last executing test programs: 3m43.021032193s ago: executing program 2 (id=617): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x47, 0x114, 0x1, {{}, {0x0}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) 3m42.763030244s ago: executing program 2 (id=618): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x3, 0x7ffc, 0x1, 0x5, 0x40, {0x800000001, 0x180, 0x20ff, 0x9, 0x85, 0xd614, 0x5, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x8c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x49}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "46c9f8102f8144bc6a1983494a38cd1773aa19de14ad0ada"}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) 3m42.236308442s ago: executing program 2 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x7, 0xe1}, 0x10) 3m41.058068979s ago: executing program 2 (id=625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xadf9e01e72382fda, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x15, 0x1, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r0}, 0xc) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c0601001000bad775aa1b71ca", 0xe, r3) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0xfffffffffffffffc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r4, 0x1, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x6, 0x8, 0x7, 0x5}, {0x1546, 0x1, 0xff}, {0x8b, 0x5, 0xbc, 0x9}]}, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x48200, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f00000002c0)=""/61, 0x3d}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r6, 0x1, r2, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) 3m38.850918776s ago: executing program 2 (id=637): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000000), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) mount$afs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x160000, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x18, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) 3m37.817835117s ago: executing program 2 (id=643): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 3m36.471885711s ago: executing program 32 (id=643): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 13.946991197s ago: executing program 1 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x814) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 13.433630948s ago: executing program 1 (id=1296): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 12.360291195s ago: executing program 1 (id=1298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000400)='X', 0x1, 0x8884, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x25, 0x0, 0x1b}, 0x9c) 9.621646863s ago: executing program 1 (id=1313): syz_open_dev$dri(0x0, 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x443, 0x0, 0x1}}, 0x40) 8.614222321s ago: executing program 5 (id=1314): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x5}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$usbfs(0x0, 0x205, 0x2481) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x10, 0x700, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}}}}}) 7.201183751s ago: executing program 5 (id=1316): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) 6.857544565s ago: executing program 5 (id=1319): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000001cc0), 0x800) syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000040)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 6.042210547s ago: executing program 4 (id=1323): pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="17d615c9369ddb40cc4167ea6097286fd3a658ed744e37650844b52146d642c4276ac1f3fb", 0x25}], 0x1, 0x6, 0x9, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffdaf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.72437499s ago: executing program 0 (id=1324): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x5bce, 0x1, 0xe}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 5.724093618s ago: executing program 5 (id=1325): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x5bce, 0x1, 0xe}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x6, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) 5.723753349s ago: executing program 3 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munlockall() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x400, 0x1000, 0x1cc0014}) 4.660731586s ago: executing program 3 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 4.584009934s ago: executing program 4 (id=1328): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000c80), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00'}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 4.518975498s ago: executing program 0 (id=1329): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) 3.373196781s ago: executing program 4 (id=1330): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'vlan0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0413"], 0x6) 2.581201639s ago: executing program 3 (id=1331): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x8000108) r2 = syz_open_dev$vcsn(0x0, 0xff, 0x602500) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xfe47, 0x400, 0x1, 0x226}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.580589338s ago: executing program 0 (id=1332): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 2.382432582s ago: executing program 4 (id=1333): socket$inet_sctp(0x2, 0x5, 0x84) socket(0x18, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r1, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) 1.76592691s ago: executing program 1 (id=1334): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0xfc, 0x2}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x5}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.687965915s ago: executing program 0 (id=1335): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x4008000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) lseek(0xffffffffffffffff, 0x10000000005, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x69) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) 1.528214686s ago: executing program 4 (id=1336): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x84, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x84}}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.276255728s ago: executing program 3 (id=1337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x44010) 908.747784ms ago: executing program 5 (id=1338): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x7c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3e}, @broadcast, @broadcast, @random="67cbbc45ea70", {0x2, 0x3}}, 0x7, @random=0x9, 0x10, @val, @val, @void, @val={0x4, 0x6, {0xfb, 0x1, 0x800, 0x401}}, @val={0x6, 0x2, 0x2}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x80, 0x6}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3a, 0xe6, 0x18, 0x4}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 610.720925ms ago: executing program 0 (id=1339): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x5bce, 0x1, 0xe}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 522.290642ms ago: executing program 3 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0xd82, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 304.748414ms ago: executing program 5 (id=1341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x2) write$cgroup_type(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 266.262884ms ago: executing program 1 (id=1342): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 138.26731ms ago: executing program 4 (id=1343): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x10000, 0x0) r0 = memfd_create(&(0x7f0000000940)='\x00\x00\x04\x00\x1f\xd7\xdc1\x02{-3yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec>\xa2\x14\xb9\xa0\xfeA\x7f0\xee\xdeR\x94\x1f\xb8j\xc8;\x03\xfa):h\xffmkK\xef\x90\xfaC\f\x99\x18%\xaaa\b\xd8\f\xfb\xae\x0e\xb6\r\x04\x16\xb3\xdb\xf0\x97c\xddO\xceZD\xee/\xf7\xe3\xd5B\x88T\xc9\xf0\x8bJ\\\x1c\xa2&\f\xf7\x8eK\x9d\xe9\xca\x82\xd7\xa0b\xf4\xd2\xac&]\xe8&Knp\xd9\xe1\xe5F2\xf8\xa6+H\xc8\xa3\xe1[\xe3\xae\xcd\xd2\x89\xc1\x96<\xf0\xdf\xb8\xed\xa2\xb1\x9a\xf1vU9\xa9\xb9\x01\xc9\xf9\xcd\xf0]\x14I\xb4\x7f2\x84\xdb\xb7\x05\x8d\xa5\xf7{ww\xc8\xb8B\x90\xeci\x9bc{\xd0M\b%\x06\xd7\x17\xff\xc6\x8be\x9e\a\xe4\xb5 \xd9\x1c\xceM55\x99!\xcc\xac\\\b\xdc\x82\xf9\x87\x1em|\xc7\a,Fg4\x1d\xd9\xee\xd0|8\f\xcc\x7f\x15<8YW\x16zO9\xa7\x8a\xdd\xcc|\xbe\xda\x14\xf8\x8f\x94\xad\x90\xa51\xc6\xd0\xd7\x86\xb1\x15x\x12\xd2_?\xfa\xf8\xcd\xcf\xb7\x95\x1a\xd2Ue\xd5\xfb\\\x89\x11\xd0\xde\x04\x88L\x17Q\x94\x14\x0f\xc7\xdb\x86\x16|\xe9=\xee\x06U\x8a\xe8=\xe0\xf9\xce\xe4\xebM\a3\xba\x98\x9dv\xba\xfb\x7fk\xf0\x9a\xbf\x91KCC.B_:w\xff0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) write$binfmt_script(r0, &(0x7f0000000240), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 30.241094ms ago: executing program 0 (id=1344): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xff, [0x5, 0xffffffff], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) 0s ago: executing program 3 (id=1345): socket$inet(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xfffffffffffffe34) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): tdevsim3: renamed from eth3 [ 93.834349][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.845372][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.858678][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.894673][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.902055][ T5845] Bluetooth: hci4: command tx timeout [ 93.979641][ T5845] Bluetooth: hci0: command tx timeout [ 93.979660][ T5849] Bluetooth: hci1: command tx timeout [ 93.979672][ T51] Bluetooth: hci2: command tx timeout [ 94.053574][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.065601][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.072725][ T5845] Bluetooth: hci3: command tx timeout [ 94.095664][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.113748][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.207645][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.252476][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.265574][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.278050][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.291053][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.319016][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.356256][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.413765][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.421284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.450443][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.462328][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.469552][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.512326][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.526359][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.533679][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.598529][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.605860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.654856][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.675013][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.682243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.706821][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.747160][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.754619][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.845151][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.872385][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.887431][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.934976][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.942354][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.968443][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.975995][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.132854][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.202486][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.209756][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.253262][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.260676][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.353552][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.529667][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.653710][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.729778][ T5838] veth0_vlan: entered promiscuous mode [ 95.746621][ T5839] veth0_vlan: entered promiscuous mode [ 95.770622][ T5838] veth1_vlan: entered promiscuous mode [ 95.848538][ T5839] veth1_vlan: entered promiscuous mode [ 95.934950][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.951832][ T5835] veth0_vlan: entered promiscuous mode [ 95.964328][ T5838] veth0_macvtap: entered promiscuous mode [ 95.981533][ T5845] Bluetooth: hci4: command tx timeout [ 95.994334][ T5838] veth1_macvtap: entered promiscuous mode [ 96.018599][ T5839] veth0_macvtap: entered promiscuous mode [ 96.030988][ T5839] veth1_macvtap: entered promiscuous mode [ 96.045675][ T5835] veth1_vlan: entered promiscuous mode [ 96.060505][ T5845] Bluetooth: hci1: command tx timeout [ 96.060586][ T5849] Bluetooth: hci0: command tx timeout [ 96.066196][ T5845] Bluetooth: hci2: command tx timeout [ 96.111423][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.132075][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.140584][ T5845] Bluetooth: hci3: command tx timeout [ 96.142663][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.172229][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.197211][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.232291][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.243639][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.254390][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.263942][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.288113][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.301853][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.311284][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.320611][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.366273][ T5835] veth0_macvtap: entered promiscuous mode [ 96.384858][ T5835] veth1_macvtap: entered promiscuous mode [ 96.394049][ T5834] veth0_vlan: entered promiscuous mode [ 96.447525][ T5834] veth1_vlan: entered promiscuous mode [ 96.521141][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.586326][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.622402][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.633338][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.642641][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.655155][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.711151][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.722426][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.739741][ T5834] veth0_macvtap: entered promiscuous mode [ 96.767869][ T5834] veth1_macvtap: entered promiscuous mode [ 96.804233][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.818135][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.846739][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.855352][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.876449][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.923041][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.937443][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.947333][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.984724][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.994137][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.003847][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.013286][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.068545][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.091107][ T5836] veth0_vlan: entered promiscuous mode [ 97.140461][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.145590][ T5836] veth1_vlan: entered promiscuous mode [ 97.148339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.263045][ T24] cfg80211: failed to load regulatory.db [ 97.395579][ T5836] veth0_macvtap: entered promiscuous mode [ 97.535840][ T5836] veth1_macvtap: entered promiscuous mode [ 97.817877][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.940758][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.940836][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.069646][ T5845] Bluetooth: hci4: command tx timeout [ 98.164567][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.169362][ T5845] Bluetooth: hci0: command tx timeout [ 98.169413][ T5845] Bluetooth: hci1: command tx timeout [ 98.169445][ T5845] Bluetooth: hci2: command tx timeout [ 98.217541][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.226589][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.233100][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.233160][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.233190][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.233219][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.249428][ T5849] Bluetooth: hci3: command tx timeout [ 98.434812][ T5969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.614365][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.624072][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.724131][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.755390][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.800647][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.935904][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.958524][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.981032][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 99.024730][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.026009][ T5926] usb 3-1: config 1 has no interface number 0 [ 99.092862][ T5926] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.139211][ T5926] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 99.217672][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.267862][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.313144][ T5926] usb 3-1: Product: syz [ 99.347459][ T5926] usb 3-1: Manufacturer: syz [ 99.368750][ T5926] usb 3-1: SerialNumber: syz [ 100.718241][ T5926] cdc_ncm 3-1:1.1: bind() failure [ 100.799177][ T1208] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.827085][ T5926] usb 3-1: USB disconnect, device number 2 [ 101.725703][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.765653][ T1208] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.783649][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.803262][ T1208] usb 4-1: config 0 descriptor?? [ 102.709306][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.110320][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 103.129467][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.163630][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.195114][ T24] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 103.233219][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.253025][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 103.284088][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.354092][ T1208] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 103.370777][ T24] usb 1-1: config 0 descriptor?? [ 103.375432][ T1208] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 103.744735][ T6028] input: syz0 as /devices/virtual/input/input6 [ 104.671579][ T1208] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 104.752704][ T24] hid (null): unknown global tag 0xd [ 104.889528][ T24] hid (null): invalid report_size 1580868749 [ 104.899709][ T24] hid (null): unknown global tag 0xe [ 105.051078][ T24] usb 1-1: USB disconnect, device number 2 [ 105.760314][ T1208] usb 4-1: USB disconnect, device number 2 [ 105.989203][ T6059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.953474][ T6076] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.697219][ T1208] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.889161][ T1208] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 107.923069][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.949136][ T1208] usb 5-1: Product: syz [ 107.959790][ T1208] usb 5-1: Manufacturer: syz [ 107.969178][ T1208] usb 5-1: SerialNumber: syz [ 107.988898][ T1208] usb 5-1: config 0 descriptor?? [ 109.053898][ T5847] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.122221][ T1208] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 109.239378][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 109.429386][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.707828][ T1208] asix 5-1:0.0: probe with driver asix failed with error -71 [ 109.734541][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.749985][ T5847] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.759494][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.780854][ T5847] usb 3-1: config 0 descriptor?? [ 109.841202][ T5847] hub 3-1:0.0: USB hub found [ 109.861443][ T1208] usb 5-1: USB disconnect, device number 2 [ 110.019293][ T5847] hub 3-1:0.0: 1 port detected [ 110.236862][ T5847] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 110.253486][ T5847] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 110.292059][ T5847] usbhid 3-1:0.0: can't add hid device: -71 [ 110.298174][ T5847] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 110.376997][ T5847] usb 3-1: USB disconnect, device number 3 [ 110.759322][ T1208] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.919236][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 110.931777][ T1208] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 110.955612][ T1208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.025466][ T1208] usb 5-1: config 0 has no interface number 0 [ 111.040449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.051393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 111.060963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.789322][ T1208] usb 5-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.801299][ T30] audit: type=1326 audit(1752668302.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 111.810983][ T6163] tty tty3: ldisc open failed (-12), clearing slot 2 [ 112.005443][ T1208] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 112.059188][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.067529][ T1208] usb 5-1: Product: syz [ 112.103368][ T1208] usb 5-1: Manufacturer: syz [ 112.108140][ T1208] usb 5-1: SerialNumber: syz [ 112.109463][ T30] audit: type=1326 audit(1752668302.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 112.187308][ T1208] usb 5-1: config 0 descriptor?? [ 112.317433][ T30] audit: type=1326 audit(1752668302.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 112.412608][ T30] audit: type=1326 audit(1752668302.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 112.580939][ T1208] smsc95xx v2.0.0 [ 112.591878][ T1208] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 112.785601][ T6172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.992709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.002265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.096492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.197456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.207046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.500046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.556148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.639389][ T1208] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 113.695846][ T1208] usb 5-1: USB disconnect, device number 3 [ 113.716187][ T30] audit: type=1326 audit(1752668302.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 113.737872][ T30] audit: type=1326 audit(1752668302.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 113.752177][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 113.759554][ T30] audit: type=1326 audit(1752668302.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 113.843728][ T30] audit: type=1326 audit(1752668302.250:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 113.874925][ T30] audit: type=1326 audit(1752668302.250:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 113.916103][ T30] audit: type=1326 audit(1752668302.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 117.412358][ T6206] Zero length message leads to an empty skb [ 122.536173][ T5828] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 122.624509][ T5828] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 122.651371][ T5828] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 122.697569][ T5828] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 123.311471][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 123.821690][ T6272] fido_id[6272]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 124.269225][ T5828] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.441829][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 124.480716][ T5828] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 124.502761][ T5828] usb 4-1: config 0 has no interface number 0 [ 124.718252][ T5828] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 124.729939][ T5828] usb 4-1: config 0 interface 196 has no altsetting 0 [ 124.739256][ T5828] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 124.749390][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.758101][ T5828] usb 4-1: Product: syz [ 124.768791][ T5828] usb 4-1: Manufacturer: syz [ 124.774654][ T5828] usb 4-1: SerialNumber: syz [ 124.790107][ T5828] usb 4-1: config 0 descriptor?? [ 124.796044][ T6288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.625783][ T5828] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 125.647782][ T5828] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 125.850209][ T5847] usb 4-1: USB disconnect, device number 3 [ 127.835437][ T6346] Bluetooth: hci5: Frame reassembly failed (-90) [ 127.885210][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 129.899824][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 129.977177][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.643044][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 130.668838][ T6383] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 130.676922][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 132.402143][ T6406] netlink: 'syz.4.156': attribute type 13 has an invalid length. [ 133.176650][ T6406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.342051][ T6442] xt_bpf: check failed: parse error [ 138.224075][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.354197][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.371143][ T6473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.643555][ T6487] netlink: 48 bytes leftover after parsing attributes in process `syz.4.190'. [ 141.709999][ T6527] netlink: 48 bytes leftover after parsing attributes in process `syz.4.203'. [ 142.059671][ T5956] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.337124][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.352441][ T5956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.370150][ T5956] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.409209][ T5956] usb 5-1: config 1 interface 1 has no altsetting 0 [ 142.428629][ T5956] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.460812][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.475807][ T5956] usb 5-1: Product: syz [ 142.499759][ T5956] usb 5-1: Manufacturer: syz [ 142.504459][ T5956] usb 5-1: SerialNumber: syz [ 142.773178][ T5956] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 142.821572][ T5956] usb 5-1: found format II with max.bitrate = 2418, frame size=7 [ 142.843186][ T5956] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 142.863301][ T5956] usb 5-1: found format II with max.bitrate = 2418, frame size=7 [ 142.978157][ T6006] udevd[6006]: failed to send result of seq 11620 to main daemon: Connection refused [ 142.998309][ T5956] usb 5-1: USB disconnect, device number 4 [ 143.005435][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 143.806851][ T6566] netlink: 96 bytes leftover after parsing attributes in process `syz.2.220'. [ 143.967997][ T6572] x_tables: ip_tables: ah match: only valid for protocol 51 [ 144.648608][ T6608] netlink: 'syz.3.233': attribute type 13 has an invalid length. [ 144.998555][ T6608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.660782][ T6628] syz.2.243 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 147.299177][ T5926] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.206522][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.214998][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.225585][ T6643] bridge0: entered allmulticast mode [ 148.379785][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 148.387858][ T5926] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.864332][ T6647] netlink: 'syz.2.251': attribute type 13 has an invalid length. [ 149.395721][ T5926] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.593304][ T6647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.311837][ T5926] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 150.329801][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.336496][ T5926] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 150.346238][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.366475][ T5926] usb 5-1: config 0 descriptor?? [ 150.394660][ T5926] usb 5-1: can't set config #0, error -71 [ 150.410800][ T5926] usb 5-1: USB disconnect, device number 5 [ 152.419185][ T1208] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 152.627378][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.667173][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 152.710287][ T1208] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 152.769270][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.845608][ T1208] usb 4-1: config 0 descriptor?? [ 152.856190][ T6671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.099452][ T6696] serio: Serial port ptm0 [ 154.450780][ T6701] 9pnet_fd: Insufficient options for proto=fd [ 154.655276][ T1208] koneplus 0003:1E7D:2D51.0004: item fetching failed at offset 5/7 [ 154.664877][ T1208] koneplus 0003:1E7D:2D51.0004: parse failed [ 154.673037][ T1208] koneplus 0003:1E7D:2D51.0004: probe with driver koneplus failed with error -22 [ 154.686683][ T1208] usb 4-1: USB disconnect, device number 4 [ 156.257902][ T6733] input: syz1 as /devices/virtual/input/input8 [ 161.159320][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.292'. [ 164.861411][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 164.957189][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.308'. [ 165.318007][ T6830] netlink: 'syz.0.304': attribute type 13 has an invalid length. [ 165.368664][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.375972][ T6830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.384385][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.391634][ T6830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.411117][ T6830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.431245][ T5956] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 165.601696][ T5956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.668377][ T5956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.703449][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.738397][ T5956] usb 5-1: Product: syz [ 166.015305][ T5956] usb 5-1: Manufacturer: syz [ 166.029183][ T5956] usb 5-1: SerialNumber: syz [ 167.112166][ T5956] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 167.119820][ T5956] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 167.127646][ T5956] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 167.378738][ T5956] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 167.870194][ T5956] usb 5-1: USB disconnect, device number 6 [ 167.877708][ T5956] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 171.124923][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 171.147867][ T6915] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 171.163682][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 174.487299][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 174.769211][ T5992] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.957861][ T5992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.989984][ T5992] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.042716][ T5992] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.079202][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.163292][ T5992] usb 4-1: config 0 descriptor?? [ 175.239326][ T5992] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 176.302982][ T5992] usb 4-1: USB disconnect, device number 5 [ 176.955156][ T6955] netlink: 'syz.2.356': attribute type 13 has an invalid length. [ 177.184512][ T6955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.510087][ T5992] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.760897][ T5992] usb 4-1: device descriptor read/all, error -71 [ 179.459858][ T6988] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.015546][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 180.047676][ T6996] netlink: 'syz.4.362': attribute type 1 has an invalid length. [ 180.107232][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 181.602144][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 182.395900][ T7033] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.589644][ T7062] netlink: 'syz.2.394': attribute type 322 has an invalid length. [ 185.828850][ T5992] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 186.881252][ T5992] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 186.899362][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.403760][ T7088] xt_hashlimit: size too large, truncated to 1048576 [ 187.436049][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.463273][ T5992] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 187.546114][ T5992] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 187.755203][ T5992] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 187.800583][ T5992] usb 4-1: Manufacturer: syz [ 187.858160][ T5992] usb 4-1: config 0 descriptor?? [ 188.106492][ T7098] xt_hashlimit: size too large, truncated to 1048576 [ 188.279532][ T1208] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.302402][ T5992] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 188.416409][ T5992] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 188.505201][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.553240][ T1208] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.592897][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.634455][ T1208] usb 3-1: config 0 descriptor?? [ 188.643265][ T5926] usb 4-1: USB disconnect, device number 8 [ 189.114662][ T1208] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 189.141924][ T1208] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input9 [ 189.900186][ T7108] ip6tnl1: entered allmulticast mode [ 190.068934][ T1208] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 190.123034][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.409'. [ 190.176436][ T1208] usb 3-1: USB disconnect, device number 4 [ 194.899920][ T7170] overlayfs: failed to resolve './file1': -2 [ 199.881710][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.888102][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.337836][ T7215] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 203.091116][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.442'. [ 203.589196][ T5992] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 203.760145][ T5992] usb 4-1: Using ep0 maxpacket: 16 [ 203.769443][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.789231][ T5992] usb 4-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 203.808666][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.825861][ T5992] usb 4-1: config 0 descriptor?? [ 204.273663][ T5992] wacom 0003:056A:0100.0007: ignoring exceeding usage max [ 204.573550][ T7252] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 205.079930][ T1208] usb 4-1: USB disconnect, device number 9 [ 207.196540][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 209.618236][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'. [ 211.688617][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 212.009342][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 212.017596][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 212.024888][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 212.032367][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 213.219397][ T7317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.467'. [ 214.216970][ T7334] netlink: 76 bytes leftover after parsing attributes in process `syz.4.475'. [ 215.817913][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 216.567443][ T7394] syz.1.477 (7394) used greatest stack depth: 16432 bytes left [ 217.159429][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 217.861320][ T7408] wireguard0: entered promiscuous mode [ 217.875867][ T7408] wireguard0: entered allmulticast mode [ 218.698666][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'. [ 220.049175][ T5992] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 220.229296][ T5992] usb 4-1: Using ep0 maxpacket: 8 [ 220.237604][ T5992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.259263][ T5992] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 220.294743][ T5992] usb 4-1: config 0 has no interface number 0 [ 220.330584][ T5992] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 220.377604][ T5992] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 220.408087][ T5992] usb 4-1: config 0 interface 88 has no altsetting 0 [ 221.424385][ T5992] usb 4-1: language id specifier not provided by device, defaulting to English [ 222.555735][ T5992] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 222.605048][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 222.670779][ T5992] usb 4-1: config 0 descriptor?? [ 222.719361][ T5992] usb 4-1: can't set config #0, error -71 [ 222.789208][ T5992] usb 4-1: USB disconnect, device number 10 [ 226.801146][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 226.970993][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 226.981251][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.019374][ T24] usb 5-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 227.039131][ T24] usb 5-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 227.060232][ T24] usb 5-1: config 12 interface 0 has no altsetting 0 [ 227.088262][ T24] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 227.131709][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.152476][ T24] usb 5-1: Product: syz [ 227.156749][ T24] usb 5-1: Manufacturer: syz [ 227.170732][ T24] usb 5-1: SerialNumber: syz [ 227.408740][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.416191][ T24] usb 5-1: selecting invalid altsetting 0 [ 227.725921][ T24] snd-usb-audio 5-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 227.753230][ T24] usb 5-1: USB disconnect, device number 7 [ 229.869148][ T5926] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.039292][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 230.061621][ T5926] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 230.095088][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.129966][ T5926] usb 3-1: Product: syz [ 230.144979][ T5926] usb 3-1: Manufacturer: syz [ 230.165768][ T5926] usb 3-1: SerialNumber: syz [ 230.196220][ T5926] usb 3-1: config 0 descriptor?? [ 230.273624][ T5926] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 230.310961][ T5926] usb 3-1: Detected FT232H [ 230.623127][ T5926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 230.653625][ T5926] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 230.716877][ T5926] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.785696][ T5926] usb 3-1: USB disconnect, device number 5 [ 230.850053][ T5926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 230.908790][ T5926] ftdi_sio 3-1:0.0: device disconnected [ 231.199921][ T7509] binder_alloc: 7507: binder_alloc_buf, no vma [ 232.680963][ T7543] netlink: 'syz.0.525': attribute type 13 has an invalid length. [ 232.818388][ T7543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.396235][ T7540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3232604010 (103443328320 ns) > initial count (73457853792 ns). Using initial count to start timer. [ 234.777055][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 234.800348][ T7559] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 234.808757][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 240.719138][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 240.898619][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 240.908951][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 240.919297][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 240.948397][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 240.979106][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.999710][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.021309][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.037911][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.048113][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.061748][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 241.184407][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.195427][ T9] usb 1-1: config 0 descriptor?? [ 241.420488][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 241.452020][ T9] usb 1-1: USB disconnect, device number 3 [ 241.477495][ T9] usblp0: removed [ 241.707142][ T7611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 242.519125][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 242.656315][ T7622] warning: `syz.3.551' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 242.692210][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 242.707658][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 242.718359][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 242.749154][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 242.764321][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.782833][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.804937][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.820748][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 242.831369][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 242.860349][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 242.877435][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.896595][ T9] usb 1-1: config 0 descriptor?? [ 243.176161][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.051068][ T9] usb 1-1: USB disconnect, device number 4 [ 244.061988][ T9] usblp0: removed [ 245.989337][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 246.169937][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 248.132220][ T5926] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.147936][ T5926] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.158287][ T5926] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 248.172975][ T5926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.587114][ T5926] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 248.596440][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.612038][ T5926] usb 1-1: config 0 descriptor?? [ 248.851405][ T5926] usbhid 1-1:0.0: can't add hid device: -71 [ 248.997856][ T5926] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 249.008479][ T5926] usb 1-1: USB disconnect, device number 5 [ 249.839311][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 252.238018][ T7781] capability: warning: `syz.2.613' uses deprecated v2 capabilities in a way that may be insecure [ 252.455769][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 252.518350][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 255.044848][ T7815] PKCS7: Unknown OID: [4] 0.0 [ 255.060396][ T7815] PKCS7: Only support pkcs7_signedData type [ 255.074975][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 255.074995][ T30] audit: type=1326 audit(1752668454.943:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 255.154284][ T30] audit: type=1326 audit(1752668454.973:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 255.209945][ T30] audit: type=1326 audit(1752668454.973:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 255.231456][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.352201][ T30] audit: type=1326 audit(1752668454.973:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 255.458076][ T30] audit: type=1326 audit(1752668454.973:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 255.723146][ T30] audit: type=1326 audit(1752668454.973:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 255.745608][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.199506][ T30] audit: type=1326 audit(1752668454.973:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 256.465882][ T30] audit: type=1326 audit(1752668454.973:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 256.512012][ T30] audit: type=1326 audit(1752668454.973:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 256.537438][ T30] audit: type=1326 audit(1752668454.973:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a38e929 code=0x7fc00000 [ 257.130299][ T7856] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 258.610045][ T3523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.838432][ T3523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.020899][ T3523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.698296][ T7893] syz.1.650 uses obsolete (PF_INET,SOCK_PACKET) [ 260.726666][ T3523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.069241][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 261.104176][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.114021][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.239179][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 261.294146][ T3523] bridge_slave_1: left allmulticast mode [ 261.304311][ T3523] bridge_slave_1: left promiscuous mode [ 261.314021][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 