last executing test programs: 30m25.500766548s ago: executing program 1 (id=15): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x40201, 0x0) pwritev(r3, 0x0, 0x0, 0x6156, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) 30m23.762780096s ago: executing program 1 (id=19): keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0x2bb8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xb7c, 0x2002, 0x5, 0xb, 0xd, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x5f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2e8001, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$key(0xf, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x100113, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0xfffff7fe, 0x3a3}, 0x0, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bind$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x6, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 30m20.391191674s ago: executing program 1 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 30m17.538996128s ago: executing program 1 (id=26): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x40201, 0x0) pwritev(r3, 0x0, 0x0, 0x6156, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) 30m14.907021998s ago: executing program 1 (id=30): syz_open_dev$usbfs(0x0, 0x206, 0x8401) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103"], 0x0) 30m9.274897175s ago: executing program 1 (id=40): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x40201, 0x0) pwritev(r3, 0x0, 0x0, 0x6156, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) 29m53.123866715s ago: executing program 32 (id=40): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x40201, 0x0) pwritev(r3, 0x0, 0x0, 0x6156, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) 29m53.092891982s ago: executing program 2 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000002380)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xd, 0x0, &(0x7f0000000040)="4e3f261e29a7fa764a1131a77b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0xe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) 29m50.178866129s ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000002380)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xd, 0x0, &(0x7f0000000040)="4e3f261e29a7fa764a1131a77b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0xe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) 29m48.691188215s ago: executing program 2 (id=67): keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0x2bb8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xb7c, 0x2002, 0x5, 0xb, 0xd, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x5f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2e8001, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x100113, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0xfffff7fe, 0x3a3}, 0x0, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bind$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x6, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 29m46.268569525s ago: executing program 2 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xd, 0x0, &(0x7f0000000040)="4e3f261e29a7fa764a1131a77b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0xe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) 29m40.840846695s ago: executing program 2 (id=73): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6156, 0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) 29m39.802070457s ago: executing program 2 (id=76): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f000001b000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="f7a0892a0f44ae21cef9bccdc148b946ddef45529a62c9e1934ed61f2ddf4fdbe9bb7c15cb11095e580d4d866f2d5b708e455bf1f43dde72df495711a095ce0940bf134854b7c70a45393aba65021b51892210c9adf6fc0b74be5275c5a5bfc70b89ce65a251c6dc9e451e17372dac7db685f334aede8004e23e65a6262763fdd5a03e445d8e6fe3057005af3edfe62bae75c6c7b84565ad0887bb7b6cc85ad5b78e19554efc5370000dc738b7bc8df535998f5912b0d94b1b2a6779e9a76eb43ca92ffd31000000000000"], 0x1238}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffff5f) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syncfs(r8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29m24.016723634s ago: executing program 33 (id=76): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f000001b000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="f7a0892a0f44ae21cef9bccdc148b946ddef45529a62c9e1934ed61f2ddf4fdbe9bb7c15cb11095e580d4d866f2d5b708e455bf1f43dde72df495711a095ce0940bf134854b7c70a45393aba65021b51892210c9adf6fc0b74be5275c5a5bfc70b89ce65a251c6dc9e451e17372dac7db685f334aede8004e23e65a6262763fdd5a03e445d8e6fe3057005af3edfe62bae75c6c7b84565ad0887bb7b6cc85ad5b78e19554efc5370000dc738b7bc8df535998f5912b0d94b1b2a6779e9a76eb43ca92ffd31000000000000"], 0x1238}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffff5f) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syncfs(r8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.035037965s ago: executing program 3 (id=3703): syz_usb_connect(0x3, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x95, 0x7f, 0x76, 0x8, 0x46d, 0x821, 0x7712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbe, 0x6, 0x90, 0x8, [{{0x9, 0x4, 0x2a, 0x6, 0x0, 0xe, 0x1, 0x0, 0x2}}]}}]}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2a, 0x0, @empty=0x1000000}, 0xb, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=alw']) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000000026b4080f478ef8ed"]) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xd59, 0x3}}, './file0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.211126164s ago: executing program 4 (id=3714): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 4.837691668s ago: executing program 3 (id=3718): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000440)='./file1\x00', 0x0, 0x73) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40037, 0x120) 4.33148568s ago: executing program 3 (id=3719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.907254334s ago: executing program 0 (id=3723): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') 3.843026935s ago: executing program 3 (id=3724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f", 0x26}], 0x1) 3.756165882s ago: executing program 0 (id=3726): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendto$inet(r0, 0x0, 0x0, 0x44088881, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) 3.495228014s ago: executing program 0 (id=3729): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x2, "d3dc2bea"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 3.456390898s ago: executing program 5 (id=3730): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001114010029bd70000000000008004a0000000000080001000000000008004b0013000000080003"], 0x30}}, 0x0) 3.199117386s ago: executing program 5 (id=3732): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2a, 0x0, @empty=0x1000000}, 0xb, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,siz']) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.937433067s ago: executing program 5 (id=3734): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x5c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x5c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 2.771244556s ago: executing program 6 (id=3735): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) 2.755238874s ago: executing program 4 (id=3736): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') 2.689065528s ago: executing program 6 (id=3737): setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000003640)={r4, 0x56}, &(0x7f0000003680)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.553596247s ago: executing program 4 (id=3738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, 0x0, 0x0) 2.311037817s ago: executing program 4 (id=3739): sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x40851}, 0x4004891) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ab}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c2", 0xb6}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.310780931s ago: executing program 6 (id=3740): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.181571058s ago: executing program 6 (id=3741): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x8000000e, 0x1) getdents64(r0, 0x0, 0x31) 2.105084944s ago: executing program 6 (id=3742): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x2}, 0x400, "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"}, 0x418, 0x7ffffffc}) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x45040) 1.510892896s ago: executing program 0 (id=3743): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000001440)}}, {{&(0x7f00000014c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001600), 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000001740)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002780)}, {0x0}], 0x2, &(0x7f0000002dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}], 0x40}}], 0x3, 0x40) 1.405366193s ago: executing program 0 (id=3744): syz_usb_connect$cdc_ecm(0x0, 0x57, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003020000202505a1a44000010203010902450001010340000904000502020600010b2406000045a4350052af0524"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 666.05398ms ago: executing program 6 (id=3745): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000002885c7f2800000000000000020000000000"], &(0x7f0000000b40)=""/232, 0x1a, 0xe8, 0x1}, 0x20) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000580)={0x1, 'macvlan1\x00', 0x2}, 0x18) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x4000040) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x3, 0x9, @mcast2, 0x9}], 0x1c) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000ffff00000000ac1414bb00"/54, @ANYRES32=0x0, @ANYBLOB="ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ff010000000000000000000000000001000004d2330000000a00"], 0x17c}}, 0x4000) 227.200613ms ago: executing program 5 (id=3746): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0xa800, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000000180)={0x20000008, 0x0, 0x0, 0x0}) 226.809701ms ago: executing program 4 (id=3747): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) 225.940513ms ago: executing program 3 (id=3748): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x1c, r1, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 133.371065ms ago: executing program 3 (id=3749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x3, 0x4, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) 125.599595ms ago: executing program 4 (id=3750): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4040) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 75.150929ms ago: executing program 5 (id=3751): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 51.186748ms ago: executing program 0 (id=3752): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x8000000e, 0x1) getdents64(r0, 0x0, 0x31) 0s ago: executing program 5 (id=3753): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) kernel console output (not intermixed with test programs): 698.759793][T18342] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1698.759818][T18342] ? clear_bhb_loop+0x60/0xb0 [ 1698.759847][T18342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.759876][T18342] RIP: 0033:0x7efd9eb8ebe9 [ 1698.759899][T18342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1698.759921][T18342] RSP: 002b:00007efd9f984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1698.759949][T18342] RAX: ffffffffffffffda RBX: 00007efd9edb5fa0 RCX: 00007efd9eb8ebe9 [ 1698.759968][T18342] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1698.759987][T18342] RBP: 00007efd9f984090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.760001][T18342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1698.760017][T18342] R13: 00007efd9edb6038 R14: 00007efd9edb5fa0 R15: 00007ffe6cdcf4f8 [ 1698.760058][T18342] [ 1699.014013][T10168] usb-storage 6-1:10.17: USB Mass Storage device detected [ 1699.020304][T18336] Dev loop2: unable to read RDB block 7 [ 1699.032376][T18336] loop2: unable to read partition table [ 1699.042789][T18336] loop2: partition table beyond EOD, truncated [ 1699.073837][T18336] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1699.123336][T10168] usb-storage 6-1:10.64: USB Mass Storage device detected [ 1699.135514][T18335] delete_channel: no stack [ 1699.203033][T10168] usb 6-1: USB disconnect, device number 75 [ 1701.166860][T10168] libceph: connect (1)[c::]:6789 error -101 [ 1701.203230][T10168] libceph: mon0 (1)[c::]:6789 connect error [ 1701.246234][T18377] 9p: Unknown access argument 18446744073709551615: -34 [ 1701.490414][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1701.496563][T10168] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1701.520565][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1701.527346][T18372] ceph: No mds server is up or the cluster is laggy [ 1701.760036][T10168] usb 4-1: Using ep0 maxpacket: 32 [ 1701.854764][T10168] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1701.942620][T10168] usb 4-1: config 0 has no interface number 0 [ 1702.672801][T10168] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1702.709758][T10168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.783870][T10168] usb 4-1: Product: syz [ 1702.788123][T10168] usb 4-1: Manufacturer: syz [ 1702.847851][T10168] usb 4-1: SerialNumber: syz [ 1702.882856][T10168] usb 4-1: config 0 descriptor?? [ 1702.909082][T10168] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1702.938732][T18415] nvme_fabrics: missing parameter 'transport=%s' [ 1702.950165][T18415] nvme_fabrics: missing parameter 'nqn=%s' [ 1703.159687][T10168] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1703.197249][T10168] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1704.128899][ T9] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1704.207739][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1704.208332][ T8722] usb 4-1: USB disconnect, device number 56 [ 1704.276977][ T8722] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1704.280059][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1704.319501][ T8722] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1704.326915][ T9] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1704.364544][ T9] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1704.364960][ T8722] quatech2 4-1:0.51: device disconnected [ 1704.400910][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1704.425112][ T9] usb 7-1: config 1 has no interface number 0 [ 1704.449121][ T9] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1704.677010][ T9] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1704.691042][ T9] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1704.700687][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.723201][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1704.760969][T11882] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1704.960770][T11882] usb 1-1: Using ep0 maxpacket: 8 [ 1705.194631][T18426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.246105][T11882] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1705.331428][T18426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.351291][T11882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.359357][T11882] usb 1-1: Product: syz [ 1705.398466][T11882] usb 1-1: Manufacturer: syz [ 1705.429021][T11882] usb 1-1: SerialNumber: syz [ 1705.436917][T18446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.445885][T18446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.513976][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1705.575518][T11882] usb 1-1: config 0 descriptor?? [ 1705.588504][T11882] gspca_main: se401-2.14.0 probing 047d:5003 [ 1705.732176][T18446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.741309][T18446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.920527][T18438] overlayfs: