last executing test programs: 40.123916176s ago: executing program 0 (id=915): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xd}, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x10000, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) 36.381952995s ago: executing program 0 (id=934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz1\x00', {}, 0x2, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffbfd, 0x0, 0x100000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0x80, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x8], [0x3, 0xbfffffff, 0x0, 0x0, 0x3, 0x0, 0x400000, 0xedc0, 0x0, 0x5ee, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x4, 0x0, 0xa0000000, 0xfffffffe, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0xa, 0xfffffffe, 0x9, 0x8, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x36, 0xffffffff, 0x0, 0x0, 0x4771, 0x400000], [0xffffffff, 0x7f, 0x0, 0x0, 0x3, 0xfffffff3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x0, 0x26, 0x1, 0x0, 0x6, 0x100000, 0x0, 0xffffffff, 0x4, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x0, 0xd041, 0x3c, 0x80000000, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xd53, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xc79], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x480, 0x0, 0x0, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x101, 0x4, 0x0, 0x0, 0xc, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="0c0002800500060009000000"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r7 = syz_open_dev$mouse(&(0x7f0000000080), 0x5f43, 0x12b143) fremovexattr(r7, &(0x7f0000000500)=@known='system.posix_acl_access\x00') syz_open_dev$video(0x0, 0x101, 0x481) 31.15321219s ago: executing program 0 (id=947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0x0, 0x67, 0x0, @remote, @broadcast}, @info_reply={0x10, 0x0, 0x0, 0x6764, 0xf}}}}}, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0xa5a, 0x0) 26.658074011s ago: executing program 0 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) pivot_root(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x20000880) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00'}, 0x18) mount$cgroup(0x0, 0x0, 0x0, 0x10000, &(0x7f00000000c0)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004040) timer_create(0x0, 0x0, &(0x7f0000000300)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x100039, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffa, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf256, 0x80, 0xb, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x20de, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x2, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x10400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0xffffff, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x6, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0xffffffff], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x3, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x9, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f493f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1ed, 0x5, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0x12, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 25.022915506s ago: executing program 0 (id=963): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) dup(r0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x5, 0x3, 0x0, {0x0, 0xfff9}, {0xa}, @cond=[{0x0, 0x0, 0x0, 0x80, 0x0, 0x2}, {0x0, 0x0, 0xd22, 0x1, 0x80}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x39f2, 0x1000, 0xfffffffd, 0xbfe02000}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 23.992394894s ago: executing program 0 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) syslog(0x4, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f000001b000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x7d00c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syslog(0x1, &(0x7f0000000300)=""/146, 0x92) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) 10.420357734s ago: executing program 4 (id=992): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x289e0cb5, 0x0) 8.356935687s ago: executing program 32 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) syslog(0x4, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f000001b000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x7d00c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syslog(0x1, &(0x7f0000000300)=""/146, 0x92) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) 8.267686916s ago: executing program 3 (id=997): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') unshare(0x200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r2, &(0x7f0000000240)="03311c7e9a2e66508f685a30448a7e702366cf442519ef45cc57898b0465486238b82a45523328e55c1f22fae8a6dba73fef96a3277a1f0d5659eea6a2d757bef5dacaa271ddfe1c4803f8a7ca6f27c1765f765b3f521d1a542b8d574e7eb7d80df1fff408d17c4509217c9fdbc1f63384a2fcb6ff919c7dbe1b6952465dac8691535fe90997cc0f9f", 0x89, 0xc880, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x541b, &(0x7f0000000180)={0x0, @null, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080001400200000008000640000000020900010073797a30000000000900020073797a3200000000050007"], 0x84}}, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x12022, 0x0) setns(r0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001200)=@newtaction={0x19c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x188, 0x1, [@m_connmark={0x130, 0x15, 0x0, 0x0, {{0xd}, {0xfffffffffffffdc6}, {0xffffffffffffff2c, 0x6, "7f6070873ab9799a2d1123d692ecf497bd3fc436ef7334062993828a73bb77f834e01e91cb0797a2496e6f21ae71a4d2c53b9a9a94132d0317e7c976e47d78e241340c466209a30065a39bbfbd56b503749866d96c1208228a381bd5d8918c69cab4c04853aa53260e11d2f812bd09daa722cacfdb87959e981fd7103f65eb15db05c9aaff2bdde08c7d5a802d8e9927cd4c116da0643e661ef53e1d4820617aad0d392667b6146677fbf1eb0043a36a7ce229bc21e8e197cce23e13fafd5fa60ea8084c1735e6c56f07e7b9fdb29d937e51cabf5e58acbe3e338b2aa5f3fc72715a9c51187a19ed36557eddfebaa43ab6ef631f27fca20393"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4890}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000180)="83", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000040)={r7}) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 7.743785236s ago: executing program 3 (id=1000): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x10c00, &(0x7f00000013c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7.600217655s ago: executing program 1 (id=1001): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 7.019676258s ago: executing program 4 (id=1002): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@newtclass={0x24, 0x28, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xc, 0x6}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0}) 6.983619261s ago: executing program 2 (id=1003): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) setgroups(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 6.600393751s ago: executing program 2 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2c, 0x80002, 0x0) 6.600098032s ago: executing program 4 (id=1005): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.599870576s ago: executing program 3 (id=1006): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semget$private(0x0, 0x7, 0x58) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 6.13402074s ago: executing program 1 (id=1007): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0xff03}], 0x2, 0x8000) 6.133101675s ago: executing program 3 (id=1008): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[{0x5, 0x81, 0xc, 0x10001}, {0x4, 0x70, 0x1, 0x6}, {0x7f, 0xf, 0x3, 0x1}, {0x0, 0xbc, 0xf7, 0x140000}, {0x5, 0x5b, 0x0, 0x7}, {0x7, 0x3, 0x5, 0x10001}]}) syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r3 = mq_open(&(0x7f0000000100)=')sali\x1cqxtt&\xac\xe8P\'\xc6F\xbd\xa0`TP\xa7\xf8\xfa\xd2,\"\x95\xabHCJ9\xfc', 0x6e93ebbbcc0884f2, 0x32, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x8c2c2f800}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 5.340707749s ago: executing program 2 (id=1009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 4.989827258s ago: executing program 2 (id=1010): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 4.910365758s ago: executing program 1 (id=1011): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) 4.416241012s ago: executing program 1 (id=1012): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000400)=""/117) 4.285429026s ago: executing program 2 (id=1013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(r1, 0x0, 0x0, 0x0) 4.282516039s ago: executing program 3 (id=1014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) fcntl$dupfd(r0, 0x406, r1) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000080)=[0x40]}) 3.992297409s ago: executing program 1 (id=1015): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000000000001701000003"], 0x10}}], 0x2, 0xc000) 2.883462968s ago: executing program 2 (id=1016): setresgid(0xee00, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0xfbff) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 2.631930062s ago: executing program 4 (id=1017): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/4095, 0xfff) 2.596500077s ago: executing program 3 (id=1018): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x3}, 0x10) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) memfd_create(&(0x7f0000000540)=':\x91!