261.315862][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.354191][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 261.372932][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.396272][ T9] usb 1-1: Product: syz [ 261.406275][ T9] usb 1-1: Manufacturer: syz [ 261.417474][ T9] usb 1-1: SerialNumber: syz [ 261.457680][ T9] usb 1-1: config 0 descriptor?? [ 261.467437][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.478973][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.487716][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.497892][ T3523] bridge_slave_0: left allmulticast mode [ 261.506526][ T3523] bridge_slave_0: left promiscuous mode [ 261.516020][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.581238][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.606190][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.621143][ T9] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 261.877963][ T9] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 261.905838][ T9] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 262.096647][ T9] usb 1-1: USB disconnect, device number 6 [ 262.389808][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.421464][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.432824][ T3523] bond0 (unregistering): Released all slaves [ 262.683292][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 263.739358][ T5847] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 263.757444][ T5849] Bluetooth: hci4: command tx timeout [ 263.941082][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 264.018420][ T5847] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 264.039089][ T5847] usb 1-1: config 0 has no interface number 0 [ 264.060623][ T5847] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 264.089065][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.100823][ T5847] usb 1-1: Product: syz [ 264.105070][ T5847] usb 1-1: Manufacturer: syz [ 264.122065][ T5847] usb 1-1: SerialNumber: syz [ 264.139140][ T5847] usb 1-1: config 0 descriptor?? [ 264.170757][ T5847] smsc95xx v2.0.0 [ 264.382950][ T3523] hsr_slave_0: left promiscuous mode [ 264.471392][ T3523] hsr_slave_1: left promiscuous mode [ 264.480084][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.487783][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.506100][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.534667][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.635423][ T3523] veth1_macvtap: left promiscuous mode [ 264.671363][ T3523] veth0_macvtap: left promiscuous mode [ 264.697926][ T3523] veth1_vlan: left promiscuous mode [ 264.718120][ T3523] veth0_vlan: left promiscuous mode [ 265.836736][ T5849] Bluetooth: hci4: command tx timeout [ 265.959851][ T5847] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 265.972399][ T5847] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 265.986101][ T5847] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 266.002176][ T5847] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 266.046363][ T5847] usb 1-1: USB disconnect, device number 7 [ 268.315127][ T5849] Bluetooth: hci4: command tx timeout [ 268.840914][ T7960] PKCS8: Unsupported PKCS#8 version [ 270.379335][ T5849] Bluetooth: hci4: command tx timeout [ 271.620980][ T7970] comedi comedi4: bad chanlist[0]=0x00400004 chan=4 range length=2 [ 271.966170][ T7981] netlink: 68 bytes leftover after parsing attributes in process `syz.4.681'. [ 274.026993][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 275.606443][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 276.229111][ T1208] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 276.441597][ T1208] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 276.451096][ T1208] usb 2-1: config 0 has no interface number 0 [ 276.457269][ T1208] usb 2-1: config 0 interface 255 has no altsetting 0 [ 276.489152][ T1208] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.502124][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.532214][ T1208] usb 2-1: config 0 descriptor?? [ 276.541129][ T1208] cp210x 2-1:0.255: cp210x converter detected [ 276.745925][ T7902] chnl_net:caif_netlink_parms(): no params data found [ 276.947079][ T1208] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 278.538617][ T1208] cp210x 2-1:0.255: GPIO initialisation failed: -19 [ 278.670395][ T1208] usb 2-1: cp210x converter now attached to ttyUSB0 [ 278.731319][ T1208] usb 2-1: USB disconnect, device number 2 [ 278.759772][ T1208] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.777252][ T1208] cp210x 2-1:0.255: device disconnected [ 279.001353][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.008792][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.017167][ T7902] bridge_slave_0: entered allmulticast mode [ 279.026540][ T7902] bridge_slave_0: entered promiscuous mode [ 279.040587][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.047992][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.055721][ T7902] bridge_slave_1: entered allmulticast mode [ 279.071665][ T7902] bridge_slave_1: entered promiscuous mode [ 279.374129][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.404344][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.471332][ T7902] team0: Port device team_slave_0 added [ 282.635102][ T7902] team0: Port device team_slave_1 added [ 284.494314][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.501715][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.529715][ T7902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.551177][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.558342][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.611058][ T7902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.789713][ T1208] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 284.821845][ T7902] hsr_slave_0: entered promiscuous mode [ 284.839612][ T7902] hsr_slave_1: entered promiscuous mode [ 284.980951][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 285.050748][ T1208] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 285.069024][ T1208] usb 2-1: config 0 has no interface number 0 [ 285.099341][ T1208] usb 2-1: config 0 interface 184 has no altsetting 0 [ 285.120559][ T1208] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 285.141086][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.169314][ T1208] usb 2-1: Product: syz [ 285.178208][ T1208] usb 2-1: Manufacturer: syz [ 285.194367][ T1208] usb 2-1: SerialNumber: syz [ 285.207579][ T1208] usb 2-1: config 0 descriptor?? [ 285.222553][ T1208] smsc75xx v1.0.0 [ 285.868441][ T1208] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 285.899207][ T1208] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 286.086328][ T7902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.104951][ T7902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.141243][ T7902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.177378][ T7902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.424468][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.473221][ T7902] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.504537][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.511908][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.536402][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.543770][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.805655][ T7902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.957131][ T8084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.681243][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 287.681257][ T30] audit: type=1326 audit(1752668486.853:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 287.905315][ T1208] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 287.916630][ T7902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.929194][ T30] audit: type=1326 audit(1752668486.853:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 287.959098][ T1208] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 287.994805][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 288.066726][ T30] audit: type=1326 audit(1752668486.853:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 288.073062][ T1208] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 288.359391][ T30] audit: type=1326 audit(1752668486.853:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 288.381264][ T1208] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 288.441999][ T1208] usb 2-1: USB disconnect, device number 3 [ 288.533877][ T30] audit: type=1326 audit(1752668486.853:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 288.617815][ T30] audit: type=1326 audit(1752668486.853:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f298af8d58a code=0x7ffc0000 [ 288.759957][ T30] audit: type=1326 audit(1752668486.853:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f298afc11e5 code=0x7ffc0000 [ 288.824598][ T30] audit: type=1326 audit(1752668487.053:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 288.898534][ T30] audit: type=1326 audit(1752668487.053:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 288.979293][ T30] audit: type=1326 audit(1752668487.063:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 289.091922][ T7902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.080698][ T1208] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 290.360846][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 290.444947][ T1208] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 290.469107][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.507204][ T1208] usb 2-1: Product: syz [ 290.542287][ T1208] usb 2-1: Manufacturer: syz [ 290.567361][ T1208] usb 2-1: SerialNumber: syz [ 290.582839][ T1208] usb 2-1: config 0 descriptor?? [ 291.096781][ T1208] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 291.127274][ T1208] usb 2-1: USB disconnect, device number 4 [ 291.454828][ T7902] veth0_vlan: entered promiscuous mode [ 291.552133][ T7902] veth1_vlan: entered promiscuous mode [ 291.626400][ T7902] veth0_macvtap: entered promiscuous mode [ 291.648560][ T7902] veth1_macvtap: entered promiscuous mode [ 291.742215][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.806225][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.944395][ T8131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.503603][ T7902] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.529090][ T7902] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.538184][ T7902] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.547848][ T7902] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.074714][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.106568][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.167379][ T7370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.197450][ T7370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.599759][ T8153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.089289][ T8175] netlink: 24 bytes leftover after parsing attributes in process `syz.5.732'. [ 297.337904][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.734'. [ 300.077824][ T5992] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 300.429082][ T5992] usb 1-1: Using ep0 maxpacket: 32 [ 300.453030][ T5992] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 300.471582][ T5992] usb 1-1: config 0 has no interface number 0 [ 300.477797][ T5992] usb 1-1: config 0 interface 184 has no altsetting 0 [ 300.528305][ T5992] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 300.571091][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.581004][ T5992] usb 1-1: Product: syz [ 300.585328][ T5992] usb 1-1: Manufacturer: syz [ 300.599052][ T5992] usb 1-1: SerialNumber: syz [ 300.616461][ T5992] usb 1-1: config 0 descriptor?? [ 300.648517][ T5992] smsc75xx v1.0.0 [ 301.264613][ T5992] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 301.282454][ T5992] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 301.733447][ T8221] sctp: [Deprecated]: syz.3.748 (pid 8221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.733447][ T8221] Use struct sctp_sack_info instead [ 302.698778][ T5992] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 302.713962][ T5992] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 302.727922][ T5992] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 302.737713][ T5992] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 302.753085][ T5992] usb 1-1: USB disconnect, device number 8 [ 303.019274][ T1208] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 303.975523][ T1208] usb 2-1: config 0 interface 0 altsetting 183 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.994190][ T1208] usb 2-1: config 0 interface 0 has no altsetting 0 [ 304.022011][ T1208] usb 2-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 304.053138][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.580080][ T1208] usb 2-1: config 0 descriptor?? [ 305.682950][ T1208] aquacomputer_d5next 0003:0C70:F012.0008: hidraw0: USB HID v8.00 Device [HID 0c70:f012] on usb-dummy_hcd.1-1/input0 [ 305.877445][ T1208] usb 2-1: USB disconnect, device number 5 [ 306.109165][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 307.029207][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 307.048179][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 307.057771][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.074887][ T24] usb 4-1: config 0 descriptor?? [ 307.189104][ T5847] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 307.743735][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.103954][ T5847] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 308.113515][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.147479][ T5847] usb 1-1: config 0 descriptor?? [ 308.160181][ T5847] pwc: Askey VC010 type 2 USB webcam detected. [ 308.238946][ T8273] overlayfs: failed to resolve './file1/file0': -2 [ 308.569295][ T5847] pwc: recv_control_msg error -32 req 02 val 2b00 [ 308.594070][ T5847] pwc: recv_control_msg error -32 req 02 val 2700 [ 308.607371][ T5847] pwc: recv_control_msg error -32 req 02 val 2c00 [ 308.617676][ T5847] pwc: recv_control_msg error -32 req 04 val 1000 [ 308.626178][ T5847] pwc: recv_control_msg error -32 req 04 val 1300 [ 308.634162][ T5847] pwc: recv_control_msg error -32 req 04 val 1400 [ 308.642265][ T5847] pwc: recv_control_msg error -32 req 02 val 2000 [ 308.650801][ T5847] pwc: recv_control_msg error -32 req 02 val 2100 [ 308.866020][ T5847] pwc: recv_control_msg error -71 req 04 val 1500 [ 308.873453][ T5847] pwc: recv_control_msg error -71 req 02 val 2500 [ 308.881541][ T5847] pwc: recv_control_msg error -71 req 02 val 2400 [ 308.890661][ T5847] pwc: recv_control_msg error -71 req 02 val 2600 [ 308.897660][ T5847] pwc: recv_control_msg error -71 req 02 val 2900 [ 308.905061][ T5847] pwc: recv_control_msg error -71 req 02 val 2800 [ 308.913207][ T5847] pwc: recv_control_msg error -71 req 04 val 1100 [ 308.920549][ T5847] pwc: recv_control_msg error -71 req 04 val 1200 [ 308.934967][ T5847] pwc: Registered as video103. [ 308.965554][ T5847] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 309.308905][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 309.384689][ T5847] usb 1-1: USB disconnect, device number 9 [ 309.450149][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 