last executing test programs: 3.316876692s ago: executing program 1 (id=960): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000040)="000300000d80ff60", 0x8) 3.103670925s ago: executing program 1 (id=965): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.779283734s ago: executing program 4 (id=971): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0x80000001]}, 0x0, &(0x7f0000000380), 0x8) 2.635928703s ago: executing program 4 (id=973): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 2.45996798s ago: executing program 4 (id=976): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000e80)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000ec0)=@can={{}, 0x80, 0x2, 0x4, 0x2}, 0x10}}, 0x4080811) 2.303587819s ago: executing program 4 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x3, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x8cd0, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) 1.682643688s ago: executing program 3 (id=987): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/232, 0xe8}, {&(0x7f0000001580)=""/158, 0x9e}, {&(0x7f0000001700)=""/194, 0xc2}], 0x6}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.567655372s ago: executing program 3 (id=989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 1.567328158s ago: executing program 4 (id=990): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 1.477280669s ago: executing program 3 (id=991): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f00000000c0)=[{r0, 0x4e3}], 0x1, 0x0, 0x0, 0x0) 1.403953367s ago: executing program 4 (id=993): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x80, 0xdb, 0x80, 0x9, 0x8001, 0x2}}}, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xfffe}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={0x1, &(0x7f0000000800)="437d4b38200aba487f9397ebcfdedda7417952fe25ddad85aba18a046346bcfb01431721d7a3ee49951504adb483ef41b3434559f120030996d46fbab9e380bf0346655c9fb45dbacc0df5c9cb9443c2d44e799901760f8b789fb4fa7dbd6aa14aa5ca0303b7efdd46e41e1e61d39e03231b2c43d6b574a00cfe45e98bda5cf892cc82d0f6abca0bb1e3c66af0c1eac4746ffa7f411c9cb2be4e9b52b2a7c13e3c793d3ecda663547efb419fd2", 0x0}, 0x20) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18fbd9"]) 1.391068054s ago: executing program 1 (id=994): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.313173016s ago: executing program 2 (id=995): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000440)={0x0, 0x0}, 0x10) 1.202717337s ago: executing program 2 (id=997): unshare(0x400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.122943763s ago: executing program 0 (id=998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000118, 0x0, 0x1}]}) 1.042321392s ago: executing program 2 (id=999): eventfd2(0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 895.929631ms ago: executing program 2 (id=1000): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) lremovexattr(0x0, 0x0) 864.393526ms ago: executing program 0 (id=1001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x800000000}, 0x18) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 849.169687ms ago: executing program 2 (id=1002): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x7, 0xffffffff, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0) 739.908042ms ago: executing program 2 (id=1003): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fchdir(0xffffffffffffffff) 722.271293ms ago: executing program 0 (id=1004): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 616.163256ms ago: executing program 0 (id=1005): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) 483.933936ms ago: executing program 3 (id=1006): unshare(0x28040680) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 483.17282ms ago: executing program 0 (id=1007): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 337.271737ms ago: executing program 3 (id=1008): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x9, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x6, @time={0x0, 0x3}, {}, {}, @raw32={[0x78d7, 0x8001, 0x6]}}], 0x38) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 271.860313ms ago: executing program 0 (id=1009): mknod$loop(&(0x7f0000002100)='./file0\x00', 0x1000, 0x1) r0 = open(&(0x7f0000004700)='./file0\x00', 0x800, 0x24) ppoll(&(0x7f0000004840)=[{r0, 0x4011}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 271.525467ms ago: executing program 1 (id=1010): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0x9, 0xbe, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x0}, 0x20) 134.86114ms ago: executing program 1 (id=1011): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 80.311073ms ago: executing program 3 (id=1012): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 1 (id=1013): socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x239, &(0x7f00000001c0)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8746}}) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 70.379053][ T5811] cgroup: Unknown subsys name 'net' [ 70.482954][ T5811] cgroup: Unknown subsys name 'cpuset' [ 70.491637][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.842156][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.848716][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.035375][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.097699][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.098903][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.113230][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.121267][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.121920][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.128918][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.137053][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.145043][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.157755][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.166282][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.166625][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.182243][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.184031][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.190572][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.203589][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.205680][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.212740][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.218732][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.232244][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.240387][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.241142][ T5824] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.252000][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.261969][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.275896][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.291438][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.298811][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.311574][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.320667][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.328895][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.336094][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.652927][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 76.807257][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 76.869761][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.876906][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.884996][ T5830] bridge_slave_0: entered allmulticast mode [ 76.891860][ T5830] bridge_slave_0: entered promiscuous mode [ 76.948031][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.955467][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.963361][ T5830] bridge_slave_1: entered allmulticast mode [ 76.973208][ T5830] bridge_slave_1: entered promiscuous mode [ 76.981328][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 77.038539][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.054107][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.064332][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 77.085963][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 77.107681][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.115739][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.123276][ T5821] bridge_slave_0: entered allmulticast mode [ 77.131151][ T5821] bridge_slave_0: entered promiscuous mode [ 77.166752][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.174330][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.182719][ T5821] bridge_slave_1: entered allmulticast mode [ 77.189839][ T5821] bridge_slave_1: entered promiscuous mode [ 77.222028][ T5830] team0: Port device team_slave_0 added [ 77.263650][ T5830] team0: Port device team_slave_1 added [ 77.282260][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.290863][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.298212][ T5825] bridge_slave_0: entered allmulticast mode [ 77.305562][ T5825] bridge_slave_0: entered promiscuous mode [ 77.344228][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.357873][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.365717][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.376557][ T5825] bridge_slave_1: entered allmulticast mode [ 77.383548][ T5825] bridge_slave_1: entered promiscuous mode [ 77.397238][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.404372][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.430441][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.443323][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.450462][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.476545][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.498405][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.536054][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.543356][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.554534][ T5833] bridge_slave_0: entered allmulticast mode [ 77.561398][ T5833] bridge_slave_0: entered promiscuous mode [ 77.603131][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.613811][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.621645][ T5833] bridge_slave_1: entered allmulticast mode [ 77.628248][ T5833] bridge_slave_1: entered promiscuous mode [ 77.646597][ T5821] team0: Port device team_slave_0 added [ 77.654963][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.667546][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.676893][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.684496][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.691944][ T5836] bridge_slave_0: entered allmulticast mode [ 77.698545][ T5836] bridge_slave_0: entered promiscuous mode [ 77.731741][ T5821] team0: Port device team_slave_1 added [ 77.739611][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.756049][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.770965][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.778346][ T5836] bridge_slave_1: entered allmulticast mode [ 77.785919][ T5836] bridge_slave_1: entered promiscuous mode [ 77.795234][ T5830] hsr_slave_0: entered promiscuous mode [ 77.802113][ T5830] hsr_slave_1: entered promiscuous mode [ 77.817213][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.861645][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.868656][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.894853][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.917667][ T5825] team0: Port device team_slave_0 added [ 77.926150][ T5825] team0: Port device team_slave_1 added [ 77.942176][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.961360][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.968355][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.995248][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.022743][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.041660][ T5833] team0: Port device team_slave_0 added [ 78.070319][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.077399][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.103627][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.136189][ T5833] team0: Port device team_slave_1 added [ 78.145380][ T5836] team0: Port device team_slave_0 added [ 78.152201][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.160614][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.187128][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.218336][ T5836] team0: Port device team_slave_1 added [ 78.275419][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.283846][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.310444][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.322259][ T5840] Bluetooth: hci0: command tx timeout [ 78.328093][ T5831] Bluetooth: hci2: command tx timeout [ 78.363344][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.370422][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.397044][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.407663][ T5831] Bluetooth: hci3: command tx timeout [ 78.409468][ T5840] Bluetooth: hci4: command tx timeout [ 78.413586][ T5831] Bluetooth: hci1: command tx timeout [ 78.427032][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.434093][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.460278][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.472741][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.480087][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.506220][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.524426][ T5825] hsr_slave_0: entered promiscuous mode [ 78.530697][ T5825] hsr_slave_1: entered promiscuous mode [ 78.536746][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.544908][ T5825] Cannot create hsr debugfs directory [ 78.553488][ T5821] hsr_slave_0: entered promiscuous mode [ 78.560980][ T5821] hsr_slave_1: entered promiscuous mode [ 78.566989][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.575174][ T5821] Cannot create hsr debugfs directory [ 78.726115][ T5833] hsr_slave_0: entered promiscuous mode [ 78.734897][ T5833] hsr_slave_1: entered promiscuous mode [ 78.741359][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.748948][ T5833] Cannot create hsr debugfs directory [ 78.805049][ T5836] hsr_slave_0: entered promiscuous mode [ 78.814693][ T5836] hsr_slave_1: entered promiscuous mode [ 78.821049][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.828643][ T5836] Cannot create hsr debugfs directory [ 78.956348][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.997737][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.027981][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.057517][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.103419][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.115241][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.148808][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.160301][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.239319][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.254241][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.264599][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.277125][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.378816][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.386245][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.400406][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.418140][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.427253][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.446133][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.523444][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.537458][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.560524][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.569738][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.578215][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.593721][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.624009][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.631400][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.644955][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.652092][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.687999][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.695174][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.711491][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.718618][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.836878][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.885635][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.973828][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.981033][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.998308][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.005533][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.025283][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.035970][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.114197][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.164605][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.171779][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.202737][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.209936][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.223169][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.254703][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.261880][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.304495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.311660][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.334875][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.356594][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.399974][ T5831] Bluetooth: hci2: command tx timeout [ 80.405464][ T5831] Bluetooth: hci0: command tx timeout [ 80.479775][ T5824] Bluetooth: hci3: command tx timeout [ 80.479888][ T5840] Bluetooth: hci1: command tx timeout [ 80.485364][ T5831] Bluetooth: hci4: command tx timeout [ 80.566215][ T5830] veth0_vlan: entered promiscuous mode [ 80.598559][ T5830] veth1_vlan: entered promiscuous mode [ 80.617933][ T5825] veth0_vlan: entered promiscuous mode [ 80.678908][ T5825] veth1_vlan: entered promiscuous mode [ 80.741061][ T5830] veth0_macvtap: entered promiscuous mode [ 80.767250][ T5830] veth1_macvtap: entered promiscuous mode [ 80.809934][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.848222][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.864489][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.881759][ T5825] veth0_macvtap: entered promiscuous mode [ 80.894707][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.914867][ T5825] veth1_macvtap: entered promiscuous mode [ 80.934039][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.944979][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.954904][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.970480][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.061280][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.073435][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.085406][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.123014][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.159317][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.179376][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.201073][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.215817][ T5821] veth0_vlan: entered promiscuous mode [ 81.252406][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.263415][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.275681][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.284923][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.318028][ T5821] veth1_vlan: entered promiscuous mode [ 81.344967][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.373700][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.451865][ T5836] veth0_vlan: entered promiscuous mode [ 81.482691][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.487474][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.495914][ T5833] veth0_vlan: entered promiscuous mode [ 81.506925][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.511075][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.555680][ T5821] veth0_macvtap: entered promiscuous mode [ 81.590057][ T5836] veth1_vlan: entered promiscuous mode [ 81.622677][ T5833] veth1_vlan: entered promiscuous mode [ 81.633189][ T5821] veth1_macvtap: entered promiscuous mode [ 81.647004][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.653556][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.687615][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.724244][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.769330][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.789739][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.814989][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.827188][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.847898][ T5833] veth0_macvtap: entered promiscuous mode [ 81.902710][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.954189][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.966740][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.977530][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.995163][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.015325][ T5833] veth1_macvtap: entered promiscuous mode [ 82.071258][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.109305][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.118076][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.152695][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.173463][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.187187][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.211844][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.227237][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.250088][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.269488][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.291863][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.303786][ T5836] veth0_macvtap: entered promiscuous mode [ 82.352165][ T5836] veth1_macvtap: entered promiscuous mode [ 82.414835][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.447359][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.475810][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.479606][ T5831] Bluetooth: hci0: command tx timeout [ 82.489550][ T5840] Bluetooth: hci2: command tx timeout [ 82.505503][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.516030][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.528211][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.543449][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.559592][ T5840] Bluetooth: hci4: command tx timeout [ 82.565083][ T5840] Bluetooth: hci3: command tx timeout [ 82.565716][ T5831] Bluetooth: hci1: command tx timeout [ 82.608508][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.659881][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.684329][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.699930][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.780789][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.835865][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.869447][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.900786][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.917578][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.939371][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.959332][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.989393][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.020868][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.126132][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.160268][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.179306][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.233908][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.241145][ T5935] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 83.252670][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.289282][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.299679][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.326317][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.351713][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.379389][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.387287][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.412376][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.430745][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.469563][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.478333][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538665][ T5939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19'. [ 83.626082][ T5941] sp0: Synchronizing with TNC [ 83.655342][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.692268][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.773005][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.822613][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.837877][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.864802][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.016461][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.035810][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.049617][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.057600][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.369673][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.559596][ T5831] Bluetooth: hci0: command tx timeout [ 84.569461][ T5831] Bluetooth: hci2: command tx timeout [ 84.592509][ T47] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 84.624875][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.639611][ T5831] Bluetooth: hci3: command tx timeout [ 84.640347][ T5824] Bluetooth: hci1: command tx timeout [ 84.645060][ T5831] Bluetooth: hci4: command tx timeout [ 84.680523][ T47] usb 4-1: config 0 has no interface number 0 [ 84.707414][ T47] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 84.717634][ T5904] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.738515][ T47] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.760678][ T47] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 84.775594][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.785348][ T47] usb 4-1: Product: syz [ 84.801099][ T47] usb 4-1: Manufacturer: syz [ 84.808905][ T47] usb 4-1: SerialNumber: syz [ 84.827757][ T47] usb 4-1: config 0 descriptor?? [ 84.883031][ T5904] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 84.899284][ T5904] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 84.931354][ T5904] usb 2-1: too many endpoints for config 220 interface 0 altsetting 63: 127, using maximum allowed: 30 [ 84.966594][ T5904] usb 2-1: config 220 interface 0 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 127 [ 85.016295][ T5904] usb 2-1: config 220 interface 0 has no altsetting 0 [ 85.037820][ T5904] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 85.071928][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.092207][ T5904] usb 2-1: Product: syz [ 85.102337][ T5904] usb 2-1: Manufacturer: syz [ 85.119320][ T5904] usb 2-1: SerialNumber: syz [ 85.400949][ T5904] usb 2-1: USB disconnect, device number 2 [ 85.446019][ T5841] udevd[5841]: setting mode of /dev/bus/usb/002/002 to 020664 failed: No such file or directory [ 85.485372][ T5841] udevd[5841]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory [ 85.537993][ T5873] usb 4-1: USB disconnect, device number 2 [ 85.614834][ T30] audit: type=1326 audit(1742422459.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a998d169 code=0x7ffc0000 [ 85.662785][ T30] audit: type=1326 audit(1742422459.323:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a998d169 code=0x7ffc0000 [ 85.692931][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.701677][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.717332][ T30] audit: type=1326 audit(1742422459.343:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f68a998d169 code=0x7ffc0000 [ 85.767910][ T30] audit: type=1326 audit(1742422459.343:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a998d169 code=0x7ffc0000 [ 85.840296][ T30] audit: type=1326 audit(1742422459.343:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a998d169 code=0x7ffc0000 [ 85.924194][ T30] audit: type=1326 audit(1742422459.353:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f68a998d169 code=0x7ffc0000 [ 85.995206][ T30] audit: type=1326 audit(1742422459.353:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68a9984127 code=0x7ffc0000 [ 86.036473][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.098008][ T30] audit: type=1326 audit(1742422459.353:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68a9929359 code=0x7ffc0000 [ 86.112154][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.160569][ T30] audit: type=1326 audit(1742422459.353:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a998d169 code=0x7ffc0000 [ 86.183592][ T30] audit: type=1326 audit(1742422459.353:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a998d169 code=0x7ffc0000 [ 86.419183][ T5989] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.429125][ T5989] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.487879][ T5989] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.493342][ T6006] netlink: 64 bytes leftover after parsing attributes in process `syz.1.45'. [ 86.497493][ T5989] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.754579][ T6000] warning: `syz.2.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.240421][ T59] cfg80211: failed to load regulatory.db [ 87.337287][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.833892][ T6056] netlink: 'syz.3.68': attribute type 2 has an invalid length. [ 88.062795][ T6064] syz.1.71 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.067640][ T6065] mmap: syz.4.73 (6065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.418046][ T6077] capability: warning: `syz.3.77' uses 32-bit capabilities (legacy support in use) [ 88.662845][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 88.679547][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.692271][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 88.715573][ T6087] netlink: 'syz.3.84': attribute type 5 has an invalid length. [ 88.874887][ T47] usb 1-1: config 0 has an invalid interface number: 55 but max is 8 [ 88.899583][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.908692][ T47] usb 1-1: config 0 has no interface number 0 [ 88.948403][ T47] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.997705][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.012032][ T47] usb 1-1: config 0 descriptor?? [ 89.034986][ T47] cp210x 1-1:0.55: cp210x converter detected [ 89.316314][ T6113] input: syz0 as /devices/virtual/input/input7 [ 89.472588][ T47] cp210x 1-1:0.55: failed to get vendor val 0x000e size 3: -71 [ 89.512398][ T47] usb 1-1: cp210x converter now attached to ttyUSB0 [ 89.543964][ T47] usb 1-1: USB disconnect, device number 2 [ 89.577133][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.596835][ T47] cp210x 1-1:0.55: device disconnected [ 89.839642][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.003010][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.043275][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.074706][ T5904] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.099148][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.128661][ T5904] usb 5-1: config 0 descriptor?? [ 90.289428][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.388847][ T6146] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 90.397774][ T47] IPVS: starting estimator thread 0... [ 90.451619][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.476142][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.495599][ T6147] IPVS: using max 19 ests per chain, 45600 per kthread [ 90.497275][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.535240][ T5873] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 90.575560][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.579909][ T5904] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 90.602061][ T5873] usb 3-1: config 0 descriptor?? [ 90.652337][ T5904] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input8 [ 90.746858][ T6155] netlink: 188 bytes leftover after parsing attributes in process `syz.0.114'. [ 90.789038][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.0.114'. [ 90.904286][ T5904] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 90.925718][ T5904] usb 5-1: USB disconnect, device number 2 [ 90.938221][ T6160] delete_channel: no stack [ 91.067409][ T5873] wacom 0003:056A:00F0.0002: unbalanced collection at end of report description [ 91.068105][ T5873] wacom 0003:056A:00F0.0002: parse failed [ 91.068303][ T5873] wacom 0003:056A:00F0.0002: probe with driver wacom failed with error -22 [ 91.329522][ T5873] usb 3-1: USB disconnect, device number 2 [ 91.335503][ T6171] sp0: Synchronizing with TNC [ 91.827562][ T6191] program syz.0.