last executing test programs: 10m21.890989579s ago: executing program 2 (id=1104): r0 = socket(0x2b, 0x80801, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000280)=0x100, 0x4) 10m21.749915943s ago: executing program 2 (id=1106): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/24) 10m20.231337547s ago: executing program 2 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000a800000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10m19.762356959s ago: executing program 2 (id=1127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10m19.559046085s ago: executing program 2 (id=1131): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10m19.289140113s ago: executing program 2 (id=1134): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, 0x0, 0x0) 10m4.154898174s ago: executing program 32 (id=1134): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, 0x0, 0x0) 6m46.763489491s ago: executing program 0 (id=3696): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 6m46.603192837s ago: executing program 0 (id=3701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) 6m46.386813113s ago: executing program 0 (id=3703): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) 6m46.246658261s ago: executing program 0 (id=3708): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 6m46.163990915s ago: executing program 0 (id=3709): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 6m45.198853275s ago: executing program 0 (id=3726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) 6m44.753929192s ago: executing program 33 (id=3726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) 6m16.858902084s ago: executing program 6 (id=3952): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000434) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x36) 6m16.577216181s ago: executing program 6 (id=3953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) 6m16.575911267s ago: executing program 6 (id=3955): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x6, &(0x7f0000000040)=""/6, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000020000000000000006000000050000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 6m16.425096638s ago: executing program 6 (id=3957): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 6m16.259133106s ago: executing program 6 (id=3959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xf000, 0xdddd1000, 0x3, 0x0, 0x8, 0x8, 0x0, 0x2, 0x8, 0x6, 0x9, 0x10}, {0x1, 0x65ddbab8b0bf26e4, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfd}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0xdddd0000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x100000, 0xa, 0xc8, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x40, 0xa, 0x26, 0x1}, {0x80a0000}, {0xeeef0000}, 0xbdfdffe1, 0x0, 0x0, 0x28, 0xb, 0x5401, 0x0, [0x0, 0x0, 0x1, 0x8000000000]}) 6m15.404226297s ago: executing program 6 (id=3964): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0xff34, 0x0}) 6m14.916506348s ago: executing program 34 (id=3964): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0xff34, 0x0}) 5m36.779606019s ago: executing program 5 (id=4285): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x5}, 0x8) 5m36.640869628s ago: executing program 5 (id=4286): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x57, 0x0, 0x34, 0x0, 0x0, 0x64, 0x35, 0x0, 0x39, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x18}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) 5m36.509253691s ago: executing program 5 (id=4287): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x801, 0x0) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) 5m36.401409943s ago: executing program 5 (id=4288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 5m36.050863077s ago: executing program 5 (id=4289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m35.018769612s ago: executing program 5 (id=4293): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x627, 0x5f7b, 0x43, 0x0, 0x0) 5m34.464868523s ago: executing program 35 (id=4293): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x627, 0x5f7b, 0x43, 0x0, 0x0) 5m27.830029411s ago: executing program 4 (id=4334): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7fff, 0x4, 0x1}, 0x10) 5m27.686944938s ago: executing program 4 (id=4335): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x2, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) 5m27.392274933s ago: executing program 4 (id=4338): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xa86, 0x0) 5m27.263570825s ago: executing program 4 (id=4340): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="042ffd020000000000000809aabf4e020000233ba3b972f63c"], 0x200) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5m27.074691998s ago: executing program 4 (id=4342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) 5m26.317972265s ago: executing program 4 (id=4347): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x21) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 5m10.772514504s ago: executing program 36 (id=4347): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x21) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 21.379515331s ago: executing program 9 (id=7780): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x7, 0x12) 21.054837651s ago: executing program 9 (id=7785): r0 = fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20.848333988s ago: executing program 9 (id=7788): mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) 20.584511494s ago: executing program 9 (id=7791): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="401149000000ec124683f7bdeb57eeb43805a319e2dc649ba306a2aa667fa48ae98cfb020b46a25b4fcc98e08139a4e5cf450ed6daff73e432b1bda6f3f281eeb2d5fbae362e600d1fa8"], 0x0, 0x0}) 20.423801725s ago: executing program 3 (id=7793): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)={0x40, r1, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x40}}, 0x44040) 20.264718204s ago: executing program 7 (id=7795): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0x7fff, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 20.264152677s ago: executing program 3 (id=7796): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20.208750918s ago: executing program 7 (id=7797): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0xc0800, 0x140) fcntl$setlease(r1, 0x400, 0x2) 20.038692927s ago: executing program 7 (id=7800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)) 19.990359673s ago: executing program 3 (id=7801): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 19.880845341s ago: executing program 3 (id=7802): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000180005042cbd7000fbdbdf2502001480fe02fd07003200001c00090008000000", @ANYRES32=0x0, @ANYBLOB='\f'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4048864) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 19.816158907s ago: executing program 1 (id=7803): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r0, &(0x7f0000000a00), 0x0}, 0x20) 19.765532695s ago: executing program 8 (id=7804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280"], 0x24}}, 0x0) 19.676288818s ago: executing program 3 (id=7805): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fa8000000000000000060000d029aef8fe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvmmsg$unix(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10022, 0x0) 19.625441053s ago: executing program 1 (id=7806): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xd, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x4, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4, 0x4}]}}}}}}}, 0x0) 19.291738065s ago: executing program 8 (id=7807): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4000, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) 19.291577373s ago: executing program 3 (id=7808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0x8) 18.695980709s ago: executing program 9 (id=7809): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x8, 0x9, 0x7, "3d2449fc7ed41227f1e4336c8dd82c4c2d1e7f", 0x9, 0x7}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be12020506050e0204094300090007000c", 0x23, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 18.522488353s ago: executing program 1 (id=7810): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close(r0) 18.496411928s ago: executing program 7 (id=7811): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}}, 0x0) 18.01150663s ago: executing program 7 (id=7812): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) 17.69321447s ago: executing program 8 (id=7813): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000300)=[{0x28, 0xb0, 0x53, 0xfffff00c}, {0x2, 0x9, 0x3, 0x7fff}, {0x2, 0x8, 0xb3, 0xf1}, {0x7, 0x2, 0x4, 0x2}, {0x8001, 0x4, 0x9, 0x1}]}, 0xd) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000200)) 17.64199348s ago: executing program 7 (id=7814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff277a049e"]) 17.498495827s ago: executing program 1 (id=7815): syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982) 17.455382038s ago: executing program 8 (id=7816): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0002009}) epoll_pwait(r1, &(0x7f0000000540)=[{}], 0x1, 0x4000a, 0x0, 0x0) 17.253546146s ago: executing program 1 (id=7817): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4604070003070000004000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f000000040000"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 17.25334506s ago: executing program 8 (id=7818): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x90}]}, 0x34}}, 0x40000) 17.060274968s ago: executing program 8 (id=7819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0x8, 0xb, 0x3, 0xd0, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x4000, 0x3, 0x2, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3, 0x1}, {0x1, 0x4000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xe}, {0x4000, 0x2000, 0x10, 0x0, 0x15, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x1, 0x7}, {0xd000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x70}, {0x2000, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0x18002, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x8000006, 0x500, 0x3000, [0x6800000000000000, 0x9, 0x60, 0x3]}) 17.037718101s ago: executing program 1 (id=7820): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 15.428706839s ago: executing program 9 (id=7821): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r1, 0xe0824704187acfd7, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 4.033772815s ago: executing program 37 (id=7808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0x8) 2.529033217s ago: executing program 38 (id=7814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff277a049e"]) 1.563772555s ago: executing program 39 (id=7820): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 1.418321291s ago: executing program 40 (id=7819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0x8, 0xb, 0x3, 0xd0, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x4000, 0x3, 0x2, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3, 0x1}, {0x1, 0x4000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xe}, {0x4000, 0x2000, 0x10, 0x0, 0x15, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x1, 0x7}, {0xd000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x70}, {0x2000, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0x18002, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x8000006, 0x500, 0x3000, [0x6800000000000000, 0x9, 0x60, 0x3]}) 0s ago: executing program 41 (id=7821): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r1, 0xe0824704187acfd7, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) kernel console output (not intermixed with test programs): 003, bcdDevice=3a.b2 [ 589.376402][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.376420][ T31] usb 9-1: Product: syz [ 589.376434][ T31] usb 9-1: Manufacturer: syz [ 589.376501][ T31] usb 9-1: SerialNumber: syz [ 589.382150][ T31] usb 9-1: config 0 descriptor?? [ 589.625340][ T31] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 590.215988][ T31] gspca_sunplus: reg_w_riv err -71 [ 590.216100][ T31] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 590.231171][ T31] usb 9-1: USB disconnect, device number 11 [ 591.350922][ T5922] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 591.392422][T19148] Falling back ldisc for ttyS3. [ 591.509916][ T5922] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 591.509943][ T5922] usb 10-1: config 0 has no interface number 0 [ 591.513372][ T5922] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 591.513398][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.513417][ T5922] usb 10-1: Product: syz [ 591.513430][ T5922] usb 10-1: Manufacturer: syz [ 591.513443][ T5922] usb 10-1: SerialNumber: syz [ 591.531561][ T5922] usb 10-1: config 0 descriptor?? [ 591.765970][ T5922] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 591.791836][ T5922] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 591.792196][ T5922] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 591.792258][ T5922] usb 10-1: media controller created [ 591.876370][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.022794][ T5922] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 592.150128][ T5922] usb 10-1: USB disconnect, device number 7 [ 592.293417][T19179] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5248'. [ 592.306314][T19182] netlink: 'syz.3.5249': attribute type 3 has an invalid length. [ 592.335532][T19183] netlink: 14593 bytes leftover after parsing attributes in process `syz.8.5250'. [ 594.151129][ T5900] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 594.327703][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 594.327736][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 594.327768][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 594.336674][ T5900] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 594.336703][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.336723][ T5900] usb 4-1: Product: syz [ 594.336737][ T5900] usb 4-1: Manufacturer: syz [ 594.336751][ T5900] usb 4-1: SerialNumber: syz [ 594.345633][ T5900] usb 4-1: config 0 descriptor?? [ 594.346724][T19241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.346847][T19241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.420276][ T5900] usb 4-1: ucan: probing device on interface #0 [ 594.971092][T19266] netlink: 260 bytes leftover after parsing attributes in process `syz.8.5289'. [ 594.993880][ T5900] ucan 4-1:0.0: probe with driver ucan failed with error -22 [ 595.201485][T15282] usb 4-1: USB disconnect, device number 39 [ 595.428168][T19284] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.5298'. [ 598.134529][ T1229] hid_parser_main: 44 callbacks suppressed [ 598.134550][ T1229] hid-generic 0003:0004:0000.003C: unknown main item tag 0x0 [ 598.134580][ T1229] hid-generic 0003:0004:0000.003C: unknown main item tag 0x0 [ 598.134606][ T1229] hid-generic 0003:0004:0000.003C: unknown main item tag 0x0 [ 598.176225][ T1229] hid-generic 0003:0004:0000.003C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 598.243510][ T5900] kernel write not supported for file /media1 (pid: 5900 comm: kworker/0:4) [ 598.756746][T19389] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5347'. [ 598.756771][T19389] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5347'. [ 598.756995][T19389] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5347'. [ 598.757011][T19389] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5347'. [ 598.856057][T19379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 598.856214][T19379] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 598.948265][T19379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 598.948390][T19379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 599.025639][T19379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 599.104842][T19379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 599.144892][T19379] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 599.145001][T19379] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 599.235767][T19379] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 599.718560][T19416] block nbd3: server does not support multiple connections per device. [ 599.718953][T19416] block nbd3: shutting down sockets [ 599.949596][ T37] audit: type=1326 audit(1757793725.205:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 599.949914][ T37] audit: type=1326 audit(1757793725.205:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 600.016034][ T37] audit: type=1326 audit(1757793725.275:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 600.016884][ T37] audit: type=1326 audit(1757793725.275:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 600.017533][ T37] audit: type=1326 audit(1757793725.275:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 600.019485][ T37] audit: type=1326 audit(1757793725.275:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 600.024422][ T37] audit: type=1326 audit(1757793725.285:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 600.024848][ T37] audit: type=1326 audit(1757793725.285:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 600.025328][ T37] audit: type=1326 audit(1757793725.285:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff05b4ceba9 code=0x7ffc0000 [ 600.027966][ T37] audit: type=1326 audit(1757793725.285:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19429 comm="syz.8.