last executing test programs: 7m24.849655041s ago: executing program 32 (id=437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x60, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ed4a945437"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x60}}, 0x0) 6m52.399419408s ago: executing program 33 (id=574): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 6m49.404686605s ago: executing program 34 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 6m44.900704694s ago: executing program 35 (id=592): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000380)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'bond_slave_1\x00', 0x200}) 6m24.349210324s ago: executing program 2 (id=610): sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x2}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 6m23.904343063s ago: executing program 2 (id=611): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x1, 0x400000}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) 6m23.531809112s ago: executing program 2 (id=612): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x5237, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 6m22.486897883s ago: executing program 2 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000680)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000084000040"]) 6m22.104675532s ago: executing program 2 (id=614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000140)=""/126, 0x7e}], 0x2}}], 0x2, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="9e685760794f93d5148a96de6f79285dad5de4da19e0a4d207b64f033a3f27c70bc955fd751f", 0x26}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18}, 0x0) 6m21.875430765s ago: executing program 2 (id=615): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x340b, &(0x7f0000000480)={0x0, 0x6cff, 0x1000, 0x0, 0x1002, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 6m6.338085678s ago: executing program 36 (id=615): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x340b, &(0x7f0000000480)={0x0, 0x6cff, 0x1000, 0x0, 0x1002, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3m17.222489765s ago: executing program 9 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r3, 0x1, 0x3fffffc, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0) 3m17.039492397s ago: executing program 9 (id=757): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x40000000}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4) 3m16.891056738s ago: executing program 9 (id=759): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="4ea440fa5c50fafe2711ea55e48e78f7d570cf2a18352817e89c3fb82297", 0x1e}, {&(0x7f0000001740)="5c9d", 0x2}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x20004020) recvmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/140, 0x8c}], 0x1}, 0xd081}], 0x1, 0x2061, 0x0) 3m16.072843912s ago: executing program 9 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x272) 3m15.934051448s ago: executing program 9 (id=769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x2000, 0x0, 0x24, 0xeffffdff, 0x0, [{0x0, 0x3, 0xfe, '\x00', 0xff}, {}, {}, {0x0, 0x1}, {0x3, 0x7, 0x9, '\x00', 0x6}, {}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x23, 0x0, '\x00', 0x95}, {0x8, 0xfa}, {0x0, 0x1}, {0x0, 0x0, 0xfc, '\x00', 0x5}, {0x0, 0x1}, {0x0, 0x0, 0xfc}, {0x3}, {}, {0xfd}, {0x1, 0x0, 0x4}, {0x0, 0x10, 0xc}, {0x4, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x3}, {0x0, 0x0, 0x9}]}}) 3m15.639837984s ago: executing program 9 (id=773): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xb0000018}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000004}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) 3m15.443978327s ago: executing program 37 (id=773): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xb0000018}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000004}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) 3m3.811521693s ago: executing program 5 (id=866): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="15d9", 0x2}], 0x1}}], 0x1, 0x2000c801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 3m3.692088447s ago: executing program 5 (id=867): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = syz_io_uring_setup(0x1df, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 3m3.519346676s ago: executing program 5 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400010400000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400010020010000000000000000000000000001140006000700000007"], 0x40}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 3m3.200500109s ago: executing program 5 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 3m3.123526498s ago: executing program 5 (id=874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @broadcast}]}}}}}}}}, 0x0) 3m2.819483073s ago: executing program 5 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f59004"]) 3m2.700369232s ago: executing program 38 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f59004"]) 2m55.995666987s ago: executing program 6 (id=945): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r2}) 2m55.817162352s ago: executing program 6 (id=946): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ff9, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000600)=0xbc, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a954", 0x28, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) 2m55.618931601s ago: executing program 6 (id=947): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 2m55.522599789s ago: executing program 6 (id=948): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001100)='./file0/../file0/../file0\x00', &(0x7f00000010c0)='./file0/file0\x00', 0x0, 0x1a1904e, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m55.263594227s ago: executing program 6 (id=950): r0 = openat$smackfs_relabel_self(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_labels_list(r0, &(0x7f0000000100)={[{'@.-&#^\')%+'}]}, 0xc) r1 = gettid() capset(&(0x7f0000000140)={0x20080522, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4, 0x5}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/current\x00') write$smackfs_labels_list(r2, 0x0, 0x0) 2m53.184815239s ago: executing program 6 (id=979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m52.984046164s ago: executing program 39 (id=979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 39.592046678s ago: executing program 7 (id=2468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r1}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 39.223579658s ago: executing program 7 (id=2471): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 36.126750582s ago: executing program 7 (id=2491): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r1 = epoll_create(0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = dup3(r0, r1, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004980)={0x2020}, 0x2020) 36.004052622s ago: executing program 7 (id=2492): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0/../file0\x00') 35.734830777s ago: executing program 7 (id=2494): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x23bb, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280)=0x181, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) 35.259959812s ago: executing program 7 (id=2499): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.891262235s ago: executing program 40 (id=2499): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.990010151s ago: executing program 0 (id=2711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x84, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f0000000080)=0xb0) 6.74990401s ago: executing program 0 (id=2717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb653, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="002207000000ab34f5ac1d95"], 0x0}, 0x0) 6.511214611s ago: executing program 3 (id=2721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 6.190138427s ago: executing program 3 (id=2726): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000002080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r2, 0x1000, 0x1004000}) 5.97807046s ago: executing program 3 (id=2729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 5.791076612s ago: executing program 3 (id=2731): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0x1, 0x1}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0xaa07) 5.635327766s ago: executing program 4 (id=2733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f00000005c0)="c2c10b270d21c75ca6ebfb5b23be", 0xe}, {&(0x7f0000000280)='s', 0x1}], 0x3) 4.811612849s ago: executing program 0 (id=2734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000080000000000000510", @ANYRES32], 0x48) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4) 3.722277496s ago: executing program 1 (id=2741): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 3.594349667s ago: executing program 1 (id=2743): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x37, 0x0, 0x1, @batadv={{0xb}, {0xe, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_PROTO_DOWN={0x5}]}, 0x4c}}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x1) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 3.509300962s ago: executing program 8 (id=2744): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) 2.710456502s ago: executing program 3 (id=2745): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.579127484s ago: executing program 8 (id=2746): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r1, 0x0) r2 = dup3(r1, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) 2.418359756s ago: executing program 8 (id=2747): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x0, 0x1, 0x3}}, 0x50) removexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='security.apparmor\x00') syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000ec0)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x27, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.225755727s ago: executing program 8 (id=2748): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.959036489s ago: executing program 8 (id=2749): r0 = epoll_create(0xc9) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "25fa63"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.424774973s ago: executing program 0 (id=2750): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0xfffffffe, 0x10001, 0x0, 0x1, 0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 1.40759233s ago: executing program 4 (id=2751): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000cb00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x945f4a821577fb5d}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="eb6b07fc1566c3434fae362ff8c046c938a9e0b502f065554bcdf98ab0e4e46ad731388d1c3d7526a29e5efe4e0b2c98162b26291a10e26e672e40326fdff461ff0127fb4176f3ecb40e6ff86dc305bf5c4d352ed9801f1fc3625dae7e5e8718263b04fbc18f377a519afa502a62d263af38ec7abdfb7c190eb331266bc3cb4fc56a5ca723650b42696bcb78b0f7974135145fe5f47ff92a18a0224d7201f0493048b230a1e885aefefc1aea023cc65c148aaf05f109d16def05fd741059992114e733fa50669a71a6433698a4b7bd47225d74212f6c0893e82ce9418187d5e9f8b5ea926595a7a4403a8f1bf23d420f71071851f259629d2c4b280f5bfcfd856ed399269e9b2cfb63a66be2b514ceaf1f6f03ce95358da6f48a195c60ae994e0e5a1de8ef6671a2f9522ac0f58e34b8ffd7d09dfd088a078c275caf45131849fb6302bc086fe805f0e36139cd9228a0a00c4bb6fb7d2f6a2b7c96eda079e5c8c3e4fccb697a0103eb07aad54ab26b2ad7b24604806abdc86f972944493962633bb8765f0d7112ba3f272a7ebea332c09e1392effeac0ee8bcc3058b1130b37f5a42cad0e2b02bbc0932a80c31cc92f28679ca40ebd61cbf500f62deb93517a3c6d419e3b95b26660e887cc96f85e5c3d599bebaed0b856b04c1f71bb8aac8f4d6905a8861405a763c22024a318f61c05301da7147a86dfe9754811a6589cb8206632c8ee6604e991a7bc3976c4d62ae168f617bbfae9559c2fb52dc27c6a861bfae433b02419989c4180bb98185db32ad1b1521ff41a2f8b5f8e54cfe5fb11ee2f1ad67fe062cc2481ab7860243e9633bb0533005ccb74fb6b8070dc0dc6f130ba809611cbec07f1861ac8faee6421d71a499febccfd04dd1e5925bb92f1c425b0f406242f5906066cd96775076d1798f61e2916ff0df79e8805a9a5db20531c2c50ed366f298c2f72cbc734f16f00fcc8f71a45102d0ef1e66e0266ab9e4b82e8a748ccf23516d5a4b608d408c99c6dcb24ed6de3674341a3fafe88c3ad4ab2e3141e220f84deed7d03aa8124fecfd0836754f085a6b72175e6f754c22d9920805327b5acc576cfbb23f83572ce5e00db6691d98b8cd3d9f17efd4f0066e77964a8ab2e15a1f3c9df993f793e40dcabf33d072a80bd482b6ae5a8c41566fd3e898ae7bb6a6e5e2334413d78a406f2326fb439fc160a4590d702a138300c95837d5d7f1cc32c81bf6219abd228e8b8f830f769e96aa65b40a32be0c3e483551788e8c89652e71ca9ffca687e9ede71b1a2cad3d6accfd1c87c27ddc8a69bfccdd921eea0058f5d05c4ab9272c8552a53e0d7c0a51955cc33f8d195ced34deb3f3c95bda1e5306bcf6c83c2bd9d6e3bc6b748ff4f68debc1058390a9c6a2efd47f52125b48f1f0b45b45bd6d8bbffb72bec121408f2ee109b2dc5b4bd8c5ce4640d30758ff341774a5bf6ba041de155f0cd3451d52768ca77c5e90f8b96fd0abb426992378be1edcc61ce05f59d5c94311550577bd67c524fd94144ba15bd9e45b1abc31b3028110a4b9f98b1ca317c2d5c20af52424a57d37b45f796156c3758752892a000ffabed5d1079660e5afdfe79850979f628b8b1749fec283cbf04b3ec64b79df30342acd15eb3f911a7be36d8daf8bcb072726c38449a4e79a0bca0dc793ab44978e46373e497f1f74cdfb7d30c323b7b8a8ac88635879049c995e4e476e98c911147525ec1dc8432f5250578cc718a9efa0d7a18823f55bf5183eccabd7d1ea87ed528e9bfae020981c7f3561e3824b286ad934b6df1b2090f1bd38cd95873227f1d8356e50aa62c8d49bd6b177585acf2435db86e6d65a269743ea805f1541a3e4e7f2dcebd1845235ac5e02fd7859edf2391b75046d992e80f875523725700a559df4373d279b8e59e21ad069c48c1e75996f132e45adf5361fc7083e64c27b91a02f7638b7a54636d02bf06f22e2cd4d99d5c4a5f89cce5c4529724b32f1bf9e2985aa4092a79096af7e0e39f384b3b2ead927a22d9601ee637b1b096632b0e95a6bd65cd3e556bd32c55167540ce8f09cb66151cc80e8cc04d055218f557fd39fcd22217b08902b1c6ec4e605432fc61fa7e3f85b117881cadee3162c471bb93fd447100de24311336b7ae8419de8a474140c78854ae064f911544ce3db41f8c723eede0ca173362fcbb4d8e61d8eeb31664fca3ddf407cc864318c96ab608b1afe17b1bfac3de302b8797556a22c64ea6a8386b2737427b5fe705e45694aa14e7ed9e3902d94a03fb99792c6545214087a508215ed69d59ab5222868f9a3931a58dab47023c25442f20d2690db4f230dfec06ef12675f2eaf6c514e8e001aa13b5b524ffcd66126e9a2ee90899b7e39bbd99f6e2ee8074f1c93a40ecf606c456a3d2b3bed0adc3c42585102d8bd72e200fcb50bd29a8cc44844f7b676406a6c56dbef8b1b22fc8b49d21ecc1f1e10beae9cce4a446f8db69e3b93ec5367759933493238a758c5bee588e6fe1346e427cc41debf8a7ee0d1ffbfe262dd82c2edcb35e8c97f917dbe229d477039b84ed802b7c67e2a93ad284763a4da1f73204101d83180d6d3190d3542c4a36864c382ca3220c0db5c57cb0ae904a5fdd8f7ef3866464a64a90f35d16e2f2aa6ed423d6045ef503201e52d90c4e1fc4ee452b4a76cafbe5dec204ab4c2d7a83381dd96ea13eb00f97bb063ec252226734bf3616eaea91f3445c2150edf43e6ed6d33ac689ba23bd2d4e5f87c0d2545a13ef55d7d2fbc1917147628fc132ffcd0b6b9f336ad11760b307cd8bcc64ead3a81c775d974782f6046078f735f4715e35b2a07b8a12b795800f74f126e853de80900a90952a5e8b35dca85a781dadc379e86132bbd7c0ba8b64efd70a61f5a1921dc9ae5321f0d04e6520d37162533215c9c8e53e052b0c80c61cab374b64cd836f23bba34cf77073d45740495d4090d1be51abf315df2986eefc6fb76b5891513f8c0c74b42fef50c7f8e72a97d1e847820493fffeeaae87af8905b162c5cdec679b47c4e36b9676574d1e8de4353d53d977919a4107da255a8a69ddd8c426e3c438d78652fe5c4c7abebfb738a8c49399aaa099709d05686b1120c04c3aa8b87822b99f6c4a5052ce8d191f5399a8ac27f7cf285510affb46e218b1ea9bf9709f86f80d1f413b230849c098f2f4c523cb2a761d0638a96bf64a6fbd49dd525fdfc65631ae1184fc927d0f2010f1ed95632bc82a8c0d4d0caacd7295b80aa3c93d3f05046e9691674f28155d1b8f8179c03ed979a3de1a791baaa522eccab839bc8f35a336b7dd3b487abacd230c56af8e5a0d8888f03d694f3e3bfa872276082a51863f17a055b6e2dd55fe274d8d0093bc50295facd7de5de6f3e650c4aa14765eb8f18b95e3c66291b2da29666151dae7c6c32cc614d148dbc359da862c6f58ea9415b24f740cb62edf95270e4a721cf1dbf9935fb322c92b6c4f02988654128c3005fd17e8955bc82802b3f6a87cdc4f2718956f6b6ea4a799683e1887eed7726e9a233bef71fff12e462c6dd4164a0d2737be2ed9f62a460c12ba59298559e11460aff97d058d473863fbb8b3269aa64f10556c3fd25b1a3ee1756a04dceb3bfec3ec1d7e946f398fa59485150f6971aad61ccf4a9835daf47947ee379df11ed620fc99e27af113df99944a006ad93819485acc37edb03aa1a320018ce6b91ff037e714261a11aab658a74a9c5f6a5d0d5effd12cb9a5b9e7b7f4c9dfabca410f711a30fb3cff3057563983da74dc5b9cbd1d9716aae20ec8fd3ff7e9d175958b13bb9d39e929882421996b57ebc104deaaf5dcd6630826e64aeeb85f89fe2865902983b07b1ab0550321ebe00859a58c2eefab9e971e617a8bc881e30f1823130a832be6c2bbc2347e9d7b6c6165690cafa1fe604afb69ce060a5251984f21947a361b7b54b5eafe44bb7fedc22ffa7b84feb461e816ae08859da3702b485345bc5aa5be0d5f7539917b1e172cd4ba6454d49b19c47788eb79408df6b496627ec91857f352e2f572e76e0d1203c8673cdc59a505d9c561d02976e7aae031306ac85adfc8ca6ac05bb1940e97f011824a7c443421d0e8843f6f634b14da9e6f627bf491387be1bb1703467542a0e9a3bbb35035a916e6a4534420f1bc960312ffd374fbd35e249ddbec0a95a6782b821e1404f90689276483ac440f73823d4843f54a4a92b8415d250d977bb9f3464f52c53c00610d610e97a6c8ccff5667119717c4d3710129d13ca3f12ad2bdf7dfe740d097fd2e9d7f1c0f05caebc44cf97fbeff160a1779dbfef61454c46e892a1b27dae93d447f223901dc41d4004f6000789be649bdb13fb1bb7b46204c7a6f6bda2cc51463b4f9dd77aa030cef9e4254878fc40c18b5a5ce17e715a440c2be9a3cf8f14e1d99ee082d4198926be5dcc8ebd6d6aa9320fec4cce1290d44868040bf3499b224e4a9a2d01c98ea822b1046369ac2c9900a7729d4f5785b7e4b48467e4b3e2a6e55d6355ff17e1333bfc0c4b74d33af9b29c63de78f205c96cf1d5b5a9face88499c640fcee967b60971bba05292a131833ddbd2af6e06fdddf4aa643c67704387228141ad67726833555c06df6383d613eb964d029a240dcb103cfb5afda7d5410f2cf7b9bdafb485383f2a3de0a8126b7c2a0b57a5db5adc82aa3749bd57a123e5f26edaf74dec397efbb44aa8a6557f5d5255becbc4a2da6db8eef233a7e671f2cca793c5f5538708e7aef061288cf26e9787bf316657159aaf2f686f00f088284abd96a39aef3625738d057744503079833c4ac2e5ac2666060c69f38bfc1422883626f52555698cb3d9b65f3a7129a1d3a1dee34c4be3d8f651ad2b3874018f6f16a62eb2df2e0ca125ed53e910c64c8bda46c0382db9bfb9c1e5c530c75fdfaefb3ce39008dc639e5b53968765344f478d40a85878de2e298fe394afbfc9c734d20760bbb0d4d42c69bd4fff2e6f4892b5a8f19181027f00911a2a04e230591fd85c2e63943efb0d744b08339a2f2ecded910415227cb7197f69ce593a88b3a6ee4c5eedff2f60b1feebf2d8dbb70646cbd6868682512eab4f7450c98c6668c7cee27ec12b23f3ef353c3953ca7395bcfbba30f1c4d1858cf4a870340264f42f87e45dfdab16bd869f10d900888e4807ac02e2ea8371e7d7e13ba95b8c52541990f06812ea92266d8fcade9f67100f3e4fea8909fd0c604a6696179565c0c7895e520fb2463019217f4dfdecc3de5e70ed97f072cf0b07a060b50245b2afb6df5fe3cff6f67b764e773f407e72d73c1c6d1dddc7e860e06f81a4fec8d5bfce6c5956df508b39d281832c103da0673c5474299d289065693c011dafe6d48bc29e91dd9a34dd7d0eba85644523b78e943798ca61e7c08614a0a76f09807d26932e9cc708ba2ea438576c021b0fdc786496565c534ccbf3c9c4ee565c36600e4857e43358fec9e7bd357aa30826dd67fca5da59067c9c4b60ef3a22d41ea4c9908d66b969f576fd00afbad55082af7e8f0f773dbfb8ca3db0f4d04c787a347e80a6d29350df13f27d9c2299d1fedae9a4b9c85cc50aed485b056fc372b50159dca6d205dfec90f5e40f3ad7ce9487c4584f388fb856d7e0df3889de5eee74ec191c078132dfa8e48e94a5e7f962763c22e31a22d97c1d6c8182b87abb4c92956f6243523323217524ba25d0df6fe27783704b3ca32b446430243eae64843f3fc652faa2ec7c46ad068f1964f6b0bd1107ace56215b7fe8d36d0904a951c73872d9f748c6a6ab4341460044df67eb4cc6e107f352f71984ccdb83b00b1dac9a3bd36adc7080421902033823e457aa5a8910df0e5c4da0138f84e4fa4a7fa573687d501f8ccaabb8758d53a32667e4dd3878e2e6ace9c623e068019892e8b0b53257d4bd61bbed82affafd0d32544214ab54c8d6929e320429dbd1073636e5533b1639c372df03ee137804199273d38a706d8611307a4ce1682e8b7ab0bc0f98be3e023967d636d85777e4962eed76cbcf3c51eea6bb65190cc6fc04f3385b4da45c3e37235c41e33ca114d870a126c91c3af5cdc6c203f81bf9b503d763530a9f0d1c24aeee96b5d85af722c9b28529da0b3eafb15ab875e5d77442baab96063e06790b5591c3364dbae0fe0c917e3bfa38abd425452db9493a614f306dc2e8338b7775e95baab6ade50e45b4e6232060821504aef98798acc214122151a06684732db9b1aa2470fe37db284d86f78fb6e20af63d09d20c037f04443b2d3a4d0f214452724ed40aa85729224890b036ff97bc9af12e7b2a1ffde063d1985426992998fd667e3cadd781860189a30d651e98bcca2b3ba3b9fd061a325b7dbf6d9247d81cb088e91ceb64dce083dab4f888b5b2de34f37912e8a47bab1dd1345ed63d6687fb98fa8cf3cef09a23e0e6f69841e20b88d231c694929e4c04c1b7c4948a5b53cc8fd262390ea631ed20df988f939518a91b6ca3a861f8dc10b10147ba9a8352dcabe9005e3036f3d8e20e593470a8a