/\x00', 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 1.864206622s ago: executing program 1 (id=1019): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000000)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000480)=ANY=[]) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f00000024c0)=""/225, 0xe1}], 0x2}}], 0x1, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 1.449150724s ago: executing program 4 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ftruncate(0xffffffffffffffff, 0x3e) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0xfffffc00) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) semget(0x0, 0x1, 0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 0s ago: executing program 4 (id=1021): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r3, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) kernel console output (not intermixed with test programs): ing as an active interface with an up link [ 97.954816][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.032877][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.033026][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.033232][ T5847] bridge_slave_0: entered allmulticast mode [ 98.039530][ T5847] bridge_slave_0: entered promiscuous mode [ 98.274614][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.274996][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.275229][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.275433][ T5847] bridge_slave_1: entered allmulticast mode [ 98.277545][ T5847] bridge_slave_1: entered promiscuous mode [ 98.366519][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.480989][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.592881][ T5835] team0: Port device team_slave_0 added [ 98.602381][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.616787][ T5836] team0: Port device team_slave_0 added [ 98.658567][ T5846] Bluetooth: hci3: command tx timeout [ 98.658605][ T5846] Bluetooth: hci1: command tx timeout [ 98.658629][ T5846] Bluetooth: hci2: command tx timeout [ 98.658651][ T5846] Bluetooth: hci0: command tx timeout [ 98.898668][ T5837] Bluetooth: hci4: command tx timeout [ 98.906559][ T5835] team0: Port device team_slave_1 added [ 98.916044][ T5836] team0: Port device team_slave_1 added [ 99.186488][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.432973][ T5842] team0: Port device team_slave_0 added [ 99.439639][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.442711][ T5834] team0: Port device team_slave_0 added [ 99.622613][ T5842] team0: Port device team_slave_1 added [ 99.712454][ T5834] team0: Port device team_slave_1 added [ 99.714264][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.714280][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.714310][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.717531][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.717547][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.717589][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.015284][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.015302][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.015321][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.016468][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.016483][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.016502][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.152295][ T5847] team0: Port device team_slave_0 added [ 100.323818][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.323837][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.323856][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.326260][ T5847] team0: Port device team_slave_1 added [ 100.327932][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.327944][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.327963][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.378725][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.378745][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.378779][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.490868][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.490886][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.490914][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.740314][ T5845] Bluetooth: hci1: command tx timeout [ 100.740349][ T5845] Bluetooth: hci3: command tx timeout [ 100.740490][ T5846] Bluetooth: hci2: command tx timeout [ 100.740566][ T5837] Bluetooth: hci0: command tx timeout [ 100.775233][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.775251][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.775279][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.974407][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.974426][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.974454][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.988485][ T5837] Bluetooth: hci4: command tx timeout [ 100.988538][ T5835] hsr_slave_0: entered promiscuous mode [ 100.990407][ T5835] hsr_slave_1: entered promiscuous mode [ 101.006823][ T5836] hsr_slave_0: entered promiscuous mode [ 101.008864][ T5836] hsr_slave_1: entered promiscuous mode [ 101.010188][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 101.010337][ T5836] Cannot create hsr debugfs directory [ 101.485291][ T5842] hsr_slave_0: entered promiscuous mode [ 101.486281][ T5842] hsr_slave_1: entered promiscuous mode [ 101.486906][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 101.486930][ T5842] Cannot create hsr debugfs directory [ 101.499590][ T5834] hsr_slave_0: entered promiscuous mode [ 101.501147][ T5834] hsr_slave_1: entered promiscuous mode [ 101.502275][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 101.502303][ T5834] Cannot create hsr debugfs directory [ 102.090032][ T5847] hsr_slave_0: entered promiscuous mode [ 102.091922][ T5847] hsr_slave_1: entered promiscuous mode [ 102.093012][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 102.093037][ T5847] Cannot create hsr debugfs directory [ 102.818597][ T5837] Bluetooth: hci0: command tx timeout [ 102.818634][ T5837] Bluetooth: hci2: command tx timeout [ 102.818657][ T5837] Bluetooth: hci3: command tx timeout [ 102.818679][ T5837] Bluetooth: hci1: command tx timeout [ 103.058717][ T5846] Bluetooth: hci4: command tx timeout [ 