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.276035][ T6206] netlink: 'syz.4.138': attribute type 10 has an invalid length. [ 92.314708][ T6206] team0: Port device netdevsim0 added [ 92.349506][ T6206] netlink: 'syz.4.138': attribute type 10 has an invalid length. [ 92.375045][ T6210] gfs2: path_lookup on c:::!(>yo=O-FmSH_Y8yu [ 92.375045][ T6210] FãzR #xI6BYCg)'!A{g [ 92.375045][ T6210] }m]x%{qm*PN~%U5JhBoGhN].L.`$ returned error -2 [ 92.413082][ T6206] team0: Port device netdevsim0 removed [ 92.427994][ T6206] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 92.620571][ T6220] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (35451) [ 92.666572][ T6220] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 92.942701][ T6233] netlink: 'syz.4.150': attribute type 22 has an invalid length. [ 93.290575][ T6248] No buffer was provided with the request [ 93.430455][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.504384][ T6256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.612623][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.653349][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.709362][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.740981][ T5873] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 93.764333][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.810494][ T5873] usb 2-1: config 0 descriptor?? [ 94.279671][ T5873] wacom 0003:056A:00F0.0003: hidraw0: USB HID v0.04 Device [HID 056a:00f0] on usb-dummy_hcd.1-1/input0 [ 94.483867][ T5873] usb 2-1: USB disconnect, device number 3 [ 94.630802][ T6298] Zero length message leads to an empty skb [ 95.208674][ T6315] netlink: 'syz.1.190': attribute type 3 has an invalid length. [ 95.636640][ T6333] Bluetooth: MGMT ver 1.23 [ 95.850944][ T6343] Bluetooth: MGMT ver 1.23 [ 96.119853][ T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.314561][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 96.352649][ T47] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 96.379935][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.419088][ T47] usb 3-1: config 0 descriptor?? [ 96.452276][ T47] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 96.452685][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 96.452702][ T30] audit: type=1326 audit(1742422470.133:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6369 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc758d169 code=0x7ffc0000 [ 96.489235][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.568341][ T30] audit: type=1326 audit(1742422470.133:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6369 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc758d169 code=0x7ffc0000 [ 96.589905][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.596120][ T976] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.643443][ T30] audit: type=1326 audit(1742422470.193:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6369 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3dc758d169 code=0x7ffc0000 [ 96.683736][ T47] usb 3-1: USB disconnect, device number 3 [ 96.721835][ T30] audit: type=1326 audit(1742422470.193:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6369 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc758d169 code=0x7ffc0000 [ 96.743207][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.769350][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 96.805900][ T976] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.817643][ T976] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 96.831145][ T30] audit: type=1326 audit(1742422470.193:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6369 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc758d169 code=0x7ffc0000 [ 96.867539][ T976] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.880908][ T976] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 96.890890][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.899364][ T30] audit: type=1326 audit(1742422470.193:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6369 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3dc758d169 code=0x7ffc0000 [ 96.933631][ T976] usb 1-1: config 0 descriptor?? [ 96.959564][ T30] audit: type=1326 audit(1742422470.193:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6369 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc758d169 code=0x7ffc0000 [ 97.011110][ T30] audit: type=1326 audit(1742422470.193:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6369 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc758d169 code=0x7ffc0000 [ 97.362807][ T976] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 97.451582][ T976] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -38 [ 97.597069][ T976] usb 1-1: USB disconnect, device number 3 [ 98.228950][ T6426] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.244'. [ 98.252871][ T6426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.472886][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 98.729487][ T6447] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 100.469546][ T6519] tipc: Enabling not permitted [ 100.475384][ T6519] tipc: Enabling of bearer rejected, failed to enable media [ 100.484647][ T6516] nvme_fabrics: missing parameter 'transport=%s' [ 100.509526][ T6516] nvme_fabrics: missing parameter 'nqn=%s' [ 100.615864][ T6520] nvme_fabrics: missing parameter 'transport=%s' [ 100.633760][ T6520] nvme_fabrics: missing parameter 'nqn=%s' [ 100.770005][ T976] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.783852][ T6532] netlink: 165 bytes leftover after parsing attributes in process `syz.2.295'. [ 100.976769][ T976] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 101.014670][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.043555][ T976] usb 1-1: Product: syz [ 101.052629][ T976] usb 1-1: Manufacturer: syz [ 101.057292][ T976] usb 1-1: SerialNumber: syz [ 101.088279][ T976] usb 1-1: config 0 descriptor?? [ 101.128400][ T976] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 101.219564][ T6547] tipc: MTU too low for tipc bearer [ 101.726634][ T976] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 101.756769][ T976] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 101.791734][ T976] usb 1-1: USB disconnect, device number 4 [ 102.349547][ T59] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.531174][ T59] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 102.556847][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.590904][ T59] usb 5-1: config 0 descriptor?? [ 102.606380][ T59] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 102.702535][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 102.712115][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 102.721807][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 102.731190][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 102.750851][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 102.861853][ T976] usb 5-1: USB disconnect, device number 3 [ 103.507105][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 104.145331][ T6657] netlink: 34 bytes leftover after parsing attributes in process `syz.2.353'. [ 104.191990][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 105.284325][ T59] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.470034][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.481225][ T5904] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 105.505596][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.535336][ T59] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 105.554764][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.595841][ T59] usb 3-1: config 0 descriptor?? [ 105.669919][ T5904] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 105.680671][ T5904] usb 4-1: config 5 has no interface number 0 [ 105.686867][ T5904] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 105.727667][ T5904] usb 4-1: config 5 interface 123 has no altsetting 0 [ 105.758170][ T5904] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 105.759824][ T976] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.769978][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.798961][ T5904] usb 4-1: Product: syz [ 105.804036][ T5904] usb 4-1: Manufacturer: syz [ 105.808701][ T5904] usb 4-1: SerialNumber: syz [ 105.941549][ T976] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 105.969997][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 105.999299][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 106.023473][ T976] usb 2-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 106.042957][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.044492][ T59] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 106.064378][ T976] usb 2-1: config 0 descriptor?? [ 106.100515][ T5904] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 106.109433][ T59] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 106.116717][ T59] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 106.135067][ T59] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 106.146418][ T5904] usb 4-1: USB disconnect, device number 3 [ 106.164752][ T59] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 106.195081][ T59] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 106.332922][ T9] usb 3-1: USB disconnect, device number 