6a217678b4f78428bb3d5bad5311f6ecf07575c8005ec986e462f953b1f373f41a89da1edb9f1cff58df7d920858f2d43cb736358019d59647e2d23b1e052c94f143093f8de073b857915bf6a69ad2ad19de94c145303c4e3ab277a002f1715974a8bd3a0e62c08343ff52aeb0a69732c1a33477d2d5720c4bb7bf3de367938f54b0691cb32bb7bd1802f1775e36eb74994d7f4194650a94099405af8e5752e850677abca85edfc6fc93390e74f5c73149a2276290de5b1ae0060e5e0b39e14f8252d9d2468c4d626d10934210dd20454ea8bc0443e98ac30bfd74b28311b9b8bcd18703b90c48957eefdb89ed792ccfdeee0f4c41b8df726c9877dd0840c882a0d42c5f5c75b342a2b342fb3b572a7cc03e3fba42c6451b22dd99ed70f26ec35920a50777abbf06fd2993934493c5bee303e527948b11399a71320b42bc43fde9e84e8493075e0130f143362b7595d1ee1d767e0b2be064716f850baa315824f16cba3964fb552f5516e10ad8ca68dfef2f4428186f471bc1a63158a6e206d2226a2ccf340426942165be177526432e99f707690020de4c95778bfcd57ed64f55266e4f7984b94e56ed38e6a192ac7a1d4da815321ae1045ff796a8f7f0bf76442154c9526ed49834655867f0a4c9b7a7761db74a5eec660cade6f52b9c99c30908e44be4a59cb08ae7e44de6f0a374b14b6355ca06ca50c32a3f540548a7000f168f3dc68973915f8fee6530eea9384c308ceb8c4b8f6580b122ac8f4987e2f9e34a98f37cbb05573e49d33616b79b9c4656c8a8621ecdd8fb232c9c8df54050a9ce2fbda418d244aa95adb4eae161c89878446796669b8f61e6e67d2600000364962b658f54ab91cd0cd81d912e48aa7734ba882e8249925e6aa30e5cce8359c93e2fc7256eaffb4f3839b1a9b6439958afacd9199a6e86f3a0cc2c91bb4461a326854983e925dde17e3297b82bf01df9e7b38fa5d2f400de9d4bd822fc1112ca87b677f29e24f3a2a6575f9f238119889937aed47b104fe3934bdf84241e680082d0d3021bf478fe25452c07112300884a78b0ef49a644808772a539e8f3ec3bf81ba499cdc6e40c38a459dc79e0b22679100c21a453975dede9af122e3b8b1602d367c9adec7623f33379bf9ec68ba5f79e828e4fc6f2dbf0ccf4efcf747d135a0fd4e1079dbdb47510a5b94dc43e6fe60fd88d26757acc779dee7d7d8245e4f7d4ca2ae9195ed26d123da7a2d03e331ed8f1ba9a77793bba8dca8c6477695f8ebc6647257f6325f1bf36c41bb1873ef0c2bad86ef9112d4a8ae5f597902bd7dd32a4371adb6fca39dc41c273a951e82131b139e86a9552ed2863efed2d6cc8234caed4d5380af1d9761640f2eb3066f2a015cf1e6fcb350b5d49566155fb4647dd3bd578ac85fdfb187222a2ce157f6992f1a14ea17c04fb0ab4024676497ec7b40d6a3d90938d67391541a3f64184513a26859e2dbe8ab530951942ce1206ffdb8ed0b9d8c8ffc5de9e68d9c5a1a8cd4d22543faa9a5d291ed01382a7cf7ff1dc341f3ecaaee729d7cd986480bfe0791406af31dab7fd088a594cc95cdacd9dbc994c1e76055921b87c97a5b9b2c2d07410498069ca718efc5bb58a9cb388dc1255bcbff1b5b30ef0948227f0bdb028272e85050e7a96428e3d2c146c5b555eae76c3aab3a3a6db0f75d7676038a42c44c91ac2aa4d46a0b70251c2770de80396b105d58a37a22b0ac9823897949182bb6b211e67866594d7c2e4c45ca46e96c9c5746f09af036ebcf6ff99fabe9ae320e6d633ffa026ca27aa2d6714613bf4b316ead71c92fa3792b2eff2646031325759e05e3e6f20c94f5c0152c6c0c93ac93cc4ba91d064d204cfc89a6c46bb4eaeb009f0f9cc6c4b9562b27741c63479a04f4e48a8a8bf924525f146932009e8a2cb8db5835b3659cf01a69c40bcb7fc1dbdd46625d6f0915266c33d7b8353ed99de4d9fb5c3f342c0ca9ac330dfc596383dce35f69dcdb508abfa8c1642bb175e909573b2cdb68003e063f6951407cffd182612c2b2ffa6f8378af052dc4165373b9d4925702b44b97ce369ad452078e66fa224217caa58ee6ea52200aa2cc105415b8d4eb5e22ff5872df991e7235de8f290a0819d7814dbabde964b8ba5314192346d8026f98e54b29e9fc5d29bcd976801b1a3c9da031bea2dd6c8fc926da5fd0f456c7f70129b72a00d6f2c837de12c3f1859304896ef805eec933db36940984b2475c6dbb22b5b212e85a29e887a7438a676f7b774bdc805708cb13fd77b518dffc4bda3ba56577c679001e7cdf61d091e4900b26f6f10b59cedd50de212a35c0224a08c21367ba9814f82833f6c6a982658b589d1d129945074d9ad02c88c7d78c043b6dc851c2e925b8634975b7ddf501299f78e4d9c44e4b6859d2bd6ac59f0cabfcb89f03500d7cb1069fdfe734a134e8e91d3c15122ad2c701594893fe01bfe930b96b4a3e931e589863f16b2014d3301c4e2b487bf2eb7521f4a7c6e07af2b17eff641f7b04ae1a0ea43b8054ce81136f1f8f43c1a0ed869fed086b22abbfeea6a81057dbc94e4a100292ebbc2897d0eaa8adc2dab47a1f0af4ee9023aa69ecec52069c454ab90f1c47d3eb50744c3893598b92af52bdd2095cf7f50b82856adc1ef2eeb2f19e1c8a5f2ee6628aa82bee5367d3659d0c7c1443f27d66b478d79d9f1cb70638c5da70fd71ee75dfdd2898280e10f0615d80ac121ff666b91e2c4f12f3493a0d626b9534d5216d526118fd60c028662b1b2657ed752d92362bb48f3b69fe43895916e71aae9ab127fd7cb512de0c3727c5b2efe03dc4c030fd741c1629e6c24538ce2165dd25765e6a9bc480442af300f749090e4cfac35b41af981c8c3187e5442cf121c529270ca521aced83dcce803272306117f554e62583c8bbb65e795c74408d2e54038e65c38994358efaa9fbd4f0172156a8a39013f6f3ea0120a274d2ec54e983189b2cc3416d390cc385aa0273633161f7322977bbd079a4b57cabafe68ee3d2781025be230a0edc94cb1e81684365befedab952a02c180b92d43b8fd5b4f256b56fec477d610b9821a6cf6ca1110507f5a0bd3b4be4badec022d9bc866933ba6281cd289aa39bef74a142d875680de9ee00699d3c54a3c537eee02c3aa2364f46bf77c736da862c75571166aaf50945e35ad371053ec97998a44b1fede6e6a7e64626bb56113a28c32bc993d39e4eeea5fc0362a6098dd2071318b95a927fc52af0c485e0277cf65180d34d9dffae8b8bc934b8a2d94cf1d3ea4b32391110484c9689ce0fa004d1c8894b24769ad6c153044d4ef343ff7fcd8dc8536c53088d77bd77c02f441f327c128de9f4e1fcb063928dde4141d25988c833c411189eb2b5c5b33ce7da60bc665569314fd4974ef523cf1465cb1a65b75d1a69916ad5507a26718a3c48d9dae6464e5b9acaa3837a5fd9d833cf67a7de6b5fdf88e9e5f1576aedf5cfa4704c8d13dfabc5e26029c6e4073805b89689a166405f63d497f34c79a8958b90bb772ad5fb5d407e94b4b5fa374f64d6f63d33ad1decd7a766f7bbc238fc0a2e4cd96afa01cccb0005dd0d9f65530b69048462d08e352907746f5cf75e1c6006c9b538332f3f104808ac58611b79141c917a39dadae935b8ad493cb2c6b16eb4b75828fbb0fe21194fd4097d94feeb25caea930ec21946db78fb38b16fe81373872a72ce85125d7ba00350d2fe26584cd150ba6257badb15a726d87038af8a2fc4af2808faa5f4733093069ceb3705a291bf35c3caa9bf7d289add5ae659a89a5a140fb2320b80b2c17ef30a3a687d2749fa7d5a193baf844dbb1ea6221a456ddb2b2c886ed343ba4adc2381e1a8c6484925c838c2c63aa9b5d839eca32a4213952a55c0e7a8a2c89295ce06cb48c1a39b4d4b6665d11232d44923a141b4b06f6f18e30319befedcaf5c9878fe83e0c50c0dfc44b68835ffbb675fdbc8fff6a6587825a5a9039e36f1626fc6949a7004cc01a4196069e147974e6bd02852549a4906d24b4184df3ffe91a41024ccef372e50fd741a9ee408c1351b3039eb0f264e8d165da195b894ca1df73b1415f1a0458f3e8b87e0a4dc40cbf41457df4dd54222d18daff4b98aa132ef0d29da89d720989a733b33b705bc7d2a906afad809745a4880e84044953f7c9e2aa9d99da81928a2d7069f5e893f383b6acb6aac9c59c60c0b440d1cac34b14dac84645b18c763f45f4d7fece26c00a2d7bec8832704b07b3269129ad1f8aafc090008f55c794c886f2a781278180cbc409008919b7e82949ac1009bb5b54ea9fc7a758317174d8343e3a2a8e4ce06c7856ece2851129920dcef7c6b9528814c6613ceb78c2ffade65050dd7352a3edb185b1f2a2b7bf7d79f76a0e776fb4d48a31f8c294bd87cb3ef38192c4637b954dc0c2ffa3b11994aff40e69fe9e5ced58083445414aab05ea492ca9d2c0326145558751cbb567ec26dca9728ad89982c108d6cfbde507cfdab77e5ad67d3dde5b6be978f403048934a715c4d06d9c5fabe8e5620a2f407690b9a2e1cbc91772e0e13bc4d24d28cf627e9641aff8c8f0b399024b67ded142864c52023c3d20c22855b0f9320c8ef6cee0542f21c75739c8e0ec36b15e63a7445dc288fc36cd505e263a9a3507189ffbb7aaa2bd4f60c17f6a80e2fda95fbddadd57184e970d4f5cc17bfe25f4343d5f117265cf3c0f188a92e34167276dbd2e3a22a25206e626def9055e24db785bbc60da7d56acaf944a7601dc3c679c65d3c7188d3bcc01fef8a57cffc9863bc80ccae36f6dba2cf325360edf406490ddd018875e65a5044aa9e7f7aebad8ccf5608a730018e8f73eca8f0c879e8bdfa9722d6acdfc0fcf4685562e20645e422c73f2f5724abf977ee0a82adcfbe912dbdaee855650e3cf4f634a99e7c6e300a640aa052c2e7d988b34223055d92b310177d078e415aca81a46219def9f9a0bfa2d8597faac4f6c21a4b60e4e7b4b86262a722bd47ae99a0030789e7cddf702fba5c8620", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.396394941s ago: executing program 1 (id=2752): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) 1.193834546s ago: executing program 0 (id=2753): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="31ea0f0000000000000003446d2cb0ef4995ab8931a2116cca6fb1", 0x1b}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/26, 0x1a}], 0x1}, 0x40000120) recvfrom$phonet(r1, &(0x7f0000000680)=""/43, 0x2b, 0x40000160, 0x0, 0x0) 1.167619252s ago: executing program 1 (id=2754): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) 1.119619791s ago: executing program 8 (id=2755): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r2}, {r4}], 0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.10606631s ago: executing program 4 (id=2756): r0 = io_uring_setup(0xdac, &(0x7f0000000180)) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 803.833949ms ago: executing program 1 (id=2757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) 803.520985ms ago: executing program 0 (id=2758): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$igmp6(0xa, 0x3, 0x2) 555.634055ms ago: executing program 4 (id=2759): r0 = openat$kvm(0x0, 0x0, 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 480.213309ms ago: executing program 1 (id=2760): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0003000000000102030003030405ffff"}}}]}, 0x48}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000ec0)) 453.192617ms ago: executing program 4 (id=2761): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)) tkill(r0, 0x7) 49.249804ms ago: executing program 3 (id=2762): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, r3, r3) r4 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r4}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x24008881) 0s ago: executing program 4 (id=2763): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) kernel console output (not intermixed with test programs): nt 0x5 has invalid wMaxPacketSize 0 [ 480.903598][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.914325][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.932011][ T5923] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.953561][ T5923] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 480.963922][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.975637][T10993] netlink: 'syz.7.1798': attribute type 9 has an invalid length. [ 480.984940][T10993] netlink: 134660 bytes leftover after parsing attributes in process `syz.7.1798'. [ 481.054338][ T29] audit: type=1400 audit(1730840948.767:64): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=10994 comm="syz.7.1799" name="file0" dev="tmpfs" ino=1327 [ 481.105423][ T972] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 481.193893][ T5923] usb 2-1: usb_control_msg returned -32 [ 481.208725][ T5923] usbtmc 2-1:16.0: can't read capabilities [ 481.315534][ T972] usb 5-1: no permanent extended address found, random address set [ 481.553008][ T972] usb 5-1: USB disconnect, device number 13 [ 481.932535][T11024] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 482.134804][ T9] usb 2-1: USB disconnect, device number 20 [ 482.239954][T11033] block nbd4: shutting down sockets [ 482.407916][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 482.408296][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 482.876783][ T5888] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 483.059252][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.071159][ T5888] usb 4-1: config 0 has no interfaces? [ 483.077439][ T5888] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 483.087119][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.098356][ T5888] usb 4-1: config 0 descriptor?? [ 483.329602][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.340164][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.374660][T11048] netlink: 'syz.3.1818': attribute type 6 has an invalid length. [ 483.399068][ T5888] usb 4-1: USB disconnect, device number 20 [ 483.782650][T11091] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1833'. [ 484.304233][T11111] binder: 11107:11111 ioctl c0306201 200001c0 returned -14 [ 484.639697][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 484.818391][ T5888] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 484.896807][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 484.976746][ T5888] usb 8-1: Using ep0 maxpacket: 32 [ 484.993084][ T5888] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 485.006325][ T5888] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 485.023434][ T5888] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 485.032758][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.048605][ T5888] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 485.059588][ T5888] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 485.078917][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 485.086718][ T5888] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 485.100923][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 485.116462][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.117855][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.126307][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.154417][ T5888] usb 8-1: config 0 descriptor?? [ 485.183490][T11127] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 485.197077][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.359949][T11143] netlink: 'syz.3.1858': attribute type 4 has an invalid length. [ 485.409308][ T5888] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 485.419277][T11143] netlink: 'syz.3.1858': attribute type 4 has an invalid length. [ 485.594323][ T9] usb 2-1: USB disconnect, device number 21 [ 485.825079][ T5923] usb 8-1: USB disconnect, device number 20 [ 485.852690][ T5923] usblp0: removed [ 486.226689][ T5888] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 486.387956][ T5888] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 486.417624][ T5888] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 486.420616][T11171] overlayfs: unescaped trailing colons in lowerdir mount option. [ 486.439746][ T5888] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.454291][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.513611][T11157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 486.531287][ T5888] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.922388][ T9] usb 4-1: USB disconnect, device number 21 [ 487.136945][ T5923] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 487.286852][ T5923] usb 9-1: Using ep0 maxpacket: 16 [ 487.305990][ T5923] usb 9-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 487.326927][ T5923] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.347081][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 487.387995][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 487.400337][ T5923] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.422472][ T5923] usb 9-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 487.436683][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.445795][ T5923] usb 9-1: Product: syz [ 487.465012][ T5923] usb 9-1: Manufacturer: syz [ 487.472167][ T5923] usb 9-1: SerialNumber: syz [ 487.508042][ T5923] usb 9-1: config 0 descriptor?? [ 487.516350][ T5923] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 487.988760][ T5885] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 488.150225][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 488.176758][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 488.203175][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 488.227362][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 488.245880][ T5885] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.272236][ T5885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 488.284311][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.331830][ T5923] input: gspca_pac7302 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input37 [ 488.344852][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.351846][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.358783][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.365702][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.372607][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.379856][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.386900][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.393854][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.400781][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.407861][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.414811][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.421733][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.428662][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.435564][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.442477][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.449437][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.456339][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.463299][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.470254][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.477189][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.484097][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.491299][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.498341][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.505262][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.512201][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.519153][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.526052][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.532955][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.540861][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.547814][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.554718][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.561626][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.568615][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.575534][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.579773][ T5885] usb 2-1: GET_CAPABILITIES returned 0 [ 488.582471][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.595828][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.603062][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.609978][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.616973][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.623901][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.630825][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.637758][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.644697][ C0] gspca_pac7302 9-1:0.0: URB error -71, resubmitting [ 488.646683][ T5888] usb 9-1: USB disconnect, device number 18 [ 488.651390][ C0] gspca_main: Resubmit URB failed with error -19 [ 488.678337][ T5885] usbtmc 2-1:16.0: can't read capabilities [ 488.839732][ T5885] usb 2-1: USB disconnect, device number 22 [ 489.559834][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1906'. [ 489.886717][ T5885] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 490.056838][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.087735][T11280] netlink: 'syz.4.1914': attribute type 10 has an invalid length. [ 490.094441][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.136304][ T5885] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.152925][T11280] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 490.164561][T10703] bond0: (slave dummy0): interface is now down [ 490.174842][ T5885] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.187168][T10703] bond0: (slave dummy0): interface is now down [ 490.210111][ T1137] bond0: (slave dummy0): interface is now down [ 490.221604][ T1137] bond0: now running without any active interface! [ 490.228869][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.250445][T11283] netlink: 'syz.3.1916': attribute type 9 has an invalid length. [ 490.253686][ T5885] usb 9-1: config 0 descriptor?? [ 490.280510][T11283] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1916'. [ 490.603691][T11292] team0: entered promiscuous mode [ 490.620750][T11292] team_slave_0: entered promiscuous mode [ 490.631033][T11292] team_slave_1: entered promiscuous mode [ 490.651917][T11292] team0: left promiscuous mode [ 490.671461][T11292] team_slave_0: left promiscuous mode [ 490.701617][ T5885] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 490.723112][T11292] team_slave_1: left promiscuous mode [ 490.748077][ T5885] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 490.782328][T11298] netlink: 'syz.7.1924': attribute type 9 has an invalid length. [ 490.806300][T11298] netlink: 134660 bytes leftover