309.615292][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 309.627726][ T24] usb 4-1: USB disconnect, device number 11 [ 309.919892][ T5956] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.341637][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 310.436310][ T5956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 310.451944][ T5956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.471042][ T5956] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.554758][ T5956] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.587181][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.621840][ T5956] usb 5-1: Product: syz [ 310.642469][ T5956] usb 5-1: Manufacturer: syz [ 310.667556][ T5956] usb 5-1: SerialNumber: syz [ 310.745204][ T8302] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 311.147019][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.778'. [ 311.247493][ T5956] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 312.134590][ T5956] usb 5-1: current rate 9289341 is different from the runtime rate 9338507 [ 312.567560][ T8324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.612038][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 312.612080][ T30] audit: type=1326 audit(1752668512.453:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe58e929 code=0x7ffc0000 [ 313.176356][ T30] audit: type=1326 audit(1752668512.453:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe58e929 code=0x7ffc0000 [ 313.237434][ T5956] usb 5-1: USB disconnect, device number 8 [ 313.320474][ T30] audit: type=1326 audit(1752668512.453:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38fe58e929 code=0x7ffc0000 [ 313.345045][ T30] audit: type=1326 audit(1752668512.453:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe58e929 code=0x7ffc0000 [ 313.379279][ T30] audit: type=1326 audit(1752668512.453:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe58e929 code=0x7ffc0000 [ 313.441793][ T30] audit: type=1326 audit(1752668512.453:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f38fe58d58a code=0x7ffc0000 [ 313.515692][ T30] audit: type=1326 audit(1752668512.453:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f38fe5c11e5 code=0x7ffc0000 [ 313.575641][ T30] audit: type=1326 audit(1752668512.653:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe58e929 code=0x7ffc0000 [ 313.614524][ T30] audit: type=1326 audit(1752668512.653:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe58e929 code=0x7ffc0000 [ 315.610151][ T5992] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 316.722962][ T5992] usb 6-1: Using ep0 maxpacket: 32 [ 316.731427][ T5992] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 316.743392][ T5992] usb 6-1: config 0 has no interface number 0 [ 316.749644][ T5992] usb 6-1: config 0 interface 184 has no altsetting 0 [ 316.759284][ T5992] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 316.770214][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.785212][ T5992] usb 6-1: Product: syz [ 316.789531][ T5992] usb 6-1: Manufacturer: syz [ 316.794190][ T5992] usb 6-1: SerialNumber: syz [ 316.811587][ T5992] usb 6-1: config 0 descriptor?? [ 316.820245][ T5992] smsc75xx v1.0.0 [ 318.327334][ T5992] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 318.342868][ T5992] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 319.416513][ T5992] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 319.718378][ T5992] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 319.785793][ T5992] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 319.856194][ T5992] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 319.887944][ T5992] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 319.926294][ T8402] kvm: apic: phys broadcast and lowest prio [ 319.964946][ T5992] usb 6-1: USB disconnect, device number 2 [ 320.197994][ T8415] process 'syz.3.806' launched './file0' with NULL argv: empty string added [ 321.575772][ T5992] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 321.645135][ T5926] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 321.735645][ T5992] usb 2-1: Using ep0 maxpacket: 32 [ 321.768719][ T5992] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 321.793001][ T5992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.815523][ T5992] usb 2-1: config 0 has no interface number 0 [ 321.824648][ T5992] usb 2-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=7b.90 [ 321.858226][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.868110][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.908291][ T5992] usb 2-1: config 0 descriptor?? [ 321.916157][ T5926] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 321.944969][ T5992] gspca_main: spca500-2.14.0 probing 06be:0800 [ 321.952423][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.983061][ T5926] usb 4-1: config 0 descriptor?? [ 322.017709][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 322.185208][ T5828] usb 2-1: USB disconnect, device number 6 [ 322.441174][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 322.450374][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 322.463185][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00 [ 322.475568][ T5926] pwc: recv_control_msg error -32 req 04 val 1000 [ 322.483190][ T5926] pwc: recv_control_msg error -32 req 04 val 1300 [ 322.490808][ T5926] pwc: recv_control_msg error -32 req 04 val 1400 [ 322.500647][ T5926] pwc: recv_control_msg error -32 req 02 val 2000 [ 322.507543][ T5992] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 322.549639][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.564678][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.677062][ T5992] usb 1-1: config 0 interface 0 altsetting 183 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.693351][ T5992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.710527][ T5992] usb 1-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 322.723305][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.741611][ T5992] usb 1-1: config 0 descriptor?? [ 322.779705][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 322.800919][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 322.839703][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 322.859964][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 322.874031][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 322.881587][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 322.902287][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 322.912575][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 322.927880][ T5926] pwc: Registered as video103. [ 322.945938][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 322.995259][ T5926] usb 4-1: USB disconnect, device number 12 [ 323.176807][ T5992] usbhid 1-1:0.0: can't add hid device: -71 [ 323.191690][ T5992] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 323.209072][ T5992] usb 1-1: USB disconnect, device number 10 [ 325.392591][ T8474] Bluetooth: MGMT ver 1.23 [ 325.684691][ T5828] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 325.865236][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.124633][ T5828] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 326.212061][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.534012][ T5828] usb 1-1: config 0 descriptor?? [ 326.543373][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 326.588913][ T8482] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.617175][ T8482] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 326.710752][ T8482] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.730927][ T8482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 327.000757][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 327.016971][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 327.024424][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 327.032114][ T8482] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 327.051156][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 327.059537][ T8482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 327.079396][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 327.094197][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 327.105490][ T5828] pwc: recv_control_msg error -32 req 02 val 2000 [ 327.284313][ T8482] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.292736][ T8482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 327.302266][ T8482] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 327.309775][ T8482] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 327.319720][ T8482] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 327.893020][ T8473] mmap: syz.4.828 (8473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 328.079034][ T5828] pwc: recv_control_msg error -71 req 04 val 1500 [ 328.100693][ T5828] pwc: recv_control_msg error -71 req 02 val 2500 [ 328.118427][ T5828] pwc: recv_control_msg error -71 req 02 val 2400 [ 328.148496][ T5828] pwc: recv_control_msg error -71 req 02 val 2600 [ 328.159682][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 328.160231][ T8506] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 328.177816][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 328.209364][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 328.237946][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 328.268278][ T5828] pwc: Registered as video103. [ 328.290412][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 328.350645][ T5828] usb 1-1: USB disconnect, device number 11 [ 328.631565][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 328.791659][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 329.091343][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 329.331305][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 329.337721][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 330.065541][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.847'. [ 330.500816][ T5926] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 330.749362][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 330.832852][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 330.969311][ T5926] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 331.047246][ T5926] usb 5-1: config 0 has no interface number 0 [ 331.066044][ T5926] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 331.146114][ T5926] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 331.156741][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.170537][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 331.176677][ T5926] usb 5-1: Product: syz [ 331.186336][ T5926] usb 5-1: Manufacturer: syz [ 331.392206][ T5926] usb 5-1: SerialNumber: syz [ 331.583832][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 331.590167][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 331.600912][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 331.621558][ T5926] usb 5-1: config 0 descriptor?? [ 332.267052][ T5926] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 332.317835][ T5926] usb 5-1: USB disconnect, device number 9 [ 332.902001][ T8557] comedi comedi4: bad chanlist[1]=0x000000e7 chan=231 range length=2 [ 333.309604][ T5926] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 333.641067][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.651333][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 333.742937][ T5926] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 333.779169][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.806709][ T5926] usb 2-1: config 0 descriptor?? [ 333.819088][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 334.868422][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 334.876224][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.888756][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.899489][ T24] usb 6-1: config 0 has no interface number 0 [ 334.905644][ T24] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 334.910082][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 335.066017][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 335.076055][ T24] usb 6-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 335.086627][ T24] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.123180][ T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 335.136829][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.170478][ T24] usb 6-1: config 0 descriptor?? [ 335.205181][ T24] hso 6-1:0.1: Failed to find BULK OUT ep [ 335.316571][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 335.324947][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 335.341723][ T8578] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 335.349757][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00 [ 335.364016][ T5926] pwc: recv_control_msg error -32 req 04 val 1000 [ 335.372703][ T5926] pwc: recv_control_msg error -32 req 04 val 1300 [ 335.383508][ T24] usb 6-1: USB disconnect, device number 3 [ 335.385019][ T5926] pwc: recv_control_msg error -32 req 04 val 1400 [ 335.400410][ T5926] pwc: recv_control_msg error -32 req 02 val 2000 [ 335.416587][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 335.772153][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 335.779522][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 335.786912][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 335.794438][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 335.802363][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 335.815122][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 335.822363][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 335.829538][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 335.840629][ T5926] pwc: Registered as video103. [ 335.850942][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 335.880167][ T5926] usb 2-1: USB disconnect, device number 7 [ 335.922298][ T8590] netlink: 'syz.4.870': attribute type 13 has an invalid length. [ 335.955053][ T8590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.673071][ T5847] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 338.846435][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 338.864717][ T5847] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.896400][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.159373][ T5847] usb 1-1: config 0 has no interface number 0 [ 340.183263][ T5847] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 340.543280][ T8638] netlink: 'syz.3.888': attribute type 2 has an invalid length. [ 340.741991][ T5847] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 340.755660][ T5847] usb 1-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 340.769211][ T5847] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.782881][ T5847] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 340.792102][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.429713][ T5847] usb 1-1: config 0 descriptor?? [ 341.450091][ T5847] usb 1-1: can't set config #0, error -71 [ 341.459475][ T5847] usb 1-1: USB disconnect, device number 12 [ 341.875061][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 343.666947][ T8677] overlayfs: overlapping lowerdir path [ 343.903999][ T5847] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 344.344715][ T5847] usb 4-1: config 0 interface 0 altsetting 183 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.377704][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 