failed to resolve './file1': -2 [ 1706.612661][ T9] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1707.028675][ T8722] usb 7-1: USB disconnect, device number 72 [ 1707.051029][ T8722] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1707.532862][T11882] gspca_se401: read req failed req 0x06 error -19 [ 1707.715347][T11882] usb 1-1: USB disconnect, device number 60 [ 1707.893175][T18466] 9p: Unknown access argument 18446744073709551615: -34 [ 1707.919685][T18463] tmpfs: Bad value for 'mpol' [ 1709.039738][T18492] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 1709.052975][T18492] autofs: Bad value for 'fd' [ 1709.501298][T18491] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1709.510925][T18491] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1709.520574][T18491] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1709.815715][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'. [ 1711.103367][ T5952] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1711.660210][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 1711.667575][ T5952] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1711.679823][ T5952] usb 7-1: config 0 has no interface number 0 [ 1711.705130][T18514] netlink: 'syz.5.3087': attribute type 3 has an invalid length. [ 1711.713534][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3087'. [ 1711.732515][ T5952] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1711.742488][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.768206][ T5952] usb 7-1: Product: syz [ 1711.774559][ T5952] usb 7-1: Manufacturer: syz [ 1711.789971][T11882] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1711.801194][ T5952] usb 7-1: SerialNumber: syz [ 1711.831846][ T5952] usb 7-1: config 0 descriptor?? [ 1711.898490][ T5952] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1711.973785][T11882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1711.986855][T11882] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1711.998924][T11882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.086693][T11882] usb 1-1: config 0 descriptor?? [ 1712.215858][ T5952] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1712.287158][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1712.813214][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1712.877810][ T5952] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1712.955728][ T10] usb 1-1: USB disconnect, device number 61 [ 1713.004716][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1713.012194][ T5952] usb 7-1: USB disconnect, device number 73 [ 1713.036756][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.050302][ T5952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1713.093753][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.126334][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1713.152377][ T5952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1713.159029][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.181079][T18511] delete_channel: no stack [ 1713.211381][ T9] usb 4-1: config 0 descriptor?? [ 1713.217453][ T5952] quatech2 7-1:0.51: device disconnected [ 1713.699116][T18527] overlayfs: failed to resolve './file1': -2 [ 1713.782490][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3091'. [ 1713.791980][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3091'. [ 1713.974361][ T9] logitech-hidpp-device 0003:046D:C343.001D: unbalanced delimiter at end of report description [ 1713.996180][ T9] logitech-hidpp-device 0003:046D:C343.001D: hidpp_probe:parse failed [ 1714.040065][ T9] logitech-hidpp-device 0003:046D:C343.001D: probe with driver logitech-hidpp-device failed with error -22 [ 1714.694923][T18516] tipc: Enabled bearer , priority 0 [ 1714.738408][T18516] syzkaller0: entered promiscuous mode [ 1714.780510][T18516] syzkaller0: entered allmulticast mode [ 1715.392130][T18539] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1715.470578][T10168] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1715.669160][T10168] usb 6-1: Using ep0 maxpacket: 8 [ 1715.697691][T10168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.719195][T18552] syz.6.3097: attempt to access beyond end of device [ 1715.719195][T18552] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1715.776891][T18539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1715.793508][T10168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.810639][ T9] tipc: Node number set to 2034078079 [ 1715.817403][T18515] tipc: Resetting bearer [ 1715.825838][T10718] usb 4-1: USB disconnect, device number 57 [ 1715.905937][T18515] tipc: Disabling bearer [ 1715.943883][T10168] usb 6-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1715.990984][T10168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.033039][T10168] usb 6-1: config 0 descriptor?? [ 1718.769687][T10168] usbhid 6-1:0.0: can't add hid device: -71 [ 1718.855628][T10168] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1719.194789][T10168] usb 6-1: USB disconnect, device number 76 [ 1720.154971][T18571] hub 8-0:1.0: USB hub found [ 1720.161135][T18571] hub 8-0:1.0: 1 port detected [ 1721.560097][ T8722] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 1721.849698][ T8722] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1722.220007][ T8722] usb 5-1: config 0 has no interface number 0 [ 1722.246531][ T8722] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1722.349019][ T8722] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1722.375079][ T8722] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1722.386862][ T8722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.444960][T18597] block device autoloading is deprecated and will be removed. [ 1722.448073][ T8722] usb 5-1: config 0 descriptor?? [ 1722.464353][T18581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1722.469276][T18599] syzkaller1: entered promiscuous mode [ 1722.483770][ T8722] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1722.484308][T18599] syzkaller1: entered allmulticast mode [ 1722.580008][ T5952] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1722.630238][T10168] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1722.770793][ T5952] usb 7-1: Using ep0 maxpacket: 16 [ 1722.911937][ T5952] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1722.962074][ T30] audit: type=1326 audit(1755832015.940:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.4.3105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd574b8ebe9 code=0x0 [ 1723.185157][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1723.323481][T18607] syz.5.3111: attempt to access beyond end of device [ 1723.323481][T18607] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1723.458233][ T5952] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1723.524002][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.537789][ T5952] usb 7-1: Product: syz [ 1723.546377][ T5952] usb 7-1: Manufacturer: syz [ 1723.554013][ T5952] usb 7-1: SerialNumber: syz [ 1723.658093][ T5952] usb 7-1: config 0 descriptor?? [ 1723.748681][ T5952] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1723.992427][T10168] usb 4-1: Using ep0 maxpacket: 8 [ 1724.002063][ T5952] usb 7-1: USB disconnect, device number 74 [ 1724.012141][T12588] usb 7-1: Failed to submit usb control message: -71 [ 1724.094190][T12588] usb 7-1: unable to send the bmi data to the device: -71 [ 1724.184872][T12588] usb 7-1: unable to get target info from device [ 1724.245234][T12588] usb 7-1: could not get target info (-71) [ 1724.305784][T12588] usb 7-1: could not probe fw (-71) [ 1725.142336][T10168] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.152579][T10168] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1725.182717][T10168] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1725.190354][ T5952] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1725.199840][T10168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.208212][T10168] usb 4-1: Product: syz [ 1725.212520][T10168] usb 4-1: Manufacturer: syz [ 1725.217162][T10168] usb 4-1: SerialNumber: syz [ 1725.225513][T10168] usb 4-1: config 0 descriptor?? [ 1725.263455][T10718] usb 5-1: USB disconnect, device number 76 [ 1725.400379][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 1725.468547][T18615] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1725.470323][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.605484][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1725.620727][ T5952] usb 6-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1725.632391][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.639532][T10168] usb 4-1: USB disconnect, device number 58 [ 1725.669209][ T5952] usb 6-1: config 0 descriptor?? [ 1725.970785][T18615] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1726.120061][ T5952] logitech-hidpp-device 0003:046D:C343.001E: unbalanced delimiter at end of report description [ 1726.202766][ T5952] logitech-hidpp-device 0003:046D:C343.001E: hidpp_probe:parse failed [ 1726.255641][T18624] hub 8-0:1.0: USB hub found [ 1726.260810][T18624] hub 8-0:1.0: 1 port detected [ 1726.267088][ T5952] logitech-hidpp-device 0003:046D:C343.001E: probe with driver logitech-hidpp-device failed with error -22 [ 1726.313150][T18612] tipc: Enabling of bearer rejected, already enabled [ 1726.391830][ T5952] usb 6-1: USB disconnect, device number 77 [ 1727.439429][T18643] overlayfs: failed to resolve './file1': -2 [ 1727.498804][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3122'. [ 1727.508004][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3122'. [ 1727.958558][T18657] tipc: Enabled bearer , priority 0 [ 1727.972207][T18657] syzkaller0: entered promiscuous mode [ 1727.977883][T18657] syzkaller0: entered allmulticast mode [ 1728.011429][T18657] 9pnet_fd: Insufficient options for proto=fd [ 1728.024297][ T5952] usb 6-1: new low-speed USB device number 78 using dummy_hcd [ 1728.055213][T18656] tipc: Resetting bearer [ 1728.077386][T18656] tipc: Disabling bearer [ 1728.206609][ T5952] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1728.832135][ T5952] usb 6-1: config 0 has no interface number 0 [ 1728.905272][ T5952] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1729.034268][ T5952] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1729.216853][ T5952] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1729.255791][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.294618][ T5952] usb 6-1: config 0 descriptor?? [ 1729.350572][T18652] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1729.393892][ T5952] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1729.570365][ T30] audit: type=1326 audit(1755832022.620:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18649 comm="syz.5.3125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a9498ebe9 code=0x0 [ 1729.780002][ T5952] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1730.232784][ T5952] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1730.241409][ T5952] usb 4-1: not running at top speed; connect to a high speed hub [ 1730.265352][ T5952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.275696][ T5952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1730.288187][ T5952] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1730.297667][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.306367][ T5952] usb 4-1: Product: syz [ 1730.310869][ T5952] usb 4-1: Manufacturer: syz [ 1730.315605][ T5952] usb 4-1: SerialNumber: syz [ 1730.736053][ T5952] usb 4-1: 0:2 : does not exist [ 1730.752806][ T5952] usb 4-1: unit 4 not found! [ 1730.766658][ T5952] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1730.804291][ T5952] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1730.850430][T18673] comedi comedi2: reset error (fatal) [ 1730.919079][ T5952] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1730.930905][T10168] usb 6-1: USB disconnect, device number 78 [ 1731.040160][ T5952] usb 4-1: USB disconnect, device number 59 [ 1731.383514][T18697] overlayfs: failed to resolve './file1': -2 [ 1731.481067][T18699] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3139'. [ 1731.720712][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 1731.730232][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 1731.803880][T16732] udevd[16732]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1733.173952][T18720] autofs: Bad value for 'fd' [ 1733.880472][T18724] tipc: Enabling of bearer rejected, already enabled [ 1733.941110][T18724] syzkaller0: mtu less than device minimum [ 1735.535041][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.292194][T18755] 9p: Unknown access argument 18446744073709551615: -34 [ 1737.443747][T18779] overlayfs: failed to resolve './file1': -2 [ 1737.524475][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1737.533681][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1739.263596][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 1739.953796][T18803] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1740.800077][T10168] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1741.610175][T10168] usb 5-1: Using ep0 maxpacket: 8 [ 1741.620301][T10168] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1741.662089][T10168] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1741.713784][T10168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.729930][T10168] usb 5-1: Product: syz [ 1741.742064][T10168] usb 5-1: Manufacturer: syz [ 1741.747018][T10168] usb 5-1: SerialNumber: syz [ 1741.922249][T10168] usb 5-1: config 0 descriptor?? [ 1742.442162][T18824] overlayfs: failed to resolve './file1': -2 [ 1742.461582][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3165'. [ 1742.470738][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 1742.699077][T18836] tipc: Enabled bearer , priority 0 [ 1742.818439][T18836] syzkaller0: entered promiscuous mode [ 1742.980008][T18836] syzkaller0: entered allmulticast mode [ 1743.282475][T18839] tipc: Resetting bearer [ 1743.304179][T18845] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[18845] [ 1743.325314][T18835] tipc: Resetting bearer [ 1743.354679][T18835] tipc: Disabling bearer [ 1743.374325][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3172'. [ 1743.567810][T11882] usb 5-1: USB disconnect, device number 77 [ 1743.577151][ T5952] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 1744.081414][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1744.090042][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1744.104033][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1744.117348][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1744.183936][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1744.185614][T18859] 9p: Unknown access argument 18446744073709551615: -34 [ 1744.201658][T17183] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1744.279399][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1744.600052][T17183] usb 1-1: Using ep0 maxpacket: 32 [ 1744.605513][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1744.647660][T17183] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1744.669079][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1744.687497][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1744.730282][T17183] usb 1-1: config 0 has no interface number 0 [ 1744.739930][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1744.763562][T17183] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1744.783156][T17183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.799249][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1744.849991][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1744.860822][T17183] usb 1-1: Product: syz [ 1744.865027][T17183] usb 1-1: Manufacturer: syz [ 1744.951958][T17183] usb 1-1: SerialNumber: syz [ 1744.959281][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1745.004344][T17183] usb 