after parsing attributes in process `syz.7.1924'. [ 490.828030][T11299] block nbd3: NBD_DISCONNECT [ 490.853780][T11299] block nbd3: Send disconnect failed -107 [ 490.885232][T11295] block nbd3: Disconnected due to user request. [ 490.897064][T11295] block nbd3: shutting down sockets [ 491.046134][T11307] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1927'. [ 491.529287][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.024270][ T5885] usb 9-1: USB disconnect, device number 19 [ 492.056884][ T5923] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 492.146001][T11349] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 492.228571][ T5923] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 492.253891][ T5923] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 492.305012][ T5923] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.322748][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 492.331028][ T5923] usb 5-1: SerialNumber: syz [ 492.343015][T11339] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 492.568729][ T5923] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 492.616678][ T5923] usb 5-1: USB disconnect, device number 14 [ 492.958148][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 493.118497][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 493.126799][ T5885] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 493.128814][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 493.156929][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.195696][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 493.207241][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.215286][ T9] usb 8-1: Product: syz [ 493.216699][ T5888] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 493.222806][ T9] usb 8-1: Manufacturer: syz [ 493.232293][ T9] usb 8-1: SerialNumber: syz [ 493.250139][ T9] hub 8-1:1.0: bad descriptor, ignoring hub [ 493.258747][ T9] hub 8-1:1.0: probe with driver hub failed with error -5 [ 493.307662][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 493.321369][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.349154][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.359998][ T5885] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 493.370755][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.388345][ T5888] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 493.403600][ T5885] usb 4-1: config 0 descriptor?? [ 493.416781][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.442052][ T5888] usb 2-1: config 0 descriptor?? [ 493.452846][ T9] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 493.624710][T11379] loop7: detected capacity change from 0 to 16384 [ 493.637868][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 493.644003][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 493.660749][ T5885] usb 4-1: USB disconnect, device number 22 [ 493.807607][T11381] loop7: detected capacity change from 16384 to 0 [ 493.809709][ T969] usb 8-1: USB disconnect, device number 21 [ 493.825229][ T969] usblp0: removed [ 493.887462][ T5888] ath6kl: Failed to read usb control message: -71 [ 493.900423][ T5888] ath6kl: Unable to read the bmi data from the device: -71 [ 493.914131][ T5888] ath6kl: Unable to recv target info: -71 [ 493.935234][ T5888] ath6kl: Failed to init ath6kl core: -71 [ 493.942335][ T5888] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 493.991050][ T5888] usb 2-1: USB disconnect, device number 23 [ 494.124168][T11390] random: crng reseeded on system resumption [ 494.622148][T11401] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1962'. [ 495.207141][T11420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.441962][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1974'. [ 496.006682][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 496.007029][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 496.561260][T11461] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 496.987749][ T5923] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 497.162833][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 497.197430][ T5923] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 497.231078][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.274933][ T5923] usb 5-1: config 0 descriptor?? [ 497.325000][ T5923] gspca_main: sunplus-2.14.0 probing 041e:400b [ 498.133473][ T5923] gspca_sunplus: reg_r err -32 [ 498.139636][ T5923] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 498.168272][ T5923] usb 5-1: USB disconnect, device number 15 [ 498.836927][ T5923] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 498.986119][ T29] audit: type=1326 audit(1730840966.697:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11528 comm="syz.4.2016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f978097e719 code=0x0 [ 499.044503][ T5923] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.075162][ T5923] usb 9-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 499.094545][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.129831][ T5923] usb 9-1: config 0 descriptor?? [ 499.150484][ T5923] option 9-1:0.0: GSM modem (1-port) converter detected [ 499.304594][ T29] audit: type=1326 audit(1730840967.017:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.7.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463577e719 code=0x7fc00000 [ 499.641568][ T5923] usb 9-1: USB disconnect, device number 20 [ 499.658640][ T5923] option 9-1:0.0: device disconnected [ 499.774532][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 500.067470][ T29] audit: type=1326 audit(1730840967.777:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.7.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f463577e719 code=0x7fc00000 [ 500.088941][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.136837][ T29] audit: type=1326 audit(1730840967.777:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.7.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463577e719 code=0x7fc00000 [ 500.176641][ T5935] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 500.210769][ T29] audit: type=1326 audit(1730840967.777:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.7.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463577e719 code=0x7fc00000 [ 500.287528][ T29] audit: type=1326 audit(1730840967.777:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.7.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463577e719 code=0x7fc00000 [ 500.351763][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.356625][ T29] audit: type=1326 audit(1730840967.777:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.7.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463577e719 code=0x7fc00000 [ 500.384437][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.384496][ T5935] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 500.384564][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.418083][T11554] block nbd7: shutting down sockets [ 500.440853][ T5935] usb 5-1: config 0 descriptor?? [ 500.446881][ T29] audit: type=1326 audit(1730840967.777:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.7.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463577e719 code=0x7fc00000 [ 500.468365][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.496566][ T29] audit: type=1326 audit(1730840967.777:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.7.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463577e719 code=0x7fc00000 [ 500.561970][T11559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.731157][T11566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 500.974992][ T5935] hid (null): global environment stack underflow [ 500.986215][ T5935] uclogic 0003:5543:0522.002F: global environment stack underflow [ 501.006924][ T5935] uclogic 0003:5543:0522.002F: item 0 1 1 11 parsing failed [ 501.025082][ T5935] uclogic 0003:5543:0522.002F: parse failed [ 501.042876][ T5935] uclogic 0003:5543:0522.002F: probe with driver uclogic failed with error -22 [ 501.076660][ T969] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 501.116789][ T5888] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 501.200474][ T5923] usb 5-1: USB disconnect, device number 16 [ 501.226649][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 501.233582][ T969] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 501.246740][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.273595][ T5888] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.288929][ T969] usb 2-1: config 0 descriptor?? [ 501.321190][ T5888] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.337523][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.366910][ T5888] usb 9-1: Product: syz [ 501.371214][ T5888] usb 9-1: Manufacturer: syz [ 501.375890][ T5888] usb 9-1: SerialNumber: syz [ 501.420049][ T5888] hub 9-1:1.0: bad descriptor, ignoring hub [ 501.445758][ T5888] hub 9-1:1.0: probe with driver hub failed with error -5 [ 501.527485][ T969] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 501.600115][T11587] input: syz1 as /devices/virtual/input/input39 [ 501.692338][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.699258][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.402736][T11597] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 502.467475][ T5888] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 502.474591][ T5888] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 502.490050][ T5888] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 502.545345][ T969] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 502.567118][ T969] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 502.579512][ T969] asix 2-1:0.0: probe with driver asix failed with error -71 [ 502.591611][ T969] usb 2-1: USB disconnect, device number 24 [ 502.676223][ T5888] cdc_ncm 9-1:1.0: setting tx_max = 36 [ 502.734613][ T5888] cdc_ncm 9-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 502.798682][ T5888] usb 9-1: USB disconnect, device number 21 [ 502.808489][ T5888] cdc_ncm 9-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 502.930134][ T29] audit: type=1326 audit(1730840970.647:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11611 comm="syz.7.2050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463577e719 code=0x0 [ 503.366708][ T5923] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 503.536864][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 503.550042][ T5923] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 503.565784][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.593158][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.606182][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 503.622636][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.663511][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 503.698104][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.786951][T11638] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 503.951770][ T5923] usb 5-1: usb_control_msg returned -32 [ 503.957599][ T5923] usbtmc 5-1:16.0: can't read capabilities [ 504.071107][T11644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.141382][T11646] netlink: 'syz.7.2066': attribute type 1 has an invalid length. [ 504.149386][T11646] netlink: 9116 bytes leftover after parsing attributes in process `syz.7.2066'. [ 504.158984][T11646] netlink: 'syz.7.2066': attribute type 2 has an invalid length. [ 504.167193][T11646] netlink: 177 bytes leftover after parsing attributes in process `syz.7.2066'. [ 504.476755][ T5923] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 504.560699][ T5935] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 504.648009][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 504.665167][ T5923] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 504.676479][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.684928][ T5923] usb 9-1: Product: syz [ 504.689586][ T5923] usb 9-1: Manufacturer: syz [ 504.694221][ T5923] usb 9-1: SerialNumber: syz [ 504.701222][ T5923] usb 9-1: config 0 descriptor?? [ 504.713461][ T5923] gspca_main: sq930x-2.14.0 probing 2770:930c [ 504.716678][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 504.729852][ T5935] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 504.740474][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.749370][ T5935] usb 4-1: Product: syz [ 504.751056][T11655] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 504.755474][ T5935] usb 4-1: Manufacturer: syz [ 504.769361][ T5935] usb 4-1: SerialNumber: syz [ 504.776301][ T5935] usb 4-1: config 0 descriptor?? [ 504.786930][ T5935] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 504.951513][ T9] usb 5-1: USB disconnect, device number 17 [ 505.390246][ T972] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 505.575228][ T972] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 505.585435][ T972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.602934][ T972] usb 8-1: Product: syz [ 505.607992][ T972] usb 8-1: Manufacturer: syz [ 505.612713][ T972] usb 8-1: SerialNumber: syz [ 505.638505][ T972] usb 8-1: config 0 descriptor?? [ 505.644190][ T969] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 505.826697][ T969] usb 2-1: Using ep0 maxpacket: 16 [ 505.849379][ T969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 505.874751][ T969] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 505.884842][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.897516][ T969] usb 2-1: config 0 descriptor?? [ 505.925171][ T969] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input40 [ 505.986730][ T5923] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 506.006020][ T5935] gspca_stk1135: reg_w 0xd err -71 [ 506.012642][ T5935] gspca_stk1135: serial bus timeout: status=0x00 [ 506.026350][ T5935] gspca_stk1135: Sensor write failed [ 506.034151][ T5935] gspca_stk1135: serial bus timeout: status=0x00 [ 506.041673][ T5935] gspca_stk1135: Sensor write failed [ 506.054306][ T5935] gspca_stk1135: serial bus timeout: status=0x00 [ 506.061442][ T5935] gspca_stk1135: Sensor read failed [ 506.071642][ T5935] gspca_stk1135: serial bus timeout: status=0x00 [ 506.079216][ T5935] gspca_stk1135: Sensor read failed [ 506.084999][ T5935] gspca_stk1135: Detected sensor type unknown (0x0) [ 506.092446][ T5935] gspca_stk1135: serial bus timeout: status=0x00 [ 506.099198][ T5935] gspca_stk1135: Sensor read failed [ 506.119762][ T5935] gspca_stk1135: serial bus timeout: status=0x00 [ 506.129689][ T5935] gspca_stk1135: Sensor read failed [ 506.135026][ T5935] gspca_stk1135: serial bus timeout: status=0x00 [ 506.149441][ T5935] gspca_stk1135: Sensor write failed [ 506.155026][ T5935] gspca_stk1135: serial bus timeout: status=0x00 [ 506.163156][ T5935] gspca_stk1135: Sensor write failed [ 506.176950][ T5935] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 506.202100][ T5935] usb 4-1: USB disconnect, device number 23 [ 506.217086][ T5923] gspca_sq930x: Sensor ov9630 not yet treated [ 506.223303][ T5923] sq930x 9-1:0.0: probe with driver sq930x failed with error -22 [ 506.254586][ T5923] usb 9-1: USB disconnect, device number 22 [ 506.686653][ T972] usb 8-1: non-Atmel transceiver xxxx1bb6 [ 506.887961][ T972] usb 8-1: Firmware version (0.0) predates our first public release. [ 506.896413][ T972] usb 8-1: Please update to version 0.2 or newer [ 506.913585][ T972] usb 8-1: atusb_probe: initialization failed, error = -19 [ 506.929665][ T972] usb 8-1: USB disconnect, device number 22 [ 507.548190][ T5935] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 507.719194][ T5935] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.746068][ T5935] usb 5-1: config 1 has no interface number 0 [ 507.770643][ T5935] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.798076][ T5935] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 507.819869][ T5935] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 507.835880][ T5935] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.856819][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.872959][ T5935] usb 5-1: Product: syz [ 507.883093][ T5935] usb 5-1: Manufacturer: syz [ 507.896745][ T5935] usb 5-1: SerialNumber: syz [ 508.120443][T11694] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 508.125012][ T972] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 508.174244][T11709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.312835][ T972] usb 9-1: config 1 interface 0 has no altsetting 0 [ 508.328765][ T972] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 508.338828][ T972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.347506][ T972] usb 9-1: Product: syz [ 508.356851][ T972] usb 9-1: Manufacturer: syz [ 508.363447][ T972] usb 9-1: SerialNumber: syz [ 508.429350][ T5190] bcm5974 2-1:0.0: could not read from device [ 508.457420][ T969] bcm5974 2-1:0.0: could not read from device [ 508.469777][ T5190] bcm5974 2-1:0.0: could not read from device [ 508.498473][ T969] input: failed to attach handler mousedev to device input40, error: -5 [ 508.518334][ T5190] bcm5974 2-1:0.0: could not read from device [ 508.530986][ T969] usb 2-1: USB disconnect, device number 25 [ 508.543364][ T5190] bcm5974 2-1:0.0: could not read from device [ 508.758193][T11694] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 508.794830][ T5935] cdc_ncm 5-1:1.1: bind() failure [ 508.828886][ T972] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 508.852675][ T972] usb 9-1: USB disconnect, device number 23 [ 508.888868][ T972] usblp0: removed [ 508.995709][ T9] usb 5-1: USB disconnect, device number 18 [ 509.034136][T11731] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 509.224737][T11740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.246454][T11740] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 510.391009][T11791] kvm: Disabled LAPIC found during irq injection [ 510.447284][ T969] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 510.473811][T11798] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2129'. [ 510.608247][ T969] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 510.617435][ T969] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 510.625603][ T969] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 510.641741][ T969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 510.660892][ T969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 510.699767][ T969] usb 5-1: string descriptor 0 read error: -22 [ 510.706076][ T969] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 510.712005][T11804] syz.1.2132[11804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.715744][T11804] syz.1.2132[11804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.726708][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.736117][T11804] syz.1.2132[11804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.762123][ T969] usb 5-1: config 0 descriptor?? [ 510.805582][ T969] hub 5-1:0.0: bad descriptor, ignoring hub [ 510.812680][ T969] hub 5-1:0.0: probe with driver hub failed with error -5 [ 510.816973][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 510.840072][ T969] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 510.875404][ T969] input: failed to attach handler mousedev to device input41, error: -5 [ 510.999581][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.023182][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.046038][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 511.046290][ T5935] usb 5-1: USB disconnect, device number 19 [ 511.084687][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.117316][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.151137][ T9] usb 9-1: config 0 descriptor?? [ 511.589293][ T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 511.612368][ T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 511.626969][ T9] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 511.654327][ T9] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 511.858420][ T9] usb 9-1: USB disconnect, device number 24 [ 512.114274][T11846] wireguard0: entered promiscuous mode [ 512.140494][T11846] wireguard0: entered allmulticast mode [ 512.832381][T11865] overlayfs: invalid redirect ((null)) [ 513.156789][ T5935] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 513.429081][ T5923] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 513.475895][ T5935] usb 8-1: no configurations [ 513.482892][ T5935] usb 8-1: can't read configurations, error -22 [ 513.567977][T11892] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2169'. [ 513.616896][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 513.634026][ T5923] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 513.648498][ T5923] usb 2-1: config 0 has no interface number 0 [ 513.659616][ T5923] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 513.669108][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.686108][ T5923] usb 2-1: Product: syz [ 513.692003][ T5923] usb 2-1: Manufacturer: syz [ 513.697516][ T5923] usb 2-1: SerialNumber: syz [ 513.705826][ T5923] usb 2-1: config 0 descriptor?? [ 513.736815][ T969] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 513.908520][ T969] usb 9-1: Using ep0 maxpacket: 32 [ 513.920908][ T969] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 513.927118][ T5923] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 513.937237][ T969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.952914][ T969] usb 9-1: Product: syz [ 513.968058][ T5923] usb 2-1: USB disconnect, device number 26 [ 513.986992][ T969] usb 9-1: Manufacturer: syz [ 514.011583][ T969] usb 9-1: SerialNumber: syz [ 514.035964][ T969] usb 9-1: config 0 descriptor?? [ 514.079166][ T969] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 514.726884][ T972] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 514.907115][ T972] usb 4-1: Using ep0 maxpacket: 32 [ 514.919427][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 514.937640][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1035, setting to 1024 [ 514.972428][ T972] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 514.994095][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.022339][ T972] usb 4-1: config 0 descriptor?? [ 515.028682][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 515.048567][ T972] hub 4-1:0.0: USB hub found [ 515.252963][ T972] hub 4-1:0.0: 1 port detected [ 515.538778][ T969] gspca_ov534_9: reg_r err -71 [ 515.557172][ T5935] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 515.740222][ T5935] usb 2-1: config 0 has no interfaces? [ 515.757501][ T5935] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 515.787170][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.795340][ T5935] usb 2-1: Product: syz [ 515.799760][ T969] gspca_ov534_9: Unknown sensor 0000 [ 515.799831][ T969] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 515.824713][ T5935] usb 2-1: Manufacturer: syz [ 515.832323][ T5935] usb 2-1: SerialNumber: syz [ 515.837948][ T969] usb 9-1: USB disconnect, device number 25 [ 515.854342][ T5935] usb 2-1: config 0 descriptor?? [ 516.099798][ T5923] usb 2-1: USB disconnect, device number 27 [ 516.134132][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 516.142677][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 516.150568][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 516.158392][ T972] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 516.162141][T11956] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 516.551749][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2200'. [ 516.652335][T11976] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 516.664320][T11976] bond1: (slave vcan1): Error -95 calling set_mac_address [ 516.947912][ T9] usb 4-1: USB disconnect, device number 24 [ 517.336909][ T5935] kernel write not supported for file /735/attr/keycreate (pid: 5935 comm: kworker/1:8) [ 517.961717][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2228'. [ 517.976599][ T5935] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 518.057640][T12032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 518.102588][T12037] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 518.124485][T12037] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 518.134200][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 518.142762][ T5935] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 518.155302][ T5935] usb 4-1: config 0 has no interface number 0 [ 518.182758][ T5935] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 518.225460][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.244148][ T5935] usb 4-1: Product: syz [ 518.254271][ T5935] usb 4-1: Manufacturer: syz [ 518.270147][ T5935] usb 4-1: SerialNumber: syz [ 518.291103][ T5935] usb 4-1: config 0 descriptor?? [ 518.306235][ T5935] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 518.456809][ T9] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 518.623058][ T9] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 518.634180][ T9] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 518.648639][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 518.680961][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 518.694623][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 518.710844][ T9] usb 8-1: string descriptor 0 read error: -22 [ 518.717766][ T9] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 518.735978][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.748084][ T9] usb 8-1: config 0 descriptor?? [ 518.755564][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 518.762049][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 518.776914][ T969] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 518.786448][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input42 [ 518.806703][ T972] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 518.822438][ T9] input: failed to attach handler mousedev to device input42, error: -5 [ 518.938837][ T969] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 518.953061][ T969] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 518.964425][ T969] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 518.966875][ T972] usb 9-1: Using ep0 maxpacket: 16 [ 518.977600][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.992046][T12050] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 519.004471][ T972] usb 9-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 519.010390][ T969] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.029254][ T5916] usb 8-1: USB disconnect, device number 25 [ 519.043881][ T972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.064194][ T972] usb 9-1: Product: syz [ 519.071049][ T972] usb 9-1: Manufacturer: syz [ 519.081225][ T972] usb 9-1: SerialNumber: syz [ 519.092133][ T972] usb 9-1: config 0 descriptor?? [ 519.119023][ T972] ftdi_sio 9-1:0.0: Ignoring interface reserved for JTAG [ 519.262770][ T5916] usb 2-1: USB disconnect, device number 28 [ 519.343629][ T969] usb 9-1: USB disconnect, device number 26 [ 519.752870][ T5935] gspca_topro: reg_r err -71 [ 519.767037][ T5935] gspca_topro: Sensor soi763a [ 519.840617][ T5935] usb 4-1: USB disconnect, device number 25 [ 520.454210][T12089] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 520.481456][T12089] overlayfs: failed to set xattr on upper [ 520.493080][T12092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2250'. [ 520.499196][T12089] overlayfs: ...falling back to redirect_dir=nofollow. [ 520.532454][T12089] overlayfs: ...falling back to index=off. [ 521.203640][ T29] audit: type=1326 audit(1730841244.919:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12117 comm="syz.1.2261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x0 [ 521.224618][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.639517][ T5916] kernel write not supported for file /815/attr/keycreate (pid: 5916 comm: kworker/0:4) [ 522.167272][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 522.247049][ T5916] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 522.266731][ T5935] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 522.399226][ T5916] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.410748][ T5916] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.421431][ T5916] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.430618][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 522.441073][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.445733][ T5916] usb 8-1: SerialNumber: syz [ 522.462758][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.474823][ T5888] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 522.482973][ T5935] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 522.494481][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.505884][ T5935] usb 4-1: config 0 descriptor?? [ 522.626666][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 522.646340][ T5888] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 522.656081][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.665418][ T5888] usb 2-1: Product: syz [ 522.670548][ T5888] usb 2-1: Manufacturer: syz [ 522.675243][ T5888] usb 2-1: SerialNumber: syz [ 522.686355][ T5888] usb 2-1: config 0 descriptor?? [ 522.693377][ T5916] usb 8-1: 0:2 : does not exist [ 522.708887][ T5916] usb 8-1: unit 255 not found! [ 522.723057][ T5916] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 522.744924][ T5916] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 522.765983][ T5916] usb 8-1: 5:0: cannot get min/max values for control 6 (id 5) [ 522.783739][ T5916] usb 8-1: 5:0: cannot get min/max values for control 7 (id 5) [ 522.814902][ T5916] usb 8-1: USB disconnect, device number 26 [ 522.931996][ T5888] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 522.945513][ T5935] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0 [ 522.961417][ T5935] hid-thrustmaster 0003:044F:B65D.0031: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 522.991811][ T5935] hid-thrustmaster 0003:044F:B65D.0031: Wrong number of endpoints? [ 523.007768][ T8022] udevd[8022]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.196810][T12162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 523.205702][T12162] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 523.239704][ C1] hid-thrustmaster 0003:044F:B65D.0031: URB to get model id failed with error -71 [ 523.249710][ T5935] usb 4-1: USB disconnect, device number 26 [ 523.251335][T12162] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 523.463452][T12180] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 523.754579][T12186] syzkaller0: entered allmulticast mode [ 523.761173][ T5888] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 523.789259][ T5888] usb 2-1: USB disconnect, device number 29 [ 523.811002][T12186] syzkaller0 (unregistering): left allmulticast mode [ 524.420288][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 525.132292][ T29] audit: type=1400 audit(1730841248.849:76): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12233 comm="syz.1.2308" netif=wpan0 [ 525.761617][T12254] binder: 12253:12254 ioctl c0306201 20000580 returned -14 [ 525.896654][ T5888] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 525.984634][T12263] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.026143][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.057382][ T5888] usb 8-1: Using ep0 maxpacket: 16 [ 526.083475][ T5888] usb 8-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 526.118515][T12269] syz_tun: entered promiscuous mode [ 526.126342][ T5888] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 526.143080][T12269] batadv_slave_0: entered promiscuous mode [ 526.150248][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 526.165982][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 526.180159][T12269] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 526.196711][ T5888] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.216904][T12269] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.239350][ T5888] usb 8-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 526.256651][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.273304][ T5888] usb 8-1: Product: syz [ 526.278343][T12269] hsr1: entered allmulticast mode [ 526.284120][ T5888] usb 8-1: Manufacturer: syz [ 526.310929][ T5888] usb 8-1: SerialNumber: syz [ 526.331369][ T5888] usb 8-1: config 0 descriptor?? [ 526.336462][T12269] syz_tun: entered allmulticast mode [ 526.353092][ T5888] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 526.372072][T12269] batadv_slave_0: entered allmulticast mode [ 526.487537][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 526.594087][T12280] overlayfs: upper fs does not support tmpfile. [ 527.164588][ T5888] input: gspca_pac7302 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input43 [ 527.198178][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.205148][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.212129][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.219218][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.226317][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.233758][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.240726][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.247613][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.254547][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.261504][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.268422][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.275330][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.282768][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.295886][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.303016][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.310085][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.318290][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.325342][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.332463][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.341652][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.348600][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.355547][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.362617][ T969] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 527.370362][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.377575][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.384729][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.391653][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.403501][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.416887][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.424003][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.431020][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.438013][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.444929][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.451891][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.459608][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.466747][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.473676][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.480645][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.487568][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.494486][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.501476][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.508525][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.515549][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.522614][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.529750][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.536757][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.543738][ C1] gspca_pac7302 8-1:0.0: URB error -71, resubmitting [ 527.545724][ T9] usb 8-1: USB disconnect, device number 27 [ 527.550439][ C1] gspca_main: Resubmit URB failed with error -19 [ 527.717302][ T969] usb 9-1: Using ep0 maxpacket: 32 [ 527.743337][ T969] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 527.762129][ T969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.774178][ T969] usb 9-1: Product: syz [ 527.782257][ T969] usb 9-1: Manufacturer: syz [ 527.790582][ T969] usb 9-1: SerialNumber: syz [ 527.801227][ T969] usb 9-1: config 0 descriptor?? [ 527.814183][ T969] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 528.187431][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 528.224013][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 528.432179][T12343] overlay: filesystem on ./bus is read-only [ 528.537096][ T5916] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 528.566826][ T5935] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 528.616654][ T972] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 528.687898][ T5916] usb 8-1: Using ep0 maxpacket: 16 [ 528.711570][ T5916] usb 8-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 528.720997][ T5916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.736697][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 528.747183][ T5916] usb 8-1: Product: syz [ 528.751502][ T5916] usb 8-1: Manufacturer: syz [ 528.754521][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 528.756115][ T5916] usb 8-1: SerialNumber: syz [ 528.773610][ T5916] usb 8-1: config 0 descriptor?? [ 528.778577][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1035, setting to 1024 [ 528.778633][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 528.783339][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.810861][ T972] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 528.821910][ T5935] usb 2-1: config 0 descriptor?? [ 528.827047][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.827078][ T972] usb 5-1: Product: syz [ 528.827097][ T972] usb 5-1: Manufacturer: syz [ 528.827114][ T972] usb 5-1: SerialNumber: syz [ 528.849715][ T5916] ftdi_sio 8-1:0.0: Ignoring interface reserved for JTAG [ 528.858434][ T972] usb 5-1: config 0 descriptor?? [ 528.864494][T12339] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 528.876940][ T5935] hub 2-1:0.0: USB hub found [ 529.106209][ T5916] usb 8-1: USB disconnect, device number 28 [ 529.106248][ T5935] hub 2-1:0.0: 1 port detected [ 529.230878][ T969] gspca_stk1135: reg_w 0xf err -71 [ 529.237210][ T969] gspca_stk1135: serial bus timeout: status=0x00 [ 529.246383][ T969] gspca_stk1135: Sensor write failed [ 529.260233][ T969] gspca_stk1135: serial bus timeout: status=0x00 [ 529.271128][ T969] gspca_stk1135: Sensor write failed [ 529.281176][ T969] gspca_stk1135: serial bus timeout: status=0x00 [ 529.288226][ T969] gspca_stk1135: Sensor read failed [ 529.308198][ T969] gspca_stk1135: serial bus timeout: status=0x00 [ 529.324000][ T969] gspca_stk1135: Sensor read failed [ 529.327614][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.336084][ T969] gspca_stk1135: Detected sensor type unknown (0x0) [ 529.344219][ T972] usb 5-1: Firmware: major: 108, minor: 101, hardware type: UNKNOWN (114) [ 529.353493][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.359038][ T969] gspca_stk1135: serial bus timeout: status=0x00 [ 529.372561][ T969] gspca_stk1135: Sensor read failed [ 529.372635][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.378778][ T969] gspca_stk1135: serial bus timeout: status=0x00 [ 529.391923][ T969] gspca_stk1135: Sensor read failed [ 529.393820][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.405763][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 529.409100][ T969] gspca_stk1135: serial bus timeout: status=0x00 [ 529.413338][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.429298][ T969] gspca_stk1135: Sensor write failed [ 529.435135][ T969] gspca_stk1135: serial bus timeout: status=0x00 [ 529.441889][ T969] gspca_stk1135: Sensor write failed [ 529.447669][ T969] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 529.458180][ T969] usb 9-1: USB disconnect, device number 27 [ 529.588538][ T972] usb 5-1: Read permanent extended address 00:00:00:00:00:00:00:c3 from device [ 529.597839][ T972] usb 5-1: atusb_probe: initialization failed, error = -524 [ 529.605530][ T972] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 529.734299][T12352] nvme_fabrics: missing parameter 'transport=%s' [ 529.741227][T12346] chnl_net:caif_netlink_parms(): no params data found [ 529.743431][T12352] nvme_fabrics: missing parameter 'nqn=%s' [ 529.825068][ T972] usb 5-1: USB disconnect, device number 20 [ 529.837261][T12354] nvme_fabrics: missing parameter 'transport=%s' [ 529.855607][T12354] nvme_fabrics: missing parameter 'nqn=%s' [ 529.996601][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.012907][ T5888] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 530.013245][ T5916] usb 2-1: USB disconnect, device number 30 [ 530.043741][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.056350][T12346] bridge_slave_0: entered allmulticast mode [ 530.064172][T12346] bridge_slave_0: entered promiscuous mode [ 530.072562][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.080258][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.088974][T12346] bridge_slave_1: entered allmulticast mode [ 530.096182][T12346] bridge_slave_1: entered promiscuous mode [ 530.163582][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.186412][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.223061][T12346] team0: Port device team_slave_0 added [ 530.231838][T12346] team0: Port device team_slave_1 added [ 530.270676][T12346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.277992][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.310974][T12346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.324046][T12346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.331217][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.364664][T12346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.411536][T12346] hsr_slave_0: entered promiscuous mode [ 530.419886][T12346] hsr_slave_1: entered promiscuous mode [ 530.618899][T12346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.717901][ T972] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 530.750840][T12346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.883523][ T972] usb 5-1: Using ep0 maxpacket: 16 [ 530.892978][ T972] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 530.896382][T12346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.910108][ T972] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.946588][ T972] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.969889][ T972] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.989957][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.004552][ T972] usb 5-1: Product: syz [ 531.012213][ T972] usb 5-1: Manufacturer: syz [ 531.023168][ T972] usb 5-1: SerialNumber: syz [ 531.116264][T12346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.239485][T12346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.256412][T12346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.271398][T12346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.304491][T12346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.312566][ T5888] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 531.438754][T12346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.458575][T12346] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.471592][ T5848] Bluetooth: hci4: command tx timeout [ 531.486992][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 531.491627][ T972] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 531.494267][ T5888] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 531.505479][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.508439][ T5888] usb 2-1: config 0 has no interface number 0 [ 531.515107][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.521407][ T5888] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 531.538724][ T5888] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 531.548962][ T5888] usb 2-1: config 0 interface 41 has no altsetting 0 [ 531.560262][ T5888] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 531.570293][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.575525][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.578512][ T5888] usb 2-1: Product: syz [ 531.585474][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.590123][ T5888] usb 2-1: Manufacturer: syz [ 531.602372][ T5888] usb 2-1: SerialNumber: syz [ 531.610675][ T5888] usb 2-1: config 0 descriptor?? [ 531.618491][T12383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 531.626190][T12383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 531.736915][ T5916] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 531.856427][T12383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 531.872493][T12383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 531.917629][ T5916] usb 8-1: Using ep0 maxpacket: 8 [ 531.932805][ T5916] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 531.943365][ T5916] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.955223][ T5916] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.957532][T12346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.966131][ T5916] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.982586][ T5916] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.003196][ T5916] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 532.015819][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.068029][T12346] veth0_vlan: entered promiscuous mode [ 532.085504][T12346] veth1_vlan: entered promiscuous mode [ 532.122949][T12346] veth0_macvtap: entered promiscuous mode [ 532.151732][T12346] veth1_macvtap: entered promiscuous mode [ 532.193631][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.204792][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.215496][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.226303][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.237640][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.248873][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.260870][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.281823][ T5916] usb 8-1: usb_control_msg returned -32 [ 532.283697][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.290345][ T5916] usbtmc 8-1:16.0: can't read capabilities [ 532.299960][ T5888] Error reading MAC address [ 532.318572][T12383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 532.326169][T12383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 532.349512][T12346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.376164][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.401755][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.436077][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.455733][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.465957][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.477215][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.487941][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.499455][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.509752][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.543724][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.557594][ T972] usb 5-1: USB disconnect, device number 21 [ 532.574671][T12346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.626291][T12346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.653451][T12346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.672142][T12346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.681405][T12346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.768359][ T7895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.778650][ T7895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.811935][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.836831][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.860771][ T8894] udevd[8894]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.040638][ T5888] sr9700 2-1:0.41 eth13: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 36:1d:c1:81:93:1c [ 533.064941][ T5888] usb 2-1: USB disconnect, device number 31 [ 533.076106][ T5888] sr9700 2-1:0.41 eth13: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 533.077761][T12398] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 533.280496][ T972] usb 8-1: USB disconnect, device number 29 [ 533.456744][ T5889] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 533.526869][ T5848] Bluetooth: hci4: command tx timeout [ 533.617933][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 533.625247][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.637039][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.654114][ T5889] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 533.665190][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.680651][T12410] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2385'. [ 533.696141][ T5889] usb 5-1: config 0 descriptor?? [ 533.707343][T12410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2385'. [ 534.123299][ T5889] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 534.147059][ T5889] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 534.156458][ T5889] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 534.177430][ T5889] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 534.190084][ T5889] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 534.210201][ T5889] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 534.293455][T12433] smc: net device lo applied user defined pnetid SYZ2 [ 534.324645][ T5889] cp2112 0003:10C4:EA90.0032: Part Number: 0x00 Device Version: 0x00 [ 534.334297][T12433] smc: net device lo erased user defined pnetid SYZ2 [ 534.750327][ T972] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 534.916677][ T972] usb 4-1: Using ep0 maxpacket: 32 [ 534.941402][ T972] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 534.965500][ T972] usb 4-1: config 0 has no interface number 0 [ 534.996011][ T972] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 535.031058][ T972] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 535.057629][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.076182][ T972] usb 4-1: Product: syz [ 535.081131][ T972] usb 4-1: Manufacturer: syz [ 535.085775][ T972] usb 4-1: SerialNumber: syz [ 535.115833][ T972] usb 4-1: config 0 descriptor?? [ 535.147154][T12438] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 535.169768][ T972] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 535.184618][ T9] usb 5-1: USB disconnect, device number 22 [ 535.214832][ T972] em28xx 4-1:0.132: Video interface 132 found: bulk [ 535.596038][ T972] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 535.606883][ T5848] Bluetooth: hci4: command tx timeout [ 536.036826][ T972] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 536.049641][ T972] em28xx 4-1:0.132: board has no eeprom [ 536.156675][ T5888] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 536.159157][ T972] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 536.172589][ T972] em28xx 4-1:0.132: analog set to bulk mode. [ 536.189756][ T972] em28xx 4-1:0.132: Registering V4L2 extension [ 536.273062][ T972] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 536.273350][ T5889] usb 4-1: USB disconnect, device number 27 [ 536.283742][ T972] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 536.315747][ T5889] em28xx 4-1:0.132: Disconnecting em28xx [ 536.322489][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 536.341597][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.380235][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.392706][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 536.405575][ T5888] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 536.416439][ T5888] usb 5-1: Product: syz [ 536.445758][ T5888] usb 5-1: Manufacturer: syz [ 536.470554][ T5888] usb 5-1: config 0 descriptor?? [ 536.472159][ T972] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 536.503794][ T972] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 536.512025][ T972] em28xx 4-1:0.132: No AC97 audio processor [ 536.547036][ T972] usb 4-1: Decoder not found [ 536.551716][ T972] em28xx 4-1:0.132: failed to create media graph [ 536.586775][ T972] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 536.628663][ T972] em28xx 4-1:0.132: Remote control support is not available for this card. [ 536.664179][ T5889] em28xx 4-1:0.132: Closing input extension [ 536.731200][ T5889] em28xx 4-1:0.132: Freeing device [ 536.894410][ T5888] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0xd [ 536.918822][ T5888] kovaplus 0003:1E7D:2D50.0033: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 537.405943][T12519] tipc: Started in network mode [ 537.415212][T12519] tipc: Node identity 4, cluster identity 4711 [ 537.433042][T12519] tipc: Node number set to 4 [ 537.687783][ T5848] Bluetooth: hci4: command tx timeout [ 537.867945][ T972] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 537.897375][ T5888] kovaplus 0003:1E7D:2D50.0033: couldn't init struct kovaplus_device [ 537.905874][ T5888] kovaplus 0003:1E7D:2D50.0033: couldn't install mouse [ 537.950784][ T5888] kovaplus 0003:1E7D:2D50.0033: probe with driver kovaplus failed with error -71 [ 537.981737][ T5888] usb 5-1: USB disconnect, device number 23 [ 538.036691][ T972] usb 4-1: Using ep0 maxpacket: 32 [ 538.043890][ T5889] kernel write not supported for file bpf-prog (pid: 5889 comm: kworker/1:7) [ 538.054108][ T972] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 538.080631][ T972] usb 4-1: config 0 has no interface number 0 [ 538.108904][ T972] usb 4-1: config 0 interface 12 has no altsetting 0 [ 538.126261][ T972] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 538.165035][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.177244][ T972] usb 4-1: Product: syz [ 538.182040][ T972] usb 4-1: Manufacturer: syz [ 538.190919][ T972] usb 4-1: SerialNumber: syz [ 538.198283][ T972] usb 4-1: config 0 descriptor?? [ 539.040465][T12553] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 539.073958][T12553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 539.157485][T12553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 539.172624][T12569] bridge0: port 3(vlan2) entered blocking state [ 539.200426][T12569] bridge0: port 3(vlan2) entered disabled state [ 539.219754][T12569] vlan2: entered allmulticast mode [ 539.261801][T12569] vlan2: left allmulticast mode [ 539.534367][T12561] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 539.641547][ T972] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 539.650212][ T972] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 539.664052][ T972] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 539.672556][ T972] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 539.706664][ T972] usb 4-1: USB disconnect, device number 28 [ 539.776841][ T5888] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 539.797104][ T5916] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 539.897603][T12589] netlink: 'syz.7.2449': attribute type 27 has an invalid length. [ 539.946651][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 539.962181][ T5888] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 539.976762][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 539.981058][ T5888] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.987996][ T5916] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 540.003821][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.015131][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.020996][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.035919][ T5888] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.066046][ T5916] usb 5-1: Product: syz [ 540.073091][ T5888] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 540.083742][ T5916] usb 5-1: Manufacturer: syz [ 540.096622][ T5916] usb 5-1: SerialNumber: syz [ 540.113663][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.134369][T12589] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.142005][T12589] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.247818][T12589] bond0: left promiscuous mode [ 540.269036][T12589] bond_slave_0: left promiscuous mode [ 540.288259][T12589] bond_slave_1: left promiscuous mode [ 540.300800][T12589] syz_tun: left promiscuous mode [ 540.410513][ T5888] usb 2-1: usb_control_msg returned -32 [ 540.426782][ T5888] usbtmc 2-1:16.0: can't read capabilities [ 540.519958][T12589] batadv_slave_0: left promiscuous mode [ 540.530430][T12589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.538172][ T5916] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 540.551721][ T5916] gspca_stk1135: reg_w 0x2 err -71 [ 540.575431][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 540.594689][ T5916] gspca_stk1135: Sensor write failed [ 540.614648][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 540.631716][ T5916] gspca_stk1135: Sensor write failed [ 540.639696][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 540.646355][ T5916] gspca_stk1135: Sensor read failed [ 540.667173][ T5889] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 540.678223][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 540.684858][ T5916] gspca_stk1135: Sensor read failed [ 540.699398][ T5916] gspca_stk1135: Detected sensor type unknown (0x0) [ 540.706312][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 540.717504][T12589] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.722411][ T5916] gspca_stk1135: Sensor read failed [ 540.732725][T12589] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.736566][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 540.752125][T12589] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.766358][ T5916] gspca_stk1135: Sensor read failed [ 540.772020][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 540.775801][T12589] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.778817][ T5916] gspca_stk1135: Sensor write failed [ 540.792907][ T5916] gspca_stk1135: serial bus timeout: status=0x00 [ 540.799510][ T5916] gspca_stk1135: Sensor write failed [ 540.804986][ T5916] stk1135 5-1:64.0: probe with driver stk1135 failed with error -71 [ 540.827843][ T5916] usb 5-1: USB disconnect, device number 24 [ 540.846937][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 540.858534][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.898965][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 540.914980][T12592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.929704][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 540.935756][T12592] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.954101][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 540.964118][T12592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.973397][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.017560][ T5889] usb 4-1: config 0 descriptor?? [ 541.037808][T12604] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 541.055525][ T5889] hub 4-1:0.0: USB hub found [ 541.230155][T12619] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 541.262792][ T5889] hub 4-1:0.0: 2 ports detected [ 541.317666][T12626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.329913][T12626] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 541.367909][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 541.468409][ T5916] usb 2-1: USB disconnect, device number 32 [ 541.697498][ T5889] hub 4-1:0.0: set hub depth failed [ 541.708863][ T5889] usb 4-1: USB disconnect, device number 29 [ 542.377781][T12663] input: syz0 as /devices/virtual/input/input44 [ 543.206966][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 543.376934][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 543.409859][ T8] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 543.426799][ T8] usb 4-1: config 0 has no interface number 0 [ 543.433121][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 543.456075][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 543.465681][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 543.479554][ T8] usb 4-1: config 0 interface 41 has no altsetting 0 [ 543.489742][ T8] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 543.499213][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.507975][ T8] usb 4-1: Product: syz [ 543.512332][ T8] usb 4-1: Manufacturer: syz [ 543.517762][ T8] usb 4-1: SerialNumber: syz [ 543.528295][ T8] usb 4-1: config 0 descriptor?? [ 543.535573][T12674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 543.543673][T12674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 543.770871][T12674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 543.787034][T12674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 543.836787][ T5916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 544.050732][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.063741][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.074089][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 544.088567][ T5916] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 544.098519][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.110330][ T5916] usb 2-1: config 0 descriptor?? [ 544.186707][T12601] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 544.198251][ T8] Error reading MAC address [ 544.205363][T12674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.213335][T12674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.369962][T12601] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.384272][T12601] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.393853][T12601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.402634][T12601] usb 5-1: Product: syz [ 544.407350][T12601] usb 5-1: Manufacturer: syz [ 544.412283][T12601] usb 5-1: SerialNumber: syz [ 544.528930][ T5916] plantronics 0003:047F:FFFF.0034: ignoring exceeding usage max [ 544.547056][ T5916] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 544.574686][ T5916] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 544.884704][ T8] sr9700 4-1:0.41 eth13: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, 3a:d2:9b:3e:52:88 [ 544.920193][ T8] usb 4-1: USB disconnect, device number 30 [ 544.928776][ T8] sr9700 4-1:0.41 eth13: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 545.447980][T12601] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 545.455397][T12601] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 545.463414][T12601] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 545.526789][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 545.859305][T12601] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 545.875821][T12601] cdc_ncm 5-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 545.901544][T12601] usb 5-1: USB disconnect, device number 25 [ 545.908466][T12601] cdc_ncm 5-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 546.338980][T12710] 9pnet_fd: p9_fd_create_tcp (12710): problem connecting socket to 127.0.0.1 [ 546.354907][ T9946] bond0: (slave syz_tun): Releasing backup interface [ 546.725248][ T5889] usb 2-1: USB disconnect, device number 33 [ 547.471864][T10704] Bluetooth: (null): Invalid header checksum [ 547.491957][T10704] Bluetooth: (null): Invalid header checksum [ 547.544887][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 547.558275][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.569242][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.577882][T12751] Bluetooth: (null): Too short H5 packet [ 547.584745][ T35] Bluetooth: (null): Invalid header checksum [ 547.597464][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.607196][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 547.614566][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.836852][T12758] chnl_net:caif_netlink_parms(): no params data found [ 547.899360][T12758] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.906725][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.914014][T12758] bridge_slave_0: entered allmulticast mode [ 547.921858][T12758] bridge_slave_0: entered promiscuous mode [ 547.938971][T12758] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.948254][T12758] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.955509][T12758] bridge_slave_1: entered allmulticast mode [ 547.962925][T12758] bridge_slave_1: entered promiscuous mode [ 547.991430][T12758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.003872][T12758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.039560][T12758] team0: Port device team_slave_0 added [ 548.049210][T12758] team0: Port device team_slave_1 added [ 548.074835][T12758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.082603][T12758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.109576][T12758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.122398][T12758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.129505][T12758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.164292][T12758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.254646][T12758] hsr_slave_0: entered promiscuous mode [ 548.287725][T12758] hsr_slave_1: entered promiscuous mode [ 548.308788][T12758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.333710][T12758] Cannot create hsr debugfs directory [ 548.341127][T12777] vivid-003: ================= START STATUS ================= [ 548.355786][T12777] vivid-003: Radio HW Seek Mode: Bounded [ 548.362099][T12777] vivid-003: Radio Programmable HW Seek: false [ 548.369140][T12777] vivid-003: RDS Rx I/O Mode: Block I/O [ 548.374956][T12777] vivid-003: Generate RBDS Instead of RDS: false [ 548.382292][T12777] vivid-003: RDS Reception: true [ 548.392097][T12777] vivid-003: RDS Program Type: 0 inactive [ 548.404131][T12777] vivid-003: RDS PS Name: inactive [ 548.415811][T12777] vivid-003: RDS Radio Text: inactive [ 548.437279][T12777] vivid-003: RDS Traffic Announcement: false inactive [ 548.456267][T12777] vivid-003: RDS Traffic Program: false inactive [ 548.477038][T12777] vivid-003: RDS Music: false inactive [ 548.488473][T12777] vivid-003: ================== END STATUS ================== [ 548.781135][T12789] netlink: 'syz.3.2523': attribute type 4 has an invalid length. [ 548.830870][T12789] netlink: 'syz.3.2523': attribute type 4 has an invalid length. [ 548.937087][ T5889] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 549.099707][ T5889] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 549.111577][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.125708][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.134846][T12758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.164257][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 549.190858][ T5889] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 549.214420][ T5889] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 549.232608][ T5889] usb 9-1: Manufacturer: syz [ 549.256394][T12758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.257651][ T5889] usb 9-1: config 0 descriptor?? [ 549.289521][T12758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 549.312560][T12758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 549.708877][ T8] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 549.715397][ T5889] appleir 0003:05AC:8243.0035: unknown main item tag 0x0 [ 549.716651][ T54] Bluetooth: hci2: command tx timeout [ 549.732523][ T5889] appleir 0003:05AC:8243.0035: No inputs registered, leaving [ 549.748421][ T5889] appleir 0003:05AC:8243.0035: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 549.889603][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 549.899117][ T8] usb 4-1: config 0 has no interface number 0 [ 549.905286][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.917121][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.933281][ T8] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 549.951588][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.977472][ T8] usb 4-1: config 0 descriptor?? [ 550.442734][ T8] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0036/input/input45 [ 550.657116][ T8] holtek_kbd 0003:04D9:A055.0036: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 550.698246][ T8] usb 4-1: USB disconnect, device number 31 [ 551.777322][ T54] Bluetooth: hci2: command tx timeout [ 551.820709][ T8] usb 9-1: USB disconnect, device number 28 [ 553.451028][T12838] evm: overlay not supported [ 553.846806][ T54] Bluetooth: hci2: command tx timeout [ 554.112340][T12758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.186426][T12758] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.202245][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 554.224917][T10703] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.232136][T10703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.258210][T10703] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.265452][T10703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.638927][ T5889] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 554.750161][T12758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.807245][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 554.825879][ T5889] usb 4-1: config 0 has no interfaces? [ 554.842907][ T5889] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 554.845511][T12758] veth0_vlan: entered promiscuous mode [ 554.858051][ T5916] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 554.868771][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.892139][T12758] veth1_vlan: entered promiscuous mode [ 554.901203][ T5889] usb 4-1: config 0 descriptor?? [ 554.975344][T12758] veth0_macvtap: entered promiscuous mode [ 554.996284][T12758] veth1_macvtap: entered promiscuous mode [ 555.031937][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.045199][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.058382][ T5916] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.082588][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 555.086660][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.094303][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 555.116055][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.126171][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.149300][T12601] usb 4-1: USB disconnect, device number 32 [ 555.151755][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.168092][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.179449][ T5916] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.192823][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.212541][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.226291][ T5916] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.245692][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.245827][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.278893][ T5916] usb 9-1: config 0 descriptor?? [ 555.285765][T12868] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 555.295755][T12758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.334272][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.379001][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.399274][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.415401][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.430408][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.446431][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.459000][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.470064][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.486276][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.498471][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.521207][T12758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.540121][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2557'. [ 555.569571][T12882] erspan0: entered promiscuous mode [ 555.587470][T12882] macvtap1: entered promiscuous mode [ 555.592967][T12882] macvtap1: entered allmulticast mode [ 555.615311][T12882] erspan0: entered allmulticast mode [ 555.640473][T12885] erspan0: left allmulticast mode [ 555.645896][T12885] erspan0: left promiscuous mode [ 555.707737][T12758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.736700][T12758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.744840][ T5916] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 555.766188][ T5916] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 555.776815][T12758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.789176][T12758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.790425][ T5916] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 555.804013][ T29] audit: type=1326 audit(1730841279.519:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 555.814644][ T5916] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 555.859021][ T5916] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 555.867936][ T5916] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 555.890184][ T5916] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 555.896855][ T29] audit: type=1326 audit(1730841279.549:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 555.949418][ T54] Bluetooth: hci2: command tx timeout [ 556.102773][ T29] audit: type=1326 audit(1730841279.549:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 556.175327][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.193799][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.203413][ T29] audit: type=1326 audit(1730841279.549:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 556.236079][ T29] audit: type=1326 audit(1730841279.549:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 556.301424][ T29] audit: type=1326 audit(1730841279.549:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 556.323324][ T29] audit: type=1326 audit(1730841279.549:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 556.345049][ T29] audit: type=1326 audit(1730841279.559:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 556.366638][ T29] audit: type=1326 audit(1730841279.559:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 556.388710][ T29] audit: type=1326 audit(1730841279.559:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12889 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978097e719 code=0x7ffc0000 [ 556.438332][T10703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.449080][T10703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.765322][T12914] input: syz0 as /devices/virtual/input/input47 [ 556.787029][T12916] tipc: Started in network mode [ 556.800934][T12916] tipc: Node identity 4, cluster identity 4711 [ 556.819254][T12916] tipc: Node number set to 4 [ 556.826775][T12599] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 556.996727][T12599] usb 4-1: Using ep0 maxpacket: 32 [ 557.008423][T12599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.033334][T12599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.051059][T12599] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 557.086825][T12599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.114103][T12599] usb 4-1: config 0 descriptor?? [ 557.241448][T12868] usb 9-1: string descriptor 0 read error: -71 [ 557.576084][T12599] hid-u2fzero 0003:10C4:8ACF.0038: hidraw1: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 557.610650][T12599] hid-u2fzero 0003:10C4:8ACF.0038: U2F Zero LED initialised [ 557.638359][T12599] hid-u2fzero 0003:10C4:8ACF.0038: U2F Zero RNG initialised [ 557.797100][T12599] usb 4-1: USB disconnect, device number 33 [ 558.276738][T12613] usb 9-1: reset high-speed USB device number 29 using dummy_hcd [ 558.326859][T12614] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 558.467743][T12613] usb 9-1: device firmware changed [ 558.493584][T12614] usb 5-1: Using ep0 maxpacket: 8 [ 558.499514][ T5889] usb 9-1: USB disconnect, device number 29 [ 558.517529][T12614] usb 5-1: config 0 has no interfaces? [ 558.523425][T12614] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 558.540382][T12614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.574288][T12614] usb 5-1: config 0 descriptor?? [ 558.648405][ T5889] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 558.810614][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.823432][T12599] usb 5-1: USB disconnect, device number 26 [ 558.843701][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.874811][ T5889] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 558.893746][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.905258][ T5889] usb 9-1: config 0 descriptor?? [ 559.357918][T12599] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 559.602065][ T5889] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 559.610324][ T5889] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 559.647130][ T5889] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 559.691852][ T5889] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 559.692005][T12599] usb 2-1: Using ep0 maxpacket: 8 [ 559.716802][ T5889] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 559.795560][ T5889] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 559.891744][T12599] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 559.896235][ T5889] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 559.903866][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 559.931356][ T5889] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 559.960965][T12599] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.973182][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 559.984693][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.027208][T12599] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 560.034714][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 560.037159][ T5889] cp2112 0003:10C4:EA90.0039: Part Number: 0x00 Device Version: 0x00 [ 560.047356][T12599] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.128674][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 560.140044][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.158689][T12599] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 560.168136][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 560.180845][T12599] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.194315][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 560.205854][T12599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.239465][T12599] usb 2-1: string descriptor 0 read error: -22 [ 560.245779][T12599] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 560.255813][T12599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.279729][T12988] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.295789][T12599] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 560.585437][ T5889] cp2112 0003:10C4:EA90.0039: error reading lock byte: -71 [ 560.613283][ T5889] usb 9-1: USB disconnect, device number 30 [ 562.170170][T13032] netlink: zone id is out of range [ 562.175465][T13032] netlink: zone id is out of range [ 562.181025][T13032] netlink: zone id is out of range [ 562.197309][T13032] netlink: zone id is out of range [ 562.206604][T13032] netlink: set zone limit has 4 unknown bytes [ 562.211889][T12614] usb 2-1: USB disconnect, device number 34 [ 562.237883][T13032] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2614'. [ 562.260735][T13032] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 562.497663][T12599] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 562.544665][T13043] input: syz0 as /devices/virtual/input/input49 [ 562.740751][T12599] usb 