344.413127][ T5847] usb 4-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 344.460943][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.514911][ T5847] usb 4-1: config 0 descriptor?? [ 344.743632][ T5919] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 344.943603][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 344.971497][ T5919] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.992994][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.004231][ T5847] usbhid 4-1:0.0: can't add hid device: -71 [ 345.010313][ T5847] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 345.032540][ T5919] usb 6-1: config 0 has no interface number 0 [ 345.052180][ T5847] usb 4-1: USB disconnect, device number 13 [ 345.916791][ T5919] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 345.928825][ T5919] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 345.939497][ T5919] usb 6-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 345.953172][ T5919] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.990625][ T5919] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 346.006817][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.079256][ T5919] usb 6-1: config 0 descriptor?? [ 346.116432][ T5919] hso 6-1:0.1: Failed to find BULK OUT ep [ 346.331464][ T5919] usb 6-1: USB disconnect, device number 4 [ 370.866211][ T8883] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 370.873095][ T8883] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 370.918728][ T8883] vhci_hcd vhci_hcd.0: Device attached [ 371.062353][ T8884] vhci_hcd: connection closed [ 371.064590][ T7378] vhci_hcd: stop threads [ 371.088662][ T7378] vhci_hcd: release socket [ 371.104204][ T7378] vhci_hcd: disconnect device [ 371.160495][ T5828] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 371.173762][ T5828] usb 35-1: enqueue for inactive port 0 [ 371.406526][ T5828] vhci_hcd: vhci_device speed not set [ 372.385745][ T8910] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 372.385745][ T8910] program syz.1.975 not setting count and/or reply_len properly [ 372.448342][ T5926] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 372.949502][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 373.119866][ T5926] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 373.143016][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.182032][ T5926] usb 4-1: Product: syz [ 373.196305][ T5926] usb 4-1: Manufacturer: syz [ 373.221856][ T5926] usb 4-1: SerialNumber: syz [ 373.401225][ T5926] usb 4-1: config 0 descriptor?? [ 374.506332][ T5926] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 374.760309][ T24] usb 4-1: USB disconnect, device number 14 [ 379.668747][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 380.845381][ T8981] PKCS8: Unsupported PKCS#8 version [ 381.561854][ T5845] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 383.014590][ T5847] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 383.234402][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 383.264537][ T5847] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 383.296469][ T5847] usb 2-1: config 0 has no interface number 0 [ 383.302740][ T5847] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 383.524858][ T5847] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 383.545123][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.553193][ T5847] usb 2-1: Product: syz [ 383.557522][ T5847] usb 2-1: Manufacturer: syz [ 383.706329][ T5845] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 383.717414][ T5845] Bluetooth: hci2: Injecting HCI hardware error event [ 383.730497][ T5849] Bluetooth: hci2: hardware error 0x00 [ 383.985800][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.992851][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.213703][ T5847] usb 2-1: SerialNumber: syz [ 384.234664][ T5847] usb 2-1: config 0 descriptor?? [ 384.756021][ T5847] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 384.796120][ T5847] usb 2-1: USB disconnect, device number 8 [ 385.897508][ T5849] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 386.018216][ T9050] netlink: 'syz.3.1017': attribute type 13 has an invalid length. [ 386.603274][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 386.634449][ T9050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.771055][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 386.866862][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 386.902074][ T24] usb 2-1: config 0 has no interface number 0 [ 386.936659][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 387.008435][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 387.034474][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.060579][ T24] usb 2-1: Product: syz [ 387.705066][ T24] usb 2-1: Manufacturer: syz [ 387.713347][ T24] usb 2-1: SerialNumber: syz [ 387.721696][ T24] usb 2-1: config 0 descriptor?? [ 387.733269][ T24] smsc75xx v1.0.0 [ 388.391892][ T1208] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 389.081350][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 389.102301][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 389.170254][ T1208] usb 6-1: Using ep0 maxpacket: 16 [ 389.211365][ T1208] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 389.219621][ T1208] usb 6-1: config 0 has no interface number 0 [ 389.236078][ T1208] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 389.257181][ T1208] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 389.274035][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.301360][ T1208] usb 6-1: Product: syz [ 389.306549][ T1208] usb 6-1: Manufacturer: syz [ 389.314840][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 389.320992][ T1208] usb 6-1: SerialNumber: syz [ 389.352416][ T1208] usb 6-1: config 0 descriptor?? [ 389.353187][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 389.383587][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 389.399529][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 389.762955][ T9092] netlink: 'syz.0.1030': attribute type 13 has an invalid length. [ 389.797271][ T9092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.350959][ T1208] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 390.615963][ T1208] usb 6-1: USB disconnect, device number 5 [ 390.693520][ T5926] usb 2-1: USB disconnect, device number 9 [ 391.060687][ T9103] comedi comedi4: bad chanlist[1]=0x000000e7 chan=231 range length=2 [ 391.380450][ T5828] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 391.879875][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 391.910311][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 391.919367][ T5828] usb 1-1: config 4 interface 0 has no altsetting 0 [ 391.932152][ T5828] usb 1-1: string descriptor 0 read error: -22 [ 391.938481][ T5828] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 391.947852][ T5828] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 391.978900][ T5828] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 392.002163][ T5828] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 392.016377][ T5828] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 392.024486][ T5828] usb 1-1: media controller created [ 392.113000][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.203687][ T5849] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 392.874076][ T5828] zl10353_read_register: readreg error (reg=127, ret==0) [ 393.098356][ T5828] usb 1-1: USB disconnect, device number 13 [ 393.180099][ T1208] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 393.313130][ T5926] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 393.339150][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 393.348783][ T1208] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 393.373934][ T1208] usb 4-1: config 0 has no interface number 0 [ 393.402887][ T1208] usb 4-1: config 0 interface 184 has no altsetting 0 [ 393.417479][ T1208] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 393.445703][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.472958][ T1208] usb 4-1: Product: syz [ 393.480066][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 393.486869][ T1208] usb 4-1: Manufacturer: syz [ 393.496704][ T1208] usb 4-1: SerialNumber: syz [ 393.511090][ T1208] usb 4-1: config 0 descriptor?? [ 393.517614][ T5926] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 393.532601][ T1208] smsc75xx v1.0.0 [ 393.540355][ T5926] usb 6-1: config 0 has no interface number 0 [ 393.554562][ T5926] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 393.625522][ T5926] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 393.685027][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.720640][ T5926] usb 6-1: Product: syz [ 393.740364][ T5926] usb 6-1: Manufacturer: syz [ 393.764550][ T5926] usb 6-1: SerialNumber: syz [ 393.793375][ T5926] usb 6-1: config 0 descriptor?? [ 394.152784][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 394.185759][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 394.263006][ T5926] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 394.306547][ T5926] usb 6-1: USB disconnect, device number 6 [ 394.474097][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 394.485367][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 394.727224][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 394.737305][ T1208] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 395.235054][ T5849] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 396.013993][ T5992] usb 4-1: USB disconnect, device number 15 [ 396.177924][ T1208] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 396.257868][ T5849] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 396.267711][ T5849] Bluetooth: hci4: Injecting HCI hardware error event [ 396.276151][ T5845] Bluetooth: hci4: hardware error 0x00 [ 396.337677][ T1208] usb 2-1: Using ep0 maxpacket: 8 [ 396.417895][ T5992] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 396.484296][ T1208] usb 2-1: config 0 has no interfaces? [ 396.491695][ T1208] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 396.503406][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.939196][ T1208] usb 2-1: config 0 descriptor?? [ 397.407217][ T5992] usb 4-1: Using ep0 maxpacket: 16 [ 397.426239][ T5992] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 397.435293][ T1208] usb 2-1: USB disconnect, device number 10 [ 397.455487][ T5992] usb 4-1: config 0 has no interface number 0 [ 397.467197][ T5992] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 397.491340][ T5992] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 397.506796][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.524519][ T5992] usb 4-1: Product: syz [ 397.532838][ T5992] usb 4-1: Manufacturer: syz [ 397.538218][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'. [ 397.547650][ T5992] usb 4-1: SerialNumber: syz [ 397.555278][ T5992] usb 4-1: config 0 descriptor?? [ 397.885912][ T5992] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32 [ 397.893874][ T5992] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 397.908238][ T5992] usb 4-1: USB disconnect, device number 16 [ 398.336732][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 399.383597][ T5845] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 399.392427][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 399.403585][ T5845] Bluetooth: hci0: Injecting HCI hardware error event [ 399.422736][ T5845] Bluetooth: hci0: hardware error 0x00 [ 399.588457][ T9225] netlink: 384 bytes leftover after parsing attributes in process `syz.4.1078'. [ 399.619048][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 399.626580][ T24] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 399.635460][ T24] usb 6-1: config 0 has no interface number 0 [ 399.645317][ T24] usb 6-1: config 0 interface 184 has no altsetting 0 [ 399.665052][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 399.676532][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.691376][ T24] usb 6-1: Product: syz [ 399.735475][ T24] usb 6-1: Manufacturer: syz [ 399.754657][ T24] usb 6-1: SerialNumber: syz [ 399.798676][ T24] usb 6-1: config 0 descriptor?? [ 400.759333][ T24] smsc75xx v1.0.0 [ 401.539884][ T5845] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 401.966561][ T9246] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1083'. [ 401.994122][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 402.007511][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 402.013163][ T9246] syz.1.1083: attempt to access beyond end of device [ 402.013163][ T9246] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 402.038979][ T9246] syz.1.1083: attempt to access beyond end of device [ 402.038979][ T9246] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 402.057875][ T9246] Mount JFS Failure: -5 [ 402.115031][ T5956] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 402.256144][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 402.269743][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 402.281871][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 402.324783][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 402.331616][ T24] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 402.348841][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 402.386858][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.401801][ T5956] usb 1-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 402.445838][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.486737][ T5956] usb 1-1: config 0 descriptor?? [ 402.950523][ T5956] nintendo 0003:057E:2017.0009: unknown main item tag 0x0 [ 402.978523][ T5956] nintendo 0003:057E:2017.0009: hidraw0: USB HID v80.03 Device [HID 057e:2017] on usb-dummy_hcd.0-1/input0 [ 403.066592][ T5956] nintendo 0003:057E:2017.0009: Failed to get joycon info; ret=-38 [ 403.253259][ T5956] nintendo 0003:057E:2017.0009: Failed to retrieve controller info; ret=-38 [ 403.264193][ T5956] nintendo 0003:057E:2017.0009: Failed to initialize controller; ret=-38 [ 403.370434][ T1208] usb 6-1: USB disconnect, device number 7 [ 403.438442][ T5956] nintendo 0003:057E:2017.0009: probe - fail = -38 [ 403.448561][ T5956] nintendo 0003:057E:2017.0009: probe with driver nintendo failed with error -38 [ 403.467188][ T5956] usb 1-1: USB disconnect, device number 14 [ 406.486219][ T9295] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 407.550369][ T1208] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 407.782174][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 407.812572][ T1208] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 407.839855][ T1208] usb 4-1: config 0 has no interface number 0 [ 407.847837][ T9307] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1104'. [ 407.914006][ T1208] usb 4-1: config 0 interface 184 has no altsetting 0 [ 408.946283][ T1208] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 408.977669][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.011023][ T1208] usb 4-1: Product: syz [ 409.025704][ T1208] usb 4-1: Manufacturer: syz [ 409.030397][ T1208] usb 4-1: SerialNumber: syz [ 409.095367][ T1208] usb 4-1: config 0 descriptor?? [ 409.178823][ T1208] smsc75xx v1.0.0 [ 409.682102][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 409.703090][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1110'. [ 