1-1: config 0 descriptor?? [ 1745.040241][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1745.052249][T17183] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1745.130297][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1745.176882][ T5952] usb 4-1: string descriptor 0 read error: -22 [ 1745.196236][ T5952] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1745.232764][T17183] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1745.267437][T18874] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.3176'. [ 1745.277594][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.301270][T17183] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1745.361726][ T5952] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1745.839994][ T5952] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1745.992599][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 1746.008920][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.069265][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1746.270744][ T5952] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1746.315255][T18880] syz.4.3177: attempt to access beyond end of device [ 1746.315255][T18880] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1746.342878][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.616584][ T5952] usb 6-1: config 0 descriptor?? [ 1746.923610][ T10] usb 4-1: USB disconnect, device number 60 [ 1747.724672][T18890] overlayfs: failed to resolve './file1': -2 [ 1747.769208][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3180'. [ 1747.787821][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3180'. [ 1747.907871][T18893] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[18893] [ 1748.224674][T18893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3182'. [ 1748.356303][ T5952] usb 6-1: can't set config #0, error -71 [ 1748.376859][ T5952] usb 6-1: USB disconnect, device number 79 [ 1748.458532][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1748.466497][T17183] usb 1-1: USB disconnect, device number 62 [ 1748.486171][T17183] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1748.586296][T17183] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1748.630737][T17183] quatech2 1-1:0.51: device disconnected [ 1749.000837][T18903] hub 8-0:1.0: USB hub found [ 1749.008713][T18903] hub 8-0:1.0: 1 port detected [ 1750.321913][T18916] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3188'. [ 1750.401989][ T5952] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1750.453097][T17183] usb 7-1: new low-speed USB device number 75 using dummy_hcd [ 1750.650891][T17183] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1750.935621][T17183] usb 7-1: config 0 has no interface number 0 [ 1750.950502][T17183] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1750.962152][T17183] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1750.973382][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1751.000111][T17183] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1751.009372][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.047980][T17183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.060256][ T5952] usb 1-1: config 0 descriptor?? [ 1751.096557][T17183] usb 7-1: config 0 descriptor?? [ 1751.110904][T18911] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1751.138767][T17183] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1751.465349][ T30] audit: type=1326 audit(1755832044.510:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18910 comm="syz.6.3187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614238ebe9 code=0x0 [ 1751.514775][T17183] usb 1-1: USB disconnect, device number 63 [ 1751.799213][T18909] loop2: detected capacity change from 0 to 7 [ 1751.819696][T18909] Dev loop2: unable to read RDB block 7 [ 1751.856135][T18909] loop2: unable to read partition table [ 1751.909790][T18931] overlayfs: failed to resolve './file1': -2 [ 1751.911900][T18909] loop2: partition table beyond EOD, truncated [ 1752.072658][T18909] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1752.162680][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3193'. [ 1752.173675][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3193'. [ 1752.209819][T18908] delete_channel: no stack [ 1752.330149][T17183] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1752.520079][T17183] usb 4-1: Using ep0 maxpacket: 8 [ 1752.533974][T17183] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1752.543535][T17183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.552000][T17183] usb 4-1: Product: syz [ 1752.556432][T17183] usb 4-1: Manufacturer: syz [ 1752.566206][T17183] usb 4-1: SerialNumber: syz [ 1752.576430][T17183] usb 4-1: config 0 descriptor?? [ 1752.588222][T17183] gspca_main: se401-2.14.0 probing 047d:5003 [ 1752.766335][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1753.050094][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1753.064315][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1753.072615][ T9] usb 5-1: config 0 has no interface number 0 [ 1753.083464][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1753.092822][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.109963][ T9] usb 5-1: Product: syz [ 1753.146488][ T9] usb 5-1: Manufacturer: syz [ 1753.208469][ T9] usb 5-1: SerialNumber: syz [ 1753.216202][ T9] usb 5-1: config 0 descriptor?? [ 1753.224967][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1753.234348][ T9] usb 5-1: selecting invalid altsetting 1 [ 1753.240187][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1753.250920][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1753.287026][T17183] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 1753.292322][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1753.324168][ T9] usb 5-1: media controller created [ 1753.349782][T17183] usb 4-1: USB disconnect, device number 61 [ 1753.477959][T10168] usb 7-1: USB disconnect, device number 75 [ 1753.572896][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1753.647845][T18952] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1753.740545][ T8722] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1753.819932][T18952] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1753.923630][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1753.954494][ T8722] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1753.975488][ T8722] usb 6-1: config 179 has no interface number 0 [ 1754.103191][ T8722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1754.115598][ T8722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 1754.138637][ T9] usb 5-1: USB disconnect, device number 78 [ 1754.152974][ T8722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1754.235760][ T8722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1754.306464][ T8722] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1754.377992][ T8722] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1754.426503][ T8722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.553541][T18958] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1754.617989][T18949] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1754.676748][T18949] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1754.951497][T18958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1754.959977][ T5952] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1755.164671][ T5952] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1755.184537][ T5952] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1755.234758][ T5952] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1755.302448][ T5952] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1755.332025][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.359810][ T5952] usb 5-1: Product: syz [ 1755.376846][ T5952] usb 5-1: Manufacturer: syz [ 1755.385136][ T5952] usb 5-1: SerialNumber: syz [ 1755.488987][T18961] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1755.536435][T18961] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1755.854694][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1755.854696][ T9] usb 6-1: USB disconnect, device number 80 [ 1755.869908][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1756.133678][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 1756.277716][T18971] tipc: Enabled bearer , priority 0 [ 1756.288784][T18971] syzkaller0: entered promiscuous mode [ 1756.345678][T18971] syzkaller0: entered allmulticast mode [ 1756.367697][ T5952] rtl8150 5-1:1.0: couldn't reset the device [ 1756.415020][ T5952] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1756.503161][T18970] tipc: Resetting bearer [ 1756.526475][ T5952] usb 5-1: USB disconnect, device number 79 [ 1756.621610][T18970] tipc: Disabling bearer [ 1756.852516][T18977] overlayfs: failed to resolve './file1': -2 [ 1756.934160][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3207'. [ 1756.943420][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 1760.369688][ T9] hid (null): unknown global tag 0xe [ 1760.382508][T18996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1760.401498][ T9] hid (null): global environment stack underflow [ 1760.420508][ T9] hid (null): unknown global tag 0xc [ 1760.425945][ T9] hid (null): invalid report_size 20966 [ 1760.440506][ T9] hid (null): unknown global tag 0xe [ 1760.448657][ T9] hid-generic 0007:FFFFFFFC:0003.001F: collection stack underflow [ 1760.459906][ T9] hid-generic 0007:FFFFFFFC:0003.001F: item 0 0 0 12 parsing failed [ 1760.483566][ T9] hid-generic 0007:FFFFFFFC:0003.001F: probe with driver hid-generic failed with error -22 [ 1760.570702][ T10] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1760.755008][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1760.771778][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1760.791536][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.881570][ T10] usb 7-1: config 0 descriptor?? [ 1760.919958][T11882] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 1761.664079][T10168] usb 7-1: USB disconnect, device number 76 [ 1761.679965][ T9] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1761.735524][T11882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1761.768858][T11882] usb 4-1: config 0 has no interface number 0 [ 1761.807011][T11882] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1761.808427][T18992] loop2: detected capacity change from 0 to 7 [ 1761.835880][T18992] Dev loop2: unable to read RDB block 7 [ 1761.844539][T11882] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1761.850008][T18992] loop2: unable to read partition table [ 1761.868131][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1761.888897][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1761.900945][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.901612][T11882] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1761.920109][T18992] loop2: partition table beyond EOD, truncated [ 1761.929116][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1761.943735][T18992] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1761.965217][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1761.967002][T11882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.985123][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.004846][T11882] usb 4-1: config 0 descriptor?? [ 1762.015733][ T9] usb 6-1: Product: syz [ 1762.016226][T19002] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1762.030973][ T9] usb 6-1: Manufacturer: syz [ 1762.049134][T11882] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1762.050261][ T9] usb 6-1: SerialNumber: syz [ 1762.095084][T18992] delete_channel: no stack [ 1762.298754][ T30] audit: type=1326 audit(1755832055.340:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19001 comm="syz.3.3215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabd218ebe9 code=0x0 [ 1762.390835][T10168] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1762.521013][ T9] usb 6-1: 0:2 : does not exist [ 1762.541639][ T9] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1762.550771][T10168] usb 5-1: Using ep0 maxpacket: 16 [ 1762.572147][T10168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1762.596085][ T9] usb 6-1: USB disconnect, device number 81 [ 1762.617732][T10168] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1762.647385][T10168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.680471][T10168] usb 5-1: Product: syz [ 1762.684834][T10168] usb 5-1: Manufacturer: syz [ 1762.689561][T10168] usb 5-1: SerialNumber: syz [ 1762.708570][T10168] usb 5-1: config 0 descriptor?? [ 1762.724642][T10168] hub 5-1:0.0: bad descriptor, ignoring hub [ 1762.748086][T10168] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1762.769006][T10168] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1763.960802][T11882] usb 4-1: USB disconnect, device number 62 [ 1765.955932][ T9] usb 5-1: USB disconnect, device number 80 [ 1766.239027][T19061] syz.5.3235: attempt to access beyond end of device [ 1766.239027][T19061] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1766.957858][T19065] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 1768.082340][T19079] batadv1: entered promiscuous mode [ 1768.091532][T19079] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1768.604444][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1768.858540][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1769.132605][T19080] ceph: No mds server is up or the cluster is laggy [ 1769.431988][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1769.438180][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1770.401497][T17183] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1770.460487][T11882] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1770.534839][T19103] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3246'. [ 1771.362083][T17183] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1771.376306][T11882] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1771.389090][T17183] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1771.400151][T11882] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1771.410382][T17183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.507687][T17183] usb 7-1: config 0 descriptor?? [ 1771.512783][T11882] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1771.536429][T11882] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1771.556509][T11882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.565760][T11882] usb 1-1: Product: syz [ 1771.577889][T11882] usb 1-1: Manufacturer: syz [ 1771.583659][T11882] usb 1-1: SerialNumber: syz [ 1771.600175][T19094] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1771.607570][T19094] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1771.795921][T10168] usb 7-1: USB disconnect, device number 77 [ 1771.897528][T19090] delete_channel: no stack [ 1772.962754][T11882] rtl8150 1-1:1.0: couldn't reset the device [ 1772.976039][T11882] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1773.024205][T11882] usb 1-1: USB disconnect, device number 64 [ 1774.496559][T19136] overlayfs: failed to resolve './file1': -2 [ 1774.561231][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3256'. [ 1774.570795][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3256'. [ 1775.522592][T19148] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1775.956600][T19149] fuse: Unknown parameter 'use00000000000000000000' [ 1776.200670][ T5901] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1776.362148][ T5901] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1776.383518][ T5901] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1776.404087][ T5901] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1776.414045][ T5901] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1776.491773][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.553142][T19161] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1776.576622][ T5901] usb 5-1: Product: syz [ 1776.595885][T19161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1776.603514][ T5901] usb 5-1: Manufacturer: syz [ 1776.609988][T11882] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1776.610506][ T5901] usb 5-1: SerialNumber: syz [ 1776.626606][T19151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1776.636879][T19151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1776.790593][T11882] usb 7-1: Using ep0 maxpacket: 8 [ 1776.806518][T11882] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1776.813926][T19167] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.3268'. [ 1776.818107][T11882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.293470][T11882] usb 7-1: Product: syz [ 1777.297863][T11882] usb 7-1: Manufacturer: syz [ 1777.322658][T11882] usb 7-1: SerialNumber: syz [ 1777.339777][T11882] usb 7-1: config 0 descriptor?? [ 1777.350389][T11882] gspca_main: se401-2.14.0 probing 047d:5003 [ 1778.748351][ T5901] rtl8150 5-1:1.0: couldn't reset the device [ 1778.769517][ T5901] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1778.982629][ T5901] usb 5-1: USB disconnect, device number 81 [ 1779.060459][ T5952] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1779.220074][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 1779.228478][ T5952] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1779.247927][ T5952] usb 6-1: config 0 has no interface number 0 [ 1779.275999][ T5952] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1779.294846][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.320026][ T5952] usb 6-1: Product: syz [ 1779.334574][ T5952] usb 6-1: Manufacturer: syz [ 1779.339254][ T5952] usb 6-1: SerialNumber: syz [ 1779.382618][ T5952] usb 6-1: config 0 descriptor?? [ 1779.400979][ T5952] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1779.411633][T11882] gspca_se401: read req failed req 0x06 error -19 [ 1779.420520][T11882] usb 7-1: USB disconnect, device number 78 [ 1779.950316][ T5952] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1780.146516][ T5952] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1780.418627][T19206] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1780.459388][T19206] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1780.832387][T19215] FAULT_INJECTION: forcing a failure. [ 1780.832387][T19215] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.846261][T19215] CPU: 0 UID: 0 PID: 19215 Comm: syz.4.3279 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1780.846292][T19215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1780.846306][T19215] Call Trace: [ 1780.846316][T19215] [ 1780.846325][T19215] dump_stack_lvl+0x189/0x250 [ 1780.846354][T19215] ? __pfx____ratelimit+0x10/0x10 [ 1780.846378][T19215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1780.846403][T19215] ? __pfx__printk+0x10/0x10 [ 1780.846437][T19215] ? __pfx___might_resched+0x10/0x10 [ 1780.846461][T19215] ? fs_reclaim_acquire+0x7d/0x100 [ 1780.846491][T19215] should_fail_ex+0x414/0x560 [ 1780.846518][T19215] should_failslab+0xa8/0x100 [ 1780.846544][T19215] __kmalloc_noprof+0xcb/0x4f0 [ 1780.846564][T19215] ? kfree+0x4d/0x440 [ 1780.846592][T19215] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1780.846625][T19215] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1780.846655][T19215] ? tomoyo_domain+0xda/0x130 [ 1780.846689][T19215] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1780.846724][T19215] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1780.846747][T19215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1780.846786][T19215] ? __lock_acquire+0xab9/0xd20 [ 1780.846827][T19215] ? __fget_files+0x2a/0x420 [ 1780.846855][T19215] ? __fget_files+0x2a/0x420 [ 1780.846878][T19215] ? __fget_files+0x3a0/0x420 [ 1780.846900][T19215] ? __fget_files+0x2a/0x420 [ 1780.846926][T19215] security_file_ioctl+0xcb/0x2d0 [ 1780.846953][T19215] __se_sys_ioctl+0x47/0x170 [ 1780.846988][T19215] do_syscall_64+0xfa/0x3b0 [ 1780.847015][T19215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.847034][T19215] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1780.847053][T19215] ? clear_bhb_loop+0x60/0xb0 [ 1780.847078][T19215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.847099][T19215] RIP: 0033:0x7fd574b8ebe9 [ 1780.847118][T19215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1780.847139][T19215] RSP: 002b:00007fd5759f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1780.847161][T19215] RAX: ffffffffffffffda RBX: 00007fd574db6180 RCX: 00007fd574b8ebe9 [ 1780.847177][T19215] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1780.847191][T19215] RBP: 00007fd5759f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.847205][T19215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.847223][T19215] R13: 00007fd574db6218 R14: 00007fd574db6180 R15: 00007fff1dd987d8 [ 1780.847257][T19215] [ 1780.847545][T19215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1782.070237][T19230] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 1782.111492][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1782.115722][T19228] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 1782.120609][T11882] usb 6-1: USB disconnect, device number 82 [ 1782.280263][T11882] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1782.347518][T10168] libceph: connect (1)[c::]:6789 error -101 [ 1782.354016][T10168] libceph: mon0 (1)[c::]:6789 connect error [ 1782.365032][T11882] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1782.414061][T11882] quatech2 6-1:0.51: device disconnected [ 1782.630475][T10168] libceph: connect (1)[c::]:6789 error -101 [ 1782.636674][T10168] libceph: mon0 (1)[c::]:6789 connect error [ 1782.749996][T17183] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1782.900679][T17183] usb 1-1: Using ep0 maxpacket: 8 [ 1782.906855][T19231] ceph: No mds server is up or the cluster is laggy [ 1782.971470][T17183] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1783.033281][T17183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.063967][T17183] usb 1-1: Product: syz [ 1783.068675][T17183] usb 1-1: Manufacturer: syz [ 1783.092221][T17183] usb 1-1: SerialNumber: syz [ 1783.127772][T17183] usb 1-1: config 0 descriptor?? [ 1783.153612][T17183] gspca_main: se401-2.14.0 probing 047d:5003 [ 1783.388616][T19254] FAULT_INJECTION: forcing a failure. [ 1783.388616][T19254] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.461352][T19254] CPU: 0 UID: 0 PID: 19254 Comm: syz.3.3288 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1783.461383][T19254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1783.461396][T19254] Call Trace: [ 1783.461404][T19254] [ 1783.461414][T19254] dump_stack_lvl+0x189/0x250 [ 1783.461442][T19254] ? __pfx____ratelimit+0x10/0x10 [ 1783.461465][T19254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1783.461487][T19254] ? __pfx__printk+0x10/0x10 [ 1783.461516][T19254] ? __pfx___might_resched+0x10/0x10 [ 1783.461557][T19254] ? fs_reclaim_acquire+0x7d/0x100 [ 1783.461589][T19254] should_fail_ex+0x414/0x560 [ 1783.461617][T19254] should_failslab+0xa8/0x100 [ 1783.461643][T19254] __kmalloc_noprof+0xcb/0x4f0 [ 1783.461663][T19254] ? tomoyo_encode+0x28b/0x550 [ 1783.461697][T19254] tomoyo_encode+0x28b/0x550 [ 1783.461731][T19254] tomoyo_mount_permission+0x44d/0x970 [ 1783.461769][T19254] ? tomoyo_mount_permission+0x27a/0x970 [ 1783.461797][T19254] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1783.461888][T19254] security_sb_mount+0xec/0x350 [ 1783.461923][T19254] path_mount+0xbc/0xfe0 [ 1783.461945][T19254] ? user_path_at+0x44/0x60 [ 1783.461972][T19254] ? kmem_cache_free+0x18f/0x400 [ 1783.462004][T19254] __se_sys_mount+0x317/0x410 [ 1783.462037][T19254] ? __pfx___se_sys_mount+0x10/0x10 [ 1783.462059][T19254] ? rcu_is_watching+0x15/0xb0 [ 1783.462089][T19254] ? do_syscall_64+0xbe/0x3b0 [ 1783.462112][T19254] ? __x64_sys_mount+0x20/0xc0 [ 1783.462138][T19254] do_syscall_64+0xfa/0x3b0 [ 1783.462159][T19254] ? lockdep_hardirqs_on+0x9c/0x150 [ 1783.462181][T19254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.462202][T19254] ? clear_bhb_loop+0x60/0xb0 [ 1783.462227][T19254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.462248][T19254] RIP: 0033:0x7fabd218ebe9 [ 1783.462267][T19254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1783.462285][T19254] RSP: 002b:00007fabd300d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1783.462308][T19254] RAX: ffffffffffffffda RBX: 00007fabd23b5fa0 RCX: 00007fabd218ebe9 [ 1783.462322][T19254] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000080 [ 1783.462337][T19254] RBP: 00007fabd300d090 R08: 0000200000000180 R09: 0000000000000000 [ 1783.462351][T19254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1783.462364][T19254] R13: 00007fabd23b6038 R14: 00007fabd23b5fa0 R15: 00007ffec1dd5078 [ 1783.462396][T19254] [ 1784.773720][T19283] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3296'. [ 1785.469288][T17183] gspca_se401: read req failed req 0x06 error -19 [ 1785.872039][T17183] usb 1-1: USB disconnect, device number 65 [ 1786.305249][T19293] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[19293] [ 1786.380542][T17183] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1786.554593][T17183] usb 4-1: Using ep0 maxpacket: 8 [ 1786.566125][T17183] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1786.626015][T17183] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1786.660845][T17183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.689996][ T8722] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1786.712538][T17183] usb 4-1: config 0 descriptor?? [ 1786.917550][ T8722] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1786.953684][ T8722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.990289][ T8722] usb 7-1: Product: syz [ 1786.994682][ T8722] usb 7-1: Manufacturer: syz [ 1786.999547][ T8722] usb 7-1: SerialNumber: syz [ 1787.011836][ T8722] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1787.018170][ T8722] r8152-cfgselector 7-1: config 0 descriptor?? [ 1787.167522][T17183] corsair 0003:1B1C:1B09.0020: unbalanced delimiter at end of report description [ 1787.177506][T17183] corsair 0003:1B1C:1B09.0020: parse failed [ 1787.197311][T17183] corsair 0003:1B1C:1B09.0020: probe with driver corsair failed with error -22 [ 1787.395537][ T9] usb 4-1: USB disconnect, device number 63 [ 1787.450297][T19295] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3301'. [ 1787.463835][ T5901] r8152-cfgselector 7-1: USB disconnect, device number 79 [ 1787.686687][T19306] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1787.740250][T19306] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1787.751030][ T8722] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1787.942309][ T8722] usb 6-1: Using ep0 maxpacket: 8 [ 1787.952645][ T8722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.984571][ T8722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.023960][ T8722] usb 6-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1788.096306][ T8722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.212819][ T8722] usb 6-1: config 0 descriptor?? [ 1788.748619][ T8722] logitech-hidpp-device 0003:046D:C343.0021: unbalanced delimiter at end of report description [ 1788.819144][ T8722] logitech-hidpp-device 0003:046D:C343.0021: hidpp_probe:parse failed [ 1788.861410][ T8722] logitech-hidpp-device 0003:046D:C343.0021: probe with driver logitech-hidpp-device failed with error -22 [ 1789.119578][T19304] tipc: Enabling of bearer rejected, already enabled [ 1789.148967][ T5952] usb 6-1: USB disconnect, device number 83 [ 1789.167021][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3311'. [ 1789.311249][ T8722] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1789.531663][ T8722] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1789.588140][ T8722] usb 7-1: not running at top speed; connect to a high speed hub [ 1789.607862][ T8722] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.619095][ T8722] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1789.642164][ T8722] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1789.664355][ T8722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.704399][ T8722] usb 7-1: Product: syz [ 1789.724602][ T8722] usb 7-1: Manufacturer: syz [ 1789.729422][ T8722] usb 7-1: SerialNumber: syz [ 1790.000107][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1790.121518][T19334] ptrace attach of "./syz-executor exec"[10364] was attempted by "./syz-executor exec"[19334] [ 1790.151425][ T8722] usb 7-1: 0:2 : does not exist [ 1790.156433][ T8722] usb 7-1: unit 4 not found! [ 1790.178689][ T8722] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1790.191012][ T8722] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1790.222902][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1790.238621][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1790.260401][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1790.261893][ T8722] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1790.289102][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1790.298268][ T9] usb 1-1: SerialNumber: syz [ 1790.305972][ T8722] usb 7-1: USB disconnect, device number 80 [ 1790.338627][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1790.405275][T19341] 9p: Unknown access argument 18446744073709551615: -34 [ 1790.755361][ T8722] usb 1-1: USB disconnect, device number 66 [ 1791.075133][T19351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3316'. [ 1796.980646][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1799.010682][T19409] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1802.136027][T19432] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3336'. [ 1806.129738][T19439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1806.370251][T19448] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3341'. [ 1806.993493][T17183] libceph: connect (1)[c::]:6789 error -101 [ 1806.999785][T17183] libceph: mon0 (1)[c::]:6789 connect error [ 1807.284843][T17183] libceph: connect (1)[c::]:6789 error -101 [ 1807.300209][T17183] libceph: mon0 (1)[c::]:6789 connect error [ 1807.806329][T19452] ceph: No mds server is up or the cluster is laggy [ 1807.919554][T17183] libceph: connect (1)[c::]:6789 error -101 [ 1807.940176][ T8722] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1807.980722][T17183] libceph: mon0 (1)[c::]:6789 connect error [ 1808.193947][ T8722] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1808.213221][ T8722] usb 6-1: config 179 has no interface number 0 [ 1808.219604][ T8722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1808.280001][ T8722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 1808.289146][T14379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1808.310124][T14379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1808.318614][T14379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1808.319929][ T8722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1808.330044][T14379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1808.345111][T14379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1808.394061][ T5841] bond0: (slave syz_tun): Releasing backup interface [ 1808.406238][ T5841] syz_tun (unregistering): left promiscuous mode [ 1809.116197][ T8722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1809.179919][ T8722] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1809.199936][ T8722] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1809.209057][ T8722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.218706][T12010] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.244770][T19458] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1809.286437][T19458] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1809.410063][T17183] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1809.439739][T12010] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.485958][T19482] 