4 [ 106.517899][ T976] wacom 0003:056A:005D.0006: unknown main item tag 0x3 [ 106.539702][ T976] wacom 0003:056A:005D.0006: hidraw0: USB HID v0.03 Device [HID 056a:005d] on usb-dummy_hcd.1-1/input0 [ 106.734354][ T976] usb 2-1: USB disconnect, device number 4 [ 108.310536][ T6839] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.789415][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.949406][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 108.975512][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.029426][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 109.043773][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 109.053024][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 109.071678][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 109.092946][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 109.127128][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.171602][ T9] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 109.182001][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 109.208083][ T9] usb 1-1: Product: syz [ 109.220038][ T9] usb 1-1: Manufacturer: syz [ 109.245136][ T9] usb 1-1: SerialNumber: syz [ 109.307637][ T6016] libceph: connect (1)[c::]:6789 error -101 [ 109.320253][ T9] usb 1-1: config 0 descriptor?? [ 109.336236][ T6016] libceph: mon0 (1)[c::]:6789 connect error [ 109.365512][ T6016] libceph: connect (1)[c::]:6789 error -101 [ 109.395373][ T6016] libceph: mon0 (1)[c::]:6789 connect error [ 109.580860][ T9] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 109.598365][ T9] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 109.691302][ T976] libceph: connect (1)[c::]:6789 error -101 [ 109.697554][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 109.782280][ T9] radio-si470x 1-1:0.0: software version 97, hardware version 23 [ 109.809628][ T9] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 109.920742][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.435'. [ 109.985641][ T9] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 110.002561][ T9] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 110.023629][ T9] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 110.042851][ T6860] ceph: No mds server is up or the cluster is laggy [ 110.064335][ T9] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 110.116673][ T9] usb 1-1: USB disconnect, device number 5 [ 110.375965][ T9] IPVS: starting estimator thread 0... [ 110.479387][ T6898] IPVS: using max 20 ests per chain, 48000 per kthread [ 110.759355][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.915707][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.939411][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.979425][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 111.009365][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.052563][ T9] usb 3-1: config 0 descriptor?? [ 111.593507][ T6948] program syz.1.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.684710][ T9] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71 [ 111.726785][ T9] usb 3-1: USB disconnect, device number 5 [ 111.981986][ T6960] befs: (nullb0): No write support. Marking filesystem read-only [ 112.020382][ T6960] befs: (nullb0): invalid magic header [ 112.577665][ T6982] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.476'. [ 112.663203][ T6982] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 112.879565][ T47] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 113.084064][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.113689][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.137631][ T47] usb 1-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13 [ 113.159336][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.195187][ T47] usb 1-1: config 0 descriptor?? [ 113.300793][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 113.653120][ T47] wacom 0003:056A:7A26.0008: unknown main item tag 0xd [ 113.671362][ T47] wacom 0003:056A:7A26.0008: Unknown device_type for 'HID 056a:7a26'. Ignoring. [ 113.839399][ T6016] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.877380][ T976] usb 1-1: USB disconnect, device number 6 [ 114.050359][ T6016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.088127][ T6016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.117609][ T6016] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.146095][ T6016] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.157759][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.170137][ T6016] usb 4-1: config 0 descriptor?? [ 114.259409][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.318100][ T7036] nbd: must specify a device to reconfigure [ 114.419587][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 114.440859][ T5873] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 114.449130][ T5873] usb 2-1: config 0 has no interface number 0 [ 114.464541][ T5873] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 114.479686][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.507870][ T5873] usb 2-1: config 0 descriptor?? [ 114.635187][ T5873] viperboard 2-1:0.143: version 0.00 found at bus 002 address 005 [ 114.645386][ T6016] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 114.689521][ T6016] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 114.706896][ T5873] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 114.739618][ T6016] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 114.752225][ T5873] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 114.793836][ T5873] usb 2-1: USB disconnect, device number 5 [ 114.908401][ T6016] usb 4-1: USB disconnect, device number 4 [ 115.140580][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.373040][ T47] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 115.425172][ T47] usb 5-1: config 0 has no interface number 0 [ 115.549611][ T47] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 115.579168][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.587505][ T47] usb 5-1: Product: syz [ 115.605388][ T47] usb 5-1: Manufacturer: syz [ 115.622865][ T47] usb 5-1: SerialNumber: syz [ 115.645713][ T47] usb 5-1: config 0 descriptor?? [ 115.680326][ T47] hub 5-1:0.217: bad descriptor, ignoring hub [ 115.707072][ T47] hub 5-1:0.217: probe with driver hub failed with error -5 [ 115.956832][ T47] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 116.013949][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.065236][ T47] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 116.095055][ T47] usb 5-1: media controller created [ 116.177999][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.324247][ T7098] misc userio: Invalid payload size [ 116.400319][ T47] DVB: Unable to find symbol dib7000p_attach() [ 116.406648][ T47] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 116.631800][ T47] rc_core: IR keymap rc-dib0700-rc5 not found [ 116.637974][ T47] Registered IR keymap rc-empty [ 116.690496][ T47] dvb-usb: could not initialize remote control. [ 116.709654][ T47] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 117.122391][ T6016] usb 5-1: USB disconnect, device number 4 [ 117.180211][ T7129] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.535'. [ 117.211830][ T6016] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 120.461918][ T7227] Illegal XDP return value 4294967294 on prog (id 45) dev N/A, expect packet loss! [ 120.681858][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 120.729339][ T6016] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.856041][ T5873] kernel write not supported for file /amidi2 (pid: 5873 comm: kworker/0:3) [ 120.889722][ T6016] usb 1-1: Using ep0 maxpacket: 16 [ 120.902610][ T6016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.914991][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 120.934289][ T6016] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 120.975840][ T6016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.000480][ T6016] usb 1-1: config 0 descriptor?? [ 121.040521][ T7246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.378987][ T7258] tipc: Started in network mode [ 121.414119][ T7258] tipc: Node identity ac14140f, cluster identity 4711 [ 121.427401][ T7258] tipc: New replicast peer: 255.255.255.255 [ 121.445538][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.457060][ T6016] aquacomputer_d5next 0003:0C70:F003.000A: unknown main item tag 0x6 [ 121.459945][ T7258] tipc: Enabled bearer , priority 10 [ 121.477808][ T6016] aquacomputer_d5next 0003:0C70:F003.000A: unknown main item tag 0x0 [ 121.495172][ T6016] aquacomputer_d5next 0003:0C70:F003.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.0-1/input0 [ 121.619570][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 121.670076][ T5873] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 121.678454][ T5873] usb 5-1: config 179 has no interface number 0 [ 121.693858][ T59] usb 1-1: USB disconnect, device number 7 [ 121.706812][ T5873] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 121.744693][ T5873] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 121.807513][ T5873] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.846555][ T5873] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 121.889319][ T5873] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.924415][ T5873] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 121.957030][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.982325][ T7249] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 122.307043][ T6016] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input19 [ 122.599192][ T59] tipc: Node number set to 2886997007 [ 122.633890][ T5873] usb 5-1: USB disconnect, device number 5 [ 122.639996][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 122.640071][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 122.691206][ T5873] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 122.918416][ T7298] sctp: [Deprecated]: syz.2.617 (pid 7298) Use of int in maxseg socket option. [ 122.918416][ T7298] Use struct sctp_assoc_value instead [ 122.998667][ T7302] loop6: detected capacity change from 0 to 524287999 [ 