409.791049][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 409.811148][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 409.971222][ T9330] overlayfs: missing 'lowerdir' [ 410.029086][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 410.050361][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 410.070939][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 410.095179][ T1208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 410.139034][ T1208] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 410.438263][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1118'. [ 410.448099][ T9346] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1118'. [ 410.477017][ T9346] bridge0: port 3(macvlan1) entered blocking state [ 410.487741][ T9346] bridge0: port 3(macvlan1) entered disabled state [ 410.527664][ T9346] macvlan1: entered allmulticast mode [ 410.562538][ T9346] veth1_vlan: entered allmulticast mode [ 410.609322][ T9346] macvlan1: entered promiscuous mode [ 410.652260][ T9346] bridge0: port 3(macvlan1) entered blocking state [ 410.659142][ T9346] bridge0: port 3(macvlan1) entered forwarding state [ 410.801939][ T9346] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1118'. [ 411.346153][ T1208] usb 4-1: USB disconnect, device number 17 [ 412.273683][ T9371] support for the xor transformation has been removed. [ 413.099489][ T1208] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 413.282022][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 413.309609][ T1208] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 413.325605][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.334637][ T1208] usb 4-1: Product: syz [ 413.339610][ T1208] usb 4-1: Manufacturer: syz [ 413.344360][ T1208] usb 4-1: SerialNumber: syz [ 413.353677][ T1208] usb 4-1: config 0 descriptor?? [ 413.399192][ T5847] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 413.579025][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 413.600264][ T5847] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 413.631697][ T5847] usb 1-1: config 0 has no interface number 0 [ 413.672029][ T5847] usb 1-1: config 0 interface 184 has no altsetting 0 [ 413.753472][ T5847] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 413.763923][ T1208] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 413.778906][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.819971][ T5847] usb 1-1: Product: syz [ 413.825963][ T5847] usb 1-1: Manufacturer: syz [ 413.826705][ T1208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 413.853065][ T5847] usb 1-1: SerialNumber: syz [ 413.869803][ T1208] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 413.871505][ T5847] usb 1-1: config 0 descriptor?? [ 413.882986][ T1208] usb 4-1: media controller created [ 413.918158][ T5847] smsc75xx v1.0.0 [ 414.032166][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.119751][ T1208] zl10353_read_register: readreg error (reg=127, ret==0) [ 414.136978][ T1208] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 414.157126][ T1208] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 414.186936][ T1208] usb 4-1: USB disconnect, device number 18 [ 414.333454][ T1208] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 414.533335][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 414.586973][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 414.828153][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 414.847566][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 414.883991][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 414.924106][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 414.959975][ T5847] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 416.283128][ T5992] usb 1-1: USB disconnect, device number 15 [ 417.257238][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 417.407141][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 417.416628][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 417.463908][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.584205][ T9440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.667056][ T30] audit: type=1326 audit(1752669385.529:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.118730][ T9] usb 2-1: Product: syz [ 418.123401][ T9] usb 2-1: Manufacturer: syz [ 418.128302][ T9] usb 2-1: SerialNumber: syz [ 418.136993][ T9] usb 2-1: config 0 descriptor?? [ 418.145858][ T30] audit: type=1326 audit(1752669385.529:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.210485][ T30] audit: type=1326 audit(1752669385.539:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.308521][ T30] audit: type=1326 audit(1752669385.539:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.360796][ T30] audit: type=1326 audit(1752669385.539:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.434244][ T30] audit: type=1326 audit(1752669385.539:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.526599][ T30] audit: type=1326 audit(1752669385.539:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.556779][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 418.606760][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 418.619588][ T30] audit: type=1326 audit(1752669385.539:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.644088][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 418.664645][ T9] usb 2-1: media controller created [ 418.696693][ T30] audit: type=1326 audit(1752669385.539:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 418.762572][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.791651][ T30] audit: type=1326 audit(1752669385.539:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298af8e929 code=0x7ffc0000 [ 419.036019][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 419.043274][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 419.052622][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 419.063286][ T9] usb 2-1: USB disconnect, device number 11 [ 420.520232][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 421.012751][ T9473] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 421.012751][ T9473] program syz.1.1160 not setting count and/or reply_len properly [ 421.894995][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 422.054899][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 422.072901][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.093605][ T9485] binder: BINDER_SET_CONTEXT_MGR already set [ 422.100675][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.117536][ T9485] binder: 9482:9485 ioctl 4018620d 200000000040 returned -16 [ 422.128964][ T9] usb 6-1: config 0 has no interface number 0 [ 422.141011][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 422.153481][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.169552][ T9] usb 6-1: config 0 descriptor?? [ 422.178917][ T9] hso 6-1:0.1: Not our interface [ 422.419067][ T9] usb 6-1: USB disconnect, device number 8 [ 427.217487][ T9532] binder: BINDER_SET_CONTEXT_MGR already set [ 427.223810][ T9532] binder: 9531:9532 ioctl 4018620d 200000000040 returned -16 [ 427.402166][ T5847] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 428.355615][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 428.392040][ T5847] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.168507][ T5847] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.220921][ T5847] usb 6-1: config 0 has no interface number 0 [ 429.225688][ T9547] kvm: pic: non byte write [ 429.241728][ T9547] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 429.260345][ T5847] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 429.481102][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.522180][ T5847] usb 6-1: config 0 descriptor?? [ 430.270816][ T5847] usb 6-1: can't set config #0, error -71 [ 430.295409][ T5847] usb 6-1: USB disconnect, device number 9 [ 433.169385][ T9577] netlink: 'syz.5.1194': attribute type 13 has an invalid length. [ 433.319500][ T9577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.618023][ T5956] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 435.907975][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 436.013463][ T5847] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 436.681363][ T5956] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 436.701250][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.710235][ T5956] usb 5-1: Product: syz [ 436.717431][ T5956] usb 5-1: Manufacturer: syz [ 436.723980][ T5956] usb 5-1: SerialNumber: syz [ 436.856552][ T5847] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 436.882448][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.900071][ T5847] usb 6-1: Product: syz [ 436.913379][ T5847] usb 6-1: Manufacturer: syz [ 436.922181][ T5847] usb 6-1: SerialNumber: syz [ 436.948999][ T5847] usb 6-1: config 0 descriptor?? [ 436.961761][ T5847] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 437.360552][ T5956] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.400775][ T5992] usb 6-1: USB disconnect, device number 10 [ 437.885722][ T5956] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 438.232217][ T5956] usb 5-1: USB disconnect, device number 10 [ 442.448745][ T9664] overlayfs: missing 'lowerdir' [ 442.788695][ T9669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.854079][ T5847] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 444.183725][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 444.197725][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.307232][ T5847] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 444.479229][ T5847] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 444.658145][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.900411][ T5847] usb 5-1: Product: syz [ 444.905933][ T5847] usb 5-1: Manufacturer: syz [ 444.912546][ T5847] usb 5-1: SerialNumber: syz [ 444.920647][ T5847] usb 5-1: config 0 descriptor?? [ 444.975393][ T9701] overlayfs: missing 'workdir' [ 445.400589][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.408971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.440636][ T9] usb 5-1: USB disconnect, device number 11 [ 445.577190][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 445.577234][ T30] audit: type=1800 audit(1752669413.493:115): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1239" name="bus" dev="overlay" ino=1238 res=0 errno=0 [ 446.443764][ T9718] hub 8-0:1.0: USB hub found [ 446.465243][ T9718] hub 8-0:1.0: 1 port detected [ 447.564023][ T9726] sg_write: data in/out 49020/1 bytes for SCSI command 0x1c-- guessing data in; [ 447.564023][ T9726] program syz.0.1242 not setting count and/or reply_len properly [ 450.861533][ T9755] overlayfs: missing 'workdir' [ 451.520169][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 451.682251][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.698317][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.744481][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 452.509686][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.538009][ T9] usb 2-1: config 0 descriptor?? [ 452.966364][ T9] hid-generic 0003:04F3:0754.000A: unknown main item tag 0x0 [ 453.027182][ T9] hid-generic 0003:04F3:0754.000A: unknown main item tag 0x0 [ 453.036065][ T9] hid-generic 0003:04F3:0754.000A: unknown main item tag 0x0 [ 453.058063][ T9] hid-generic 0003:04F3:0754.000A: unknown main item tag 0x0 [ 453.076214][ T9] hid-generic 0003:04F3:0754.000A: unknown main item tag 0x0 [ 453.101267][ T9] hid-generic 0003:04F3:0754.000A: failed to start in urb: -90 [ 453.136210][ T9] hid-generic 0003:04F3:0754.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.1-1/input0 [ 453.176362][ T9] usb 2-1: USB disconnect, device number 12 [ 454.039958][ T9784] netlink: 'syz.0.1261': attribute type 2 has an invalid length. [ 454.111120][ T5828] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 454.833536][ T5828] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.875562][ T5828] usb 5-1: config 0 has no interface number 0 [ 454.908785][ T5828] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.929035][ T9790] overlayfs: missing 'workdir' [ 454.958403][ T5828] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.978386][ T5828] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 455.208302][ T1208] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 455.230629][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.264564][ T5828] usb 5-1: config 0 descriptor?? [ 455.508039][ T1208] usb 1-1: Using ep0 maxpacket: 16 [ 455.524572][ T1208] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 455.548372][ T1208] usb 1-1: config 0 has no interface number 0 [ 455.568690][ T1208] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 455.577868][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.598137][ T1208] usb 1-1: Product: syz [ 455.602493][ T1208] usb 1-1: Manufacturer: syz [ 455.607131][ T1208] usb 1-1: SerialNumber: syz [ 455.626190][ T1208] usb 1-1: config 0 descriptor?? [ 455.704817][ T5828] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 455.726493][ T5828] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 455.744148][ T5828] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 455.769045][ T5828] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 455.786906][ T5828] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 455.804583][ T5828] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 455.823631][ T5828] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 455.855729][ T5828] prodikeys 0003:041E:2801.000B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 455.892024][ T5828] hid_prodikeys: hid-prodikeys: failed to find output report [ 455.892024][ T5828] [ 455.944952][ T5828] usb 5-1: USB disconnect, device number 12 [ 456.837493][ T1208] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 456.911743][ T9822] netlink: 'syz.4.1274': attribute type 2 has an invalid length. [ 457.017483][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 457.036665][ T1208] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 457.074242][ T1208] usb 2-1: config 0 has no interface number 0 [ 457.105168][ T1208] usb 2-1: config 0 interface 184 has no altsetting 0 [ 457.151650][ T1208] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 457.214117][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.223126][ T1208] usb 2-1: Product: syz [ 457.231779][ T1208] usb 2-1: Manufacturer: syz [ 457.237030][ T1208] usb 2-1: SerialNumber: syz [ 457.245871][ T1208] usb 2-1: config 0 descriptor?? [ 457.255038][ T1208] smsc75xx v1.0.0 [ 458.202372][ T5956] usb 1-1: USB disconnect, device number 16 [ 458.209833][ T1208] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 458.239965][ T1208] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 458.254534][ T1208] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 458.269925][ T1208] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 458.884947][ T9849] usb usb8: usbfs: process 9849 (syz.4.1282) did not claim interface 0 before use [ 459.186781][ T5956] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 459.196675][ T1208] usb 2-1: USB disconnect, device number 13 [ 459.806862][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.495721][ T9862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 460.507051][ T9862] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 