1-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 562.760380][T12599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.775400][T12599] usb 1-1: Product: syz [ 562.791920][T12599] usb 1-1: Manufacturer: syz [ 562.796698][T12599] usb 1-1: SerialNumber: syz [ 562.817565][T12599] usb 1-1: config 0 descriptor?? [ 562.835800][T12599] gspca_main: spca500-2.14.0 probing 8086:0630 [ 563.056138][T12599] usb 1-1: USB disconnect, device number 8 [ 563.071837][T13058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.145946][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.152365][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.516170][ T5916] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 563.707941][ T5916] usb 9-1: too many configurations: 65, using maximum allowed: 8 [ 563.758381][ T5916] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 563.775699][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.272368][ T5916] usb 9-1: Found UVC 0.00 device (046d:08c1) [ 564.297746][ T5916] usb 9-1: No valid video chain found. [ 564.475653][ T5889] usb 9-1: USB disconnect, device number 31 [ 564.986698][T12599] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 565.194610][T12599] usb 5-1: Using ep0 maxpacket: 32 [ 565.225910][T12599] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 565.235044][T12599] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 565.256939][T12599] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 565.283016][T12599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.304398][T12599] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.324493][T12599] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 565.337885][T12599] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 565.374841][T12599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.400030][T12599] usb 5-1: config 0 descriptor?? [ 565.626778][ T5889] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 565.638245][T12599] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 565.667386][T12599] usb 5-1: USB disconnect, device number 27 [ 565.687281][T12599] usblp0: removed [ 565.797451][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.816874][ T5889] usb 4-1: config 0 has no interfaces? [ 565.822617][ T5889] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 565.843157][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.877768][ T5889] usb 4-1: config 0 descriptor?? [ 566.121477][T12597] usb 4-1: USB disconnect, device number 34 [ 566.157165][T12599] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 566.348858][T12599] usb 5-1: Using ep0 maxpacket: 32 [ 566.362750][T12599] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 566.397948][T12599] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 566.414275][T12599] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 566.428470][T12599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.448106][T12599] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 566.466061][T12599] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 566.489465][T12599] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 566.510381][T12599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.525484][T12599] usb 5-1: config 0 descriptor?? [ 566.774484][T12599] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 566.994866][T12599] usb 5-1: USB disconnect, device number 28 [ 567.019116][T12599] usblp0: removed [ 568.482848][T13159] geneve2: entered promiscuous mode [ 568.502927][T13159] geneve2: entered allmulticast mode [ 568.597838][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 568.597857][ T29] audit: type=1326 audit(1730841292.319:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 568.646160][ T29] audit: type=1326 audit(1730841292.349:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 568.726763][ T29] audit: type=1326 audit(1730841292.349:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 568.727740][T13169] netlink: 'syz.8.2667': attribute type 9 has an invalid length. [ 568.792863][ T29] audit: type=1326 audit(1730841292.349:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 568.794713][T13169] netlink: 134660 bytes leftover after parsing attributes in process `syz.8.2667'. [ 568.856279][ T29] audit: type=1326 audit(1730841292.349:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 568.926580][ T29] audit: type=1326 audit(1730841292.349:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 568.956629][ T29] audit: type=1326 audit(1730841292.349:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 568.978658][ T29] audit: type=1326 audit(1730841292.349:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 569.000601][ T29] audit: type=1326 audit(1730841292.349:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 569.022303][ T29] audit: type=1326 audit(1730841292.349:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x7ffc0000 [ 569.085910][T13179] overlayfs: failed to decode file handle (len=2, type=1, flags=0, err=-22) [ 569.737231][T13210] sp0: Synchronizing with TNC [ 570.371639][T12614] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 570.535118][T12614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.558479][T12614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.573563][T12614] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 570.601849][T12614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.626589][T12614] usb 1-1: config 0 descriptor?? [ 571.070109][T12614] lg-g15 0003:046D:C222.003A: unknown main item tag 0x6 [ 571.091089][T12614] lg-g15 0003:046D:C222.003A: unknown main item tag 0x0 [ 571.118456][T12614] lg-g15 0003:046D:C222.003A: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 571.166734][ T5916] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 571.275305][T12613] usb 1-1: USB disconnect, device number 9 [ 571.376754][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 571.384957][ T5916] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 571.394428][ T5916] usb 2-1: config 0 has no interface number 0 [ 571.406588][ T5916] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 571.455284][ T5916] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 571.482621][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.494228][ T5916] usb 2-1: Product: syz [ 571.499224][ T5916] usb 2-1: Manufacturer: syz [ 571.516712][ T5916] usb 2-1: SerialNumber: syz [ 571.527002][ T5916] usb 2-1: config 0 descriptor?? [ 571.534386][T13252] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 571.559099][ T5916] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 571.580557][ T5916] em28xx 2-1:0.132: Video interface 132 found: bulk [ 571.698173][T12599] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 571.877483][T12599] usb 4-1: Using ep0 maxpacket: 32 [ 571.888975][T12599] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.904550][T12599] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.924381][T12599] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 571.946650][T12599] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 571.955117][T12599] usb 4-1: Product: syz [ 571.959590][T12599] usb 4-1: Manufacturer: syz [ 571.984096][T12599] hub 4-1:4.0: USB hub found [ 571.998399][ T5916] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 572.185978][T12599] hub 4-1:4.0: 2 ports detected [ 572.191404][T12599] hub 4-1:4.0: insufficient power available to use all downstream ports [ 572.622342][T12599] hub 4-1:4.0: set hub depth failed [ 572.644388][T12599] usb 4-1: USB disconnect, device number 35 [ 572.687563][ T5916] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 572.694462][ T5916] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 572.951814][ T5916] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 572.960146][ T5916] em28xx 2-1:0.132: analog set to bulk mode. [ 572.966255][T12599] em28xx 2-1:0.132: Registering V4L2 extension [ 572.986792][ T5916] usb 2-1: USB disconnect, device number 35 [ 573.016938][ T5916] em28xx 2-1:0.132: Disconnecting em28xx [ 573.091046][T12599] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 573.099521][T12599] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 573.107341][T12599] em28xx 2-1:0.132: No AC97 audio processor [ 573.120734][T12599] usb 2-1: Decoder not found [ 573.125469][T12599] em28xx 2-1:0.132: failed to create media graph [ 573.132909][T12599] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 573.149283][T12599] em28xx 2-1:0.132: Remote control support is not available for this card. [ 573.159550][ T5916] em28xx 2-1:0.132: Closing input extension [ 573.221667][ T5916] em28xx 2-1:0.132: Freeing device [ 574.640852][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 574.679665][T13271] ip6gretap1: entered allmulticast mode [ 575.169023][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2716'. [ 575.310349][T12613] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 575.470209][T12613] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 575.482906][T12613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.497404][T13313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.515717][T13313] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 575.530781][T12613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.558705][T12613] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 575.602583][T12613] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 575.634355][T12613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.655938][T13317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.674131][T12613] usb 1-1: config 0 descriptor?? [ 575.679521][ T5889] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 575.847637][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 575.878336][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 575.904613][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 575.925211][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.934870][ T5889] usb 2-1: Product: syz [ 575.940126][ T5889] usb 2-1: Manufacturer: syz [ 575.944876][ T5889] usb 2-1: SerialNumber: syz [ 576.007656][ T5889] usb 2-1: config 0 descriptor?? [ 576.021209][ T5889] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 576.082635][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 576.082655][ T29] audit: type=1326 audit(1730841299.799:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13330 comm="syz.8.2732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f660ff7e719 code=0x0 [ 576.129208][T12613] thrustmaster 0003:044F:B653.003B: unbalanced delimiter at end of report description [ 576.163203][T12613] thrustmaster 0003:044F:B653.003B: parse failed [ 576.176744][T12613] thrustmaster 0003:044F:B653.003B: probe with driver thrustmaster failed with error -22 [ 576.341408][T12597] usb 1-1: USB disconnect, device number 10 [ 577.280011][ T5889] gspca_zc3xx: reg_w_i err -71 [ 577.895274][ T5889] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 577.902028][ T5889] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 577.927340][ T5889] usb 2-1: USB disconnect, device number 36 [ 577.937421][ T8964] udevd[8964]: setting mode of /dev/bus/usb/002/036 to 020664 failed: No such file or directory [ 577.957441][ T8964] udevd[8964]: setting owner of /dev/bus/usb/002/036 to uid=0, gid=0 failed: No such file or directory [ 578.294675][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2743'. [ 579.320630][T12613] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 579.488822][T12613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.502671][T12613] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.512103][T12613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.537510][T12613] usb 4-1: Product: syz [ 579.545189][T12613] usb 4-1: Manufacturer: syz [ 579.570322][T12613] usb 4-1: SerialNumber: syz [ 579.683993][T13373] cgroup: fork rejected by pids controller in /syz8 [ 580.265801][T13360] netlink: 'syz.1.2743': attribute type 1 has an invalid length. [ 580.274414][T13360] netlink: 'syz.1.2743': attribute type 2 has an invalid length. [ 580.282473][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 580.485656][ T29] audit: type=1326 audit(1730841304.199:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13376 comm="syz.1.2752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df037e719 code=0x0 [ 580.650375][T12613] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 580.663129][T12613] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 580.687139][T12613] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 580.792942][ T1137] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.851250][T12613] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 580.881237][T12613] cdc_ncm 4-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 581.022216][ T1137] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.089625][ T5889] usb 4-1: USB disconnect, device number 36 [ 581.098235][ T5889] cdc_ncm 4-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 581.193204][ T1137] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.256696][T12613] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 581.380659][ T1137] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.441594][T12613] usb 1-1: Using ep0 maxpacket: 8 [ 581.460621][T12613] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 581.481159][T12613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.510492][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 581.522409][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 581.532043][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 581.541821][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 581.550664][T12613] usb 1-1: Product: syz [ 581.554932][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 581.562647][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 581.572087][T12613] usb 1-1: Manufacturer: syz [ 581.577215][T12613] usb 1-1: SerialNumber: syz [ 581.585742][T12613] usb 1-1: config 0 descriptor?? [ 581.672347][ T1137] bridge_slave_1: left allmulticast mode [ 581.678757][ T1137] bridge_slave_1: left promiscuous mode [ 581.684646][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.707572][ T1137] bridge_slave_0: left allmulticast mode [ 581.713512][ T1137] bridge_slave_0: left promiscuous mode [ 581.723855][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.786055][T13416] [ 581.788454][T13416] ===================================================== [ 581.795433][T13416] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 581.802915][T13416] 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 Not tainted [ 581.810054][T13416] ----------------------------------------------------- [ 581.816988][T13416] syz.3.2762/13416 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 581.824709][T13416] ffffffff8e60a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0x144/0x430 [ 581.833428][T13416] [ 581.833428][T13416] and this task is already holding: [ 581.840814][T13416] ffff888024b1b4a0 (&f_owner->lock){....}-{2:2}, at: send_sigurg+0x58/0x430 [ 581.849562][T13416] which would create a new lock dependency: [ 581.855454][T13416] (&f_owner->lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 581.863059][T13416] [ 581.863059][T13416] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 581.872513][T13416] (&client->buffer_lock){..-.}-{2:2} [ 581.872544][T13416] [ 581.872544][T13416] ... which became SOFTIRQ-irq-safe at: [ 581.885657][T13416] lock_acquire+0x1ed/0x550 [ 581.890274][T13416] _raw_spin_lock+0x2e/0x40 [ 581.894875][T13416] evdev_pass_values+0xf2/0xad0 [ 581.899821][T13416] evdev_events+0x1c2/0x300 [ 581.904416][T13416] input_pass_values+0x268/0x890 [ 581.909448][T13416] input_event_dispose+0x3a4/0x600 [ 581.914660][T13416] input_handle_event+0xa71/0xbe0 [ 581.919784][T13416] input_event+0xa4/0xd0 [ 581.924123][T13416] hidinput_hid_event+0x138c/0x1ca0 [ 581.929421][T13416] hid_process_event+0x439/0x590 [ 581.934455][T13416] hid_report_raw_event+0x1002/0x18a0 [ 581.939927][T13416] hid_input_report+0x416/0x500 [ 581.944878][T13416] hid_irq_in+0x4a0/0x6d0 [ 581.949327][T13416] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 581.954796][T13416] dummy_timer+0x856/0x4620 [ 581.959397][T13416] __hrtimer_run_queues+0x59b/0xd50 [ 581.964688][T13416] hrtimer_run_softirq+0x19a/0x2c0 [ 581.969900][T13416] handle_softirqs+0x2c5/0x980 [ 581.974789][T13416] __irq_exit_rcu+0xf4/0x1c0 [ 581.979480][T13416] irq_exit_rcu+0x9/0x30 [ 581.983916][T13416] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 581.989645][T13416] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.995723][T13416] finish_task_switch+0x1ea/0x870 [ 582.000841][T13416] __schedule+0x1802/0x4bd0 [ 582.005437][T13416] preempt_schedule_common+0x84/0xd0 [ 582.010814][T13416] preempt_schedule+0xe1/0xf0 [ 582.015603][T13416] preempt_schedule_thunk+0x1a/0x30 [ 582.020900][T13416] try_to_wake_up+0x9f3/0x14b0 [ 582.025751][T13416] wake_up_q+0xc8/0x120 [ 582.030004][T13416] futex_wake+0x523/0x5c0 [ 582.034430][T13416] do_futex+0x392/0x560 [ 582.038683][T13416] __se_sys_futex+0x3f9/0x480 [ 582.043458][T13416] do_syscall_64+0xf3/0x230 [ 582.048055][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.054041][T13416] [ 582.054041][T13416] to a SOFTIRQ-irq-unsafe lock: [ 582.061054][T13416] (tasklist_lock){.+.+}-{2:2} [ 582.061086][T13416] [ 582.061086][T13416] ... which became SOFTIRQ-irq-unsafe at: [ 582.073712][T13416] ... [ 582.073720][T13416] lock_acquire+0x1ed/0x550 [ 582.080905][T13416] _raw_read_lock+0x36/0x50 [ 582.085506][T13416] __do_wait+0x12d/0x850 [ 582.089846][T13416] do_wait+0x1e9/0x560 [ 582.094019][T13416] kernel_wait+0xe9/0x240 [ 582.098463][T13416] call_usermodehelper_exec_work+0xbd/0x230 [ 582.104455][T13416] process_scheduled_works+0xa63/0x1850 [ 582.110098][T13416] worker_thread+0x870/0xd30 [ 582.114788][T13416] kthread+0x2f0/0x390 [ 582.118946][T13416] ret_from_fork+0x4b/0x80 [ 582.123465][T13416] ret_from_fork_asm+0x1a/0x30 [ 582.128413][T13416] [ 582.128413][T13416] other info that might help us debug this: [ 582.128413][T13416] [ 582.138654][T13416] Chain exists of: [ 582.138654][T13416] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 582.138654][T13416] [ 582.151907][T13416] Possible interrupt unsafe locking scenario: [ 582.151907][T13416] [ 582.160228][T13416] CPU0 CPU1 [ 582.165589][T13416] ---- ---- [ 582.170955][T13416] lock(tasklist_lock); [ 582.175294][T13416] local_irq_disable(); [ 582.182071][T13416] lock(&client->buffer_lock); [ 582.189465][T13416] lock(&f_owner->lock); [ 582.196337][T13416] [ 582.199799][T13416] lock(&client->buffer_lock); [ 582.204837][T13416] [ 582.204837][T13416] *** DEADLOCK *** [ 582.204837][T13416] [ 582.213071][T13416] 2 locks held by syz.3.2762/13416: [ 582.218269][T13416] #0: ffff88804958f1f8 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x2a0/0x680 [ 582.226826][T13416] #1: ffff888024b1b4a0 (&f_owner->lock){....}-{2:2}, at: send_sigurg+0x58/0x430 [ 582.235986][T13416] [ 582.235986][T13416] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 582.246389][T13416] -> (&client->buffer_lock){..-.