9p: Unknown access argument 18446744073709551615: -34 [ 1809.579944][T17183] usb 1-1: Using ep0 maxpacket: 8 [ 1809.591156][T17183] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1809.755423][T17183] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1810.009617][T17183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.410402][T14379] Bluetooth: hci1: command tx timeout [ 1812.490248][T14379] Bluetooth: hci1: command tx timeout [ 1812.990580][T17183] usb 1-1: config 0 descriptor?? [ 1813.240470][T17183] usb 1-1: can't set config #0, error -71 [ 1813.340911][T11882] usb 6-1: USB disconnect, device number 84 [ 1813.340967][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1813.355260][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1813.374776][T17183] usb 1-1: USB disconnect, device number 67 [ 1813.493409][T12010] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.907530][T11882] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1814.069670][T19503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3354'. [ 1814.180006][T12010] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.284154][T11882] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1814.293706][T11882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.305976][T11882] usb 6-1: Product: syz [ 1814.310403][T11882] usb 6-1: Manufacturer: syz [ 1814.315233][T11882] usb 6-1: SerialNumber: syz [ 1814.352513][T11882] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1814.358825][T11882] r8152-cfgselector 6-1: config 0 descriptor?? [ 1814.570349][T14379] Bluetooth: hci1: command tx timeout [ 1814.715042][T12010] bridge_slave_1: left allmulticast mode [ 1814.724457][T12010] bridge_slave_1: left promiscuous mode [ 1814.730707][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.743653][T12010] bridge_slave_0: left allmulticast mode [ 1814.749702][T12010] bridge_slave_0: left promiscuous mode [ 1814.758716][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.785129][T19501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3355'. [ 1814.806048][T10168] r8152-cfgselector 6-1: USB disconnect, device number 85 [ 1815.183558][T12010] dvmrp17 (unregistering): left allmulticast mode [ 1815.361587][T12010] team0: Port device bridge2 removed [ 1815.569446][T12010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.578463][T12010] bond_slave_0: left promiscuous mode [ 1815.586281][T12010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.595663][T12010] bond_slave_1: left promiscuous mode [ 1815.604043][T12010] bond0 (unregistering): (slave team0): Releasing backup interface [ 1815.614630][T12010] bond0 (unregistering): Released all slaves [ 1815.741120][T12010] bond1 (unregistering): Released all slaves [ 1815.861788][T12010] bond2 (unregistering): Released all slaves [ 1815.978547][T12010] bond3 (unregistering): Released all slaves [ 1816.102084][T12010] bond4 (unregistering): Released all slaves [ 1816.223552][T12010] bond5 (unregistering): Released all slaves [ 1816.341495][T12010] bond6 (unregistering): Released all slaves [ 1816.475683][T12010] bond7 (unregistering): Released all slaves [ 1816.595768][T12010] bond8 (unregistering): Released all slaves [ 1816.614644][T19468] chnl_net:caif_netlink_parms(): no params data found [ 1816.650018][T14379] Bluetooth: hci1: command tx timeout [ 1816.763742][T12010] tipc: Left network mode [ 1816.764801][T19468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.778528][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.786230][T19468] bridge_slave_0: entered allmulticast mode [ 1816.794017][T19468] bridge_slave_0: entered promiscuous mode [ 1816.803254][T19468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.810720][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.818105][T19468] bridge_slave_1: entered allmulticast mode [ 1816.826108][T19468] bridge_slave_1: entered promiscuous mode [ 1816.886465][T19468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1816.898876][T19468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1816.967857][T19468] team0: Port device team_slave_0 added [ 1816.980489][T19468] team0: Port device team_slave_1 added [ 1817.018442][T19468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.026629][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1817.053011][T19468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1817.068306][T19468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1817.075425][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1817.101708][T19468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1817.167630][T19468] hsr_slave_0: entered promiscuous mode [ 1817.175054][T19468] hsr_slave_1: entered promiscuous mode [ 1817.181494][T19468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1817.189093][T19468] Cannot create hsr debugfs directory [ 1817.222463][T12010] hsr_slave_0: left promiscuous mode [ 1817.228415][T12010] hsr_slave_1: left promiscuous mode [ 1817.234393][T12010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1817.243897][T12010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1817.252325][T12010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1817.259754][T12010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1817.279177][T12010] veth1_macvtap: left promiscuous mode [ 1817.285340][T12010] veth0_macvtap: left promiscuous mode [ 1817.291555][T12010] veth1_vlan: left promiscuous mode [ 1817.296899][T12010] veth0_vlan: left promiscuous mode [ 1817.799673][T12010] team_slave_1 (unregistering): left promiscuous mode [ 1817.813749][T12010] team0 (unregistering): Port device team_slave_1 removed [ 1817.858681][T12010] team_slave_0 (unregistering): left promiscuous mode [ 1817.874338][T12010] team0 (unregistering): Port device team_slave_0 removed [ 1818.866287][T19468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1818.876237][T19468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1818.887619][T19468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1818.897556][T19468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1818.979106][T19468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.999726][T19468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1819.012797][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.020010][T11961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1819.037555][T16654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.044757][T16654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.264265][T19468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.310820][T19468] veth0_vlan: entered promiscuous mode [ 1819.325116][T19468] veth1_vlan: entered promiscuous mode [ 1819.356143][T19468] veth0_macvtap: entered promiscuous mode [ 1819.368008][T19468] veth1_macvtap: entered promiscuous mode [ 1819.395648][T19468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.408286][T19468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.424946][T19468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.434222][T19468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.444209][T19468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.453062][T19468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.529318][T12015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.545028][T12015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.578306][T11961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.586934][T11961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.747255][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1838.771212][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1838.780164][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1838.791758][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1838.800742][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1838.823378][ T5842] bond0: (slave syz_tun): Releasing backup interface [ 1838.909272][T12010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1838.922498][T12010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.007060][T12010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.018750][T12010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.113470][T12010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.126692][T12010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.155631][T19536] chnl_net:caif_netlink_parms(): no params data found [ 1839.216273][T12010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.227026][T12010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.293537][T19536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.312133][T19536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.319400][T19536] bridge_slave_0: entered allmulticast mode [ 1839.327423][T19536] bridge_slave_0: entered promiscuous mode [ 1839.336408][T19536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.344039][T19536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.355148][T19536] bridge_slave_1: entered allmulticast mode [ 1839.364066][T19536] bridge_slave_1: entered promiscuous mode [ 1839.403088][T19536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1839.416246][T19536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.470684][T19536] team0: Port device team_slave_0 added [ 1839.485775][T19536] team0: Port device team_slave_1 added [ 1839.537796][T12010] bridge_slave_1: left allmulticast mode [ 1839.543584][T12010] bridge_slave_1: left promiscuous mode [ 1839.551147][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.565544][T12010] bridge_slave_0: left allmulticast mode [ 1839.571376][T12010] bridge_slave_0: left promiscuous mode [ 1839.577114][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.985092][T12010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1839.996397][T12010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1840.007126][T12010] bond0 (unregistering): (slave team0): Releasing backup interface [ 1840.016212][T12010] bond0 (unregistering): Released all slaves [ 1840.152884][T12010] bond1 (unregistering): Released all slaves [ 1840.275310][T12010] bond2 (unregistering): Released all slaves [ 1840.408032][T12010] bond3 (unregistering): Released all slaves [ 1840.424036][T19536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1840.431268][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1840.457610][T19536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1840.478610][T19536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1840.485790][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1840.518804][T19536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1840.546588][T12010] tipc: Left network mode [ 1840.599133][T12010] IPVS: stopping backup sync thread 19230 ... [ 1840.602439][T19536] hsr_slave_0: entered promiscuous mode [ 1840.612188][T19536] hsr_slave_1: entered promiscuous mode [ 1840.618367][T19536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1840.626968][T19536] Cannot create hsr debugfs directory [ 1840.896770][ T5840] Bluetooth: hci5: command tx timeout [ 1840.908232][T12010] hsr_slave_0: left promiscuous mode [ 1840.914346][T12010] hsr_slave_1: left promiscuous mode [ 1840.926921][T12010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1840.934662][T12010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1840.943847][T12010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1840.951787][T12010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1840.973789][T12010] veth1_macvtap: left promiscuous mode [ 1840.979363][T12010] veth0_macvtap: left promiscuous mode [ 1840.985086][T12010] veth1_vlan: left promiscuous mode [ 1841.523133][T12010] team_slave_1 (unregistering): left promiscuous mode [ 1841.535219][T12010] team0 (unregistering): Port device team_slave_1 removed [ 1841.580145][T12010] team_slave_0 (unregistering): left promiscuous mode [ 1841.589556][T12010] team0 (unregistering): Port device team_slave_0 removed [ 1842.318966][T19536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1842.348490][T19536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1842.360509][T19536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1842.371272][T19536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1842.448588][T12010] IPVS: stop unused estimator thread 0... [ 1842.463457][T19536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.497620][T19536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.516259][T16643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.523466][T16643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.542699][T16643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.549909][T16643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.782852][T19536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1842.827240][T19536] veth0_vlan: entered promiscuous mode [ 1842.839584][T19536] veth1_vlan: entered promiscuous mode [ 1842.871310][T19536] veth0_macvtap: entered promiscuous mode [ 1842.881686][T19536] veth1_macvtap: entered promiscuous mode [ 1842.903805][T19536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1842.917881][T19536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1842.931588][T19536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.942215][T19536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.951329][T19536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.960632][T19536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.971305][ T5840] Bluetooth: hci5: command tx timeout [ 1843.041165][T16643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.049028][T16643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.088044][T12010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.096277][T12010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1845.050329][ T5840] Bluetooth: hci5: command tx timeout [ 1847.130135][ T5840] Bluetooth: hci5: command tx timeout [ 1857.248927][T19564] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1857.477759][T19570] overlayfs: failed to resolve './file1': -2 [ 1857.682460][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'. [ 1857.692373][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3364'. [ 1858.260733][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1858.417019][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.421068][T19577] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.3368'. [ 1858.451800][ T9] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1858.469883][ T9] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1858.480160][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1858.489618][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1858.509911][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.528198][ T9] usb 1-1: Product: syz [ 1858.532766][ T9] usb 1-1: Manufacturer: syz [ 1858.537407][ T9] usb 1-1: SerialNumber: syz [ 1858.558772][T19573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1858.566472][T19573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1858.691575][ T5850] bond0: (slave syz_tun): Releasing backup interface [ 1858.700845][ T5850] syz_tun (unregistering): left promiscuous mode [ 1858.808592][T14379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1858.825214][T14379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1858.837208][T14379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1858.852552][T14379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1858.867077][T14379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1859.285392][T16643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.357714][T19585] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 1860.399690][T16643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.606257][T19585] autofs: Bad value for 'fd' [ 1860.748532][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 