460.783261][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.793503][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.806700][ T5956] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 460.816093][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.827373][ T5956] usb 6-1: config 0 descriptor?? [ 460.984155][ T9867] netlink: 'syz.4.1287': attribute type 2 has an invalid length. [ 461.391869][ T5956] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 461.426757][ T5956] dragonrise 0003:0079:0011.000C: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0 [ 461.609907][ T1208] usb 6-1: USB disconnect, device number 11 [ 462.119208][ T9885] Device name cannot be null; rc = [-22] [ 463.142991][ T9892] syz.3.1297: attempt to access beyond end of device [ 463.142991][ T9892] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 463.158628][ T9892] hfsplus: unable to find HFS+ superblock [ 464.459987][ T9913] netlink: 'syz.4.1305': attribute type 2 has an invalid length. [ 466.104589][ T9940] xt_nat: multiple ranges no longer supported [ 468.593632][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1317'. [ 468.661591][ T9956] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1317'. [ 468.774319][ T9956] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 468.786344][ T9959] netlink: 'syz.0.1320': attribute type 2 has an invalid length. [ 471.227983][ T9985] netlink: 'syz.4.1328': attribute type 13 has an invalid length. [ 471.876221][ T9985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.919549][ T5845] Bluetooth: hci1: Malformed Event: 0x13 [ 473.202725][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 473.619126][ T9996] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1333'. [ 473.630399][ T9996] macvlan1: left allmulticast mode [ 473.635621][ T9996] veth1_vlan: left allmulticast mode [ 473.641325][ T9996] macvlan1: left promiscuous mode [ 473.647638][ T9996] bridge0: port 3(macvlan1) entered disabled state [ 473.712344][ T9996] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 473.785548][T10000] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 473.846696][T10000] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 473.876027][T10000] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 473.896965][T10004] netlink: 'syz.0.1335': attribute type 2 has an invalid length. [ 473.908810][T10000] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 474.092005][T10000] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 474.366830][T10000] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 474.418998][T10000] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 474.453017][T10000] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 474.473675][T10000] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 474.533711][T10000] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 475.532603][ T7376] Bluetooth: hci5: Frame reassembly failed (-84) [ 475.548063][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 475.977812][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 476.001547][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.058821][T10037] [ 476.061233][T10037] ====================================================== [ 476.068281][T10037] WARNING: possible circular locking dependency detected [ 476.075521][T10037] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted [ 476.082653][T10037] ------------------------------------------------------ [ 476.090327][T10037] syz.3.1345/10037 is trying to acquire lock: [ 476.097479][T10037] ffff888023b01940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x735/0xe50 [ 476.107339][T10037] [ 476.107339][T10037] but task is already holding lock: [ 476.114771][T10037] ffff8880352ac088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 476.124307][T10037] [ 476.124307][T10037] which lock already depends on the new lock. [ 476.124307][T10037] [ 476.134737][T10037] [ 476.134737][T10037] the existing dependency chain (in reverse order) is: [ 476.143779][T10037] [ 476.143779][T10037] -> #3 (&of->mutex){+.+.}-{4:4}: [ 476.151040][T10037] lock_acquire+0x120/0x360 [ 476.156095][T10037] __mutex_lock+0x182/0xe80 [ 476.161169][T10037] kernfs_seq_start+0x55/0x3c0 [ 476.166573][T10037] seq_read_iter+0x3ef/0xe10 [ 476.171718][T10037] copy_splice_read+0x54f/0x9b0 [ 476.177561][T10037] splice_direct_to_actor+0x4a6/0xcc0 [ 476.183495][T10037] do_splice_direct+0x181/0x270 [ 476.188984][T10037] do_sendfile+0x4da/0x7e0 [ 476.193940][T10037] __se_sys_sendfile64+0x13e/0x190 [ 476.199587][T10037] do_syscall_64+0xfa/0x3b0 [ 476.204622][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.211054][T10037] [ 476.211054][T10037] -> #2 (&p->lock){+.+.}-{4:4}: [ 476.218122][T10037] lock_acquire+0x120/0x360 [ 476.223163][T10037] __mutex_lock+0x182/0xe80 [ 476.228250][T10037] seq_read_iter+0xb7/0xe10 [ 476.233420][T10037] copy_splice_read+0x54f/0x9b0 [ 476.238899][T10037] splice_file_to_pipe+0x273/0x440 [ 476.244552][T10037] do_sendfile+0x475/0x7e0 [ 476.249512][T10037] __se_sys_sendfile64+0x13e/0x190 [ 476.255154][T10037] do_syscall_64+0xfa/0x3b0 [ 476.260208][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.266634][T10037] [ 476.266634][T10037] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 476.274046][T10037] lock_acquire+0x120/0x360 [ 476.279089][T10037] __mutex_lock+0x182/0xe80 [ 476.284135][T10037] anon_pipe_write+0x16a/0x1360 [ 476.289965][T10037] __kernel_write_iter+0x3ec/0x860 [ 476.295618][T10037] __kernel_write+0xef/0x150 [ 476.300752][T10037] autofs_notify_daemon+0x748/0xe50 [ 476.306581][T10037] autofs_wait+0x11dc/0x1870 [ 476.311714][T10037] autofs_mount_wait+0x16b/0x330 [ 476.317225][T10037] autofs_d_automount+0x393/0x720 [ 476.322818][T10037] __traverse_mounts+0x308/0x5b0 [ 476.328295][T10037] step_into+0x534/0xf30 [ 476.333082][T10037] link_path_walk+0x77b/0xea0 [ 476.338303][T10037] path_lookupat+0x97/0x430 [ 476.343340][T10037] filename_lookup+0x212/0x570 [ 476.348639][T10037] user_path_at+0x3a/0x60 [ 476.353504][T10037] bpf_obj_get_user+0xa9/0x430 [ 476.358806][T10037] __sys_bpf+0x71e/0x860 [ 476.363595][T10037] __x64_sys_bpf+0x7c/0x90 [ 476.368548][T10037] do_syscall_64+0xfa/0x3b0 [ 476.373589][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.380029][T10037] [ 476.380029][T10037] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 476.387788][T10037] validate_chain+0xb9b/0x2140 [ 476.393093][T10037] __lock_acquire+0xab9/0xd20 [ 476.398394][T10037] lock_acquire+0x120/0x360 [ 476.403433][T10037] __mutex_lock+0x182/0xe80 [ 476.408559][T10037] autofs_notify_daemon+0x735/0xe50 [ 476.414301][T10037] autofs_wait+0x11dc/0x1870 [ 476.419630][T10037] autofs_mount_wait+0x16b/0x330 [ 476.425117][T10037] autofs_d_automount+0x393/0x720 [ 476.430686][T10037] __traverse_mounts+0x308/0x5b0 [ 476.436258][T10037] step_into+0x534/0xf30 [ 476.441046][T10037] path_lookupat+0x163/0x430 [ 476.446175][T10037] filename_lookup+0x212/0x570 [ 476.451473][T10037] kern_path+0x35/0x50 [ 476.456082][T10037] lookup_bdev+0xc0/0x280 [ 476.461041][T10037] resume_store+0x169/0x460 [ 476.466090][T10037] kernfs_fop_write_iter+0x378/0x4f0 [ 476.471920][T10037] vfs_write+0x54b/0xa90 [ 476.476703][T10037] ksys_write+0x145/0x250 [ 476.481596][T10037] do_syscall_64+0xfa/0x3b0 [ 476.486640][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.493076][T10037] [ 476.493076][T10037] other info that might help us debug this: [ 476.493076][T10037] [ 476.503350][T10037] Chain exists of: [ 476.503350][T10037] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 476.503350][T10037] [ 476.515459][T10037] Possible unsafe locking scenario: [ 476.515459][T10037] [ 476.522922][T10037] CPU0 CPU1 [ 476.528310][T10037] ---- ---- [ 476.533695][T10037] lock(&of->mutex); [ 476.537700][T10037] lock(&p->lock); [ 476.544043][T10037] lock(&of->mutex); [ 476.550567][T10037] lock(&sbi->pipe_mutex); [ 476.555103][T10037] [ 476.555103][T10037] *** DEADLOCK *** [ 476.555103][T10037] [ 476.563789][T10037] 4 locks held by syz.3.1345/10037: [ 476.569006][T10037] #0: ffff8880352d3978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 476.578804][T10037] #1: ffff888032bb4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 476.587730][T10037] #2: ffff8880352ac088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 476.597535][T10037] #3: ffff888140a9f878 (kn->active#71){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 476.607582][T10037] [ 476.607582][T10037] stack backtrace: [ 476.613501][T10037] CPU: 0 UID: 0 PID: 10037 Comm: syz.3.1345 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 476.613524][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.613539][T10037] Call Trace: [ 476.613552][T10037] [ 476.613562][T10037] dump_stack_lvl+0x189/0x250 [ 476.613585][T10037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.613605][T10037] ? __pfx__printk+0x10/0x10 [ 476.613627][T10037] ? print_lock_name+0xde/0x100 [ 476.613649][T10037] print_circular_bug+0x2ee/0x310 [ 476.613672][T10037] check_noncircular+0x134/0x160 [ 476.613695][T10037] validate_chain+0xb9b/0x2140 [ 476.613725][T10037] __lock_acquire+0xab9/0xd20 [ 476.613744][T10037] ? autofs_notify_daemon+0x735/0xe50 [ 476.613768][T10037] lock_acquire+0x120/0x360 [ 476.613782][T10037] ? autofs_notify_daemon+0x735/0xe50 [ 476.613813][T10037] __mutex_lock+0x182/0xe80 [ 476.613829][T10037] ? autofs_notify_daemon+0x735/0xe50 [ 476.613855][T10037] ? autofs_notify_daemon+0x6e5/0xe50 [ 476.613881][T10037] ? autofs_notify_daemon+0x735/0xe50 [ 476.613906][T10037] ? __pfx___mutex_lock+0x10/0x10 [ 476.613922][T10037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.613937][T10037] ? from_kgid_munged+0x1f4/0x6a0 [ 476.613963][T10037] ? __pfx_from_kgid_munged+0x10/0x10 [ 476.613987][T10037] ? kasan_save_track+0x4f/0x80 [ 476.614009][T10037] ? __kasan_kmalloc+0x93/0xb0 [ 476.614031][T10037] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 476.614056][T10037] ? autofs_wait+0xd32/0x1870 [ 476.614077][T10037] ? autofs_notify_daemon+0x3d1/0xe50 [ 476.614109][T10037] autofs_notify_daemon+0x735/0xe50 [ 476.614133][T10037] ? do_syscall_64+0xfa/0x3b0 [ 476.614151][T10037] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 476.614190][T10037] ? __raw_spin_lock_init+0x45/0x100 [ 476.614212][T10037] ? autofs_wait+0xe13/0x1870 [ 476.614237][T10037] autofs_wait+0x11dc/0x1870 [ 476.614259][T10037] ? d_walk+0x2c0/0x780 [ 476.614280][T10037] ? __pfx_autofs_wait+0x10/0x10 [ 476.614303][T10037] ? preempt_schedule_common+0x83/0xd0 [ 476.614329][T10037] ? preempt_schedule+0xae/0xc0 [ 476.614352][T10037] ? __pfx_preempt_schedule+0x10/0x10 [ 476.614382][T10037] autofs_mount_wait+0x16b/0x330 [ 476.614407][T10037] autofs_d_automount+0x393/0x720 [ 476.614433][T10037] __traverse_mounts+0x308/0x5b0 [ 476.614453][T10037] step_into+0x534/0xf30 [ 476.614471][T10037] ? lookup_slow+0x5e/0x70 [ 476.614491][T10037] ? __pfx_step_into+0x10/0x10 [ 476.614507][T10037] ? walk_component+0x190/0x400 [ 476.614525][T10037] path_lookupat+0x163/0x430 [ 476.614546][T10037] filename_lookup+0x212/0x570 [ 476.614566][T10037] ? __pfx_filename_lookup+0x10/0x10 [ 476.614594][T10037] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 476.614616][T10037] ? getname_kernel+0x146/0x2f0 [ 476.614634][T10037] ? getname_kernel+0x20e/0x2f0 [ 476.614651][T10037] kern_path+0x35/0x50 [ 476.614668][T10037] lookup_bdev+0xc0/0x280 [ 476.614685][T10037] ? rcu_is_watching+0x15/0xb0 [ 476.614704][T10037] ? __pfx_lookup_bdev+0x10/0x10 [ 476.614719][T10037] ? kstrndup+0xbf/0x160 [ 476.614740][T10037] resume_store+0x169/0x460 [ 476.614763][T10037] ? irqentry_exit+0x74/0x90 [ 476.614788][T10037] ? __pfx_resume_store+0x10/0x10 [ 476.614813][T10037] ? __pfx_sysfs_kf_write+0x10/0x10 [ 476.614840][T10037] ? __pfx_resume_store+0x10/0x10 [ 476.614861][T10037] ? sysfs_file_kobj+0x1a/0x230 [ 476.614883][T10037] ? kobj_attr_store+0x4f/0x90 [ 476.614904][T10037] ? __pfx_sysfs_kf_write+0x10/0x10 [ 476.614927][T10037] kernfs_fop_write_iter+0x378/0x4f0 [ 476.614953][T10037] vfs_write+0x54b/0xa90 [ 476.614977][T10037] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 476.614999][T10037] ? __pfx_vfs_write+0x10/0x10 [ 476.615023][T10037] ? __rcu_read_unlock+0x84/0xe0 [ 476.615048][T10037] ? __fget_files+0x2a/0x420 [ 476.615066][T10037] ksys_write+0x145/0x250 [ 476.615095][T10037] ? __pfx_ksys_write+0x10/0x10 [ 476.615116][T10037] ? rcu_is_watching+0x15/0xb0 [ 476.615136][T10037] ? do_syscall_64+0xbe/0x3b0 [ 476.615153][T10037] do_syscall_64+0xfa/0x3b0 [ 476.615169][T10037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.615185][T10037] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 476.615202][T10037] ? clear_bhb_loop+0x60/0xb0 [ 476.615221][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.615237][T10037] RIP: 0033:0x7f298af8e929 [ 476.615257][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.615273][T10037] RSP: 002b:00007f298bd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 476.615291][T10037] RAX: ffffffffffffffda RBX: 00007f298b1b6240 RCX: 00007f298af8e929 [ 476.615303][T10037] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009 [ 476.615314][T10037] RBP: 00007f298b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 476.615325][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.615335][T10037] R13: 0000000000000000 R14: 00007f298b1b6240 R15: 00007ffdcaccebe8 [ 476.615353][T10037] [ 477.107501][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 477.116944][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 477.128386][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 477.139741][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 477.149877][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.180784][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 477.186791][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 477.194379][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 477.199672][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 477.205925][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 477.212147][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 477.373554][T10037] block device autoloading is deprecated and will be removed. [ 477.381612][T10037] PM: Image not found (code -22) [ 477.728848][ T5849] Bluetooth: hci5: command 0x1003 tx timeout [ 477.751788][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 477.931691][ T9] usb 2-1: USB disconnect, device number 14 [ 478.229141][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 478.477877][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 478.490492][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.500802][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 478.511521][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 478.523830][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 478.535400][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 478.544736][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.559238][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 478.566580][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 478.577045][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 478.583075][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 478.591435][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 478.598703][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 480.245991][ T5828] usb 2-1: USB disconnect, device number 15