}-{2:2} { [ 582.252316][T13416] IN-SOFTIRQ-W at: [ 582.256476][T13416] lock_acquire+0x1ed/0x550 [ 582.262993][T13416] _raw_spin_lock+0x2e/0x40 [ 582.269510][T13416] evdev_pass_values+0xf2/0xad0 [ 582.276370][T13416] evdev_events+0x1c2/0x300 [ 582.282883][T13416] input_pass_values+0x268/0x890 [ 582.289836][T13416] input_event_dispose+0x3a4/0x600 [ 582.296965][T13416] input_handle_event+0xa71/0xbe0 [ 582.304000][T13416] input_event+0xa4/0xd0 [ 582.310251][T13416] hidinput_hid_event+0x138c/0x1ca0 [ 582.317462][T13416] hid_process_event+0x439/0x590 [ 582.324409][T13416] hid_report_raw_event+0x1002/0x18a0 [ 582.331793][T13416] hid_input_report+0x416/0x500 [ 582.338658][T13416] hid_irq_in+0x4a0/0x6d0 [ 582.345007][T13416] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 582.352392][T13416] dummy_timer+0x856/0x4620 [ 582.358931][T13416] __hrtimer_run_queues+0x59b/0xd50 [ 582.366133][T13416] hrtimer_run_softirq+0x19a/0x2c0 [ 582.373250][T13416] handle_softirqs+0x2c5/0x980 [ 582.380024][T13416] __irq_exit_rcu+0xf4/0x1c0 [ 582.386632][T13416] irq_exit_rcu+0x9/0x30 [ 582.392884][T13416] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 582.400524][T13416] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 582.408542][T13416] finish_task_switch+0x1ea/0x870 [ 582.415601][T13416] __schedule+0x1802/0x4bd0 [ 582.422110][T13416] preempt_schedule_common+0x84/0xd0 [ 582.429399][T13416] preempt_schedule+0xe1/0xf0 [ 582.436101][T13416] preempt_schedule_thunk+0x1a/0x30 [ 582.443306][T13416] try_to_wake_up+0x9f3/0x14b0 [ 582.450080][T13416] wake_up_q+0xc8/0x120 [ 582.456244][T13416] futex_wake+0x523/0x5c0 [ 582.462585][T13416] do_futex+0x392/0x560 [ 582.468747][T13416] __se_sys_futex+0x3f9/0x480 [ 582.475434][T13416] do_syscall_64+0xf3/0x230 [ 582.481943][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.489851][T13416] INITIAL USE at: [ 582.493926][T13416] lock_acquire+0x1ed/0x550 [ 582.500356][T13416] _raw_spin_lock+0x2e/0x40 [ 582.506779][T13416] evdev_pass_values+0xf2/0xad0 [ 582.513571][T13416] evdev_events+0x1c2/0x300 [ 582.519992][T13416] input_pass_values+0x268/0x890 [ 582.526855][T13416] input_event_dispose+0x3a4/0x600 [ 582.533892][T13416] input_handle_event+0xa71/0xbe0 [ 582.540848][T13416] input_event+0xa4/0xd0 [ 582.547017][T13416] hidinput_hid_event+0x138c/0x1ca0 [ 582.554166][T13416] hid_process_event+0x439/0x590 [ 582.561031][T13416] hid_report_raw_event+0x1002/0x18a0 [ 582.568324][T13416] hid_input_report+0x416/0x500 [ 582.575094][T13416] hid_irq_in+0x4a0/0x6d0 [ 582.581356][T13416] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 582.588653][T13416] dummy_timer+0x856/0x4620 [ 582.595084][T13416] __hrtimer_run_queues+0x59b/0xd50 [ 582.602201][T13416] hrtimer_run_softirq+0x19a/0x2c0 [ 582.609249][T13416] handle_softirqs+0x2c5/0x980 [ 582.615959][T13416] __irq_exit_rcu+0xf4/0x1c0 [ 582.622502][T13416] irq_exit_rcu+0x9/0x30 [ 582.628672][T13416] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 582.636224][T13416] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 582.644124][T13416] finish_task_switch+0x1ea/0x870 [ 582.651065][T13416] __schedule+0x1802/0x4bd0 [ 582.657486][T13416] preempt_schedule_common+0x84/0xd0 [ 582.664690][T13416] preempt_schedule+0xe1/0xf0 [ 582.671283][T13416] preempt_schedule_thunk+0x1a/0x30 [ 582.678396][T13416] try_to_wake_up+0x9f3/0x14b0 [ 582.685095][T13416] wake_up_q+0xc8/0x120 [ 582.691170][T13416] futex_wake+0x523/0x5c0 [ 582.697427][T13416] do_futex+0x392/0x560 [ 582.703507][T13416] __se_sys_futex+0x3f9/0x480 [ 582.710102][T13416] do_syscall_64+0xf3/0x230 [ 582.716529][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.724339][T13416] } [ 582.727019][T13416] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 582.735364][T13416] -> (&new->fa_lock){....}-{2:2} { [ 582.740597][T13416] INITIAL USE at: [ 582.744670][T13416] lock_acquire+0x1ed/0x550 [ 582.750942][T13416] _raw_write_lock_irq+0xd3/0x120 [ 582.757730][T13416] fasync_remove_entry+0xff/0x1d0 [ 582.764504][T13416] sock_fasync+0x87/0x100 [ 582.770594][T13416] __fput+0x71b/0x880 [ 582.776317][T13416] task_work_run+0x24f/0x310 [ 582.782660][T13416] syscall_exit_to_user_mode+0x168/0x370 [ 582.790125][T13416] do_syscall_64+0x100/0x230 [ 582.796464][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.804109][T13416] INITIAL READ USE at: [ 582.808534][T13416] lock_acquire+0x1ed/0x550 [ 582.815224][T13416] _raw_read_lock_irqsave+0xdd/0x130 [ 582.822772][T13416] kill_fasync+0x199/0x4f0 [ 582.829368][T13416] sock_wake_async+0x147/0x170 [ 582.836319][T13416] sk_wake_async+0x183/0x280 [ 582.843085][T13416] __mptcp_close_ssk+0xda4/0x1070 [ 582.850306][T13416] mptcp_destroy_common+0x15b/0x600 [ 582.857678][T13416] mptcp_disconnect+0x291/0x7a0 [ 582.864711][T13416] inet_shutdown+0x250/0x390 [ 582.871478][T13416] __se_sys_shutdown+0x144/0x1b0 [ 582.878600][T13416] do_syscall_64+0xf3/0x230 [ 582.885281][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.893352][T13416] } [ 582.895936][T13416] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 582.904709][T13416] ... acquired at: [ 582.908621][T13416] lock_acquire+0x1ed/0x550 [ 582.913316][T13416] _raw_read_lock_irqsave+0xdd/0x130 [ 582.918780][T13416] kill_fasync+0x199/0x4f0 [ 582.923377][T13416] evdev_pass_values+0x58a/0xad0 [ 582.928493][T13416] evdev_events+0x1c2/0x300 [ 582.933180][T13416] input_pass_values+0x268/0x890 [ 582.938294][T13416] input_event_dispose+0x30f/0x600 [ 582.943592][T13416] input_handle_event+0xa71/0xbe0 [ 582.948895][T13416] input_inject_event+0x22f/0x340 [ 582.954126][T13416] evdev_write+0x5fd/0x790 [ 582.958746][T13416] vfs_write+0x2a3/0xd30 [ 582.963268][T13416] ksys_write+0x183/0x2b0 [ 582.967807][T13416] do_syscall_64+0xf3/0x230 [ 582.972504][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.978596][T13416] [ 582.980924][T13416] -> (&f_owner->lock){....}-{2:2} { [ 582.986182][T13416] INITIAL USE at: [ 582.990088][T13416] lock_acquire+0x1ed/0x550 [ 582.996203][T13416] _raw_write_lock_irq+0xd3/0x120 [ 583.002808][T13416] __f_setown+0x6b/0x380 [ 583.008633][T13416] generic_setlease+0xc74/0x1550 [ 583.015154][T13416] fcntl_setlease+0x404/0x540 [ 583.021416][T13416] do_fcntl+0x69d/0x1a60 [ 583.027249][T13416] __se_sys_fcntl+0xd2/0x1e0 [ 583.033452][T13416] do_syscall_64+0xf3/0x230 [ 583.039579][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.047052][T13416] INITIAL READ USE at: [ 583.051392][T13416] lock_acquire+0x1ed/0x550 [ 583.057913][T13416] _raw_read_lock_irqsave+0xdd/0x130 [ 583.065209][T13416] send_sigio+0x37/0x390 [ 583.071458][T13416] kill_fasync+0x256/0x4f0 [ 583.077895][T13416] lease_break_callback+0x26/0x30 [ 583.084924][T13416] __break_lease+0x6d5/0x1820 [ 583.091617][T13416] do_dentry_open+0x8d4/0x1460 [ 583.098388][T13416] vfs_open+0x3e/0x330 [ 583.104469][T13416] path_openat+0x2c84/0x3590 [ 583.111074][T13416] do_filp_open+0x235/0x490 [ 583.117593][T13416] do_sys_openat2+0x13e/0x1d0 [ 583.124274][T13416] __x64_sys_openat+0x247/0x2a0 [ 583.131142][T13416] do_syscall_64+0xf3/0x230 [ 583.137664][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.145573][T13416] } [ 583.148095][T13416] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 583.157067][T13416] ... acquired at: [ 583.160878][T13416] lock_acquire+0x1ed/0x550 [ 583.165570][T13416] _raw_read_lock_irqsave+0xdd/0x130 [ 583.171036][T13416] send_sigio+0x37/0x390 [ 583.175463][T13416] kill_fasync+0x256/0x4f0 [ 583.180060][T13416] lease_break_callback+0x26/0x30 [ 583.185263][T13416] __break_lease+0x6d5/0x1820 [ 583.190125][T13416] do_dentry_open+0x8d4/0x1460 [ 583.195067][T13416] vfs_open+0x3e/0x330 [ 583.199311][T13416] path_openat+0x2c84/0x3590 [ 583.204081][T13416] do_filp_open+0x235/0x490 [ 583.208771][T13416] do_sys_openat2+0x13e/0x1d0 [ 583.213626][T13416] __x64_sys_openat+0x247/0x2a0 [ 583.218663][T13416] do_syscall_64+0xf3/0x230 [ 583.223348][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.229422][T13416] [ 583.231743][T13416] [ 583.231743][T13416] the dependencies between the lock to be acquired [ 583.231760][T13416] and SOFTIRQ-irq-unsafe lock: [ 583.245292][T13416] -> (tasklist_lock){.+.+}-{2:2} { [ 583.250506][T13416] HARDIRQ-ON-R at: [ 583.254495][T13416] lock_acquire+0x1ed/0x550 [ 583.260665][T13416] _raw_read_lock+0x36/0x50 [ 583.266828][T13416] __do_wait+0x12d/0x850 [ 583.272732][T13416] do_wait+0x1e9/0x560 [ 583.278478][T13416] kernel_wait+0xe9/0x240 [ 583.284465][T13416] call_usermodehelper_exec_work+0xbd/0x230 [ 583.292036][T13416] process_scheduled_works+0xa63/0x1850 [ 583.299260][T13416] worker_thread+0x870/0xd30 [ 583.305527][T13416] kthread+0x2f0/0x390 [ 583.311268][T13416] ret_from_fork+0x4b/0x80 [ 583.317359][T13416] ret_from_fork_asm+0x1a/0x30 [ 583.323796][T13416] SOFTIRQ-ON-R at: [ 583.327795][T13416] lock_acquire+0x1ed/0x550 [ 583.333966][T13416] _raw_read_lock+0x36/0x50 [ 583.340139][T13416] __do_wait+0x12d/0x850 [ 583.346037][T13416] do_wait+0x1e9/0x560 [ 583.351762][T13416] kernel_wait+0xe9/0x240 [ 583.357753][T13416] call_usermodehelper_exec_work+0xbd/0x230 [ 583.365311][T13416] process_scheduled_works+0xa63/0x1850 [ 583.372518][T13416] worker_thread+0x870/0xd30 [ 583.378769][T13416] kthread+0x2f0/0x390 [ 583.384500][T13416] ret_from_fork+0x4b/0x80 [ 583.390588][T13416] ret_from_fork_asm+0x1a/0x30 [ 583.397017][T13416] INITIAL USE at: [ 583.400914][T13416] lock_acquire+0x1ed/0x550 [ 583.406993][T13416] _raw_write_lock_irq+0xd3/0x120 [ 583.413589][T13416] copy_process+0x2267/0x3d50 [ 583.419845][T13416] kernel_clone+0x223/0x880 [ 583.425926][T13416] user_mode_thread+0x132/0x1a0 [ 583.432352][T13416] rest_init+0x23/0x300 [ 583.438082][T13416] start_kernel+0x47f/0x500 [ 583.444153][T13416] x86_64_start_reservations+0x2a/0x30 [ 583.451178][T13416] x86_64_start_kernel+0x9f/0xa0 [ 583.457771][T13416] common_startup_64+0x13e/0x147 [ 583.464278][T13416] INITIAL READ USE at: [ 583.468608][T13416] lock_acquire+0x1ed/0x550 [ 583.475207][T13416] _raw_read_lock+0x36/0x50 [ 583.481712][T13416] __do_wait+0x12d/0x850 [ 583.487958][T13416] do_wait+0x1e9/0x560 [ 583.494029][T13416] kernel_wait+0xe9/0x240 [ 583.500359][T13416] call_usermodehelper_exec_work+0xbd/0x230 [ 583.508360][T13416] process_scheduled_works+0xa63/0x1850 [ 583.515917][T13416] worker_thread+0x870/0xd30 [ 583.522518][T13416] kthread+0x2f0/0x390 [ 583.528590][T13416] ret_from_fork+0x4b/0x80 [ 583.535017][T13416] ret_from_fork_asm+0x1a/0x30 [ 583.541793][T13416] } [ 583.544293][T13416] ... key at: [] tasklist_lock+0x18/0x40 [ 583.552018][T13416] ... acquired at: [ 583.555819][T13416] lock_acquire+0x1ed/0x550 [ 583.560508][T13416] _raw_read_lock+0x36/0x50 [ 583.565187][T13416] send_sigurg+0x144/0x430 [ 583.569785][T13416] sk_send_sigurg+0x6e/0x2f0 [ 583.574549][T13416] queue_oob+0x4e3/0x680 [ 583.578970][T13416] unix_stream_sendmsg+0xd24/0xf80 [ 583.584257][T13416] __sock_sendmsg+0x221/0x270 [ 583.589128][T13416] ____sys_sendmsg+0x52a/0x7e0 [ 583.594076][T13416] __sys_sendmsg+0x292/0x380 [ 583.598866][T13416] do_syscall_64+0xf3/0x230 [ 583.603557][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.609644][T13416] [ 583.611965][T13416] [ 583.611965][T13416] stack backtrace: [ 583.617898][T13416] CPU: 1 UID: 3327 PID: 13416 Comm: syz.3.2762 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 583.628924][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 583.639342][T13416] Call Trace: [ 583.642633][T13416] [ 583.645568][T13416] dump_stack_lvl+0x241/0x360 [ 583.650275][T13416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.655757][T13416] ? __pfx__printk+0x10/0x10 [ 583.660364][T13416] ? print_shortest_lock_dependencies+0xf2/0x160 [ 583.666708][T13416] validate_chain+0x4ebd/0x5920 [ 583.671578][T13416] ? __pfx_validate_chain+0x10/0x10 [ 583.676789][T13416] ? __pfx_validate_chain+0x10/0x10 [ 583.682003][T13416] ? __lock_acquire+0x1384/0x2050 [ 583.687047][T13416] ? mark_lock+0x9a/0x360 [ 583.691385][T13416] __lock_acquire+0x1384/0x2050 [ 583.696257][T13416] lock_acquire+0x1ed/0x550 [ 583.700777][T13416] ? send_sigurg+0x144/0x430 [ 583.705379][T13416] ? __pfx_lock_acquire+0x10/0x10 [ 583.710421][T13416] ? do_raw_read_lock+0x3c/0x90 [ 583.715281][T13416] ? _raw_read_lock_irqsave+0xe9/0x130 [ 583.720754][T13416] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 583.726665][T13416] ? __pfx_lock_release+0x10/0x10 [ 583.731708][T13416] ? do_raw_spin_lock+0x14f/0x370 [ 583.736761][T13416] _raw_read_lock+0x36/0x50 [ 583.741269][T13416] ? send_sigurg+0x144/0x430 [ 583.745873][T13416] send_sigurg+0x144/0x430 [ 583.750297][T13416] ? do_raw_spin_unlock+0x13c/0x8b0 [ 583.755508][T13416] sk_send_sigurg+0x6e/0x2f0 [ 583.760105][T13416] queue_oob+0x4e3/0x680 [ 583.764365][T13416] ? __pfx_queue_oob+0x10/0x10 [ 583.769156][T13416] ? smack_socket_getpeersec_dgram+0x306/0x410 [ 583.775329][T13416] unix_stream_sendmsg+0xd24/0xf80 [ 583.780449][T13416] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 583.786884][T13416] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 583.792542][T13416] ? __pfx_lock_release+0x10/0x10 [ 583.797579][T13416] ? __import_iovec+0x590/0x870 [ 583.802436][T13416] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 583.808073][T13416] __sock_sendmsg+0x221/0x270 [ 583.812773][T13416] ____sys_sendmsg+0x52a/0x7e0 [ 583.817559][T13416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.822864][T13416] __sys_sendmsg+0x292/0x380 [ 583.827472][T13416] ? __pfx___sys_sendmsg+0x10/0x10 [ 583.832598][T13416] ? hook_file_set_fowner+0x17b/0x2a0 [ 583.837992][T13416] ? do_fcntl+0x1209/0x1a60 [ 583.842534][T13416] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 583.848889][T13416] ? do_syscall_64+0x100/0x230 [ 583.853665][T13416] ? do_syscall_64+0xb6/0x230 [ 583.858355][T13416] do_syscall_64+0xf3/0x230 [ 583.862878][T13416] ? clear_bhb_loop+0x35/0x90 [ 583.867565][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.873501][T13416] RIP: 0033:0x7fa7cc37e719 [ 583.877924][T13416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.897712][T13416] RSP: 002b:00007fa7cd1b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.906140][T13416] RAX: ffffffffffffffda RBX: 00007fa7cc535f80 RCX: 00007fa7cc37e719 [ 583.914118][T13416] RDX: 0000000024008881 RSI: 0000000020000080 RDI: 0000000000000003 [ 583.922111][T13416] RBP: 00007fa7cc3f139e R08: 0000000000000000 R09: 0000000000000000 [ 583.930089][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.938065][T13416] R13: 0000000000000000 R14: 00007fa7cc535f80 R15: 00007ffefbac6b28 [ 583.946051][T13416] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 583.986676][T12613] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 583.994088][T12613] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 584.005508][ T54] Bluetooth: hci3: command tx timeout [ 584.022718][T12613] usb 1-1: USB disconnect, device number 11 [ 584.564055][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.574317][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.584567][ T1137] bond0 (unregistering): Released all slaves [ 584.593658][ T1137] bond1 (unregistering): Released all slaves [ 584.607130][ T1137] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 584.619081][ T1137] bond2 (unregistering): Released all slaves [ 584.645683][T10275] syz_tun (unregistering): left promiscuous mode [ 584.884969][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.893186][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.901154][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.908674][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.928541][ T1137] veth1_macvtap: left promiscuous mode [ 584.934108][ T1137] veth0_macvtap: left promiscuous mode [ 584.939832][ T1137] veth1_vlan: left promiscuous mode [ 584.945190][ T1137] veth0_vlan: left promiscuous mode [ 585.232891][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 585.269561][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 585.743346][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.790562][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.851205][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.922084][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.995735][ T1137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.040872][ T1137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.081167][ T1137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.142948][ T1137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.210244][ T1137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.260703][ T1137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.301429][ T1137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.351384][ T1137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.447193][ T1137] bridge_slave_1: left allmulticast mode [ 586.452970][ T1137] bridge_slave_1: left promiscuous mode [ 586.461088][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.469609][ T1137] bridge_slave_0: left allmulticast mode [ 586.475259][ T1137] bridge_slave_0: left promiscuous mode [ 586.481964][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.491308][ T1137] bridge_slave_1: left allmulticast mode [ 586.497096][ T1137] bridge_slave_1: left promiscuous mode [ 586.502748][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.512881][ T1137] bridge_slave_0: left allmulticast mode [ 586.518686][ T1137] bridge_slave_0: left promiscuous mode [ 586.524331][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.534876][ T1137] bridge_slave_1: left allmulticast mode [ 586.541167][ T1137] bridge_slave_1: left promiscuous mode [ 586.546981][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.555238][ T1137] bridge_slave_0: left allmulticast mode [ 586.561138][ T1137] bridge_slave_0: left promiscuous mode [ 586.567602][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.913027][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.923347][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.933422][ T1137] bond0 (unregistering): Released all slaves [ 586.958738][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.969070][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.979474][ T1137] bond0 (unregistering): Released all slaves [ 586.994966][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.006256][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.016418][ T1137] bond0 (unregistering): Released all slaves [ 587.095384][ T1137] tipc: Left network mode [ 587.110139][ T1137] tipc: Left network mode [ 587.475606][ T1137] hsr_slave_0: left promiscuous mode [ 587.484299][ T1137] hsr_slave_1: left promiscuous mode [ 587.490605][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.498092][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.505743][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.514698][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.525145][ T1137] hsr_slave_0: left promiscuous mode [ 587.531189][ T1137] hsr_slave_1: left promiscuous mode [ 587.537259][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.544689][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.552586][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.560440][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.571907][ T1137] hsr_slave_0: left promiscuous mode [ 587.577809][ T1137] hsr_slave_1: left promiscuous mode [ 587.583660][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.591157][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.599144][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.606628][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.619429][ T1137] veth1_macvtap: left promiscuous mode [ 587.625057][ T1137] veth0_macvtap: left promiscuous mode [ 587.630894][ T1137] veth1_vlan: left promiscuous mode [ 587.636293][ T1137] veth0_vlan: left promiscuous mode [ 587.642525][ T1137] veth1_macvtap: left promiscuous mode [ 587.648856][ T1137] veth0_macvtap: left promiscuous mode [ 587.654453][ T1137] veth1_vlan: left promiscuous mode [ 587.659815][ T1137] veth0_vlan: left promiscuous mode [ 587.665774][ T1137] veth1_macvtap: left promiscuous mode [ 587.671402][ T1137] veth0_macvtap: left promiscuous mode [ 587.677056][ T1137] veth1_vlan: left promiscuous mode [ 587.682325][ T1137] veth0_vlan: left promiscuous mode [ 587.950994][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 587.979580][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 588.242314][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 588.274338][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 588.560244][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 588.589124][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 589.221817][ T1137] IPVS: stop unused estimator thread 0...