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05b4ceba9 code=0x7ff00000 [ 600.330565][T19439] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5372'. [ 600.863007][T16409] Bluetooth: hci4: command 0x0406 tx timeout [ 601.021708][T16409] Bluetooth: hci1: command 0x0c1a tx timeout [ 601.120880][ T1229] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 601.181202][T16409] Bluetooth: hci5: command 0x0405 tx timeout [ 601.271866][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 601.274391][ T1229] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 601.274418][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.312714][ T1229] pvrusb2: Hardware description: Terratec Grabster AV400 [ 601.312730][ T1229] pvrusb2: ********** [ 601.312736][ T1229] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 601.312747][ T1229] pvrusb2: Important functionality might not be entirely working. [ 601.312755][ T1229] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 601.312767][ T1229] pvrusb2: ********** [ 601.537514][ T2363] pvrusb2: Invalid write control endpoint [ 601.757469][ T2363] pvrusb2: Invalid write control endpoint [ 601.757483][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 601.757493][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 601.757501][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 601.757510][ T2363] pvrusb2: Device being rendered inoperable [ 601.757580][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 601.768867][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 601.772753][T19448] pvrusb2: Attempted to execute control transfer when device not ok [ 601.781519][T16259] usb 4-1: USB disconnect, device number 40 [ 601.782893][ T2363] pvrusb2: Attached sub-driver cx25840 [ 601.782904][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 601.782913][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 601.879456][T19465] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5382'. [ 602.941181][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 603.112566][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 603.158359][T19504] QAT: failed to copy from user cfg_data. [ 603.263963][ T5153] Bluetooth: hci5: command 0x0405 tx timeout [ 604.287447][ T5922] kernel write not supported for file /input/mouse0 (pid: 5922 comm: kworker/1:5) [ 604.591026][ T5922] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 604.743255][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.743313][ T5922] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 604.743336][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.748847][ T5922] usb 4-1: config 0 descriptor?? [ 604.795139][ T5922] pwc: Askey VC010 type 2 USB webcam detected. [ 605.181221][T16409] Bluetooth: hci1: command 0x0c1a tx timeout [ 605.195465][ T5153] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 605.360915][T16409] Bluetooth: hci5: command 0x0405 tx timeout [ 605.384097][ T5922] pwc: recv_control_msg error -32 req 02 val 2700 [ 605.384723][ T5922] pwc: recv_control_msg error -71 req 02 val 2c00 [ 605.385218][ T5922] pwc: recv_control_msg error -71 req 04 val 1000 [ 605.385710][ T5922] pwc: recv_control_msg error -71 req 04 val 1300 [ 605.386205][ T5922] pwc: recv_control_msg error -71 req 04 val 1400 [ 605.386726][ T5922] pwc: recv_control_msg error -71 req 02 val 2000 [ 605.387265][ T5922] pwc: recv_control_msg error -71 req 02 val 2100 [ 605.387752][ T5922] pwc: recv_control_msg error -71 req 04 val 1500 [ 605.388358][ T5922] pwc: recv_control_msg error -71 req 02 val 2500 [ 605.388849][ T5922] pwc: recv_control_msg error -71 req 02 val 2400 [ 605.389335][ T5922] pwc: recv_control_msg error -71 req 02 val 2600 [ 605.463103][ T5922] pwc: recv_control_msg error -71 req 02 val 2900 [ 605.463648][ T5922] pwc: recv_control_msg error -71 req 02 val 2800 [ 605.470067][ T5922] pwc: recv_control_msg error -71 req 04 val 1100 [ 605.490296][ T5922] pwc: recv_control_msg error -71 req 04 val 1200 [ 605.520121][ T5922] pwc: Registered as video103. [ 605.528510][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 605.543580][ T5922] usb 4-1: USB disconnect, device number 41 [ 605.670874][ T5900] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 605.843792][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.843824][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.843863][ T5900] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 605.843885][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.852221][ T5900] usb 9-1: config 0 descriptor?? [ 606.098777][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5437'. [ 606.098874][T19584] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5437'. [ 606.330238][ T5900] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 606.330277][ T5900] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 606.330305][ T5900] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 606.330333][ T5900] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 606.330361][ T5900] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 606.354000][ T5900] playstation 0003:054C:0DF2.003D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 606.727151][ T5900] playstation 0003:054C:0DF2.003D: Failed to retrieve feature with reportID 32: -71 [ 606.727188][ T5900] playstation 0003:054C:0DF2.003D: Failed to retrieve DualSense firmware info: -71 [ 606.727238][ T5900] playstation 0003:054C:0DF2.003D: Failed to get firmware info from DualSense [ 606.727257][ T5900] playstation 0003:054C:0DF2.003D: Failed to create dualsense. [ 606.731986][ T5900] playstation 0003:054C:0DF2.003D: probe with driver playstation failed with error -71 [ 606.766528][ T5900] usb 9-1: USB disconnect, device number 12 [ 606.939290][T19598] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.260885][T16409] Bluetooth: hci1: command 0x0c1a tx timeout [ 607.360056][T19598] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.420960][T16409] Bluetooth: hci5: command 0x0405 tx timeout [ 607.459009][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5450'. [ 607.496908][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5455'. [ 607.905895][T19598] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.976408][T19634] netlink: 'syz.8.5460': attribute type 2 has an invalid length. [ 608.261369][ T5900] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 608.346173][T19598] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.414184][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.414209][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.417244][ T5900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.417271][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.417292][ T5900] usb 4-1: Product: syz [ 608.417305][ T5900] usb 4-1: Manufacturer: syz [ 608.417319][ T5900] usb 4-1: SerialNumber: syz [ 608.888571][ T5900] usb 4-1: 0:2 : does not exist [ 608.925252][T13471] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.023120][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.047040][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.047083][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.311177][ T5922] usb 4-1: USB disconnect, device number 42 [ 609.341003][T16409] Bluetooth: hci1: command 0x0c1a tx timeout [ 610.033450][T19684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5483'. [ 610.180866][T14710] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 610.221123][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.309862][T19694] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5488'. [ 610.330998][T14710] usb 9-1: Using ep0 maxpacket: 8 [ 610.345935][T14710] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 610.345960][T14710] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.345982][T14710] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 610.346006][T14710] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 610.346027][T14710] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.346067][T14710] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.346090][T14710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.641023][T14710] usb 9-1: GET_CAPABILITIES returned 0 [ 610.641068][T14710] usbtmc 9-1:16.0: can't read capabilities [ 610.847148][ T5900] usb 9-1: USB disconnect, device number 13 [ 611.040854][ T5922] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 611.193495][ T5922] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 611.193523][ T5922] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 611.193543][ T5922] usb 4-1: config 0 has no interface number 0 [ 611.193590][ T5922] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.193616][ T5922] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 611.193643][ T5922] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.193669][ T5922] usb 4-1: config 0 interface 52 has no altsetting 0 [ 611.195951][ T5922] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 611.195979][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 611.195998][ T5922] usb 4-1: Product: syz [ 611.196012][ T5922] usb 4-1: SerialNumber: syz [ 611.295437][ T5922] usb 4-1: config 0 descriptor?? [ 611.311751][T19722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.311768][T19722] IPv6: NLM_F_CREATE should be set when creating new route [ 611.312027][T19722] IPv6: NLM_F_CREATE should be set when creating new route [ 611.312061][T19722] IPv6: NLM_F_CREATE should be set when creating new route [ 611.315672][T19722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.515027][ T5922] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input35 [ 611.766476][ T5922] usb 4-1: USB disconnect, device number 43 [ 611.766570][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 612.910607][T19764] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5519'. [ 613.996370][T19794] ALSA: mixer_oss: invalid OSS volume '' [ 614.710849][ T5922] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 614.866996][ T5922] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 614.867026][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.889520][ T5922] usb 9-1: config 0 descriptor?? [ 615.252715][T13471] Bluetooth: hci2: Frame reassembly failed (-84) [ 615.256327][T19831] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 615.521620][ T5922] usb 9-1: Cannot set autoneg [ 615.521890][ T5922] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 615.527233][ T5922] usb 9-1: USB disconnect, device number 14 [ 615.814966][T19843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5556'. [ 616.319721][T19862] netlink: 'syz.9.5563': attribute type 2 has an invalid length. [ 616.319743][T19862] netlink: 51 bytes leftover after parsing attributes in process `syz.9.5563'. [ 616.346070][T19862] netlink: 'syz.9.5563': attribute type 2 has an invalid length. [ 616.346091][T19862] netlink: 51 bytes leftover after parsing attributes in process `syz.9.5563'. [ 616.563615][T19870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5567'. [ 616.564631][T19870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5567'. [ 616.615081][T19868] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 616.687527][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5571'. [ 616.687561][T19874] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5571'. [ 616.811394][T19874] vlan2: entered allmulticast mode [ 617.005403][T19884] input: syz0 as /devices/virtual/input/input36 [ 617.260954][T16409] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 619.596548][T19973] netlink: 'syz.3.5618': attribute type 1 has an invalid length. [ 619.596568][T19973] netlink: 'syz.3.5618': attribute type 2 has an invalid length. [ 619.598090][T19973] netlink: 'syz.3.5618': attribute type 1 has an invalid length. [ 619.598108][T19973] netlink: 'syz.3.5618': attribute type 2 has an invalid length. [ 620.430978][ T5922] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 620.580851][ T5922] usb 9-1: Using ep0 maxpacket: 16 [ 620.583479][ T5922] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 620.583511][ T5922] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 620.586588][ T5922] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.586614][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.586634][ T5922] usb 9-1: Product: syz [ 620.586648][ T5922] usb 9-1: Manufacturer: syz [ 620.586662][ T5922] usb 9-1: SerialNumber: syz [ 620.877904][ T5922] cdc_ncm 9-1:1.0: bind() failure [ 620.901853][ T5922] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 620.901899][ T5922] cdc_ncm 9-1:1.1: bind() failure [ 620.924241][ T5922] usb 9-1: USB disconnect, device number 15 [ 623.013731][ T31] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 623.163416][ T31] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.166563][ T31] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 623.166590][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.166609][ T31] usb 10-1: Product: syz [ 623.166623][ T31] usb 10-1: Manufacturer: syz [ 623.166636][ T31] usb 10-1: SerialNumber: syz [ 623.414108][T20090] input: syz1 as /devices/virtual/input/input37 [ 623.443856][ T31] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 623.653298][T15282] usb 10-1: USB disconnect, device number 8 [ 623.672302][T15282] usblp0: removed [ 624.160120][T20113] netlink: del zone limit has 4 unknown bytes [ 624.263019][T20111] netlink: set zone limit has 4 unknown bytes [ 624.343725][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.343802][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.431189][T20121] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 624.521410][T20126] genirq: Flags mismatch irq 5. 00202000 (pcl812) vs. 00202000 (das16m1) [ 629.531003][ T5900] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 629.713635][ T5900] usb 9-1: config 7 has an invalid interface number: 101 but max is 0 [ 629.713664][ T5900] usb 9-1: config 7 has no interface number 0 [ 629.716824][ T5900] usb 9-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 629.716850][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.716870][ T5900] usb 9-1: Product: syz [ 629.716884][ T5900] usb 9-1: Manufacturer: syz [ 629.716897][ T5900] usb 9-1: SerialNumber: syz [ 630.581559][ T5900] as10x_usb: device has been detected [ 630.582735][ T5900] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 630.625313][ T5900] usb 9-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 630.857522][T20303] loop7: detected capacity change from 0 to 7 [ 630.875767][ C1] blk_print_req_error: 2 callbacks suppressed [ 630.875785][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.875812][ C1] buffer_io_error: 5 callbacks suppressed [ 630.875822][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.876107][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.876133][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.876322][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.876346][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.876533][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.876558][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.876846][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.876872][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.877161][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.877187][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.877432][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.877457][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.877536][T20303] ldm_validate_partition_table(): Disk read failed. [ 630.877708][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.877733][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.877998][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.878023][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.878259][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.878283][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.878586][T20303] Dev loop7: unable to read RDB block 0 [ 630.879509][T20303] loop7: unable to read partition table [ 630.879737][T20303] loop7: partition table beyond EOD, truncated [ 630.879754][T20303] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 630.909505][ T5900] as10x_usb: error during firmware upload part1 [ 630.910289][ T5900] Registered device Elgato EyeTV DTT Deluxe [ 630.918272][ T5900] usb 9-1: USB disconnect, device number 16 [ 630.980293][ T5900] Unregistered device Elgato EyeTV DTT Deluxe [ 630.989913][ T5900] as10x_usb: device has been disconnected [ 632.671505][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 632.671709][T20332] netlink: 39 bytes leftover after parsing attributes in process `syz.3.5777'. [ 633.494521][ T37] kauditd_printk_skb: 3058 callbacks suppressed [ 633.494538][ T37] audit: type=1326 audit(1757794271.751:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20357 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb82eba9 code=0x7ffc0000 [ 633.500883][ T37] audit: type=1326 audit(1757794271.751:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20357 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb82eba9 code=0x7ffc0000 [ 633.500929][ T37] audit: type=1326 audit(1757794271.751:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20357 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0bb82eba9 code=0x7ffc0000 [ 633.500968][ T37] audit: type=1326 audit(1757794271.751:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20357 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb82eba9 code=0x7ffc0000 [ 633.501005][ T37] audit: type=1326 audit(1757794271.751:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20357 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb82eba9 code=0x7ffc0000 [ 633.503122][ T37] audit: type=1326 audit(1757794271.761:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20357 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0bb82eba9 code=0x7ffc0000 [ 633.503451][T20358] netlink: 'syz.3.5790': attribute type 4 has an invalid length. [ 633.507180][ T37] audit: type=1326 audit(1757794271.761:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20357 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb82eba9 code=0x7ffc0000 [ 633.507224][ T37] audit: type=1326 audit(1757794271.761:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20357 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb82eba9 code=0x7ffc0000 [ 633.960966][T16259] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 634.110998][T16259] usb 4-1: