program syz.6.17208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1091.019566][T10535] sctp: [Deprecated]: syz.8.17213 (pid 10535) Use of int in maxseg socket option. [ 1091.019566][T10535] Use struct sctp_assoc_value instead [ 1091.426554][ T5906] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1091.585397][T10558] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17224'. [ 1091.586470][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 1091.602157][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.614121][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.627892][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1091.634764][ T5906] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1091.644311][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.656405][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1091.665837][ T5906] usb 3-1: config 0 descriptor?? [ 1092.097142][ T5906] hid (null): invalid report_size 1354493550 [ 1092.104349][ T5906] hid (null): unknown global tag 0xe [ 1092.287496][ T977] usb 3-1: USB disconnect, device number 126 [ 1092.556469][T25279] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1092.716434][T25279] usb 9-1: Using ep0 maxpacket: 32 [ 1092.724876][T25279] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1092.733606][T25279] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1092.743116][T25279] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1092.752421][T25279] usb 9-1: config 1 has no interface number 0 [ 1092.758564][T25279] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1092.770018][T25279] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1092.783520][T25279] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1092.792730][T25279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.820495][T25279] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1092.910733][T10578] C: renamed from team_slave_0 (while UP) [ 1092.932236][T10578] netlink: 'syz.6.17232': attribute type 4 has an invalid length. [ 1092.953694][T10578] netlink: 116 bytes leftover after parsing attributes in process `syz.6.17232'. [ 1092.967709][T10578] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1093.030978][T25279] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1093.243361][T25279] usb 9-1: USB disconnect, device number 25 [ 1093.266642][T25279] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1093.379738][T21581] kernel write not supported for file /amidi2 (pid: 21581 comm: kworker/1:0) [ 1094.150550][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17254'. [ 1094.182943][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17254'. [ 1095.090171][T21581] IPVS: starting estimator thread 0... [ 1095.106232][T25279] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1095.131491][T10675] netlink: 724 bytes leftover after parsing attributes in process `syz.8.17277'. [ 1095.143256][T10675] netlink: 724 bytes leftover after parsing attributes in process `syz.8.17277'. [ 1095.153948][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17276'. [ 1095.216776][T10671] IPVS: using max 23 ests per chain, 55200 per kthread [ 1095.278473][T25279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.326181][T25279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.353689][T25279] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1095.364616][T25279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.377177][T25279] usb 3-1: config 0 descriptor?? [ 1095.659868][ T5927] usb 9-1: [UEAGLE-ATM] firmware is not available [ 1095.800565][T25279] cp2112 0003:10C4:EA90.0099: unknown main item tag 0x0 [ 1095.866794][T25279] cp2112 0003:10C4:EA90.0099: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1095.998669][T25279] cp2112 0003:10C4:EA90.0099: Part Number: 0x00 Device Version: 0x4D [ 1096.087869][T10699] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1096.107559][T10699] macsec2: entered promiscuous mode [ 1096.134191][T10699] macsec2: entered allmulticast mode [ 1096.154981][T10699] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1096.200148][T25279] cp2112 0003:10C4:EA90.0099: error requesting SMBus config [ 1096.228766][T25279] cp2112 0003:10C4:EA90.0099: probe with driver cp2112 failed with error -71 [ 1096.275324][T25279] usb 3-1: USB disconnect, device number 127 [ 1097.448521][ T30] audit: type=1400 