123.014374][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.023872][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.035726][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.045034][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.061141][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.070428][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.081157][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.090521][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.101715][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.110983][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.119099][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.128389][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.137354][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.146622][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.155202][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.164448][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.175543][ T7302] ldm_validate_partition_table(): Disk read failed. [ 123.190966][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.200221][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.208565][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.217789][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.229168][ T7302] Dev loop6: unable to read RDB block 0 [ 123.237779][ T7302] loop6: unable to read partition table [ 123.243920][ T7302] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 123.711110][ T5199] udevd[5199]: worker [5987] terminated by signal 33 (Unknown signal 33) [ 123.739430][ T5199] udevd[5199]: worker [5987] failed while handling '/devices/virtual/block/loop2' [ 124.196146][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 125.618075][ T7391] sctp: [Deprecated]: syz.1.656 (pid 7391) Use of int in max_burst socket option. [ 125.618075][ T7391] Use struct sctp_assoc_value instead [ 125.662000][ T30] audit: type=1326 audit(1742422499.353:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 125.757095][ T30] audit: type=1326 audit(1742422499.353:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 125.834261][ T30] audit: type=1326 audit(1742422499.353:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 125.919737][ T30] audit: type=1326 audit(1742422499.353:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 125.988402][ T30] audit: type=1326 audit(1742422499.353:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 126.089391][ T30] audit: type=1326 audit(1742422499.353:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 126.172153][ T30] audit: type=1326 audit(1742422499.353:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 126.229555][ T30] audit: type=1326 audit(1742422499.353:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 126.299436][ T30] audit: type=1326 audit(1742422499.353:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 126.366181][ T30] audit: type=1326 audit(1742422499.353:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1298d8d169 code=0x7ffc0000 [ 126.369942][ T7420] QAT: Device 198 not found [ 126.994348][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 127.327636][ T7447] syz.0.683 (7447) used greatest stack depth: 19000 bytes left [ 127.539335][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.708981][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 127.737642][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.769309][ T47] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 127.779032][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.834729][ T47] usb 2-1: config 0 descriptor?? [ 128.063721][ T7475] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 128.262218][ T47] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 128.269645][ T47] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 128.276741][ T47] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x4 [ 128.284700][ T47] mcp2221 0003:04D8:00DD.000B: item fetching failed at offset 3/5 [ 128.294313][ T47] mcp2221 0003:04D8:00DD.000B: can't parse reports [ 128.301351][ T47] mcp2221 0003:04D8:00DD.000B: probe with driver mcp2221 failed with error -22 [ 128.449502][ T59] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.483192][ T5904] usb 2-1: USB disconnect, device number 6 [ 128.601247][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.629410][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.669895][ T59] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 128.679010][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.719087][ T59] usb 5-1: config 0 descriptor?? [ 129.171549][ T59] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 129.183556][ T59] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 129.209083][ T59] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 129.239388][ T59] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 129.249407][ T59] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 129.256605][ T59] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 129.291867][ T59] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 129.324414][ T59] logitech 0003:046D:C294.000C: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.4-1/input0 [ 129.369351][ T59] logitech 0003:046D:C294.000C: no inputs found [ 129.409702][ T59] usb 5-1: USB disconnect, device number 6 [ 130.009611][ T5904] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.184446][ T5904] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.198698][ T5904] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.230936][ T5904] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.259548][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.292730][ T7516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.305659][ T5904] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.580108][ T7516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 130.586991][ T7516] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.689425][ T7516] vhci_hcd vhci_hcd.0: Device attached [ 130.737818][ T7537] vhci_hcd: connection closed [ 130.749446][ T6804] vhci_hcd: stop threads [ 130.772109][ T6804] vhci_hcd: release socket [ 130.779333][ T6804] vhci_hcd: disconnect device [ 130.831895][ T5904] usb 2-1: USB disconnect, device number 7 [ 131.470879][ T7554] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 131.510469][ T7554] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 131.519150][ T7554] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 131.608646][ T7554] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 131.652969][ T7556] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 131.714986][ T7556] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 131.766506][ T7556] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 131.811184][ T7556] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 133.121321][ T7592] input: syz0 as /devices/virtual/input/input21 [ 133.290063][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.884095][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'. [ 134.193429][ T30] audit: type=1400 audit(1742422507.883:39): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7616 comm="syz.2.755" name="139" dev="tmpfs" ino=720 [ 134.365924][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.760'. [ 134.673932][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 135.039691][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 135.169459][ T5904] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 135.214006][ T7659] mkiss: ax0: crc mode is auto. [ 135.311837][ T7659] Falling back ldisc for ttyS3. [ 135.346986][ T5904] usb 2-1: not running at top speed; connect to a high speed hub [ 135.361515][ T5904] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 38273, setting to 64 [ 135.383972][ T5904] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.420529][ T5904] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 135.454204][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.473433][ T5904] usb 2-1: Product: syz [ 135.483569][ T5904] usb 2-1: Manufacturer: syz [ 135.488231][ T5904] usb 2-1: SerialNumber: syz [ 135.513185][ T7649] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.757273][ T7677] tap0: tun_chr_ioctl cmd 2147767521 [ 135.766844][ T5904] usbhid 2-1:1.0: can't add hid device: -71 [ 135.779395][ T5904] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 135.805933][ T5904] usb 2-1: USB disconnect, device number 8 [ 136.009459][ T5873] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.229610][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.240143][ T5873] usb 1-1: config 0 has no interfaces? [ 136.245665][ T5873] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.275150][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.307286][ T5873] usb 1-1: config 0 descriptor?? [ 136.609785][ T5904] usb 1-1: USB disconnect, device number 8 [ 136.692093][ T7703] syzkaller1: tun_chr_ioctl cmd 35108 [ 137.528653][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 137.778557][ T7738] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.999298][ T5904] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 138.175140][ T5904] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 138.202098][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.229713][ T5904] usb 5-1: config 0 descriptor?? [ 138.246946][ T5904] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 138.349542][ T7746] syz.2.813 (7746) used greatest stack depth: 18776 bytes left [ 138.461948][ T5904] gp8psk: usb in 128 operation failed. [ 138.690246][ T5904] gp8psk: FW Version = 164.150.143 (0xa4968f) Build 2118/73/17 [ 138.898138][ T5904] gp8psk: usb in 149 operation failed. [ 138.909618][ T5904] gp8psk: failed to get FPGA version [ 138.919339][ T5904] gp8psk: usb in 138 operation failed. [ 138.929676][ T5904] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 138.965091][ T5904] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 138.996624][ T5904] usb 5-1: USB disconnect, device number 7 [ 139.125540][ T7781] Falling back ldisc for ttyS3. [ 139.188423][ T7783] process 'syz.3.834' launched './file1' with NULL argv: empty string added [ 139.509861][ T5904] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.689656][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 139.703615][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 139.728083][ T5904] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 139.739707][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.769529][ T5904] usb 1-1: Product: syz [ 139.773784][ T5904] usb 1-1: Manufacturer: syz [ 139.778419][ T5904] usb 1-1: SerialNumber: syz [ 139.799918][ T5904] usb 1-1: config 0 descriptor?? [ 139.810530][ T5904] hub 1-1:0.0: bad descriptor, ignoring hub [ 139.816510][ T5904] hub 1-1:0.0: probe with driver hub failed with error -5 [ 139.834563][ T5904] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22 [ 139.849952][ T59] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.878958][ T5904] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 