Using ep0 maxpacket: 8 [ 634.113371][T16259] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 634.113404][T16259] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 634.113428][T16259] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 634.113451][T16259] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.113493][T16259] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 634.113516][T16259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.354999][T16259] usb 4-1: GET_CAPABILITIES returned 0 [ 634.355045][T16259] usbtmc 4-1:16.0: can't read capabilities [ 634.593467][ T5922] usb 4-1: USB disconnect, device number 44 [ 637.000473][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5822'. [ 637.167753][T20444] Falling back ldisc for ttyS3. [ 637.274503][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5826'. [ 637.327834][T20449] : entered promiscuous mode [ 637.594377][T20462] netlink: 'syz.9.5832': attribute type 8 has an invalid length. [ 638.090190][ T5900] kernel write not supported for file /snd/seq (pid: 5900 comm: kworker/0:4) [ 638.666714][T20500] netlink: 'syz.7.5850': attribute type 25 has an invalid length. [ 638.666735][T20500] netlink: 'syz.7.5850': attribute type 7 has an invalid length. [ 638.901143][T20511] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5855'. [ 638.969952][T20515] kvm: user requested TSC rate below hardware speed [ 638.978815][T20513] syz_tun: entered allmulticast mode [ 638.980170][T20512] syz_tun: left allmulticast mode [ 639.031039][ T5922] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 639.184039][ T5922] usb 10-1: Using ep0 maxpacket: 8 [ 639.186494][ T5922] usb 10-1: config 0 has no interfaces? [ 639.196627][ T5922] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 639.196652][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.196672][ T5922] usb 10-1: Product: syz [ 639.196686][ T5922] usb 10-1: Manufacturer: syz [ 639.196699][ T5922] usb 10-1: SerialNumber: syz [ 639.215916][ T5922] usb 10-1: config 0 descriptor?? [ 639.265731][T20525] program syz.1.5861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.469208][T15282] usb 10-1: USB disconnect, device number 9 [ 639.538030][T20533] block nbd3: server does not support multiple connections per device. [ 639.546042][T20533] block nbd3: shutting down sockets [ 639.784364][T20545] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 639.784552][T20545] syzkaller1: linktype set to 780 [ 641.341147][ T5153] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 641.348625][ T5922] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 641.516782][ T5922] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 641.516813][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.516832][ T5922] usb 10-1: Product: syz [ 641.516847][ T5922] usb 10-1: Manufacturer: syz [ 641.516861][ T5922] usb 10-1: SerialNumber: syz [ 641.529403][ T5922] usb 10-1: config 0 descriptor?? [ 641.781613][ T31] usb 10-1: USB disconnect, device number 10 [ 642.938306][T20623] netlink: 830 bytes leftover after parsing attributes in process `syz.9.5906'. [ 642.960830][T15282] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 643.126895][T15282] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 643.126925][T15282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.131887][T15282] usb 4-1: config 0 descriptor?? [ 643.160071][T15282] gspca_main: spca508-2.14.0 probing 8086:0110 [ 643.176838][T20627] block device autoloading is deprecated and will be removed. [ 643.205602][T20627] blk_print_req_error: 5 callbacks suppressed [ 643.205621][T20627] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 643.297271][T20629] vim2m vim2m.0: vidioc_s_fmt queue busy [ 643.351187][T15282] gspca_spca508: reg_read err -71 [ 643.352031][T15282] gspca_spca508: reg_read err -71 [ 643.352436][T15282] gspca_spca508: reg_read err -71 [ 643.352831][T15282] gspca_spca508: reg_read err -71 [ 643.353221][T15282] gspca_spca508: reg_read err -71 [ 643.353608][T15282] gspca_spca508: reg write: error -71 [ 643.353697][T15282] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 643.403790][T15282] usb 4-1: USB disconnect, device number 45 [ 644.317628][T20653] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 20653 comm: syz.8.5921) [ 644.356198][ T37] audit: type=1800 audit(1757794282.571:3490): pid=20653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.5921" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=70778 res=0 errno=0 [ 645.113244][T20685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.232429][ T5922] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 645.371026][ T5900] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 645.390226][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.390265][ T5922] usb 9-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 645.390277][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.395236][ T5922] usb 9-1: config 0 descriptor?? [ 645.540364][ T5900] usb 10-1: config 0 has an invalid interface number: 229 but max is 0 [ 645.540392][ T5900] usb 10-1: config 0 has no interface number 0 [ 645.540439][ T5900] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 645.540461][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.582670][ T5900] usb 10-1: config 0 descriptor?? [ 645.800361][T14710] usb 10-1: USB disconnect, device number 11 [ 645.822182][ T5922] hid-rmi 0003:17EF:6085.003E: hidraw0: USB HID vff.fe Device [HID 17ef:6085] on usb-dummy_hcd.8-1/input0 [ 645.910840][ T31] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 646.020178][ T5900] usb 9-1: USB disconnect, device number 17 [ 646.060848][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 646.076060][ T31] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 646.076078][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.079046][ T31] usb 4-1: config 0 descriptor?? [ 646.106102][ T31] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 646.379133][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5943'. [ 646.898416][ T31] gspca_nw80x: reg_r err -71 [ 646.898509][ T31] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 646.921125][ T31] usb 4-1: USB disconnect, device number 46 [ 647.275007][T20720] block device autoloading is deprecated and will be removed. [ 648.210922][T16259] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 648.341267][T20760] dummy0: entered allmulticast mode [ 648.393335][T16259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 648.393368][T16259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.398772][T16259] usb 4-1: config 0 descriptor?? [ 648.620921][T16409] Bluetooth: hci5: command 0x0405 tx timeout [ 649.011358][T16259] ath6kl: mismatched byte count 0 vs. expected 12 [ 649.013425][T16259] ath6kl: Failed to init ath6kl core: -22 [ 649.089416][T16259] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 649.131706][T16423] cgroup: fork rejected by pids controller in /syz1 [ 649.214445][ T31] usb 4-1: USB disconnect, device number 47 [ 649.920200][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.000278][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5992'. [ 650.900839][ T5922] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 651.010868][T16259] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 651.050879][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 651.055633][ T5922] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 651.055659][ T5922] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 651.055679][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 651.055699][ T5922] usb 4-1: config 1 has no interface number 0 [ 651.055742][ T5922] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 651.055767][ T5922] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 651.055808][ T5922] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 651.055829][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.085742][ T5922] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 651.176770][T16259] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 651.176798][T16259] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 651.176817][T16259] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 651.176871][T16259] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 651.176896][T16259] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 651.179559][T16259] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 651.179585][T16259] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 651.179605][T16259] usb 10-1: Product: syz [ 651.179618][T16259] usb 10-1: Manufacturer: syz [ 651.287404][T16259] cdc_wdm 10-1:1.0: skipping garbage [ 651.287423][T16259] cdc_wdm 10-1:1.0: skipping garbage [ 651.309794][T16259] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 651.309821][T16259] cdc_wdm 10-1:1.0: Unknown control protocol [ 651.338426][ T5922] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 651.521845][ T5922] usb 10-1: USB disconnect, device number 12 [ 651.674044][T16409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 651.698134][T16409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 651.699759][T16409] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 651.727707][T16409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 651.739789][T16409] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 651.765406][T16259] usb 4-1: USB disconnect, device number 48 [ 651.782159][T16259] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 652.331146][T20837] chnl_net:caif_netlink_parms(): no params data found [ 652.450881][T16259] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 652.600819][T16259] usb 9-1: Using ep0 maxpacket: 8 [ 652.605099][T16259] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 652.605146][T16259] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 652.605168][T16259] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.610666][T16259] usb 9-1: config 0 descriptor?? [ 652.869791][T16259] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 652.993187][T20837] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.993447][T20837] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.993687][T20837] bridge_slave_0: entered allmulticast mode [ 653.024398][T20837] bridge_slave_0: entered promiscuous mode [ 653.039928][T20837] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.048304][T20837] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.048529][T20837] bridge_slave_1: entered allmulticast mode [ 653.065459][T16259] usb 9-1: USB disconnect, device number 18 [ 653.071498][T20837] bridge_slave_1: entered promiscuous mode [ 653.120992][T20868] kvm: kvm [20867]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 653.396964][T20837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.419658][T20837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.795180][T20837] team0: Port device team_slave_0 added [ 653.808415][T20837] team0: Port device team_slave_1 added [ 653.821027][T16409] Bluetooth: hci2: command tx timeout [ 653.893364][T20883] program syz.3.6028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.526481][ T5922] IPVS: starting estimator thread 0... [ 654.573745][T20837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.573762][T20837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.573786][T20837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.579780][T20837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.579793][T20837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.579817][T20837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.615094][T20896] IPVS: using max 9 ests per chain, 21600 per kthread [ 654.864455][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6036'. [ 655.037607][T20908] sg_write: process 3596 (syz.3.6039) changed security contexts after opening file descriptor, this is not allowed. [ 655.126327][T20837] hsr_slave_0: entered promiscuous mode [ 655.139603][T20837] hsr_slave_1: entered promiscuous mode [ 655.140491][T20837] debugfs: 'hsr0' already exists in 'hsr' [ 655.140520][T20837] Cannot create hsr debugfs directory [ 655.430916][T16259] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 655.519753][T20918] loop7: detected capacity change from 0 to 524255232 [ 655.590948][T16259] usb 10-1: Using ep0 maxpacket: 16 [ 655.593413][T16259] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.593442][T16259] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 655.593488][T16259] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 655.593511][T16259] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.609945][T16259] usb 10-1: config 0 descriptor?? [ 655.680186][T20918] loop7: detected capacity change from 524255232 to 524287912 [ 655.840594][T16259] usbhid 10-1:0.0: can't add hid device: -71 [ 655.840877][T16259] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 655.902769][T16409] Bluetooth: hci2: command tx timeout [ 655.942809][T16259] usb 10-1: USB disconnect, device number 13 [ 656.487056][T20931] netlink: 'syz.9.6050': attribute type 83 has an invalid length. [ 656.632327][T20935] bond0: entered promiscuous mode [ 656.632348][T20935] bond_slave_0: entered promiscuous mode [ 656.632612][T20935] bond_slave_1: entered promiscuous mode [ 656.638375][T20935] batadv0: entered promiscuous mode [ 656.662490][T20935] hsr1: entered promiscuous mode [ 656.671450][T20935] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 656.834473][T20837] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.057756][T20837] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.235541][T20837] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.396371][T20837] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.642583][T20956] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6061'. [ 657.643380][T20956] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6061'. [ 657.643980][T20956] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6061'. [ 657.983281][T16409] Bluetooth: hci2: command tx timeout [ 658.069077][T20837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 658.153408][T20837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 658.194217][T20837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 658.246582][T20837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 658.428532][T20837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.490935][ T5900] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 658.495466][T20837] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.525311][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.525536][T13470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.574206][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.574671][T13470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.641028][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 658.643575][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.643630][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.643657][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 658.643677][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 658.643700][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.645641][ T5900] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 658.645667][ T5900] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 658.645685][ T5900] usb 4-1: Manufacturer: syz [ 658.664977][ T5900] usb 4-1: config 0 descriptor?? [ 659.054249][ T5900] rc_core: IR keymap rc-hauppauge not found [ 659.054270][ T5900] Registered IR keymap rc-empty [ 659.054427][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.070940][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.092425][ T5900] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 659.099970][ T5900] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 659.117916][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.120016][ C0] mceusb 4-1:0.0: long-range (0x1) receiver active [ 659.143311][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.161978][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.181215][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.203899][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.223247][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.241218][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.263153][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.280900][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.301139][ T5900] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.336414][ T5900] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 659.336428][ T5900] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 659.417312][ T5900] usb 4-1: USB disconnect, device number 49 [ 659.444833][T20837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.640192][T20837] veth0_vlan: entered promiscuous mode [ 659.675744][T20837] veth1_vlan: entered promiscuous mode [ 659.776794][T20837] veth0_macvtap: entered promiscuous mode [ 659.789212][T20837] veth1_macvtap: entered promiscuous mode [ 659.860145][T20837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.890288][T20837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.929836][T13471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.930238][ T8995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.930421][ T8995] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.930586][ T8995] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.060993][T16409] Bluetooth: hci2: command tx timeout [ 660.391628][T21007] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6079'. [ 660.448114][ T7057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.448133][ T7057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.565174][ T7057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.565193][ T7057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.615622][T21011] program syz.8.6081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.997311][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6102'. [ 662.370931][ T5908] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 662.533413][ T5908] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.533446][ T5908] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 662.533485][ T5908] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.533507][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.584855][T21064] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 662.590638][ T5908] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.876200][T14710] usb 4-1: USB disconnect, device number 50 [ 663.828351][ T37] audit: type=1326 audit(1757794302.081:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcce346ada9 code=0x7ffc0000 [ 663.828401][ T37] audit: type=1326 audit(1757794302.081:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 663.828443][ T37] audit: type=1326 audit(1757794302.081:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 663.828483][ T37] audit: type=1326 audit(1757794302.081:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 663.828522][ T37] audit: type=1326 audit(1757794302.081:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 663.828562][ T37] audit: type=1326 audit(1757794302.081:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 663.828601][ T37] audit: type=1326 audit(1757794302.081:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 663.828642][ T37] audit: type=1326 audit(1757794302.081:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 663.828681][ T37] audit: type=1326 audit(1757794302.081:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcce346ada9 code=0x7ffc0000 [ 663.828724][ T37] audit: type=1326 audit(1757794302.081:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21105 comm="syz.9.