audit(1755643104.815:6271): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=10729 comm="syz.2.17301" name="3678" dev="tmpfs" ino=18542 [ 1097.584721][T10739] netlink: 'syz.7.17305': attribute type 49 has an invalid length. [ 1098.691933][ T30] audit: type=1326 audit(1755643106.055:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.6.17323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa419d8ebe9 code=0x0 [ 1098.955847][T10796] serio: Serial port ttyS3 [ 1099.305284][T10812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1099.381043][T10817] netlink: 36 bytes leftover after parsing attributes in process `syz.8.17333'. [ 1100.136363][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1101.240784][T10867] binder: 10866:10867 ioctl 400c620e 200000000000 returned -22 [ 1101.578406][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1101.776783][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 1101.794898][ T5906] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1101.814958][ T5906] usb 3-1: config 0 has no interface number 0 [ 1101.831529][ T5906] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1101.844706][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.856545][ T5906] usb 3-1: Product: syz [ 1101.861025][ T5906] usb 3-1: Manufacturer: syz [ 1101.865997][ T5906] usb 3-1: SerialNumber: syz [ 1101.874721][ T5906] usb 3-1: config 0 descriptor?? [ 1101.883291][ T5906] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1101.936230][T25279] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1102.099685][T25279] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1102.109148][ T5906] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1102.116017][T25279] usb 9-1: config 0 has no interface number 0 [ 1102.128670][T25279] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1102.138503][T25279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.147339][T25279] usb 9-1: Product: syz [ 1102.152074][T25279] usb 9-1: Manufacturer: syz [ 1102.153182][ T5906] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1102.164323][T25279] usb 9-1: SerialNumber: syz [ 1102.175485][T25279] usb 9-1: config 0 descriptor?? [ 1102.439419][T25279] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1102.479320][T25279] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1102.496705][T25279] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1102.537065][T25279] usb 9-1: media controller created [ 1102.544655][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1102.553079][T21581] usb 3-1: USB disconnect, device number 2 [ 1102.591460][T21581] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1102.612853][T25279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1102.634715][T21581] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1102.666830][T21581] quatech2 3-1:0.51: device disconnected [ 1102.702177][T25279] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1102.827251][T25279] usb 9-1: USB disconnect, device number 26 [ 1103.073523][T10942] netlink: 'syz.7.17379': attribute type 15 has an invalid length. [ 1103.269243][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17383'. [ 1103.467115][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17385'. [ 1104.169054][T10983] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17398'. [ 1104.296841][T21581] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1104.466748][T21581] usb 3-1: Using ep0 maxpacket: 16 [ 1104.482408][T21581] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1104.502019][T21581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 1104.522825][T21581] usb 3-1: SerialNumber: syz [ 1104.541584][T21581] usb 3-1: config 0 descriptor?? [ 1104.567204][T21581] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1104.587109][T21581] usb 3-1: Detected FT232A [ 1104.606462][T21581] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1104.800390][T21581] usb 3-1: USB disconnect, device number 3 [ 1104.828473][T21581] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1104.839341][T21581] ftdi_sio 3-1:0.0: device disconnected [ 1105.896293][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 1107.937914][T11094] [ 1107.940375][T11094] ====================================================== [ 1107.947478][T11094] WARNING: possible circular locking dependency detected [ 1107.954542][T11094] 