1860.887131][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1860.981011][ T5840] Bluetooth: hci2: command tx timeout [ 1861.315129][ T9] usb 1-1: USB disconnect, device number 68 [ 1861.494056][T16643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.688982][T16643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.051781][ T5840] Bluetooth: hci2: command tx timeout [ 1864.653550][T19609] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1865.295022][ T5840] Bluetooth: hci2: command tx timeout [ 1865.915984][T19580] chnl_net:caif_netlink_parms(): no params data found [ 1866.144675][T16643] bridge_slave_1: left allmulticast mode [ 1866.192144][T16643] bridge_slave_1: left promiscuous mode [ 1866.254723][T16643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.364281][T16643] bridge_slave_0: left allmulticast mode [ 1866.374684][T16643] bridge_slave_0: left promiscuous mode [ 1866.386606][T16643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.430180][ T5840] Bluetooth: hci2: command tx timeout [ 1869.567387][T19649] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 1869.576979][T16643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.597863][T16643] bond_slave_0: left promiscuous mode [ 1869.605642][T19649] autofs: Bad value for 'fd' [ 1869.772988][T16643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1869.810764][T16643] bond_slave_1: left promiscuous mode [ 1869.867831][T16643] bond0 (unregistering): (slave team0): Releasing backup interface [ 1869.882240][T16643] bond0 (unregistering): Released all slaves [ 1870.025865][T16643] bond1 (unregistering): Released all slaves [ 1870.152029][T16643] bond2 (unregistering): Released all slaves [ 1870.198174][T19648] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1870.243608][T19648] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1870.263740][T19648] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1870.357123][T16643] tipc: Left network mode [ 1870.431378][T19658] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3389'. [ 1871.480444][T19654] tipc: Started in network mode [ 1871.485405][T19654] tipc: Node identity 10001, cluster identity 9 [ 1871.491840][T19654] tipc: Node number set to 65537 [ 1872.091395][T19580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.119316][T19580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.139648][T19580] bridge_slave_0: entered allmulticast mode [ 1872.147860][T19580] bridge_slave_0: entered promiscuous mode [ 1872.162827][T19580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.178782][T19580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.194070][T19580] bridge_slave_1: entered allmulticast mode [ 1872.401247][T19676] fuse: Bad value for 'fd' [ 1873.089208][T19580] bridge_slave_1: entered promiscuous mode [ 1873.338808][T19580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1873.353271][T19580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1873.647889][T19683] 9p: Unknown access argument 18446744073709551615: -34 [ 1874.194726][T19580] team0: Port device team_slave_0 added [ 1874.280728][T11882] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1874.499216][T19580] team0: Port device team_slave_1 added [ 1874.511241][T11882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1874.545494][T11882] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1874.569212][T11882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.596981][T11882] usb 4-1: config 0 descriptor?? [ 1874.692332][T16643] hsr_slave_0: left promiscuous mode [ 1874.707701][T16643] hsr_slave_1: left promiscuous mode [ 1874.728987][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1874.743694][T16643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1874.757227][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1874.777435][T16643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1874.835898][T16643] veth1_macvtap: left promiscuous mode [ 1874.846170][T17183] usb 4-1: USB disconnect, device number 64 [ 1874.850033][T16643] veth0_macvtap: left promiscuous mode [ 1874.867422][T16643] veth1_vlan: left promiscuous mode [ 1874.874109][T16643] veth0_vlan: left promiscuous mode [ 1877.862855][T16643] team_slave_1 (unregistering): left promiscuous mode [ 1877.875253][T16643] team0 (unregistering): Port device team_slave_1 removed [ 1877.923513][T16643] team_slave_0 (unregistering): left promiscuous mode [ 1877.933738][T16643] team0 (unregistering): Port device team_slave_0 removed [ 1878.419039][T19580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.426339][T19580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.452497][T19580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.475126][T19685] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 1878.527387][T19580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.557329][T19685] delete_channel: no stack [ 1878.560640][T19580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.595270][T19580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.728119][T19580] hsr_slave_0: entered promiscuous mode [ 1878.949920][ T8722] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1879.008581][T19734] overlayfs: failed to resolve './file1': -2 [ 1879.068469][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3407'. [ 1879.077762][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3407'. [ 1879.227670][T19580] hsr_slave_1: entered promiscuous mode [ 1879.310064][ T8722] usb 4-1: Using ep0 maxpacket: 32 [ 1879.487511][T19580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1879.504074][ T8722] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1879.512303][ T8722] usb 4-1: config 0 has no interface number 0 [ 1879.515744][T19580] Cannot create hsr debugfs directory [ 1879.652727][T19731] 9p: Unknown access argument 18446744073709551615: -34 [ 1879.656029][ T8722] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1879.864072][ T8722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.880861][ T8722] usb 4-1: Product: syz [ 1879.885463][ T8722] usb 4-1: Manufacturer: syz [ 1879.890293][ T8722] usb 4-1: SerialNumber: syz [ 1879.901781][ T8722] usb 4-1: config 0 descriptor?? [ 1879.922473][ T8722] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1880.145012][ T8722] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1880.270679][ T8722] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1882.310059][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1882.320878][T17183] usb 4-1: USB disconnect, device number 65 [ 1882.349670][T16643] IPVS: stop unused estimator thread 0... [ 1882.351332][T17183] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1882.419256][T17183] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1882.644405][T19773] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3417'. [ 1882.670437][T17183] quatech2 4-1:0.51: device disconnected [ 1884.247485][T19787] hub 8-0:1.0: USB hub found [ 1884.254771][T19787] hub 8-0:1.0: 1 port detected [ 1884.475199][T19789] 9p: Unknown access argument 18446744073709551615: -34 [ 1885.315655][T19580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1885.419949][ T5901] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1885.436744][T19580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1885.536745][T19580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1885.583633][T19580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1885.631537][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 1885.652834][ T5901] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1885.675569][ T5901] usb 1-1: config 0 has no interface number 0 [ 1885.708702][ T5901] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1885.751521][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.890575][ T5901] usb 1-1: Product: syz [ 1887.894821][ T5901] usb 1-1: Manufacturer: syz [ 1887.899452][ T5901] usb 1-1: SerialNumber: syz [ 1888.320563][ T5901] usb 1-1: config 0 descriptor?? [ 1888.390613][ T5901] usb 1-1: can't set config #0, error -71 [ 1888.424248][ T5901] usb 1-1: USB disconnect, device number 69 [ 1888.507524][T19580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1888.564658][T19580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1888.578760][T12588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.586031][T12588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1888.648057][T12588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.655319][T12588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1893.858587][T19834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1893.867823][T19834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1894.260045][T11882] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1894.849940][T11882] usb 7-1: Using ep0 maxpacket: 8 [ 1894.882539][T11882] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1894.958485][T11882] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1894.989083][T11882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.014590][T19580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1895.033440][T11882] usb 7-1: config 0 descriptor?? [ 1895.603328][T10168] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1896.483715][T11882] usbhid 7-1:0.0: can't add hid device: -71 [ 1897.781968][T11882] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1898.586579][T11882] usb 7-1: USB disconnect, device number 81 [ 1898.690324][T10168] usb 1-1: string descriptor 0 read error: -71 [ 1898.696799][T10168] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1898.725754][T10168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.789003][T10168] usb 1-1: config 0 descriptor?? [ 1898.800450][T10168] usb 1-1: can't set config #0, error -71 [ 1898.816684][T10168] usb 1-1: USB disconnect, device number 70 [ 1899.009969][T11882] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1899.085967][T19884] kvm: emulating exchange as write [ 1899.086597][T19580] veth0_vlan: entered promiscuous mode [ 1899.112105][T19580] veth1_vlan: entered promiscuous mode [ 1899.175387][T11882] usb 7-1: Using ep0 maxpacket: 32 [ 1899.181188][T19580] veth0_macvtap: entered promiscuous mode [ 1899.189258][T11882] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1899.202272][T11882] usb 7-1: config 0 has no interface number 0 [ 1899.208456][T11882] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1899.227847][T11882] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1899.234452][T19580] veth1_macvtap: entered promiscuous mode [ 1899.242706][T11882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.242736][T11882] usb 7-1: Product: syz [ 1899.242756][T11882] usb 7-1: Manufacturer: syz [ 1899.242775][T11882] usb 7-1: SerialNumber: syz [ 1899.271624][T11882] usb 7-1: config 0 descriptor?? [ 1899.281493][T11882] smsc75xx v1.0.0 [ 1899.321807][T19580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1899.342216][T19580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1899.359434][T19580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.385347][T19580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.399136][T19580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.443657][T19580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.675585][T16656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.704762][T16656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.760550][T10718] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1899.768615][T16643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.768642][T16643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.900717][T11882] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1899.915684][T11882] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1899.960606][T10718] usb 6-1: Using ep0 maxpacket: 16 [ 1899.977699][T10718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1899.986461][T10718] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1900.013083][T10718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.026789][T10718] usb 6-1: config 0 descriptor?? [ 1900.150290][ T5953] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1900.335103][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.352638][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.363396][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1900.376623][ T5953] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1900.389048][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.407096][ T5953] usb 5-1: config 0 descriptor?? [ 1900.451246][T10718] hid (null): unknown global tag 0xd [ 1900.460480][T10718] hid (null): unknown global tag 0xe [ 1900.471696][T19912] can0: slcan on ttyS3. [ 1900.672390][ T8722] usb 6-1: USB disconnect, device number 86 [ 1900.733149][T11882] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1900.746354][T10718] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1900.763480][T11882] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1900.775070][T11882] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1900.785992][T11882] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1900.801699][T11882] usb 7-1: USB disconnect, device number 82 [ 1900.912875][T10718] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.924833][T10718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1900.931965][T10718] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1900.943402][T10718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.960763][T10718] usb 1-1: config 0 descriptor?? [ 1901.379000][T19912] can0 (unregistered): slcan off ttyS3. [ 1901.456239][T10718] usbhid 1-1:0.0: can't add hid device: -71 [ 1901.473591][T19919] loop7: detected capacity change from 0 to 7 [ 1901.486395][T10718] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1901.493404][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1901.502384][T10718] usb 1-1: USB disconnect, device number 71 [ 1901.820422][ T5901] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1901.979956][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 1901.995269][ T5901] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.013898][ T5901] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1902.033605][ T5901] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1902.051446][ T5901] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1902.090657][ T5901] usb 7-1: Product: syz [ 1902.094989][ T5901] usb 7-1: Manufacturer: syz [ 1902.110946][ T5901] hub 7-1:4.0: USB hub found [ 1902.323092][ T5901] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 1902.670750][T10168] usb 7-1: USB disconnect, device number 83 [ 1902.766785][T19948] syzkaller0: entered promiscuous mode [ 1902.774066][T19948] syzkaller0: entered allmulticast mode [ 1902.990553][ T5953] usbhid 5-1:0.0: can't add hid device: -71 [ 1902.996630][ T5953] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1903.041309][ T5953] usb 5-1: USB disconnect, device number 82 [ 1904.110649][T11882] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1904.290571][T11882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1904.309403][T11882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1904.330607][T11882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1904.344092][T11882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1904.373151][T11882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.392803][T11882] usb 5-1: config 0 descriptor?? [ 1904.821977][T11882] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1905.021937][ T5901] usb 5-1: USB disconnect, device number 83 [ 1906.317710][T19993] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode [ 1906.327936][T19993] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode [ 1906.343921][T20015] ªªªªªª: renamed from vlan0 (while UP) [ 1906.821256][T20037] fuse: root generation should be zero [ 1907.139042][T20053] bridge0: port 3(syz_tun) entered blocking state [ 1907.160988][T20053] bridge0: port 3(syz_tun) entered disabled state [ 1907.169254][T20053] syz_tun: entered allmulticast mode [ 1907.193907][T20053] syz_tun: entered promiscuous mode [ 1907.202681][T20053] bridge0: port 3(syz_tun) entered blocking state [ 1907.209659][T20053] bridge0: port 3(syz_tun) entered forwarding state [ 1907.558495][T20075] syz_tun: entered allmulticast mode [ 1907.680506][T20079] syzkaller0: create flow: hash 4144678913 index 1 [ 1907.697655][T20074] syzkaller0: entered promiscuous mode [ 1907.705138][T20074] syzkaller0: entered allmulticast mode [ 1907.913982][T20079] syzkaller0: delete flow: hash 4144678913 index 1 [ 1907.987789][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3523'. [ 1910.207532][T20111] bridge0: port 1(bridge_slave_0) entered listening state [ 1910.689445][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3537'. [ 1910.786927][T20146] tipc: Enabling of bearer rejected, already enabled [ 1910.798123][T20146] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 1910.809257][T20146] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 1910.824540][T20146] mac80211_hwsim hwsim13 syzkaller0: Caught tx_queue_len zero misconfig [ 1910.948060][T20142] "syz.6.3538" (20142) uses obsolete ecb(arc4) skcipher [ 1911.464726][ T5840] Bluetooth: hci2: link tx timeout [ 1911.471051][ T5840] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1911.484281][T14379] Bluetooth: hci2: link tx timeout [ 1911.489493][T14379] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1911.763416][T20190] gtp0: entered promiscuous mode [ 1912.899921][ T5953] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1913.070558][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 1913.080374][ T5953] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1913.088540][ T5953] usb 4-1: config 0 has no interface number 0 [ 1913.122470][ T5953] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1913.153624][ T5953] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1913.168444][ T5953] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1913.211687][ T5953] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1913.228782][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.237331][ T5953] usb 4-1: Product: syz [ 1913.249274][ T5953] usb 4-1: Manufacturer: syz [ 1913.257529][ T5953] usb 4-1: SerialNumber: syz [ 1913.272797][ T5953] usb 4-1: config 0 descriptor?? [ 1913.292198][T20233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1913.304396][T20233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1913.304793][T20255] tipc: Started in network mode [ 1913.326097][T20255] tipc: Node identity 1e1fd7dfe7e8, cluster identity 4711 [ 1913.339020][T20255] tipc: Enabled bearer , priority 0 [ 1913.437897][T20255] syzkaller0: entered promiscuous mode [ 1913.444552][T20255] syzkaller0: entered allmulticast mode [ 1913.452030][T20255] tipc: Resetting bearer [ 1913.470142][T20259] tipc: Resetting bearer [ 1913.518657][T20233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1913.532103][T20233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1913.536131][T14379] Bluetooth: hci2: command 0x0406 tx timeout [ 1913.620238][ T10] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1913.812381][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1913.823676][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1913.868406][ T10] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1913.878121][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.910841][ T10] usb 6-1: Product: syz [ 1913.915088][ T10] usb 6-1: Manufacturer: syz [ 1913.919716][ T10] usb 6-1: SerialNumber: syz [ 1913.952653][ T10] usb 6-1: config 0 descriptor?? [ 1913.968613][T20257] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1913.976364][T20257] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1914.187005][ T5953] dm9601 4-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 1914.213258][ T5953] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 1914.226573][ T5953] usb 4-1: USB disconnect, device number 66 [ 1914.233037][T20257] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1914.263714][T20257] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1914.465392][ T5953] tipc: Node number set to 4193769439 [ 1914.678828][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1914.886946][ T10] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1914.919581][ T10] usb 6-1: USB disconnect, device number 87 [ 1915.040109][ T5901] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1915.201566][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 1915.234324][ T5901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1915.244065][ T5901] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1915.253571][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.261665][ T5901] usb 1-1: Product: syz [ 1915.265979][ T5901] usb 1-1: Manufacturer: syz [ 1915.270812][ T5901] usb 1-1: SerialNumber: syz [ 1915.278514][ T5901] usb 1-1: config 0 descriptor?? [ 1915.701974][ T5901] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1915.760000][T10168] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1915.930335][T10168] usb 6-1: Using ep0 maxpacket: 8 [ 1915.940345][T10168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1915.952649][T10168] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1915.961946][T10168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.979401][T10168] usb 6-1: config 0 descriptor?? [ 1916.116487][ T5901] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1916.204829][T10168] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1916.377286][T20259] tipc: Disabling bearer [ 1916.408049][T17183] usb 6-1: USB disconnect, device number 88 [ 1916.454011][ T5901] usb 1-1: USB disconnect, device number 72 [ 1916.821051][ T5840] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1916.832113][ T5840] Bluetooth: hci5: Injecting HCI hardware error event [ 1916.843101][T14379] Bluetooth: hci5: hardware error 0x00 [ 1916.940450][ T5901] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1917.035959][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3606'. [ 1917.067330][ T5840] Bluetooth: hci5: unexpected event for opcode 0x2031 [ 1917.140519][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 1917.156255][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.169516][ T5901] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1917.187956][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.196219][ T5901] usb 4-1: Product: syz [ 1917.214310][ T5901] usb 4-1: Manufacturer: syz [ 1917.225885][ T5901] usb 4-1: SerialNumber: syz [ 1917.239309][ T5901] usb 4-1: config 0 descriptor?? [ 1917.267373][ T5901] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1917.454662][T20324] comedi comedi1: adq12b: I/O port conflict (0xffffffffffffff81,16) [ 1917.468128][ T6025] usb 4-1: Failed to submit usb control message: -71 [ 1917.475848][ T5901] usb 4-1: USB disconnect, device number 67 [ 1917.499863][ T6025] usb 4-1: unable to send the bmi data to the device: -71 [ 1917.507063][ T6025] usb 4-1: unable to get target info from device [ 1917.522564][ T6025] usb 4-1: could not get target info (-71) [ 1917.532386][ T6025] usb 4-1: could not probe fw (-71) [ 1918.324343][T20344] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1918.338833][T10718] IPVS: starting estimator thread 0... [ 1918.431171][T20349] IPVS: using max 23 ests per chain, 55200 per kthread [ 1918.709357][T20353] can0: slcan on ptm0. [ 1918.890136][T14379] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1919.000399][ T10] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1919.156826][T20326] syz.0.3614 (20326): drop_caches: 2 [ 1919.240579][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1919.302608][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.313130][ T10] usb 6-1: config 0 has no interfaces? [ 1919.330925][T20357] netlink: 'syz.6.3626': attribute type 10 has an invalid length. [ 1919.339266][ T10] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1919.348586][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.362380][T20357] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1919.371219][ T10] usb 6-1: Product: syz [ 1919.375414][ T10] usb 6-1: Manufacturer: syz [ 1919.384874][ T10] usb 6-1: SerialNumber: syz [ 1919.393921][ T10] usb 6-1: config 0 descriptor?? [ 1919.607200][ T5901] usb 6-1: USB disconnect, device number 89 [ 1919.690906][T20352] can0 (unregistered): slcan off ptm0. [ 1919.762938][ T10] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1919.831277][T16643] Bluetooth: hci3: Frame reassembly failed (-84) [ 1919.854266][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.932023][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1919.950009][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1919.959417][ T10] usb 1-1: config 0 has no interface number 0 [ 1919.972688][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1919.988906][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1920.001867][ T5840] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 1920.010464][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.025705][ T10] usb 1-1: config 0 descriptor?? [ 1920.246863][ T10] usb 1-1: USB disconnect, device number 73 [ 1920.730397][T10718] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1920.799956][T17183] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1920.816958][T20403] tipc: Started in network mode [ 1920.822445][T20403] tipc: Node identity 4, cluster identity 4711 [ 1920.828940][T20403] tipc: Node number set to 4 [ 1920.898348][T10718] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1920.908649][T10718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.917080][T10718] usb 6-1: Product: syz [ 1920.921623][T10718] usb 6-1: Manufacturer: syz [ 1920.926359][T10718] usb 6-1: SerialNumber: syz [ 1920.954216][T17183] usb 5-1: config index 0 descriptor too short (expected 8028, got 92) [ 1920.963919][T17183] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.975749][T17183] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1920.992710][T17183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1921.005309][T17183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.014803][T17183] usb 5-1: Product: syz [ 1921.020185][T17183] usb 5-1: Manufacturer: syz [ 1921.028864][T17183] usb 5-1: SerialNumber: syz [ 1921.849899][T20375] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1921.859951][ T5840] Bluetooth: hci3: command 0x1003 tx timeout [ 1921.860733][T14379] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1921.948088][T10718] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1921.962445][T10718] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1921.972820][T10718] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1921.988243][T10718] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1922.003205][T10718] usb 6-1: USB disconnect, device number 90 [ 1922.058035][T17183] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 1922.083101][T17183] cdc_ncm 5-1:1.0: bind() failure [ 1922.095273][T17183] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1922.102780][T17183] cdc_ncm 5-1:1.1: bind() failure [ 1922.111371][T17183] usb 5-1: USB disconnect, device number 84 [ 1922.669000][T20445] overlayfs: missing 'lowerdir' [ 1922.681264][T20445] overlayfs: missing 'lowerdir' [ 1922.780077][ T10] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1922.953275][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1922.965830][ T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1922.979377][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1922.995984][ T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1923.007306][ T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1923.036746][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1923.063949][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1923.084219][ T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1923.106598][ T10] usb 6-1: Product: syz [ 1923.124364][ T10] usb 6-1: Manufacturer: syz [ 1923.135922][ T10] usb 6-1: SerialNumber: syz [ 1923.143806][ T10] usb 6-1: config 0 descriptor?? [ 1923.149920][ T5901] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1923.166321][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1923.185734][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1923.312401][ T5901] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1923.322356][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.333636][ T5901] usb 5-1: config 0 descriptor?? [ 1923.342428][ T5901] cp210x 5-1:0.0: cp210x converter detected [ 1923.400306][T17183] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1923.416272][ T5953] usb 6-1: USB disconnect, device number 91 [ 1923.427155][ T5953] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1923.581153][T17183] usb 7-1: Using ep0 maxpacket: 8 [ 1923.588391][T17183] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1923.599695][T17183] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1923.613699][T17183] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1923.629320][T17183] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1923.657555][T17183] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1923.667155][T17183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.885814][T17183] usb 7-1: GET_CAPABILITIES returned 0 [ 1923.895127][T17183] usbtmc 7-1:16.0: can't read capabilities [ 1923.960141][ T5901] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1923.967885][ T5901] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1923.977943][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1923.993778][ T5901] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1924.002872][ T5901] usb 5-1: USB disconnect, device number 85 [ 1924.015462][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1924.024062][ T5901] cp210x 5-1:0.0: device disconnected [ 1924.114552][ T5925] usb 7-1: USB disconnect, device number 84 [ 1924.159549][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1924.180250][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1924.193255][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1924.210832][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1924.223976][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1924.233170][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.246515][ T10] usb 1-1: config 0 descriptor?? [ 1924.695592][ T10] plantronics 0003:047F:FFFF.0024: ignoring exceeding usage max [ 1924.736835][ T10] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1924.764480][T20478] input: syz0 as /devices/virtual/input/input33 [ 1924.840954][T10718] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1924.848673][ T5953] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1925.071086][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 1925.076407][T10718] usb 5-1: Using ep0 maxpacket: 16 [ 1925.084173][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.095127][ T5953] usb 4-1: config 0 has no interfaces? [ 1925.101356][ T5953] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1925.110666][T10718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1925.119278][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.128835][T10718] usb 5-1: config 4 has an invalid interface number: 117 but max is 0 [ 1925.137425][T10718] usb 5-1: config 4 has no interface number 0 [ 1925.146155][T10718] usb 5-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=e2.02 [ 1925.155923][T10718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.167431][ T5953] usb 4-1: config 0 descriptor?? [ 1925.172711][T10718] usb 5-1: Product: syz [ 1925.177229][T10718] usb 5-1: Manufacturer: syz [ 1925.184156][T10718] usb 5-1: SerialNumber: syz [ 1925.417012][T10718] gspca_main: spca501-2.14.0 probing 0506:00df [ 1925.428077][T10718] gspca_spca501: reg write: error -71 [ 1925.436053][T10718] spca501 5-1:4.117: Reg write failed for 0x00,0xaa,0x00 [ 1925.443837][T10718] spca501 5-1:4.117: probe with driver spca501 failed with error -22 [ 1925.454651][T10718] usbhid 5-1:4.117: couldn't find an input interrupt endpoint [ 1925.466616][T10718] usb 5-1: USB disconnect, device number 86 [ 1925.600783][ T5953] usb 1-1: USB disconnect, device number 74 [ 1925.753822][T20487] netlink: 'syz.3.3678': attribute type 10 has an invalid length. [ 1926.429884][T10718] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1926.573479][T11882] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1926.610206][T10718] usb 5-1: Using ep0 maxpacket: 8 [ 1926.617695][T10718] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1926.630245][T10718] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1926.647836][T10718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1926.681966][T10718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1926.695222][T10718] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1926.720258][T10718] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1926.729486][T10718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.760807][T11882] usb 7-1: Using ep0 maxpacket: 16 [ 1926.768624][T11882] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1926.778655][T11882] usb 7-1: config 0 has no interface number 0 [ 1926.785390][T11882] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.796766][T11882] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.808630][T11882] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1926.823103][T11882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.840852][T11882] usb 7-1: config 0 descriptor?? [ 1926.963982][T10718] usb 5-1: usb_control_msg returned -32 [ 1926.979938][T10718] usbtmc 5-1:16.0: can't read capabilities [ 1927.340503][T10718] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1927.465813][T11882] uclogic 0003:28BD:0071.0025: pen parameters not found [ 1927.479999][T11882] uclogic 0003:28BD:0071.0025: interface is invalid, ignoring [ 1927.512138][T10718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.523464][T10718] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1927.533532][T10718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.545403][T10718] usb 1-1: config 0 descriptor?? [ 1927.555167][T10718] pwc: Askey VC010 type 2 USB webcam detected. [ 1927.622045][ T5953] usb 4-1: USB disconnect, device number 68 [ 1927.673433][T11882] usb 7-1: USB disconnect, device number 85 [ 1927.758662][T10718] pwc: send_video_command error -71 [ 1927.766665][T10718] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1927.780023][T10718] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1927.797798][T10718] usb 1-1: USB disconnect, device number 75 [ 1928.269937][T10718] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1928.442215][T10718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.479912][T10718] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1928.489054][T10718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.538850][T10718] usb 1-1: config 0 descriptor?? [ 1928.575981][T10718] pwc: Askey VC010 type 2 USB webcam detected. [ 1928.662868][T20526] input: syz0 as /devices/virtual/input/input34 [ 1928.686869][T20471] Set syz1 is full, maxelem 65536 reached [ 1928.728010][T20528] tmpfs: Bad value for 'mpol' [ 1928.975638][T10718] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1929.030212][T11882] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1929.187046][T10718] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1929.199897][T11882] usb 4-1: Using ep0 maxpacket: 8 [ 1929.209694][T10718] pwc: recv_control_msg error -71 req 04 val 1000 [ 1929.227070][T10718] pwc: recv_control_msg error -71 req 04 val 1300 [ 1929.239185][T10718] pwc: recv_control_msg error -71 req 04 val 1400 [ 1929.249974][T10718] pwc: recv_control_msg error -71 req 02 val 2000 [ 1929.255078][ T5925] usb 5-1: USB disconnect, device number 87 [ 1929.269019][T10718] pwc: recv_control_msg error -71 req 02 val 2100 [ 1929.283441][T10718] pwc: recv_control_msg error -71 req 04 val 1500 [ 1929.318824][T10718] pwc: recv_control_msg error -71 req 02 val 2500 [ 1929.335584][T10718] pwc: recv_control_msg error -71 req 02 val 2400 [ 1929.356471][T10718] pwc: recv_control_msg error -71 req 02 val 2600 [ 1929.368289][T10718] pwc: recv_control_msg error -71 req 02 val 2900 [ 1929.382847][T11882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1929.392942][T10718] pwc: recv_control_msg error -71 req 02 val 2800 [ 1929.403082][T11882] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1929.415281][T11882] usb 4-1: can't read configurations, error -71 [ 1929.422009][T10718] pwc: recv_control_msg error -71 req 04 val 1100 [ 1929.436235][T10718] pwc: recv_control_msg error -71 req 04 val 1200 [ 1929.446457][T10718] pwc: Registered as video103. [ 1929.459560][T10718] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 1929.476042][T10718] usb 1-1: USB disconnect, device number 76 [ 1930.373617][ T30] audit: type=1800 audit(1755832223.420:49): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3718" name="file0" dev="overlay" ino=343 res=0 errno=0 [ 1931.160167][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3725'. [ 1931.439275][T20585] tipc: Enabled bearer , priority 0 [ 1931.500529][T20577] tipc: Resetting bearer [ 1931.739861][T11882] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1931.949856][T11882] usb 1-1: Using ep0 maxpacket: 16 [ 1931.978041][T11882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1931.999490][T11882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1932.027821][T11882] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1932.044912][T11882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.064586][T11882] usb 1-1: config 0 descriptor?? [ 1932.182791][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 1932.496829][T11882] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 1932.514283][T11882] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 1932.542337][T11882] microsoft 0003:045E:07DA.0026: usage index exceeded [ 1932.562806][T11882] microsoft 0003:045E:07DA.0026: item 0 0 2 2 parsing failed [ 1932.580458][T11882] microsoft 0003:045E:07DA.0026: parse failed [ 1932.592209][T11882] microsoft 0003:045E:07DA.0026: probe with driver microsoft failed with error -22 [ 1932.703287][T11882] usb 1-1: USB disconnect, device number 77 [ 1933.001794][ T5925] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 1933.162195][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1933.177817][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1933.191421][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 31658, setting to 64 [ 1933.203989][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1933.244326][ T5925] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1933.264283][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.277298][ T5925] usb 7-1: Product: syz [ 1933.282605][ T5925] usb 7-1: Manufacturer: syz [ 1933.287498][ T5925] usb 7-1: SerialNumber: syz [ 1933.303224][ T5925] usb 7-1: config 0 descriptor?? [ 1933.309427][T20622] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1933.333728][ T5925] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input36 [ 1933.595809][ T8722] usb 7-1: USB disconnect, device number 86 [ 1933.704587][T11882] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1933.874133][T11882] usb 1-1: Using ep0 maxpacket: 32 [ 1933.890859][T11882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1933.900247][T11882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.910991][T11882] usb 1-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1933.926030][T11882] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1933.935748][T11882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1933.950964][T11882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.959206][T11882] usb 1-1: Product: syz [ 1933.963481][T11882] usb 1-1: Manufacturer: syz [ 1933.969210][T11882] usb 1-1: SerialNumber: syz [ 1934.197161][T11882] usb 1-1: bad CDC descriptors [ 1934.206506][T11882] usb 1-1: USB disconnect, device number 78 [ 1934.489646][T20631] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3745'. [ 1934.524440][T20577] tipc: Disabling bearer [ 1934.807457][T20643] netlink: 'syz.4.3750': attribute type 10 has an invalid length. [ 1934.851413][T20643] team0: Port device netdevsim0 added [ 1934.868509][T12015] [ 1934.870910][T12015] ====================================================== [ 1934.877954][T12015] WARNING: possible circular locking dependency detected [ 1934.884999][T12015] 6.16.0-syzkaller #0 Not tainted [ 1934.890040][T12015] ------------------------------------------------------ [ 1934.897074][T12015] kworker/u8:6/12015 is trying to acquire lock: [ 1934.903332][T12015] ffff888055920e00 (team->team_lock_key#30){+.+.}-{4:4}, at: team_device_event+0x544/0xa20 [ 1934.913427][T12015] [ 1934.913427][T12015] but task is already holding lock: [ 1934.920805][T12015] ffff888079710d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0 [ 1934.931447][T12015] [ 1934.931447][T12015] which lock already depends on the new lock. [ 1934.931447][T12015] [ 1934.941850][T12015] [ 1934.941850][T12015] the existing dependency chain (in reverse order) is: [ 1934.950865][T12015] [ 1934.950865][T12015] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 1934.959448][T12015] lock_acquire+0x120/0x360 [ 1934.964482][T12015] __mutex_lock+0x182/0xe80 [ 1934.969513][T12015] dev_set_mtu+0x10e/0x260 [ 1934.974462][T12015] team_add_slave+0x8b8/0x2840 [ 1934.979780][T12015] do_set_master+0x530/0x6d0 [ 1934.984903][T12015] do_setlink+0xcf0/0x41c0 [ 1934.989856][T12015] rtnl_newlink+0x160b/0x1c70 [ 1934.995079][T12015] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1935.000641][T12015] netlink_rcv_skb+0x205/0x470 [ 1935.005939][T12015] netlink_unicast+0x75c/0x8e0 [ 1935.011678][T12015] netlink_sendmsg+0x805/0xb30 [ 1935.016999][T12015] __sock_sendmsg+0x21c/0x270 [ 1935.022223][T12015] ____sys_sendmsg+0x505/0x830 [ 1935.027656][T12015] ___sys_sendmsg+0x21f/0x2a0 [ 1935.032925][T12015] __x64_sys_sendmsg+0x19b/0x260 [ 1935.038430][T12015] do_syscall_64+0xfa/0x3b0 [ 1935.043472][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.049897][T12015] [ 1935.049897][T12015] -> #0 (team->team_lock_key#30){+.+.}-{4:4}: [ 1935.058188][T12015] validate_chain+0xb9b/0x2140 [ 1935.063493][T12015] __lock_acquire+0xab9/0xd20 [ 1935.068698][T12015] lock_acquire+0x120/0x360 [ 1935.073727][T12015] __mutex_lock+0x182/0xe80 [ 1935.078779][T12015] team_device_event+0x544/0xa20 [ 1935.084248][T12015] notifier_call_chain+0x1b3/0x3e0 [ 1935.089916][T12015] netif_state_change+0x284/0x3a0 [ 1935.095502][T12015] linkwatch_do_dev+0x117/0x170 [ 1935.100898][T12015] __linkwatch_run_queue+0x56d/0x7e0 [ 1935.106717][T12015] linkwatch_event+0x4c/0x60 [ 1935.111846][T12015] process_scheduled_works+0xade/0x17b0 [ 1935.117930][T12015] worker_thread+0x8a0/0xda0 [ 1935.123057][T12015] kthread+0x70e/0x8a0 [ 1935.127664][T12015] ret_from_fork+0x3fc/0x770 [ 1935.132784][T12015] ret_from_fork_asm+0x1a/0x30 [ 1935.138086][T12015] [ 1935.138086][T12015] other info that might help us debug this: [ 1935.138086][T12015] [ 1935.148320][T12015] Possible unsafe locking scenario: [ 1935.148320][T12015] [ 1935.155788][T12015] CPU0 CPU1 [ 1935.161174][T12015] ---- ---- [ 1935.166547][T12015] lock(&dev_instance_lock_key#20); [ 1935.171858][T12015] lock(team->team_lock_key#30); [ 1935.179428][T12015] lock(&dev_instance_lock_key#20); [ 1935.187257][T12015] lock(team->team_lock_key#30); [ 1935.192308][T12015] [ 1935.192308][T12015] *** DEADLOCK *** [ 1935.192308][T12015] [ 1935.200465][T12015] 4 locks held by kworker/u8:6/12015: [ 1935.205839][T12015] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1935.217529][T12015] #1: ffffc9000b097bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1935.228521][T12015] #2: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1935.237526][T12015] #3: ffff888079710d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0 [ 1935.248602][T12015] [ 1935.248602][T12015] stack backtrace: [ 1935.254493][T12015] CPU: 0 UID: 0 PID: 12015 Comm: kworker/u8:6 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1935.254514][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1935.254527][T12015] Workqueue: events_unbound linkwatch_event [ 1935.254545][T12015] Call Trace: [ 1935.254553][T12015] [ 1935.254561][T12015] dump_stack_lvl+0x189/0x250 [ 1935.254582][T12015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1935.254601][T12015] ? __pfx__printk+0x10/0x10 [ 1935.254622][T12015] ? print_lock_name+0xde/0x100 [ 1935.254644][T12015] print_circular_bug+0x2ee/0x310 [ 1935.254667][T12015] check_noncircular+0x134/0x160 [ 1935.254689][T12015] validate_chain+0xb9b/0x2140 [ 1935.254710][T12015] ? __lock_acquire+0xab9/0xd20 [ 1935.254731][T12015] __lock_acquire+0xab9/0xd20 [ 1935.254748][T12015] ? team_device_event+0x544/0xa20 [ 1935.254763][T12015] lock_acquire+0x120/0x360 [ 1935.254777][T12015] ? team_device_event+0x544/0xa20 [ 1935.254795][T12015] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1935.254825][T12015] __mutex_lock+0x182/0xe80 [ 1935.254843][T12015] ? team_device_event+0x544/0xa20 [ 1935.254862][T12015] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 1935.254885][T12015] ? team_device_event+0x544/0xa20 [ 1935.254901][T12015] ? __pfx___mutex_lock+0x10/0x10 [ 1935.254921][T12015] ? fib_sync_down_dev+0x66/0x7b0 [ 1935.254949][T12015] team_device_event+0x544/0xa20 [ 1935.254967][T12015] notifier_call_chain+0x1b3/0x3e0 [ 1935.254989][T12015] netif_state_change+0x284/0x3a0 [ 1935.255012][T12015] ? __pfx_netif_state_change+0x10/0x10 [ 1935.255037][T12015] ? dev_deactivate+0x129/0x1b0 [ 1935.255061][T12015] ? nsim_get_iflink+0x20/0x280 [ 1935.255087][T12015] ? rfc2863_policy+0x1c6/0x3e0 [ 1935.255102][T12015] linkwatch_do_dev+0x117/0x170 [ 1935.255119][T12015] __linkwatch_run_queue+0x56d/0x7e0 [ 1935.255138][T12015] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1935.255155][T12015] ? _raw_spin_unlock_irq+0x23/0x50 [ 1935.255169][T12015] ? process_scheduled_works+0x9ef/0x17b0 [ 1935.255186][T12015] ? process_scheduled_works+0x9ef/0x17b0 [ 1935.255204][T12015] linkwatch_event+0x4c/0x60 [ 1935.255219][T12015] process_scheduled_works+0xade/0x17b0 [ 1935.255247][T12015] ? __pfx_process_scheduled_works+0x10/0x10 [ 1935.255272][T12015] worker_thread+0x8a0/0xda0 [ 1935.255296][T12015] ? __kthread_parkme+0x7b/0x200 [ 1935.255318][T12015] kthread+0x70e/0x8a0 [ 1935.255340][T12015] ? __pfx_worker_thread+0x10/0x10 [ 1935.255358][T12015] ? __pfx_kthread+0x10/0x10 [ 1935.255380][T12015] ? _raw_spin_unlock_irq+0x23/0x50 [ 1935.255394][T12015] ? lockdep_hardirqs_on+0x9c/0x150 [ 1935.255410][T12015] ? __pfx_kthread+0x10/0x10 [ 1935.255432][T12015] ret_from_fork+0x3fc/0x770 [ 1935.255449][T12015] ? __pfx_ret_from_fork+0x10/0x10 [ 1935.255467][T12015] ? __switch_to_asm+0x39/0x70 [ 1935.255487][T12015] ? __switch_to_asm+0x33/0x70 [ 1935.255506][T12015] ? __pfx_kthread+0x10/0x10 [ 1935.255528][T12015] ret_from_fork_asm+0x1a/0x30 [ 1935.255554][T12015] [ 1935.540401][T14379] Bluetooth: hci2: command 0x0406 tx timeout [ 1935.679891][T11882] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1935.843360][T11882] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1935.853540][T11882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.861972][T11882] usb 6-1: Product: syz [ 1935.866196][T11882] usb 6-1: Manufacturer: syz [ 1935.870945][T11882] usb 6-1: SerialNumber: syz [ 1935.877152][T11882] usb 6-1: config 0 descriptor?? [ 1935.884340][T11882] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1936.087686][T11882] gspca_sunplus: reg_r err -71 [ 1936.098697][T11882] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1936.108177][T11882] usb 6-1: USB disconnect, device number 92