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcce346ada9 code=0x7ffc0000 [ 666.162107][ T5922] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 666.310809][ T5922] usb 9-1: Using ep0 maxpacket: 16 [ 666.313228][ T5922] usb 9-1: config 1 has an invalid interface number: 220 but max is 1 [ 666.313252][ T5922] usb 9-1: config 1 has an invalid interface number: 76 but max is 1 [ 666.313270][ T5922] usb 9-1: config 1 has no interface number 0 [ 666.313284][ T5922] usb 9-1: config 1 has no interface number 1 [ 666.313329][ T5922] usb 9-1: config 1 interface 220 has no altsetting 0 [ 666.313345][ T5922] usb 9-1: config 1 interface 76 has no altsetting 0 [ 666.317692][ T5922] usb 9-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4 [ 666.317718][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.317738][ T5922] usb 9-1: Product: syz [ 666.317752][ T5922] usb 9-1: Manufacturer: syz [ 666.317765][ T5922] usb 9-1: SerialNumber: syz [ 666.681231][ T5922] usb 9-1: USB disconnect, device number 19 [ 667.012255][T21185] pimreg: tun_chr_ioctl cmd 1074025677 [ 667.012403][T21185] pimreg: linktype set to 769 [ 668.041206][ T1229] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 668.194023][ T1229] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 668.194054][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.232948][ T1229] usb 4-1: config 0 descriptor?? [ 668.245295][ T1229] cp210x 4-1:0.0: cp210x converter detected [ 668.590831][T14710] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 668.640805][ T5922] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 668.643409][ T1229] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 668.672936][T21235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6182'. [ 668.681050][ T1229] usb 4-1: cp210x converter now attached to ttyUSB0 [ 668.761208][T14710] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 668.761236][T14710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.761255][T14710] usb 9-1: Product: syz [ 668.761268][T14710] usb 9-1: Manufacturer: syz [ 668.761282][T14710] usb 9-1: SerialNumber: syz [ 668.811855][ T5922] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.811887][ T5922] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.811925][ T5922] usb 10-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 668.811948][ T5922] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.815171][T14710] usb 9-1: config 0 descriptor?? [ 668.818533][ T5922] usb 10-1: config 0 descriptor?? [ 668.850118][ T1229] usb 4-1: USB disconnect, device number 51 [ 668.871221][ T1229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 669.004317][ T1229] cp210x 4-1:0.0: device disconnected [ 669.031738][T14710] usb 9-1: ignoring: probably an ADSL modem [ 669.249751][T21247] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6187'. [ 669.324351][ T5922] elecom 0003:056E:010C.003F: hidraw0: USB HID v77.96 Device [HID 056e:010c] on usb-dummy_hcd.9-1/input0 [ 669.440648][T14710] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 669.449480][T14710] usb 10-1: USB disconnect, device number 14 [ 669.597708][T21256] netlink: 'syz.1.6192': attribute type 83 has an invalid length. [ 669.661493][T15282] usb 9-1: USB disconnect, device number 20 [ 669.984982][T21269] netlink: 'syz.3.6197': attribute type 1 has an invalid length. [ 670.592601][T21289] bridge0: entered promiscuous mode [ 671.589731][T21321] netem: change failed [ 672.035241][T15282] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 672.200849][T15282] usb 9-1: Using ep0 maxpacket: 8 [ 672.203463][T15282] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 672.203487][T15282] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 672.203505][T15282] usb 9-1: config 0 has no interface number 0 [ 672.203548][T15282] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 672.203573][T15282] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 672.203599][T15282] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 672.206645][T15282] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 672.206669][T15282] usb 9-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 672.206689][T15282] usb 9-1: Product: syz [ 672.222748][T15282] usb 9-1: config 0 descriptor?? [ 672.237532][T21330] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 672.705632][T21354] loop7: detected capacity change from 0 to 7 [ 672.736107][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.736141][ C1] buffer_io_error: 5 callbacks suppressed [ 672.736160][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.736422][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.736448][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.736697][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.736722][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.736957][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.736981][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.737249][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.737273][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.737521][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.737546][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.737780][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.737805][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.737885][T21354] ldm_validate_partition_table(): Disk read failed. [ 672.738049][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.738072][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.738313][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.738337][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.738572][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.738596][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 672.738912][T21354] Dev loop7: unable to read RDB block 0 [ 672.739817][T21354] loop7: unable to read partition table [ 672.740046][T21354] loop7: partition table beyond EOD, truncated [ 672.740079][T21354] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 672.860243][T15282] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.21/input/input39 [ 673.178819][T15282] usb 9-1: USB disconnect, device number 21 [ 673.178917][ C0] keyspan_remote 9-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 673.281045][T21365] netlink: 'syz.3.6239': attribute type 2 has an invalid length. [ 673.281067][T21365] netlink: 'syz.3.6239': attribute type 8 has an invalid length. [ 673.281080][T21365] netlink: 1160 bytes leftover after parsing attributes in process `syz.3.6239'. [ 673.623187][T21376] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 674.469613][T21404] program syz.1.6259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.512675][T15282] kernel read not supported for file /usbmon9 (pid: 15282 comm: kworker/0:5) [ 674.766617][T21415] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6264'. [ 675.854372][ T1229] kernel write not supported for file /comedi4 (pid: 1229 comm: kworker/0:2) [ 676.162138][T21444] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 676.193756][ T37] kauditd_printk_skb: 178 callbacks suppressed [ 676.193772][ T37] audit: type=1326 audit(1757794315.446:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21425 comm="syz.3.6270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb82eba9 code=0x0 [ 676.601712][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6285'. [ 677.351027][ T1229] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 677.513784][ T1229] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 677.513842][ T1229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.529127][ T1229] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 677.529154][ T1229] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 677.529172][ T1229] usb 10-1: Manufacturer: syz [ 677.555169][ T1229] usb 10-1: config 0 descriptor?? [ 677.850936][ T1229] rc_core: IR keymap rc-hauppauge not found [ 677.850965][ T1229] Registered IR keymap rc-empty [ 677.852543][ T1229] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 677.855618][ T1229] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input40 [ 677.890283][ T1229] usb 10-1: USB disconnect, device number 15 [ 679.440887][ T1229] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 679.592896][ T1229] usb 10-1: Using ep0 maxpacket: 16 [ 679.597204][ T1229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 679.597235][ T1229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 679.597262][ T1229] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.597317][ T1229] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 679.597339][ T1229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.604101][ T1229] usb 10-1: config 0 descriptor?? [ 679.605369][T21521] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 679.643446][ T1229] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input41 [ 679.877163][ T1229] usb 10-1: USB disconnect, device number 16 [ 680.622672][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.637338][T21561] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 680.638534][T21561] batadv1: entered promiscuous mode [ 680.640253][T21561] team0: Port device batadv1 added [ 680.725241][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6334'. [ 681.220810][ T5900] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 681.376271][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 681.388971][ T5900] usb 9-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 681.389027][ T5900] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 681.389050][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.419478][ T5900] hub 9-1:32.0: bad descriptor, ignoring hub [ 681.419515][ T5900] hub 9-1:32.0: probe with driver hub failed with error -5 [ 681.642106][ T5922] Process accounting resumed [ 681.944290][T14710] usb 9-1: reset high-speed USB device number 22 using dummy_hcd [ 682.510307][T21619] pimreg: tun_chr_ioctl cmd 1074025677 [ 682.510437][T21619] pimreg: linktype set to 6 [ 682.562666][ T37] audit: type=1326 audit(1757794321.816:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.6357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0bb82eba9 code=0x0 [ 682.846443][T21627] program syz.9.6359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.011247][T14710] usb 9-1: USB disconnect, device number 22 [ 683.711004][T14710] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 683.861647][T14710] usb 10-1: Using ep0 maxpacket: 32 [ 683.864291][T14710] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.864322][T14710] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.864359][T14710] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 683.864382][T14710] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.918316][T14710] usb 10-1: config 0 descriptor?? [ 683.933375][T14710] hub 10-1:0.0: USB hub found [ 684.015934][T21663] blk_print_req_error: 5 callbacks suppressed [ 684.015956][T21663] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 684.016262][T21663] SQUASHFS error: Failed to read block 0x0: -5 [ 684.133421][T14710] hub 10-1:0.0: config failed, can't read hub descriptor (err -90) [ 684.294771][ T5922] IPVS: starting estimator thread 0... [ 684.391002][T21670] IPVS: using max 7 ests per chain, 16800 per kthread [ 684.545536][T14710] hid-generic 0003:046D:C31C.0040: unknown main item tag 0x0 [ 684.581016][T14710] hid-generic 0003:046D:C31C.0040: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 684.851220][ T5922] usb 10-1: USB disconnect, device number 17 [ 684.920877][T14710] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 684.955653][T21691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6389'. [ 684.955672][T21691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6389'. [ 685.073553][T14710] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 685.073581][T14710] usb 9-1: config 0 has no interface number 0 [ 685.076769][T14710] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 685.076797][T14710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.076817][T14710] usb 9-1: Product: syz [ 685.076831][T14710] usb 9-1: Manufacturer: syz [ 685.076845][T14710] usb 9-1: SerialNumber: syz [ 685.133047][T14710] usb 9-1: config 0 descriptor?? [ 685.347536][T14710] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 685.361812][T14710] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 685.362175][T14710] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 685.362222][T14710] usb 9-1: media controller created [ 685.411950][T14710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.749299][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.749423][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.006531][T21713] tap0: tun_chr_ioctl cmd 1074025681 [ 686.461252][T14710] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 686.577556][T14710] usb 9-1: USB disconnect, device number 23 [ 687.657306][T21758] netem: incorrect ge model size [ 687.657345][T21758] netem: change failed [ 688.050121][T21771] overlay: filesystem on ./file0 is read-only [ 688.772758][T21803] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6442'. [ 689.348570][T21826] vxcan1: entered allmulticast mode [ 689.348826][T21826] vxcan1: left allmulticast mode [ 689.651869][T21838] openvswitch: netlink: IP tunnel TTL not specified. [ 689.845071][T14710] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 690.030918][T14710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.030950][T14710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.030988][T14710] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 690.031011][T14710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.036306][T14710] usb 9-1: config 0 descriptor?? [ 690.458463][T14710] prodikeys 0003:041E:2801.0041: unknown main item tag 0x0 [ 690.458502][T14710] prodikeys 0003:041E:2801.0041: unknown main item tag 0x0 [ 690.458530][T14710] prodikeys 0003:041E:2801.0041: item fetching failed at offset 2/7 [ 690.459347][T14710] prodikeys 0003:041E:2801.0041: hid parse failed [ 690.459457][T14710] prodikeys 0003:041E:2801.0041: probe with driver prodikeys failed with error -22 [ 690.657752][ T5900] usb 9-1: USB disconnect, device number 24 [ 691.063490][T21893] loop9: detected capacity change from 0 to 8 [ 691.064780][T21893] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 691.064813][T21893] loop9: partition table partially beyond EOD, truncated [ 691.064917][T21893] loop9: p1 size 81768186 extends beyond EOD, truncated [ 692.717983][T14710] kernel write not supported for file /sequencer (pid: 14710 comm: kworker/1:7) [ 693.930831][T15282] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 694.106376][T15282] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 694.106408][T15282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.137208][T15282] usb 9-1: config 0 descriptor?? [ 694.336733][T21995] program syz.7.6532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 694.365202][T15282] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 694.567771][T15282] [drm:udl_init] *ERROR* Selecting channel failed [ 694.616278][T15282] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 694.616302][T15282] [drm] Initialized udl on minor 2 [ 694.632701][T15282] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 694.633739][T15282] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 694.667914][T16259] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 694.668374][T15282] usb 9-1: USB disconnect, device number 25 [ 694.669776][T16259] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 694.669941][T16259] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 694.703625][T22008] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6537'. [ 695.642948][T22056] overlay: filesystem on ./file0 not supported as upperdir [ 695.872993][T22065] program syz.8.6562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.254812][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6569'. [ 697.222580][T22110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6583'. [ 697.390891][ T5908] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 697.544430][ T5908] usb 9-1: Using ep0 maxpacket: 32 [ 697.547293][ T5908] usb 9-1: config 0 has an invalid interface number: 47 but max is 0 [ 697.547318][ T5908] usb 9-1: config 0 has no interface