6.16.0-syzkaller #0 Not tainted [ 1107.959729][T11094] ------------------------------------------------------ [ 1107.966778][T11094] syz.8.17444/11094 is trying to acquire lock: [ 1107.972966][T11094] ffff8880259b1188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1107.984102][T11094] [ 1107.984102][T11094] but task is already holding lock: [ 1107.991471][T11094] ffff8880259b1230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 1108.001087][T11094] [ 1108.001087][T11094] which lock already depends on the new lock. [ 1108.001087][T11094] [ 1108.011557][T11094] [ 1108.011557][T11094] the existing dependency chain (in reverse order) is: [ 1108.020601][T11094] [ 1108.020601][T11094] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 1108.028467][T11094] lock_acquire+0x120/0x360 [ 1108.033499][T11094] __mutex_lock+0x182/0xe80 [ 1108.038538][T11094] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1108.044888][T11094] nbd_config_put+0x2c/0x790 [ 1108.050052][T11094] nbd_release+0xfe/0x140 [ 1108.054970][T11094] bdev_release+0x533/0x650 [ 1108.060129][T11094] blkdev_release+0x15/0x20 [ 1108.065296][T11094] __fput+0x449/0xa70 [ 1108.069852][T11094] fput_close_sync+0x119/0x200 [ 1108.075245][T11094] __x64_sys_close+0x7f/0x110 [ 1108.080582][T11094] do_syscall_64+0xfa/0x3b0 [ 1108.085662][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.092131][T11094] [ 1108.092131][T11094] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 1108.100101][T11094] lock_acquire+0x120/0x360 [ 1108.105182][T11094] __mutex_lock+0x182/0xe80 [ 1108.110256][T11094] __del_gendisk+0x129/0x9e0 [ 1108.115424][T11094] del_gendisk+0xe8/0x160 [ 1108.120499][T11094] loop_remove+0x42/0xc0 [ 1108.125666][T11094] loop_control_ioctl+0x4ac/0x5a0 [ 1108.131360][T11094] __se_sys_ioctl+0xfc/0x170 [ 1108.136548][T11094] do_syscall_64+0xfa/0x3b0 [ 1108.141623][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.148170][T11094] [ 1108.148170][T11094] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1108.156658][T11094] validate_chain+0xb9b/0x2140 [ 1108.162005][T11094] __lock_acquire+0xab9/0xd20 [ 1108.167248][T11094] lock_acquire+0x120/0x360 [ 1108.172655][T11094] down_write+0x96/0x1f0 [ 1108.177472][T11094] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1108.183845][T11094] nbd_start_device+0x16c/0xac0 [ 1108.189251][T11094] nbd_genl_connect+0x135b/0x18f0 [ 1108.194824][T11094] genl_family_rcv_msg_doit+0x215/0x300 [ 1108.200996][T11094] genl_rcv_msg+0x60e/0x790 [ 1108.206034][T11094] netlink_rcv_skb+0x205/0x470 [ 1108.211349][T11094] genl_rcv+0x28/0x40 [ 1108.215858][T11094] netlink_unicast+0x75c/0x8e0 [ 1108.221158][T11094] netlink_sendmsg+0x805/0xb30 [ 1108.226464][T11094] __sock_sendmsg+0x21c/0x270 [ 1108.231670][T11094] ____sys_sendmsg+0x505/0x830 [ 1108.236973][T11094] ___sys_sendmsg+0x21f/0x2a0 [ 1108.242185][T11094] __x64_sys_sendmsg+0x19b/0x260 [ 1108.247695][T11094] do_syscall_64+0xfa/0x3b0 [ 1108.252786][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.259227][T11094] [ 1108.259227][T11094] other info that might help us debug this: [ 1108.259227][T11094] [ 1108.269651][T11094] Chain exists of: [ 1108.269651][T11094] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 1108.269651][T11094] [ 1108.284125][T11094] Possible unsafe locking scenario: [ 1108.284125][T11094] [ 1108.291687][T11094] CPU0 CPU1 [ 1108.297070][T11094] ---- ---- [ 1108.302440][T11094] lock(&nbd->config_lock); [ 1108.307136][T11094] lock(&disk->open_mutex); [ 1108.314263][T11094] lock(&nbd->config_lock); [ 1108.321404][T11094] lock(&set->update_nr_hwq_lock); [ 1108.326623][T11094] [ 1108.326623][T11094] *** DEADLOCK *** [ 1108.326623][T11094] [ 1108.334920][T11094] 3 locks held by syz.8.17444/11094: [ 1108.340298][T11094] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1108.348605][T11094] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1108.357939][T11094] #2: ffff8880259b1230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 1108.368108][T11094] [ 1108.368108][T11094] stack backtrace: [ 1108.374102][T11094] CPU: 1 UID: 0 PID: 11094 Comm: syz.8.17444 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1108.374125][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1108.374136][T11094] Call Trace: [ 1108.374146][T11094] [ 1108.374154][T11094] dump_stack_lvl+0x189/0x250 [ 