139.903760][ T5904] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 140.009474][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 140.041280][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.062686][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.076009][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.090512][ T59] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.118604][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.129714][ T59] usb 3-1: config 0 descriptor?? [ 140.190223][ T5904] usb 1-1: USB disconnect, device number 9 [ 140.314516][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.849'. [ 140.345894][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.849'. [ 140.565176][ T59] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 140.599091][ T59] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 140.631592][ T59] microsoft 0003:045E:07DA.000D: no inputs found [ 140.669279][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.678083][ T59] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 140.786759][ T59] usb 3-1: USB disconnect, device number 6 [ 140.819699][ T7825] netlink: 'syz.0.854': attribute type 18 has an invalid length. [ 140.844824][ T7825] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.854088][ T7825] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.862939][ T7825] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.871826][ T7825] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.139949][ T7832] pimreg: entered allmulticast mode [ 141.183893][ T7832] pimreg: left allmulticast mode [ 141.688857][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.699356][ T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.879481][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 141.894722][ T59] usb 5-1: config index 0 descriptor too short (expected 30768, got 18) [ 141.913727][ T59] usb 5-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 141.913897][ T7863] [U] [ 141.979466][ T59] usb 5-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 142.004118][ T59] usb 5-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 142.040086][ T59] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 142.079437][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.146770][ T7871] vim2m vim2m.0: vidioc_s_fmt queue busy [ 142.533044][ T59] usb 5-1: USB disconnect, device number 8 [ 142.748550][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.043478][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.779912][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.221506][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.236099][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.243744][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.261261][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'. [ 144.613848][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.636405][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.836812][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.961091][ T7932] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.997246][ T7932] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.022786][ T7932] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.033950][ T7932] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.180023][ T7950] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.282087][ T7973] netlink: 'syz.1.918': attribute type 30 has an invalid length. [ 145.380609][ T7950] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.419657][ T7950] usb 3-1: config 1 interface 0 has no altsetting 0 [ 145.439619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.446777][ T7950] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 145.458251][ T7955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.477003][ T7950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.503996][ T7950] usb 3-1: Product: syz [ 145.515840][ T7950] usb 3-1: Manufacturer: syz [ 145.543036][ T7950] usb 3-1: SerialNumber: syz [ 145.684102][ C0] hrtimer: interrupt took 21355 ns [ 145.801743][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.852932][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.861872][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.898260][ T7950] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input25 [ 145.963672][ T5184] bcm5974 3-1:1.0: could not read from device [ 145.979714][ T7950] usb 3-1: USB disconnect, device number 7 [ 146.559894][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.932'. [ 146.700226][ T7950] kernel write not supported for file /amidi2 (pid: 7950 comm: kworker/0:12) [ 148.520229][ T47] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 148.682440][ T47] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.692142][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.712679][ T47] usb 2-1: config 0 descriptor?? [ 148.741826][ T47] cp210x 2-1:0.0: cp210x converter detected [ 148.861462][ T8099] can0: slcan on ptm0. [ 148.921212][ T8092] can0 (unregistered): slcan off ptm0. [ 149.165625][ T30] audit: type=1326 audit(1742422522.853:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8112 comm="syz.0.982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68a998d169 code=0x0 [ 149.350619][ T47] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 149.368699][ T47] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 149.389443][ T47] usb 2-1: cp210x converter now attached to ttyUSB0 [ 149.410785][ T47] usb 2-1: USB disconnect, device number 9 [ 149.437758][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.459634][ T47] cp210x 2-1:0.0: device disconnected [ 149.846360][ T8132] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.986703][ T8140] random: crng reseeded on system resumption [ 150.159590][ T7955] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.309342][ T7955] usb 5-1: Using ep0 maxpacket: 32 [ 150.320707][ T7955] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 150.336296][ T7955] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 150.356357][ T7955] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 150.377689][ T7955] usb 5-1: config 1 has no interface number 0 [ 150.399324][ T7955] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.430974][ T7955] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 150.453592][ T7955] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 150.467327][ T7955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.498344][ T7955] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 150.709614][ T7955] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 151.157682][ T7955] usb 5-1: USB disconnect, device number 9 [ 151.164904][ T7955] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 151.333522][ T8180] sp0: Synchronizing with TNC [ 151.344856][ T3527] [ 151.347223][ T3527] ===================================================== [ 151.354169][ T3527] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 151.361613][ T3527] 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 Not tainted [ 151.368722][ T3527] ----------------------------------------------------- [ 151.375724][ T3527] kworker/u8:9/3527 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 151.383514][ T3527] ffffffff8f6b2838 (disc_data_lock){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x440 [ 151.392995][ T3527] [ 151.392995][ T3527] and this task is already holding: [ 151.400346][ T3527] ffffffff9a9649d8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 151.409033][ T3527] which would create a new lock dependency: [ 151.414908][ T3527] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 151.422584][ T3527] [ 151.422584][ T3527] but this new dependency connects a HARDIRQ-irq-safe lock: [ 151.432067][ T3527] (&port_lock_key){-.-.}-{3:3} [ 151.432094][ T3527] [ 151.432094][ T3527] ... which became HARDIRQ-irq-safe at: [ 151.444626][ T3527] lock_acquire+0x1ed/0x550 [ 151.449318][ T3527] _raw_spin_lock_irqsave+0xd5/0x120 [ 151.454696][ T3527] serial8250_handle_irq+0x6d/0xb80 [ 151.459989][ T3527] serial8250_default_handle_irq+0xd1/0x1f0 [ 151.465971][ T3527] serial8250_interrupt+0xa9/0x1f0 [ 151.471179][ T3527] __handle_irq_event_percpu+0x29a/0xa60 [ 151.476892][ T3527] handle_irq_event+0x89/0x1f0 [ 151.481822][ T3527] handle_edge_irq+0x25f/0xc20 [ 151.486682][ T3527] __common_interrupt+0x136/0x230 [ 151.491908][ T3527] common_interrupt+0xb4/0xd0 [ 151.496677][ T3527] asm_common_interrupt+0x26/0x40 [ 151.501793][ T3527] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 151.507608][ T3527] uart_write+0x3e4/0xa40 [ 151.512029][ T3527] n_tty_write+0xd62/0x1230 [ 151.516632][ T3527] file_tty_write+0x546/0x9b0 [ 151.521481][ T3527] vfs_write+0xacf/0xd10 [ 151.525803][ T3527] ksys_write+0x18f/0x2b0 [ 151.530224][ T3527] do_syscall_64+0xf3/0x230 [ 151.534821][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.540801][ T3527] [ 151.540801][ T3527] to a HARDIRQ-irq-unsafe lock: [ 151.547802][ T3527] (disc_data_lock){.+.+}-{3:3} [ 151.547825][ T3527] [ 151.547825][ T3527] ... which became HARDIRQ-irq-unsafe at: [ 151.560623][ T3527] ... [ 151.560630][ T3527] lock_acquire+0x1ed/0x550 [ 151.567783][ T3527] _raw_read_lock+0x36/0x50 [ 151.572367][ T3527] sixpack_receive_buf+0x57/0x1420 [ 151.577573][ T3527] tiocsti+0x24d/0x300 [ 151.581720][ T3527] tty_ioctl+0x518/0xdc0 [ 151.586086][ T3527] __se_sys_ioctl+0xf5/0x170 [ 151.590788][ T3527] do_syscall_64+0xf3/0x230 [ 151.595385][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.601465][ T3527] [ 151.601465][ T3527] other info that might help us debug this: [ 151.601465][ T3527] [ 151.611703][ T3527] Possible interrupt unsafe locking scenario: [ 151.611703][ T3527] [ 151.620104][ T3527] CPU0 CPU1 [ 151.625474][ T3527] ---- ---- [ 151.630878][ T3527] lock(disc_data_lock); [ 151.635239][ T3527] local_irq_disable(); [ 151.641986][ T3527] lock(&port_lock_key); [ 151.648834][ T3527] lock(disc_data_lock); [ 151.655686][ T3527] [ 151.659147][ T3527] lock(&port_lock_key); [ 151.663662][ T3527] [ 151.663662][ T3527] *** DEADLOCK *** [ 151.663662][ T3527] [ 151.671808][ T3527] 6 locks held by kworker/u8:9/3527: [ 151.677084][ T3527] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 151.688761][ T3527] #1: ffffc9000c877c60 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 151.700425][ T3527] #2: ffff888025170ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x860 [ 151.709492][ T3527] #3: ffff88805c5270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 151.718792][ T3527] #4: ffffffff9a9649d8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 151.727918][ T3527] #5: ffff88805c5270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 151.737216][ T3527] [ 151.737216][ T3527] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 151.747625][ T3527] -> (&port_lock_key){-.