number 0 [ 697.547370][ T5908] usb 9-1: config 0 interface 47 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 697.547396][ T5908] usb 9-1: config 0 interface 47 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 697.551300][ T5908] usb 9-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=7b.76 [ 697.551326][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.551354][ T5908] usb 9-1: Product: syz [ 697.551368][ T5908] usb 9-1: Manufacturer: syz [ 697.551381][ T5908] usb 9-1: SerialNumber: syz [ 697.562144][ T5908] usb 9-1: config 0 descriptor?? [ 697.563304][T22106] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 697.563488][T22106] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 697.972700][T22106] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 697.972839][T22106] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 697.979333][T22127] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6590'. [ 698.184368][ T5908] asix 9-1:0.47 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 698.184652][ T5908] asix 9-1:0.47: probe with driver asix failed with error -71 [ 698.197562][ T5908] usb 9-1: USB disconnect, device number 26 [ 698.519320][T22146] smc: net device bond0 applied user defined pnetid SYZ0 [ 698.528548][T22146] smc: net device bond0 erased user defined pnetid SYZ0 [ 698.621137][ T5153] Bluetooth: hci2: command 0x0405 tx timeout [ 699.177900][T22170] input: syz1 as /devices/virtual/input/input42 [ 699.278513][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6613'. [ 699.278542][T22173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6613'. [ 699.661335][ T5900] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 699.714335][T22182] netlink: 'syz.8.6619': attribute type 25 has an invalid length. [ 699.714356][T22182] netlink: 'syz.8.6619': attribute type 8 has an invalid length. [ 699.835507][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 699.838698][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 699.840224][ T5900] usb 4-1: config 7 has an invalid interface number: 192 but max is 0 [ 699.840249][ T5900] usb 4-1: config 7 has no interface number 0 [ 699.840281][ T5900] usb 4-1: config 7 interface 192 altsetting 4 has an invalid endpoint descriptor of length 2, skipping [ 699.840304][ T5900] usb 4-1: config 7 interface 192 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 699.840331][ T5900] usb 4-1: config 7 interface 192 has no altsetting 0 [ 699.841147][ T5900] usb 4-1: language id specifier not provided by device, defaulting to English [ 699.843481][ T5900] usb 4-1: New USB device found, idVendor=12d1, idProduct=bb98, bcdDevice=6f.57 [ 699.843508][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.843527][ T5900] usb 4-1: Product: syz [ 699.843541][ T5900] usb 4-1: Manufacturer: ✱樱삉륌ë³ä–”â„•æ”’ [ 699.843556][ T5900] usb 4-1: SerialNumber: syz [ 700.119495][ T5900] option 4-1:7.192: GSM modem (1-port) converter detected [ 700.131422][ T5900] usb 4-1: USB disconnect, device number 52 [ 700.144291][ T5900] option 4-1:7.192: device disconnected [ 701.047148][T22227] netlink: 312 bytes leftover after parsing attributes in process `syz.9.6637'. [ 701.496434][T22235] program syz.9.6641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.631325][T22311] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 704.872189][T22345] netlink: 'syz.8.6694': attribute type 15 has an invalid length. [ 706.227586][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.284205][T22416] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6726'. [ 707.931843][T22438] CIFS: VFS: Malformed UNC in devname [ 708.347631][ T37] audit: type=1326 audit(1757794347.596:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22419 comm="syz.7.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e95f7eba9 code=0x7ffc0000 [ 708.350235][ T37] audit: type=1326 audit(1757794347.596:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22419 comm="syz.7.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e95f7eba9 code=0x7ffc0000 [ 708.576991][T22464] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.6747'. [ 710.506682][ T37] audit: type=1326 audit(1757794349.756:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22494 comm="syz.9.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7fc00000 [ 710.970905][ T5908] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 711.132946][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.132989][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 711.136021][ T5908] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 711.136048][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.136068][ T5908] usb 4-1: Product: syz [ 711.136081][ T5908] usb 4-1: Manufacturer: syz [ 711.136096][ T5908] usb 4-1: SerialNumber: syz [ 711.191992][ T5908] usb 4-1: config 0 descriptor?? [ 711.197372][ T5908] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 711.224524][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 711.225496][ T5908] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 711.225566][ T5908] usb 4-1: media controller created [ 711.295139][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.317266][T22530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.430858][ T5908] DVB: Unable to find symbol tda10046_attach() [ 711.430873][ T5908] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 711.430886][ T5908] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 711.697830][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6781'. [ 711.839401][ T5908] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 711.855614][ T5908] usb 4-1: USB disconnect, device number 53 [ 712.135134][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6787'. [ 712.135156][T22552] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6787'. [ 712.941060][ T5922] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 713.090860][ T5922] usb 9-1: Using ep0 maxpacket: 8 [ 713.095595][ T5922] usb 9-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 713.095620][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.095639][ T5922] usb 9-1: Product: syz [ 713.095654][ T5922] usb 9-1: Manufacturer: syz [ 713.095668][ T5922] usb 9-1: SerialNumber: syz [ 713.099036][ T5922] usb 9-1: config 0 descriptor?? [ 713.130868][ T5908] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 713.153971][ T5922] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 713.295626][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.295651][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.297646][ T5908] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 713.297727][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 713.297746][ T5908] usb 4-1: SerialNumber: syz [ 713.342721][ T5922] gspca_sn9c2028: read1 error -32 [ 713.350079][ T5922] gspca_sn9c2028: read1 error -32 [ 713.560235][T16259] usb 9-1: USB disconnect, device number 27 [ 713.617363][ T5908] usb 4-1: 0:2 : does not exist [ 713.723823][ T5908] usb 4-1: USB disconnect, device number 54 [ 713.799997][ T5922] kernel write not supported for file /sg0 (pid: 5922 comm: kworker/1:5) [ 714.733343][T22626] netlink: 'syz.7.6822': attribute type 2 has an invalid length. [ 716.992299][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6852'. [ 716.992334][T23077] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6852'. [ 717.065944][ T7057] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.068643][ T7057] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.068682][ T7057] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.068715][ T7057] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.673674][ T5922] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 717.817238][T23100] bond0: option lp_interval: invalid value (0) [ 717.817262][T23100] bond0: option lp_interval: allowed values 1 - 2147483647 [ 717.823039][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 717.848590][ T5922] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 717.848617][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.848637][ T5922] usb 4-1: Product: syz [ 717.848650][ T5922] usb 4-1: Manufacturer: syz [ 717.848664][ T5922] usb 4-1: SerialNumber: syz [ 717.895424][ T5922] usb 4-1: config 0 descriptor?? [ 717.910857][ T5908] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 717.919134][ T5922] gspca_main: sq930x-2.14.0 probing 2770:930c [ 718.065368][ T5908] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 718.065395][ T5908] usb 9-1: config 0 has no interface number 0 [ 718.086315][ T5908] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 718.086609][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.086630][ T5908] usb 9-1: Product: syz [ 718.086643][ T5908] usb 9-1: Manufacturer: syz [ 718.086656][ T5908] usb 9-1: SerialNumber: syz [ 718.155502][ T5908] usb 9-1: config 0 descriptor?? [ 718.373596][ T5908] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 718.398505][ T5908] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 718.399577][ T5908] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 718.399843][ T5908] usb 9-1: media controller created [ 718.488652][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 718.584369][ T5908] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 718.664909][ T5908] usb 9-1: USB disconnect, device number 28 [ 718.756433][ T5922] gspca_sq930x: ucbus_write failed -71 [ 718.837004][T23119] loop6: detected capacity change from 0 to 524287999 [ 718.970952][ T5922] gspca_sq930x: Sensor ov9630 not yet treated [ 718.971054][ T5922] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 718.997540][ T5922] usb 4-1: USB disconnect, device number 55 [ 719.653778][T23140] IPv6: Can't replace route, no match found [ 720.203426][T23156] bond0: option ad_select: unable to set because the bond device is up [ 720.525962][T23167] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3944. macoff=96 [ 720.731574][T23174] netlink: 'syz.8.6899': attribute type 1 has an invalid length. [ 720.731595][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6899'. [ 721.360793][ T1229] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 721.511126][ T1229] usb 10-1: Using ep0 maxpacket: 32 [ 721.513999][ T1229] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 721.514022][ T1229] usb 10-1: config 0 has no interface number 0 [ 721.514068][ T1229] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.514231][ T1229] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.514270][ T1229] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 721.514291][ T1229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.526142][ T1229] usb 10-1: config 0 descriptor?? [ 721.582740][T23204] program syz.8.6913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.883872][T23209] loop7: detected capacity change from 0 to 7 [ 721.922918][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 722.034700][T23211] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 722.130543][T23211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 722.157114][ T1229] uclogic 0003:28BD:0094.0042: pen parameters not found [ 722.157142][ T1229] uclogic 0003:28BD:0094.0042: interface is invalid, ignoring [ 722.364308][T16259] usb 10-1: USB disconnect, device number 18 [ 722.844083][T23229] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.898728][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.898904][ T3758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.626230][T23252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6936'. [ 723.627360][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6936'. [ 723.848695][T23254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.372589][T23279] input: syz1 as /devices/virtual/input/input43 [ 724.633665][T23281] sp0: Synchronizing with TNC [ 724.652984][T23281] sp0: Found TNC [ 724.877412][ T37] audit: type=1326 audit(1757794620.127:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23265 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e95f7eba9 code=0x7fc00000 [ 725.422518][ T1229] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 725.591238][ T1229] usb 9-1: Using ep0 maxpacket: 16 [ 725.593830][ T1229] usb 9-1: config 0 has an invalid interface number: 24 but max is 0 [ 725.593854][ T1229] usb 9-1: config 0 has no interface number 0 [ 725.593901][ T1229] usb 9-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.593926][ T1229] usb 9-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.593963][ T1229] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 725.593986][ T1229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.599565][ T1229] usb 9-1: config 0 descriptor?? [ 726.033154][ T1229] hid (null): unknown global tag 0x39 [ 726.033191][ T1229] hid (null): report_id 0 is invalid [ 726.230841][ T1229] usb 9-1: USB disconnect, device number 29 [ 727.156133][T23338] program syz.3.6978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 728.207195][ T5922] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 728.358619][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 728.361853][ T5922] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 728.361880][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.367517][ T5922] usb 4-1: config 0 descriptor?? [ 728.385567][ T5922] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 729.004742][T23381] input: syz1 as /devices/virtual/input/input44 [ 729.187624][ T5922] gspca_vc032x: reg_w err -71 [ 729.187651][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187661][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187670][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187678][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187686][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187693][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187701][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187709][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187718][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187725][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187734][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187742][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187750][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187757][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187765][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187773][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187782][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187790][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 729.187799][ T5922] gspca_vc032x: Unknown sensor... [ 729.187886][ T5922] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 729.196298][ T5922] usb 4-1: USB disconnect, device number 56 [ 729.455068][T23393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7002'. [ 730.076659][ T37] audit: type=1800 audit(1757794625.339:3685): pid=23416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.7012" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=81622 res=0 errno=0 [ 730.361238][T23427] netlink: 'syz.3.7018': attribute type 10 has an invalid length. [ 730.546759][T23427] team0: Port device netdevsim0 added [ 731.915354][ T5900] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 732.075289][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 732.077648][ T5900] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.077671][ T5900] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 732.077724][ T5900] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 732.077747][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.135919][ T5900] hub 9-1:1.0: bad descriptor, ignoring hub [ 732.135957][ T5900] hub 9-1:1.0: probe with driver hub failed with error -5 [ 732.353519][T23460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.353933][T23460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.396762][T23460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.397193][T23460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.406392][ T5153] Bluetooth: hci4: Unknown advertising packet type: 0x5f [ 732.526074][ T5908] usb 9-1: USB disconnect, device number 30 [ 732.793373][T23498] input: syz0 as /devices/virtual/input/input45 [ 733.072464][T23509] sock: sock_set_timeout: `syz.1.7056' (pid 23509) tries to set negative timeout [ 733.326139][T23517] sctp: [Deprecated]: syz.3.7060 (pid 23517) Use of int in max_burst socket option. [ 733.326139][T23517] Use struct sctp_assoc_value instead [ 733.581898][T23527] input: syz0 as /devices/virtual/input/input46 [ 733.634495][T14710] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 733.646031][ T5908] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 733.703106][T23531] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 733.784417][T14710] usb 9-1: Using ep0 maxpacket: 32 [ 733.786959][T14710] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 733.786983][T14710] usb 9-1: config 0 has no interface number 0 [ 733.787033][T14710] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.787057][T14710] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.787103][T14710] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 733.787126][T14710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.812325][T14710] usb 9-1: config 0 descriptor?? [ 733.814443][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 733.817023][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.817050][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.817071][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 733.817118][ T5908] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 733.817139][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.828341][ T5908] usb 4-1: config 0 descriptor?? [ 734.270561][ T5908] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 734.270598][ T5908] microsoft 0003:045E:07DA.0045: ignoring exceeding usage max [ 734.468382][T14710] input: HID 28bd:0094 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0094.0044/input/input47 [ 734.482845][ T5908] microsoft 0003:045E:07DA.0045: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 734.483032][ T5908] microsoft 0003:045E:07DA.0045: no inputs found [ 734.483046][ T5908] microsoft 0003:045E:07DA.0045: could not initialize ff, continuing anyway [ 734.602129][T14710] uclogic 0003:28BD:0094.0044: input,hidraw1: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.8-1/input1 [ 734.667644][ T5908] usb 9-1: USB disconnect, device number 31 [ 734.687302][T14710] usb 4-1: USB disconnect, device number 57 [ 735.890975][T23593] program syz.1.7095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.989261][T23596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7097'. [ 736.483746][T23607] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7102'. [ 736.927269][T23619] netlink: 228 bytes leftover after parsing attributes in process `syz.7.7107'. [ 736.967139][ T5900] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 737.092887][ T5893] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 737.112953][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 737.115446][ T5900] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 737.115470][ T5900] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 737.115490][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 737.115510][ T5900] usb 4-1: config 1 has no interface number 0 [ 737.115576][ T5900] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.115600][ T5900] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 737.115641][ T5900] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 737.115663][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.188372][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7110'. [ 737.219337][ T5900] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 737.258062][ T5893] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 737.258092][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.291688][ T5893] usb 10-1: config 0 descriptor?? [ 737.327384][ T5893] cp210x 10-1:0.0: cp210x converter detected [ 737.365570][ T5900] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 737.805558][T23632] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7113'. [ 737.805582][T23632] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7113'. [ 737.813763][T14710] usb 4-1: USB disconnect, device number 58 [ 737.816281][T14710] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 737.955732][ T5893] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 737.955786][ T5893] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 737.961397][ T5893] usb 10-1: cp210x converter now attached to ttyUSB0 [ 737.984720][ T5893] usb 10-1: USB disconnect, device number 19 [ 737.999535][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 738.000117][ T5893] cp210x 10-1:0.0: device disconnected [ 738.574250][T23650] netlink: 'syz.8.7120': attribute type 9 has an invalid length. [ 738.822256][T23663] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7127'. [ 739.438087][T23690] netlink: 'syz.9.7139': attribute type 10 has an invalid length. [ 739.438132][T23690] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 739.459013][T23690] team0: Port device netdevsim0 added [ 739.784656][T23702] program syz.9.7143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 740.705747][T24297] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7151'. [ 742.528123][T24368] syz.9.7186 (24368) used greatest stack depth: 16656 bytes left [ 743.039996][ T5893] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 743.192359][ T5893] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 743.192389][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.219032][ T5893] usb 4-1: config 0 descriptor?? [ 743.976531][T24405] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 744.040805][ T5893] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 744.040849][ T5893] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 744.071079][ T5893] asix 4-1:0.0: probe with driver asix failed with error -71 [ 744.077652][ T5893] usb 4-1: USB disconnect, device number 59 [ 744.279291][ T31] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 744.429287][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 744.432744][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.432768][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.435599][ T31] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.435619][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.435629][ T31] usb 9-1: Product: syz [ 744.435636][ T31] usb 9-1: Manufacturer: syz [ 744.435643][ T31] usb 9-1: SerialNumber: syz [ 744.667168][ T31] usb 9-1: 0:2 : does not exist [ 744.677124][ T31] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 744.729136][ T31] usb 9-1: USB disconnect, device number 32 [ 745.047642][ T31] kernel write not supported for file /snd/seq (pid: 31 comm: kworker/1:0) [ 747.172946][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.173021][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.735717][T24487] siw: device registration error -23 [ 748.037645][T24489] veth0_to_team: entered promiscuous mode [ 748.401731][T24496] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.7242'. [ 749.685023][T24526] sock: sock_set_timeout: `syz.7.7255' (pid 24526) tries to set negative timeout [ 751.062159][T24551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7267'. [ 751.480593][T24563] input: syz1 as /devices/virtual/input/input48 [ 751.707520][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7274'. [ 751.707553][T24567] netlink: 'syz.8.7274': attribute type 20 has an invalid length. [ 751.707575][T24567] netlink: 'syz.8.7274': attribute type 21 has an invalid length. [ 752.048321][ T37] audit: type=1326 audit(1757794647.310:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 752.048369][ T37] audit: type=1326 audit(1757794647.310:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 752.079383][ T37] audit: type=1326 audit(1757794647.350:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 752.079434][ T37] audit: type=1326 audit(1757794647.350:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 752.079476][ T37] audit: type=1326 audit(1757794647.350:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 752.079518][ T37] audit: type=1326 audit(1757794647.350:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 752.079569][ T37] audit: type=1326 audit(1757794647.350:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1e958ada9 code=0x7ffc0000 [ 752.095275][ T37] audit: type=1326 audit(1757794647.350:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1e958ada9 code=0x7ffc0000 [ 752.095327][ T37] audit: type=1326 audit(1757794647.350:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1e958ada9 code=0x7ffc0000 [ 752.095370][ T37] audit: type=1326 audit(1757794647.350:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24576 comm="syz.1.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1e958ada9 code=0x7ffc0000 [ 753.118889][T24599] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7287'. [ 754.253042][T24636] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 754.369423][ T31] hid-generic 0005:0B57:0002.0046: item fetching failed at offset 0/1 [ 754.370112][ T31] hid-generic 0005:0B57:0002.0046: probe with driver hid-generic failed with error -22 [ 754.494177][ T5900] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 754.534663][T24644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7307'. [ 754.605180][T24641] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7308'. [ 754.644371][ T5900] usb 9-1: Using ep0 maxpacket: 32 [ 754.646926][ T5900] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 754.646953][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.652260][ T5900] usb 9-1: config 0 descriptor?? [ 754.870423][ T5900] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 754.888319][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 754.889414][ T5900] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 754.889470][ T5900] usb 9-1: media controller created [ 754.922259][T24656] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7313'. [ 754.972041][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.062208][T24660] input: syz1 as /devices/virtual/input/input50 [ 755.083880][ T5900] az6027: usb out operation failed. (-71) [ 755.088810][ T5900] az6027: usb out operation failed. (-71) [ 755.088868][ T5900] stb0899_attach: Driver disabled by Kconfig [ 755.088879][ T5900] az6027: no front-end attached [ 755.088879][ T5900] [ 755.089359][ T5900] az6027: usb out operation failed. (-71) [ 755.089397][ T5900] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 755.092428][ T5900] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input51 [ 755.187313][ T5900] dvb-usb: schedule remote query interval to 400 msecs. [ 755.187355][ T5900] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 755.190685][ T5900] usb 9-1: USB disconnect, device number 33 [ 755.354401][T24662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7316'. [ 755.383207][ T5900] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 755.643834][ T5153] Bluetooth: hci2: command 0x0405 tx timeout [ 756.183422][T24700] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 758.346647][T24765] vlan2: entered allmulticast mode [ 758.363362][T24767] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 758.363418][T24767] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 758.363508][T24767] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 760.818210][T24834] program syz.1.7394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 761.971353][T24869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7411'. [ 762.426786][ T31] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 762.578597][ T31] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 762.578657][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.581812][ T31] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 762.581839][ T31] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 762.581858][ T31] usb 9-1: Manufacturer: syz [ 762.591491][ T31] usb 9-1: config 0 descriptor?? [ 762.730161][ T31] rc_core: IR keymap rc-hauppauge not found [ 762.730183][ T31] Registered IR keymap rc-empty [ 762.731727][ T31] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 762.734746][ T31] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input52 [ 762.923239][ T31] usb 9-1: USB disconnect, device number 34 [ 763.059424][T24911] sp0: Synchronizing with TNC [ 763.066805][T24910] [U] è`` [ 763.862778][T24932] netem: incorrect gi model size [ 763.862818][T24932] netem: change failed [ 766.021367][T24984] input: syz0 as /devices/virtual/input/input54 [ 766.730158][T25013] loop7: detected capacity change from 0 to 524255231 [ 766.817381][T25013] loop7: detected capacity change from 524255231 to 524287912 [ 768.297618][T25060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7494'. [ 768.327558][T25065] input: syz0 as /devices/virtual/input/input55 [ 769.475825][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7520'. [ 769.615439][T25117] ./file0: Can't lookup blockdev [ 770.614129][T25156] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 770.805908][ T5893] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 770.976104][ T5893] usb 9-1: Using ep0 maxpacket: 8 [ 770.989983][ T5893] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 770.990012][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.990030][ T5893] usb 9-1: Product: syz [ 770.990044][ T5893] usb 9-1: Manufacturer: syz [ 770.990057][ T5893] usb 9-1: SerialNumber: syz [ 771.000694][ T5893] usb 9-1: config 0 descriptor?? [ 771.225711][ T5893] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 771.834576][ T5893] usb write operation failed. (-71) [ 771.838390][ T5893] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 771.839103][ T5893] dvbdev: DVB: registering new adapter (Terratec H7) [ 771.839169][ T5893] usb 9-1: media controller created [ 771.839585][ T5893] usb read operation failed. (-71) [ 771.840117][ T5893] usb write operation failed. (-71) [ 771.856420][ T5893] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 771.865703][ T5893] usb 9-1: USB disconnect, device number 35 [ 774.010803][T25244] ipvlan2: entered promiscuous mode [ 774.010874][T25244] ipvlan2: entered allmulticast mode [ 774.010887][T25244] hsr0: entered allmulticast mode [ 774.010899][T25244] hsr_slave_0: entered allmulticast mode [ 774.010921][T25244] hsr_slave_1: entered allmulticast mode [ 774.074727][T25246] [U] [ 774.074863][T25246] [U] )½0 [ 774.075021][T25246] [U] [ 774.075054][T25246] [U] [ 774.075090][T25246] [U] [ 774.075263][T25246] [U] [ 774.075307][T25246] [U] [ 774.075343][T25246] [U] [ 774.075378][T25246] [U] [ 774.075505][T25246] [U] [ 774.075540][T25246] [U] [ 774.075575][T25246] [U] [ 774.076881][T25245] [U] [ 774.253362][ T37] kauditd_printk_skb: 210 callbacks suppressed [ 774.253381][ T37] audit: type=1326 audit(1757794669.532:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25250 comm="syz.9.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 774.253426][ T37] audit: type=1326 audit(1757794669.532:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25250 comm="syz.9.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 774.308197][ T37] audit: type=1326 audit(1757794669.592:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25250 comm="syz.9.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 774.308524][ T37] audit: type=1326 audit(1757794669.592:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25250 comm="syz.9.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 774.308570][ T37] audit: type=1326 audit(1757794669.592:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25250 comm="syz.9.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 774.309886][ T37] audit: type=1326 audit(1757794669.592:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25250 comm="syz.9.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 774.310135][ T37] audit: type=1326 audit(1757794669.592:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25250 comm="syz.9.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 774.310770][ T37] audit: type=1326 audit(1757794669.592:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25250 comm="syz.9.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce34ceba9 code=0x7ffc0000 [ 774.500520][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7585'. [ 776.305313][T25327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7618'. [ 776.378207][T25327] bridge0: entered promiscuous mode [ 776.390695][T25327] batman_adv: batadv0: Adding interface: macvlan2 [ 776.390710][T25327] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.390741][T25327] batman_adv: batadv0: Interface activated: macvlan2 [ 777.772522][T14710] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 777.925081][T14710] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 777.925112][T14710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.931007][T14710] usb 4-1: config 0 descriptor?? [ 777.964671][T25375] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7639'. [ 778.171382][T14710] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 778.372753][T14710] [drm:udl_init] *ERROR* Selecting channel failed [ 778.415862][T14710] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 778.415886][T14710] [drm] Initialized udl on minor 2 [ 778.442066][T14710] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 778.442392][T14710] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 778.444410][ T31] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 778.447391][ T31] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 778.447544][ T31] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 778.494271][T14710] usb 4-1: USB disconnect, device number 60 [ 779.148542][T25415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7659'. [ 779.589349][T25432] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 779.589371][T25432] syzkaller1: owner set to 778 [ 780.523381][T25481] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7688'. [ 780.950450][T25480] cgroup: fork rejected by pids controller in /syz9 [ 781.472771][T25542] netlink: 'syz.3.7700': attribute type 10 has an invalid length. [ 781.676169][T25542] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 782.242299][T25560] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7706'. [ 782.822840][ T5893] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 782.975644][ T5893] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 782.975682][ T5893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.975701][ T5893] usb 10-1: Product: syz [ 782.975714][ T5893] usb 10-1: Manufacturer: syz [ 782.975727][ T5893] usb 10-1: SerialNumber: syz [ 783.032871][ T5893] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 783.101587][ T5900] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 783.160918][T25574] cgroup: fork rejected by pids controller in /syz7 [ 783.787123][T14710] usb 10-1: USB disconnect, device number 20 [ 784.192259][T25864] input: syz1 as /devices/virtual/input/input56 [ 784.434006][ T5900] usb 10-1: Service connection timeout for: 256 [ 784.434029][ T5900] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 784.435214][ T5900] ath9k_htc: Failed to initialize the device [ 784.437365][T14710] usb 10-1: ath9k_htc: USB layer deinitialized [ 785.528585][T25909] team0: No ports can be present during mode change [ 786.248568][T25940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7760'. [ 786.269266][T25941] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.7759'. [ 786.451999][T25948] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 786.452895][T25948] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 786.535140][T25950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.875798][ T37] audit: type=1400 audit(1757794938.162:3914): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=25962 comm="syz.9.7771" name="727" dev="tmpfs" ino=3706 [ 787.024308][T25967] Falling back ldisc for ptm0. [ 788.082862][ T37] audit: type=1326 audit(1757794939.362:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.082987][ T37] audit: type=1326 audit(1757794939.372:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.085884][ T37] audit: type=1326 audit(1757794939.372:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.137317][ T37] audit: type=1326 audit(1757794939.372:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.137372][ T37] audit: type=1326 audit(1757794939.412:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.138686][ T37] audit: type=1326 audit(1757794939.432:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.138734][ T37] audit: type=1326 audit(1757794939.432:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.138775][ T37] audit: type=1326 audit(1757794939.432:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.138813][ T37] audit: type=1326 audit(1757794939.432:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.1.