1108.374180][T11094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.374198][T11094] ? __pfx__printk+0x10/0x10 [ 1108.374221][T11094] ? print_lock_name+0xde/0x100 [ 1108.374242][T11094] print_circular_bug+0x2ee/0x310 [ 1108.374262][T11094] check_noncircular+0x134/0x160 [ 1108.374285][T11094] validate_chain+0xb9b/0x2140 [ 1108.374312][T11094] __lock_acquire+0xab9/0xd20 [ 1108.374331][T11094] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1108.374353][T11094] lock_acquire+0x120/0x360 [ 1108.374368][T11094] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1108.374391][T11094] ? kernfs_add_one+0xf0/0x520 [ 1108.374413][T11094] down_write+0x96/0x1f0 [ 1108.374432][T11094] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1108.374452][T11094] ? __pfx_down_write+0x10/0x10 [ 1108.374472][T11094] ? kernfs_add_one+0xf0/0x520 [ 1108.374493][T11094] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1108.374515][T11094] ? sysfs_add_file_mode_ns+0x238/0x300 [ 1108.374530][T11094] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1108.374549][T11094] nbd_start_device+0x16c/0xac0 [ 1108.374570][T11094] ? __nla_parse+0x40/0x60 [ 1108.374589][T11094] ? device_create_file+0xf4/0x1c0 [ 1108.374612][T11094] nbd_genl_connect+0x135b/0x18f0 [ 1108.374634][T11094] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1108.374658][T11094] ? __nla_parse+0x40/0x60 [ 1108.374677][T11094] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1108.374698][T11094] genl_family_rcv_msg_doit+0x215/0x300 [ 1108.374718][T11094] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1108.374743][T11094] genl_rcv_msg+0x60e/0x790 [ 1108.374762][T11094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1108.374777][T11094] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1108.374801][T11094] netlink_rcv_skb+0x205/0x470 [ 1108.374823][T11094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1108.374839][T11094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1108.374873][T11094] ? down_read+0x1ad/0x2e0 [ 1108.374892][T11094] genl_rcv+0x28/0x40 [ 1108.374906][T11094] netlink_unicast+0x75c/0x8e0 [ 1108.374930][T11094] netlink_sendmsg+0x805/0xb30 [ 1108.374955][T11094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.374979][T11094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1108.374995][T11094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.375017][T11094] __sock_sendmsg+0x21c/0x270 [ 1108.375037][T11094] ____sys_sendmsg+0x505/0x830 [ 1108.375062][T11094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.375089][T11094] ? import_iovec+0x74/0xa0 [ 1108.375113][T11094] ___sys_sendmsg+0x21f/0x2a0 [ 1108.375137][T11094] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.375173][T11094] ? __fget_files+0x2a/0x420 [ 1108.375190][T11094] ? __fget_files+0x3a0/0x420 [ 1108.375211][T11094] __x64_sys_sendmsg+0x19b/0x260 [ 1108.375236][T11094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1108.375264][T11094] ? rcu_is_watching+0x15/0xb0 [ 1108.375282][T11094] ? do_syscall_64+0xbe/0x3b0 [ 1108.375301][T11094] do_syscall_64+0xfa/0x3b0 [ 1108.375318][T11094] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.375334][T11094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.375350][T11094] ? clear_bhb_loop+0x60/0xb0 [ 1108.375368][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.375384][T11094] RIP: 0033:0x7f4e9b98ebe9 [ 1108.375400][T11094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.375415][T11094] RSP: 002b:00007f4e9c7c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.375433][T11094] RAX: ffffffffffffffda RBX: 00007f4e9bbb5fa0 RCX: 00007f4e9b98ebe9 [ 1108.375446][T11094] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 1108.375457][T11094] RBP: 00007f4e9ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1108.375467][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.375478][T11094] R13: 00007f4e9bbb6038 R14: 00007f4e9bbb5fa0 R15: 00007ffdac80a518 [ 1108.375495][T11094] [ 1108.847408][ T5845] block nbd4: Receive control failed (result -32) [ 1108.867387][T11094] nbd4: detected capacity change from 0 to 127 [ 1108.902732][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17446'. [ 1116.138369][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1116.147612][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.776248][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!