-.}-{3:3} { [ 151.752836][ T3527] IN-HARDIRQ-W at: [ 151.756997][ T3527] lock_acquire+0x1ed/0x550 [ 151.763149][ T3527] _raw_spin_lock_irqsave+0xd5/0x120 [ 151.770094][ T3527] serial8250_handle_irq+0x6d/0xb80 [ 151.777031][ T3527] serial8250_default_handle_irq+0xd1/0x1f0 [ 151.784576][ T3527] serial8250_interrupt+0xa9/0x1f0 [ 151.791330][ T3527] __handle_irq_event_percpu+0x29a/0xa60 [ 151.798605][ T3527] handle_irq_event+0x89/0x1f0 [ 151.805008][ T3527] handle_edge_irq+0x25f/0xc20 [ 151.811411][ T3527] __common_interrupt+0x136/0x230 [ 151.818076][ T3527] common_interrupt+0xb4/0xd0 [ 151.824393][ T3527] asm_common_interrupt+0x26/0x40 [ 151.831082][ T3527] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 151.838457][ T3527] uart_write+0x3e4/0xa40 [ 151.844426][ T3527] n_tty_write+0xd62/0x1230 [ 151.850570][ T3527] file_tty_write+0x546/0x9b0 [ 151.856886][ T3527] vfs_write+0xacf/0xd10 [ 151.862769][ T3527] ksys_write+0x18f/0x2b0 [ 151.868738][ T3527] do_syscall_64+0xf3/0x230 [ 151.874883][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.882422][ T3527] IN-SOFTIRQ-W at: [ 151.886392][ T3527] lock_acquire+0x1ed/0x550 [ 151.892538][ T3527] _raw_spin_lock_irqsave+0xd5/0x120 [ 151.899463][ T3527] serial8250_handle_irq+0x6d/0xb80 [ 151.906313][ T3527] serial8250_default_handle_irq+0xd1/0x1f0 [ 151.913862][ T3527] serial8250_interrupt+0xa9/0x1f0 [ 151.920628][ T3527] __handle_irq_event_percpu+0x29a/0xa60 [ 151.928176][ T3527] handle_irq_event+0x89/0x1f0 [ 151.934580][ T3527] handle_edge_irq+0x25f/0xc20 [ 151.940982][ T3527] __common_interrupt+0x136/0x230 [ 151.947647][ T3527] common_interrupt+0x5e/0xd0 [ 151.953964][ T3527] asm_common_interrupt+0x26/0x40 [ 151.960630][ T3527] preempt_count_add+0x140/0x190 [ 151.967225][ T3527] unwind_next_frame+0xb0/0x22d0 [ 151.973806][ T3527] arch_stack_walk+0x11c/0x150 [ 151.980318][ T3527] stack_trace_save+0x118/0x1d0 [ 151.986934][ T3527] kasan_save_track+0x3f/0x80 [ 151.993255][ T3527] kasan_save_free_info+0x40/0x50 [ 151.999918][ T3527] __kasan_slab_free+0x59/0x70 [ 152.006324][ T3527] kmem_cache_free+0x195/0x410 [ 152.012735][ T3527] rcu_core+0xaaa/0x17a0 [ 152.018704][ T3527] handle_softirqs+0x2d4/0x9b0 [ 152.025117][ T3527] __irq_exit_rcu+0xf7/0x220 [ 152.031352][ T3527] irq_exit_rcu+0x9/0x30 [ 152.037230][ T3527] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 152.044509][ T3527] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 152.052131][ T3527] acpi_safe_halt+0x21/0x30 [ 152.058273][ T3527] acpi_idle_enter+0xe4/0x140 [ 152.064591][ T3527] cpuidle_enter_state+0x109/0x470 [ 152.071337][ T3527] cpuidle_enter+0x5d/0xa0 [ 152.077394][ T3527] do_idle+0x372/0x5c0 [ 152.083102][ T3527] cpu_startup_entry+0x42/0x60 [ 152.089505][ T3527] rest_init+0x2dc/0x300 [ 152.095398][ T3527] start_kernel+0x484/0x510 [ 152.101539][ T3527] x86_64_start_reservations+0x2a/0x30 [ 152.108639][ T3527] x86_64_start_kernel+0x66/0x70 [ 152.115308][ T3527] common_startup_64+0x13e/0x147 [ 152.121912][ T3527] INITIAL USE at: [ 152.125835][ T3527] lock_acquire+0x1ed/0x550 [ 152.131909][ T3527] _raw_spin_lock_irqsave+0xd5/0x120 [ 152.138753][ T3527] serial8250_do_set_termios+0x4da/0x1c70 [ 152.146373][ T3527] uart_set_options+0x437/0x770 [ 152.152781][ T3527] serial8250_console_setup+0x3db/0x670 [ 152.159892][ T3527] univ8250_console_setup+0x426/0x530 [ 152.166922][ T3527] try_enable_preferred_console+0x46b/0x5c0 [ 152.174388][ T3527] register_console+0x37a/0xfd0 [ 152.180899][ T3527] univ8250_console_init+0x52/0x90 [ 152.187582][ T3527] console_init+0x1b8/0x6f0 [ 152.193637][ T3527] start_kernel+0x2dd/0x510 [ 152.199696][ T3527] x86_64_start_reservations+0x2a/0x30 [ 152.206720][ T3527] x86_64_start_kernel+0x66/0x70 [ 152.213213][ T3527] common_startup_64+0x13e/0x147 [ 152.219702][ T3527] } [ 152.222190][ T3527] ... key at: [] port_lock_key+0x0/0x20 [ 152.229814][ T3527] [ 152.229814][ T3527] the dependencies between the lock to be acquired [ 152.229822][ T3527] and HARDIRQ-irq-unsafe lock: [ 152.243330][ T3527] -> (disc_data_lock){.+.+}-{3:3} { [ 152.248533][ T3527] HARDIRQ-ON-R at: [ 152.252588][ T3527] lock_acquire+0x1ed/0x550 [ 152.258731][ T3527] _raw_read_lock+0x36/0x50 [ 152.264887][ T3527] sixpack_receive_buf+0x57/0x1420 [ 152.271819][ T3527] tiocsti+0x24d/0x300 [ 152.277526][ T3527] tty_ioctl+0x518/0xdc0 [ 152.283412][ T3527] __se_sys_ioctl+0xf5/0x170 [ 152.289642][ T3527] do_syscall_64+0xf3/0x230 [ 152.295784][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.303318][ T3527] SOFTIRQ-ON-R at: [ 152.307285][ T3527] lock_acquire+0x1ed/0x550 [ 152.313424][ T3527] _raw_read_lock+0x36/0x50 [ 152.319565][ T3527] sixpack_receive_buf+0x57/0x1420 [ 152.326320][ T3527] tiocsti+0x24d/0x300 [ 152.332028][ T3527] tty_ioctl+0x518/0xdc0 [ 152.337910][ T3527] __se_sys_ioctl+0xf5/0x170 [ 152.344139][ T3527] do_syscall_64+0xf3/0x230 [ 152.350300][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.357833][ T3527] INITIAL USE at: [ 152.361801][ T3527] lock_acquire+0x1ed/0x550 [ 152.367857][ T3527] _raw_write_lock_irq+0xd3/0x120 [ 152.374436][ T3527] sixpack_close+0x2c/0x280 [ 152.380492][ T3527] tty_ldisc_kill+0xa3/0x1a0 [ 152.386901][ T3527] tty_ldisc_release+0x174/0x200 [ 152.393427][ T3527] tty_release_struct+0x2b/0xe0 [ 152.399856][ T3527] tty_release+0xd06/0x12c0 [ 152.405925][ T3527] __fput+0x3e9/0x9f0 [ 152.411463][ T3527] task_work_run+0x24f/0x310 [ 152.417604][ T3527] syscall_exit_to_user_mode+0x13f/0x340 [ 152.424789][ T3527] do_syscall_64+0x100/0x230 [ 152.430933][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.438381][ T3527] INITIAL READ USE at: [ 152.442699][ T3527] lock_acquire+0x1ed/0x550 [ 152.449200][ T3527] _raw_read_lock+0x36/0x50 [ 152.455699][ T3527] sixpack_receive_buf+0x57/0x1420 [ 152.462817][ T3527] tiocsti+0x24d/0x300 [ 152.468889][ T3527] tty_ioctl+0x518/0xdc0 [ 152.475152][ T3527] __se_sys_ioctl+0xf5/0x170 [ 152.481832][ T3527] do_syscall_64+0xf3/0x230 [ 152.488327][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.496209][ T3527] } [ 152.498698][ T3527] ... key at: [] disc_data_lock+0x18/0x100 [ 152.506583][ T3527] ... acquired at: [ 152.510382][ T3527] lock_acquire+0x1ed/0x550 [ 152.515053][ T3527] _raw_read_lock+0x36/0x50 [ 152.519737][ T3527] sixpack_write_wakeup+0x30/0x440 [ 152.525036][ T3527] tty_wakeup+0xbb/0x100 [ 152.529457][ T3527] tty_port_default_wakeup+0xa6/0xf0 [ 152.534994][ T3527] serial8250_tx_chars+0x6e2/0x930 [ 152.540270][ T3527] __start_tx+0x32e/0x470 [ 152.544772][ T3527] __uart_start+0x2bc/0x450 [ 152.549438][ T3527] uart_write+0x280/0xa40 [ 152.553969][ T3527] sixpack_receive_buf+0x447/0x1420 [ 152.559352][ T3527] tty_ldisc_receive_buf+0x11f/0x170 [ 152.564824][ T3527] tty_port_default_receive_buf+0x6d/0xa0 [ 152.570709][ T3527] flush_to_ldisc+0x328/0x860 [ 152.575635][ T3527] process_scheduled_works+0xabe/0x18e0 [ 152.581342][ T3527] worker_thread+0x870/0xd30 [ 152.586096][ T3527] kthread+0x7a9/0x920 [ 152.590331][ T3527] ret_from_fork+0x4b/0x80 [ 152.594947][ T3527] ret_from_fork_asm+0x1a/0x30 [ 152.599885][ T3527] [ 152.602200][ T3527] [ 152.602200][ T3527] stack backtrace: [ 152.608078][ T3527] CPU: 1 UID: 0 PID: 3527 Comm: kworker/u8:9 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 152.608093][ T3527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.608101][ T3527] Workqueue: events_unbound flush_to_ldisc [ 152.608118][ T3527] Call Trace: [ 152.608125][ T3527] [ 152.608132][ T3527] dump_stack_lvl+0x241/0x360 [ 152.608145][ T3527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.608155][ T3527] ? __pfx__printk+0x10/0x10 [ 152.608171][ T3527] ? print_shortest_lock_dependencies+0xf2/0x160 [ 152.608186][ T3527] validate_chain+0x4ebd/0x5920 [ 152.608202][ T3527] ? __pfx_validate_chain+0x10/0x10 [ 152.608218][ T3527] ? mark_lock+0x9a/0x360 [ 152.608234][ T3527] ? mark_lock+0x9a/0x360 [ 152.608250][ T3527] __lock_acquire+0x1397/0x2100 [ 152.608268][ T3527] lock_acquire+0x1ed/0x550 [ 152.608288][ T3527] ? sixpack_write_wakeup+0x30/0x440 [ 152.608303][ T3527] ? __pfx_lock_acquire+0x10/0x10 [ 152.608317][ T3527] ? tty_port_default_wakeup+0x9e/0xf0 [ 152.608329][ T3527] ? do_raw_spin_lock+0x14f/0x370 [ 152.608341][ T3527] ? __pfx_lock_release+0x10/0x10 [ 152.608356][ T3527] ? ldsem_down_read_trylock+0x192/0x200 [ 152.608370][ T3527] ? tty_ldisc_ref+0x1c/0x80 [ 152.608380][ T3527] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 152.608395][ T3527] _raw_read_lock+0x36/0x50 [ 152.608409][ T3527] ? sixpack_write_wakeup+0x30/0x440 [ 152.608422][ T3527] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 152.608435][ T3527] sixpack_write_wakeup+0x30/0x440 [ 152.608450][ T3527] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 152.608464][ T3527] tty_wakeup+0xbb/0x100 [ 152.608480][ T3527] tty_port_default_wakeup+0xa6/0xf0 [ 152.608494][ T3527] serial8250_tx_chars+0x6e2/0x930 [ 152.608507][ T3527] __start_tx+0x32e/0x470 [ 152.608520][ T3527] __uart_start+0x2bc/0x450 [ 152.608531][ T3527] uart_write+0x280/0xa40 [ 152.608543][ T3527] sixpack_receive_buf+0x447/0x1420 [ 152.608559][ T3527] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 152.608575][ T3527] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 152.608589][ T3527] tty_ldisc_receive_buf+0x11f/0x170 [ 152.608602][ T3527] tty_port_default_receive_buf+0x6d/0xa0 [ 152.608615][ T3527] flush_to_ldisc+0x328/0x860 [ 152.608629][ T3527] ? process_scheduled_works+0x9c6/0x18e0 [ 152.608641][ T3527] process_scheduled_works+0xabe/0x18e0 [ 152.608659][ T3527] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.608674][ T3527] ? assign_work+0x364/0x3d0 [ 152.608686][ T3527] worker_thread+0x870/0xd30 [ 152.608702][ T3527] ? __kthread_parkme+0x169/0x1d0 [ 152.608716][ T3527] ? __pfx_worker_thread+0x10/0x10 [ 152.608728][ T3527] kthread+0x7a9/0x920 [ 152.608742][ T3527] ? __pfx_kthread+0x10/0x10 [ 152.608757][ T3527] ? __pfx_worker_thread+0x10/0x10 [ 152.608770][ T3527] ? __pfx_kthread+0x10/0x10 [ 152.608784][ T3527] ? __pfx_kthread+0x10/0x10 [ 152.608799][ T3527] ? __pfx_kthread+0x10/0x10 [ 152.608812][ T3527] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.608825][ T3527] ? lockdep_hardirqs_on+0x99/0x150 [ 152.608840][ T3527] ? __pfx_kthread+0x10/0x10 [ 152.608854][ T3527] ret_from_fork+0x4b/0x80 [ 152.608867][ T3527] ? __pfx_kthread+0x10/0x10 [ 152.608881][ T3527] ret_from_fork_asm+0x1a/0x30 [ 152.608896][ T3527]