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e95eeba9 code=0x7ffc0000 [ 788.424098][T26010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7792'. [ 788.587109][T15282] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 788.751572][T15282] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 788.751604][T15282] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.777066][T15282] usb 10-1: config 0 descriptor?? [ 788.780535][T15282] cp210x 10-1:0.0: cp210x converter detected [ 789.209844][T15282] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 789.219170][T15282] usb 10-1: cp210x converter now attached to ttyUSB0 [ 789.236989][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7804'. [ 789.420886][T14710] usb 10-1: USB disconnect, device number 21 [ 789.441594][T14710] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 798.843387][T14710] cp210x 10-1:0.0: device disconnected [ 805.668032][T16409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 805.682978][T16409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 805.702331][T16409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 805.703632][T16409] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 805.704495][T16409] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 807.781987][T16409] Bluetooth: hci5: command tx timeout [ 807.977101][ T5153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 808.011409][ T5153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 808.013193][ T5153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 808.015276][ T5153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 808.043262][ T5153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 808.593397][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.593472][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.460049][ T5153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 809.483565][ T5153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 809.494565][ T5153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 809.495708][ T5153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 809.499614][ T5153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 809.731716][ T5153] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 809.763135][ T5153] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 809.773973][ T5153] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 809.785160][ T5153] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 809.785818][ T5153] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 809.856674][T16409] Bluetooth: hci5: command tx timeout [ 810.096418][T16409] Bluetooth: hci6: command tx timeout [ 810.704195][ T5153] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 810.749508][ T5153] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 810.751566][ T5153] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 810.752707][ T5153] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 810.753472][ T5153] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 811.615853][T16409] Bluetooth: hci7: command tx timeout [ 811.855395][T16409] Bluetooth: hci8: command tx timeout [ 811.935467][T16409] Bluetooth: hci5: command tx timeout [ 812.175201][T16409] Bluetooth: hci6: command tx timeout [ 812.815030][T16409] Bluetooth: hci9: command tx timeout [ 813.695947][ T5153] Bluetooth: hci7: command tx timeout [ 813.934444][T16409] Bluetooth: hci8: command tx timeout [ 814.014564][T16409] Bluetooth: hci5: command tx timeout [ 814.264258][T16409] Bluetooth: hci6: command tx timeout [ 814.894050][T16409] Bluetooth: hci9: command tx timeout [ 815.773983][T16409] Bluetooth: hci7: command tx timeout [ 816.013470][T16409] Bluetooth: hci8: command tx timeout [ 816.334736][T16409] Bluetooth: hci6: command tx timeout [ 816.974512][T16409] Bluetooth: hci9: command tx timeout [ 817.854273][T16409] Bluetooth: hci7: command tx timeout [ 818.092441][T16409] Bluetooth: hci8: command tx timeout [ 819.051907][T16409] Bluetooth: hci9: command tx timeout [ 822.104284][T26082] chnl_net:caif_netlink_parms(): no params data found [ 822.132840][T26087] chnl_net:caif_netlink_parms(): no params data found [ 822.165950][T26091] chnl_net:caif_netlink_parms(): no params data found [ 822.450689][T26093] chnl_net:caif_netlink_parms(): no params data found [ 829.058111][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 844.223559][ C0] sched: DL replenish lagged too much [ 865.826937][T26122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 865.855831][T26122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 865.857482][T26122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 865.874281][T26122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 865.875105][T26122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 867.301580][T26122] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 867.329613][T26122] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 867.334296][T26122] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 867.335631][T26122] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 867.336502][T26122] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 867.987480][T26122] Bluetooth: hci1: command tx timeout [ 868.721237][T16409] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 868.756103][T16409] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 868.765113][T16409] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 868.766312][T16409] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 868.784074][T16409] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 869.213405][T16409] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 869.241606][T16409] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 869.243365][T16409] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 869.244657][T16409] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 869.245519][T16409] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 869.426823][T16409] Bluetooth: hci10: command tx timeout [ 869.994350][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.994473][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.066274][T16409] Bluetooth: hci1: command tx timeout [ 870.257940][T26122] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 870.264518][T26122] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 870.266424][T26122] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 870.276433][T26122] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 870.283171][T26122] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 870.866254][T26122] Bluetooth: hci11: command tx timeout [ 871.345841][T26122] Bluetooth: hci12: command tx timeout [ 871.505647][T26122] Bluetooth: hci10: command tx timeout [ 872.145639][T26122] Bluetooth: hci1: command tx timeout [ 872.385321][T26122] Bluetooth: hci13: command tx timeout [ 872.945452][T26122] Bluetooth: hci11: command tx timeout [ 873.424837][T26122] Bluetooth: hci12: command tx timeout [ 873.584674][T26122] Bluetooth: hci10: command tx timeout [ 874.224344][T26122] Bluetooth: hci1: command tx timeout [ 874.464586][T26122] Bluetooth: hci13: command tx timeout [ 875.024117][T26122] Bluetooth: hci11: command tx timeout [ 875.505068][T26122] Bluetooth: hci12: command tx timeout [ 875.663734][T26122] Bluetooth: hci10: command tx timeout [ 876.543314][T26122] Bluetooth: hci13: command tx timeout [ 877.112853][T26122] Bluetooth: hci11: command tx timeout [ 877.582823][T26122] Bluetooth: hci12: command tx timeout [ 878.622135][T26122] Bluetooth: hci13: command tx timeout [ 926.271675][T16409] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 926.308851][T26145] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 926.310552][T26145] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 926.311987][T26145] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 926.313108][T26145] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 927.652162][T26148] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 927.681474][T26148] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 927.683159][T26148] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 927.685328][T26148] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 927.686121][T26148] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 928.364802][T26148] Bluetooth: hci5: command 0x0406 tx timeout [ 930.939438][T26157] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 930.970540][T26157] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 930.975086][T26157] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 930.991197][T26157] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 930.992351][T26157] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 931.416504][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.416579][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.548071][T26160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 931.679985][T26082] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 931.689638][T26087] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 931.699588][T26160] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 931.715772][T26160] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 931.734974][T26160] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 931.746035][T26160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 932.688251][T26164] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 932.736252][T26164] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 932.737878][T26164] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 932.739156][T26164] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 932.740010][T26164] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 933.483875][T26160] Bluetooth: hci6: command 0x0406 tx timeout [ 933.484041][T26160] Bluetooth: hci8: command 0x0406 tx timeout [ 936.355303][T26159] Bluetooth: hci14: command tx timeout [ 936.356327][T26159] Bluetooth: hci15: command tx timeout [ 938.432635][T26145] Bluetooth: hci15: command tx timeout [ 938.432708][T26145] Bluetooth: hci14: command tx timeout [ 939.072176][ T38] INFO: task syz.3.7808:26042 blocked for more than 143 seconds. [ 939.072205][ T38] Not tainted syzkaller #0 [ 939.072215][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.072227][ T38] task:syz.3.7808 state:D stack:25128 pid:26042 tgid:26042 ppid:5847 task_flags:0x400040 flags:0x00004006 [ 939.072279][ T38] Call Trace: [ 939.072286][ T38] [ 939.072299][ T38] __schedule+0x16f3/0x4c20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 939.072354][ T38] ? __lock_acquire+0xab9/0xd20 [ 939.072379][ T38] ? __pfx___schedule+0x10/0x10 [ 939.072420][ T38] ? schedule+0x91/0x360 [ 939.072448][ T38] schedule+0x165/0x360 [ 939.072473][ T38] schedule_timeout+0x9a/0x270 [ 939.072498][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 939.072534][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 939.072559][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.072581][ T38] ? wait_for_completion+0x267/0x5d0 [ 939.072607][ T38] wait_for_completion+0x2bf/0x5d0 [ 939.072646][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 939.072672][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 939.072703][ T38] rcu_barrier+0x463/0x570 [ 939.072734][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 939.072755][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 939.072781][ T38] kvm_put_kvm+0xf8e/0x1670 [ 939.072817][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 939.072842][ T38] kvm_vm_release+0x46/0x50 [ 939.072863][ T38] __fput+0x458/0xa80 [ 939.072895][ T38] task_work_run+0x1d4/0x260 [ 939.072921][ T38] ? __pfx_task_work_run+0x10/0x10 [ 939.072946][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 939.072973][ T38] exit_to_user_mode_loop+0xec/0x110 [ 939.072996][ T38] do_syscall_64+0x2bd/0x3b0 [ 939.073013][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.073037][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.073056][ T38] ? clear_bhb_loop+0x60/0xb0 [ 939.073078][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.073101][ T38] RIP: 0033:0x7fe0bb82eba9 [ 939.073122][ T38] RSP: 002b:00007ffe06cd2f48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 939.073141][ T38] RAX: 0000000000000000 RBX: 00000000000c0bcf RCX: 00007fe0bb82eba9 [ 939.073153][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 939.073165][ T38] RBP: 00007fe0bba77da0 R08: 0000000000000001 R09: 0000000406cd323f [ 939.073177][ T38] R10: 0000001b30820000 R11: 0000000000000246 R12: 00007fe0bba75fac [ 939.073190][ T38] R13: 00007fe0bba75fa0 R14: ffffffffffffffff R15: 00007ffe06cd3060 [ 939.073223][ T38] [ 939.073231][ T38] INFO: task syz.7.7814:26062 blocked for more than 143 seconds. [ 939.073244][ T38] Not tainted syzkaller #0 [ 939.073252][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.073262][ T38] task:syz.7.7814 state:D stack:25128 pid:26062 tgid:26062 ppid:14920 task_flags:0x400040 flags:0x00004006 [ 939.073306][ T38] Call Trace: [ 939.073312][ T38] [ 939.073324][ T38] __schedule+0x16f3/0x4c20 [ 939.073356][ T38] ? sched_clock+0x3f/0x60 [ 939.073378][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 939.073410][ T38] ? __pfx___schedule+0x10/0x10 [ 939.073459][ T38] rt_mutex_schedule+0x77/0xf0 [ 939.073478][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 939.073514][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 939.073540][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 939.073563][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 939.073585][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 939.073619][ T38] ? rcu_barrier+0x4c/0x570 [ 939.073645][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 939.073670][ T38] ? rcu_barrier+0x4c/0x570 [ 939.073686][ T38] mutex_lock_nested+0x16a/0x1d0 [ 939.073706][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 939.073732][ T38] rcu_barrier+0x4c/0x570 [ 939.073768][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 939.073788][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 939.073817][ T38] kvm_put_kvm+0xf8e/0x1670 [ 939.073847][ T38] ? __pfx_[ 939.073847][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 939.073871][ T38] kvm_vm_release+0x46/0x50 [ 939.073892][ T38] __fput+0x458/0xa80 [ 939.073922][ T38] task_work_run+0x1d4/0x260 [ 939.073945][ T38] ? __pfx_task_work_run+0x10/0x10 [ 939.073970][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 939.073997][ T38] exit_to_user_mode_loop+0xec/0x110 [ 939.074021][ T38] do_syscall_64+0x2bd/0x3b0 [ 939.074037][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.074061][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.074080][ T38] ? clear_bhb_loop+0x60/0xb0 [ 939.074102][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.074120][ T38] RIP: 0033:0x7f8e95f7eba9 [ 939.074134][ T38] RSP: 002b:00007ffda10bdc98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 939.074153][ T38] RAX: 0000000000000000 RBX: 00000000000c12af RCX: 00007f8e95f7eba9 [ 939.074166][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 939.074177][ T38] RBP: 00007f8e961c7da0 R08: 0000000000000001 R09: 00000004a10bdf8f [ 939.074190][ T38] R10: 0000001b2f320000 R11: 0000000000000246 R12: 00007f8e961c5fac [ 939.074202][ T38] R13: 00007f8e961c5fa0 R14: ffffffffffffffff R15: 00007ffda10bddb0 [ 939.074234][ T38] [ 939.074241][ T38] INFO: task syz.8.7819:26072 blocked for more than 143 seconds. [ 939.074254][ T38] Not tainted syzkaller #0 [ 939.074263][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.074271][ T38] task:syz.8.7819 state:D stack:24520 pid:26072 tgid:26072 ppid:15689 task_flags:0x400040 flags:0x00004004 [ 939.074312][ T38] Call Trace: [ 939.074319][ T38] [ 939.074331][ T38] __schedule+0x16f3/0x4c20 [ 939.074381][ T38] ? __pfx___schedule+0x10/0x10 [ 939.074425][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 939.074453][ T38] rt_mutex_schedule+0x77/0xf0 [ 939.074471][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 939.074492][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 939.074532][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 939.074556][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 939.074578][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 939.074611][ T38] ? rcu_barrier+0x4c/0x570 [ 939.074637][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 939.074662][ T38] ? rcu_barrier+0x4c/0x570 [ 939.074679][ T38] mutex_lock_nested+0x16a/0x1d0 [ 939.074698][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 939.074724][ T38] rcu_barrier+0x4c/0x570 [ 939.074754][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 939.074773][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 939.074798][ T38] kvm_put_kvm+0xf8e/0x1670 [ 939.074834][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 939.074857][ T38] kvm_vm_release+0x46/0x50 [ 939.074878][ T38] __fput+0x458/0xa80 [ 939.074909][ T38] task_work_run+0x1d4/0x260 [ 939.074930][ T38] ? __pfx_task_work_run+0x10/0x10 [ 939.074956][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 939.074983][ T38] exit_to_user_mode_loop+0xec/0x110 [ 939.075007][ T38] do_syscall_64+0x2bd/0x3b0 [ 939.075023][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.075047][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.075065][ T38] ? clear_bhb_loop+0x60/0xb0 [ 939.075087][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.075105][ T38] RIP: 0033:0x7ff05b4ceba9 [ 939.075120][ T38] RSP: 002b:00007ffc1d7eebe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 939.075138][ T38] RAX: 0000000000000000 RBX: 00000000000c14a6 RCX: 00007ff05b4ceba9 [ 939.075150][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 939.075161][ T38] RBP: 00007ff05b717da0 R08: 0000000000000001 R09: 000000041d7eeedf [ 939.075174][ T38] R10: 0000001b2f320000 R11: 0000000000000246 R12: 00007ff05b715fac [ 939.075187][ T38] R13: 00007ff05b715fa0 R14: ffffffffffffffff R15: 00007ffc1d7eed00 [ 939.075219][ T38] [ 939.075253][ T38] [ 939.075253][ T38] Showing all locks held in the system: [ 939.075262][ T38] 2 locks held by ksoftirqd/0/15: [ 939.075274][ T38] 6 locks held by ktimers/0/16: [ 939.075285][ T38] 2 locks held by rcuc/0/20: [ 939.075294][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 939.075342][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 939.075389][ T38] 1 lock held by khungtaskd/38: [ 939.075398][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 939.075462][ T38] 5 locks held by kworker/u8:10/3758: [ 939.075472][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.075519][ T38] #1: ffffc9000e377bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.075577][ T38] #2: ffffffff8ecc6680 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 939.075624][ T38] #3: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 939.075667][ T38] #4: ffff88805af597b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 939.075712][ T38] 5 locks held by kworker/u9:1/5153: [ 939.075722][ T38] #0: ffff888031ae0138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.075768][ T38] #1: ffffc900102c7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.075819][ T38] #2: ffff888071370e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 939.075863][ T38] #3: ffff8880713700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 939.075910][ T38] #4: ffffffff8ee3b058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 939.075960][ T38] 2 locks held by getty/5596: [ 939.075970][ T38] #0: ffff88823bf280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 939.076019][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 939.076066][ T38] 3 locks held by kworker/0:3/5893: [ 939.076076][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.076121][ T38] #1: ffffc90004dc7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.076166][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 939.076209][ T38] 4 locks held by kworker/0:4/5900: [ 939.076219][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.076265][ T38] #1: ffffc90004e37bc0 ((work_completion)(&(&gc->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.076310][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 939.076353][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 939.076399][ T38] 3 locks held by kworker/u8:12/8995: [ 939.076409][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.076454][ T38] #1: ffffc9000df37bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.076498][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 939.076541][ T38] 3 locks held by kworker/u8:20/13471: [ 939.076551][ T38] #0: ffff88814d1e7138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.076596][ T38] #1: ffffc900041e7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.076641][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 939.076685][ T38] 2 locks held by kworker/u8:24/13476: [ 939.076699][ T38] 4 locks held by kworker/u9:0/16409: [ 939.076709][ T38] #0: ffff88802f29b138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.076754][ T38] #1: ffffc900050f7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.076799][ T38] #2: ffff888027174e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 939.076849][ T38] #3: ffff8880271740a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 939.076898][ T38] 1 lock held by syz.3.7808/26042: [ 939.076908][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 939.076950][ T38] 1 lock held by syz.7.7814/26062: [ 939.076960][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 939.077002][ T38] 1 lock held by syz.8.7819/26072: [ 939.077012][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 939.077053][ T38] 1 lock held by syz.1.7820/26073: [ 939.077063][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 939.077104][ T38] 1 lock held by syz.9.7821/26077: [ 939.077114][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 939.077156][ T38] 2 locks held by kworker/0:9/26080: [ 939.077167][ T38] 4 locks held by kworker/0:10/26089: [ 939.077183][ T38] #0: ffff8880493a0d38 ((wq_completion)wg-crypt-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.077234][ T38] #1: ffffc900043b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.077294][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 939.077338][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 939.077384][ T38] 1 lock held by syz-executor/26091: [ 939.077394][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 939.077441][ T38] 1 lock held by syz-executor/26095: [ 939.077452][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 939.077500][ T38] 4 locks held by kworker/0:12/26117: [ 939.077511][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.077557][ T38] #1: ffffc90004a77bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.077602][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 939.077647][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 939.077692][ T38] 1 lock held by syz-executor/26143: [ 939.077703][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 939.077746][ T38] 1 lock held by syz-executor/26147: [ 939.077756][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 939.077798][ T38] 4 locks held by kworker/u9:4/26148: [ 939.077815][ T38] #0: ffff8880600ff938 ((wq_completion)hci7#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.077864][ T38] #1: ffffc9000cf87bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.077910][ T38] #2: ffff888044d5c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 939.077957][ T38] #3: ffffffff8ee3b058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 939.078003][ T38] 1 lock held by syz-executor/26153: [ 939.078014][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 939.078056][ T38] 6 locks held by kworker/u9:5/26154: [ 939.078066][ T38] #0: ffff88805c546938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.078110][ T38] #1: ffffc9000cf57bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.078156][ T38] #2: ffff888035cc4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 939.078198][ T38] #3: ffff888035cc40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 939.078245][ T38] #4: ffffffff8ee3b058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 939.078292][ T38] #5: ffff88803944d358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 939.078345][ T38] 1 lock held by syz-executor/26156: [ 939.078356][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 939.078398][ T38] 4 locks held by kworker/u9:6/26157: [ 939.078408][ T38] #0: ffff88802cfa8938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.078457][ T38] #1: ffffc9000cee7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.078503][ T38] #2: ffff8880255640a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 939.078549][ T38] #3: ffffffff8ee3b058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 939.078594][ T38] 1 lock held by syz-executor/26163: [ 939.078604][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 939.078646][ T38] 4 locks held by kworker/u9:9/26164: [ 939.078656][ T38] #0: ffff888058089138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 939.078710][ T38] #1: ffffc90003d57bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 939.078755][ T38] #2: ffff88807a6600a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 939.078802][ T38] #3: ffffffff8ee3b058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 939.078854][ T38] [ 939.078859][ T38] ============================================= [ 939.078859][ T38] [ 939.078873][ T38] NMI backtrace for cpu 1 [ 939.078897][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 939.078944][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 939.078970][ T38] Call Trace: [ 939.078985][ T38] [ 939.079001][ T38] dump_stack_lvl+0x189/0x250 [ 939.079068][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 939.079129][ T38] ? __pfx__printk+0x10/0x10 [ 939.079206][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 939.079266][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 939.079330][ T38] ? __pfx__printk+0x10/0x10 [ 939.079388][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 939.079448][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 939.079511][ T38] watchdog+0xf93/0xfe0 [ 939.079570][ T38] ? watchdog+0x1de/0xfe0 [ 939.079598][ T38] kthread+0x70e/0x8a0 [ 939.079627][ T38] ? __pfx_watchdog+0x10/0x10 [ 939.079649][ T38] ? __pfx_kthread+0x10/0x10 [ 939.079679][ T38] ? __pfx_kthread+0x10/0x10 [ 939.079705][ T38] ret_from_fork+0x439/0x7d0 [ 939.079731][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 939.079760][ T38] ? __switch_to_asm+0x39/0x70 [ 939.079776][ T38] ? __switch_to_asm+0x33/0x70 [ 939.079791][ T38] ? __pfx_kthread+0x10/0x10 [ 939.079823][ T38] ret_from_fork_asm+0x1a/0x30 [ 939.079856][ T38] [ 939.079864][ T38] Sending NMI from CPU 1 to CPUs 0: [ 939.079893][ C0] NMI backtrace for cpu 0 [ 939.079906][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 939.079925][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 939.079934][ C0] RIP: 0010:validate_chain+0x1c/0x2140 [ 939.079956][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 81 ec e0 00 00 00 49 89 cf 65 48 8b 05 94 e6 59 10 <48> 89 84 24 d8 00 00 00 8b 46 20 89 c1 81 e1 00 80 04 00 81 f9 00 [ 939.079969][ C0] RSP: 0018:ffffc900001566d0 EFLAGS: 00000082 [ 939.079983][ C0] RAX: d83fbb1b81249c00 RBX: 0000000000000006 RCX: 6403c2859224007d [ 939.079995][ C0] RDX: 0000000000000000 RSI: ffff88801ae86550 RDI: ffff88801ae85940 [ 939.080006][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 939.080017][ C0] R10: ffffc90000156a38 R11: ffffffff81aaf310 R12: 000000000f5e34b3 [ 939.080029][ C0] R13: ffff88801ae86460 R14: ffff88801ae86550 R15: 6403c2859224007d [ 939.080041][ C0] FS: 0000000000000000(0000) GS:ffff8881268bd000(0000) knlGS:0000000000000000 [ 939.080054][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.080066][ C0] CR2: 00007f39bb59ed00 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 939.080081][ C0] Call Trace: [ 939.080087][ C0] [ 939.080097][ C0] ? do_raw_spin_lock+0x121/0x290 [ 939.080116][ C0] ? __lock_acquire+0xab9/0xd20 [ 939.080137][ C0] __lock_acquire+0xab9/0xd20 [ 939.080158][ C0] ? unwind_next_frame+0xa5/0x2390 [ 939.080176][ C0] lock_acquire+0x120/0x360 [ 939.080194][ C0] ? unwind_next_frame+0xa5/0x2390 [ 939.080216][ C0] ? unwind_next_frame+0xa5/0x2390 [ 939.080235][ C0] ? handle_softirqs+0x22f/0x710 [ 939.080252][ C0] ? unwind_next_frame+0xa5/0x2390 [ 939.080270][ C0] unwind_next_frame+0xc2/0x2390 [ 939.080288][ C0] ? unwind_next_frame+0xa5/0x2390 [ 939.080310][ C0] ? unwind_next_frame+0xa5/0x2390 [ 939.080329][ C0] ? net_rx_action+0x707/0xe00 [ 939.080350][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 939.080367][ C0] arch_stack_walk+0x11c/0x150 [ 939.080389][ C0] ? handle_softirqs+0x22f/0x710 [ 939.080408][ C0] stack_trace_save+0x9c/0xe0 [ 939.080424][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 939.080438][ C0] ? do_raw_spin_lock+0x121/0x290 [ 939.080459][ C0] kasan_save_track+0x3e/0x80 [ 939.080476][ C0] ? kasan_save_track+0x3e/0x80 [ 939.080491][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 939.080507][ C0] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 939.080526][ C0] ? kmalloc_reserve+0xbd/0x290 [ 939.080545][ C0] ? __alloc_skb+0x142/0x2d0 [ 939.080567][ C0] ? synproxy_send_client_synack+0x16c/0xe20 [ 939.080588][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 939.080603][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 939.080617][ C0] ? nft_do_chain+0x409/0x1920 [ 939.080631][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 939.080645][ C0] ? nf_hook_slow+0xc2/0x220 [ 939.080664][ C0] ? NF_HOOK+0x206/0x3a0 [ 939.080681][ C0] ? NF_HOOK+0x30c/0x3a0 [ 939.080698][ C0] ? __netif_receive_skb+0x143/0x380 [ 939.080714][ C0] ? process_backlog+0x31e/0x900 [ 939.080731][ C0] ? __napi_poll+0xb3/0x540 [ 939.080746][ C0] ? net_rx_action+0x707/0xe00 [ 939.080763][ C0] ? handle_softirqs+0x22f/0x710 [ 939.080795][ C0] ? kmalloc_reserve+0xbd/0x290 [ 939.080815][ C0] __kasan_slab_alloc+0x6c/0x80 [ 939.080832][ C0] ? kmalloc_reserve+0xbd/0x290 [ 939.080850][ C0] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 939.080872][ C0] kmalloc_reserve+0xbd/0x290 [ 939.080893][ C0] __alloc_skb+0x142/0x2d0 [ 939.080913][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 939.080938][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 939.080957][ C0] ? nft_log_eval+0x650/0xab0 [ 939.080975][ C0] ? synproxy_pernet+0x45/0x270 [ 939.080993][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 939.081011][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 939.081029][ C0] ? nf_ip_checksum+0x13c/0x510 [ 939.081045][ C0] nft_synproxy_do_eval+0x345/0x570 [ 939.081064][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 939.081079][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 939.081103][ C0] nft_do_chain+0x409/0x1920 [ 939.081124][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 939.081151][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 939.081172][ C0] nft_do_chain_inet+0x25d/0x340 [ 939.081187][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 939.081202][ C0] ? __lock_acquire+0xab9/0xd20 [ 939.081224][ C0] ? NF_HOOK+0x9a/0x3a0 [ 939.081242][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 939.081258][ C0] nf_hook_slow+0xc2/0x220 [ 939.081279][ C0] NF_HOOK+0x206/0x3a0 [ 939.081297][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 939.081316][ C0] ? NF_HOOK+0x9a/0x3a0 [ 939.081335][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 939.081351][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 939.081372][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 939.081391][ C0] ? skb_dst+0x4f/0xd0 [ 939.081409][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 939.081429][ C0] NF_HOOK+0x30c/0x3a0 [ 939.081448][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 939.081465][ C0] ? NF_HOOK+0x9a/0x3a0 [ 939.081483][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 939.081502][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 939.081525][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 939.081542][ C0] __netif_receive_skb+0x143/0x380 [ 939.081564][ C0] ? rt_spin_unlock+0x65/0x80 [ 939.081583][ C0] ? process_backlog+0x27b/0x900 [ 939.081600][ C0] process_backlog+0x31e/0x900 [ 939.081626][ C0] __napi_poll+0xb3/0x540 [ 939.081644][ C0] net_rx_action+0x707/0xe00 [ 939.081670][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 939.081703][ C0] handle_softirqs+0x22f/0x710 [ 939.081724][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 939.081745][ C0] run_ktimerd+0xcf/0x190 [ 939.081764][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 939.081783][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 939.081800][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 939.081818][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 939.081835][ C0] smpboot_thread_fn+0x53f/0xa60 [ 939.081852][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 939.081873][ C0] kthread+0x70e/0x8a0 [ 939.081893][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 939.081910][ C0] ? __pfx_kthread+0x10/0x10 [ 939.081932][ C0] ? __pfx_kthread+0x10/0x10 [ 939.081951][ C0] ret_from_fork+0x439/0x7d0 [ 939.081969][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 939.081989][ C0] ? __switch_to_asm+0x39/0x70 [ 939.082003][ C0] ? __switch_to_asm+0x33/0x70 [ 939.082016][ C0] ? __pfx_kthread+0x10/0x10 [ 939.082036][ C0] ret_from_fork_asm+0x1a/0x30 [ 939.082057][ C0] [ 939.511563][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 939.511584][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 939.511606][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 939.511618][ T38] Call Trace: [ 939.511626][ T38] [ 939.511635][ T38] dump_stack_lvl+0x99/0x250 [ 939.511666][ T38] ? __asan_memcpy+0x40/0x70 [ 939.511687][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 939.511712][ T38] ? __pfx__printk+0x10/0x10 [ 939.511745][ T38] vpanic+0x281/0x750 [ 939.511772][ T38] ? __pfx_vpanic+0x10/0x10 [ 939.511801][ T38] ? preempt_schedule+0xae/0xc0 [ 939.511829][ T38] ? preempt_schedule_common+0x83/0xd0 [ 939.511859][ T38] panic+0xb9/0xc0 [ 939.511883][ T38] ? __pfx_panic+0x10/0x10 [ 939.511909][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 939.511936][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 939.511962][ T38] watchdog+0xfd2/0xfe0 [ 939.511990][ T38] ? watchdog+0x1de/0xfe0 [ 939.512018][ T38] kthread+0x70e/0x8a0 [ 939.512048][ T38] ? __pfx_watchdog+0x10/0x10 [ 939.512069][ T38] ? __pfx_kthread+0x10/0x10 [ 939.512099][ T38] ? __pfx_kthread+0x10/0x10 [ 939.512125][ T38] ret_from_fork+0x439/0x7d0 [ 939.512151][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 939.512180][ T38] ? __switch_to_asm+0x39/0x70 [ 939.512196][ T38] ? __switch_to_asm+0x33/0x70 [ 939.512212][ T38] ? __pfx_kthread+0x10/0x10 [ 939.512239][ T38] ret_from_fork_asm+0x1a/0x30 [ 939.512272][ T38] [ 939.512503][ T38] Kernel Offset: disabled