103.532022][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.586837][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.616584][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.674890][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.861874][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.907446][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.957836][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.998147][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.166526][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.214223][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.284619][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.329495][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.488619][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.526072][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.565547][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.591297][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.645301][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.809634][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.873162][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.875673][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.883425][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.954085][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.990091][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.040694][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.088911][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.089021][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.211938][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.342058][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.413916][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.414073][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.448033][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.486250][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.486424][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.595002][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.647695][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.745034][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.745287][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.824389][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.843657][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.843816][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.893590][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.905929][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.906156][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.954608][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.954730][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.047620][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.071413][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.143466][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.143629][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.224598][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.224763][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.512656][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.621459][ T5835] veth0_vlan: entered promiscuous mode [ 106.744603][ T5835] veth1_vlan: entered promiscuous mode [ 106.906141][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.977895][ T5842] veth0_vlan: entered promiscuous mode [ 107.099124][ T5842] veth1_vlan: entered promiscuous mode [ 107.103017][ T5835] veth0_macvtap: entered promiscuous mode [ 107.173808][ T5835] veth1_macvtap: entered promiscuous mode [ 107.245427][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.323443][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.385360][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.427630][ T5842] veth0_macvtap: entered promiscuous mode [ 107.481682][ T1114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.506716][ T5842] veth1_macvtap: entered promiscuous mode [ 107.519497][ T1114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.524081][ T1114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.551220][ T1114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.558073][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.735882][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.766590][ T5834] veth0_vlan: entered promiscuous mode [ 107.832345][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.934407][ T155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.959076][ T155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.959896][ T5834] veth1_vlan: entered promiscuous mode [ 107.967903][ T155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.004493][ T155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.008003][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.008028][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.243324][ T5836] veth0_vlan: entered promiscuous mode [ 108.249535][ T1211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.249560][ T1211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.279129][ T5847] veth0_vlan: entered promiscuous mode [ 108.407613][ T5836] veth1_vlan: entered promiscuous mode [ 108.442220][ T5847] veth1_vlan: entered promiscuous mode [ 108.501465][ T5834] veth0_macvtap: entered promiscuous mode [ 108.525547][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.525566][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.572648][ T5834] veth1_macvtap: entered promiscuous mode [ 108.695717][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.695739][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.766788][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.810151][ T5952] No control pipe specified [ 108.830744][ T5836] veth0_macvtap: entered promiscuous mode [ 108.834805][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.841974][ T5847] veth0_macvtap: entered promiscuous mode [ 108.893159][ T5836] veth1_macvtap: entered promiscuous mode [ 108.917316][ T5847] veth1_macvtap: entered promiscuous mode [ 108.926030][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.942781][ T1211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.946157][ T1211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.957666][ T1211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.157855][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.202348][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.339596][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.375600][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.465578][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.535241][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.556408][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.588678][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.588911][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.599567][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.610293][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.658723][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.957723][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.957745][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.516649][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.516670][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.756796][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.756820][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.780557][ T5972] No control pipe specified [ 110.935009][ T5974] tmpfs: Unsupported parameter 'huge' [ 111.232369][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.232508][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.461299][ T1211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.461319][ T1211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.736740][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.736763][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.860009][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.084171][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 112.108471][ T5912] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.108501][ T5912] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.108527][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.108558][ T5912] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 112.108581][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.248929][ T5912] usb 4-1: config 0 descriptor?? [ 112.803906][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 112.804006][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 112.888607][ T5912] usb 4-1: USB disconnect, device number 2 [ 113.969042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 114.178778][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.717065][ T6007] Zero length message leads to an empty skb [ 114.808339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.358352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.724127][ T6017] No control pipe specified [ 115.868451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.870264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.870330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.188366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.198356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.348363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.408382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.705266][ T6036] fuse: Bad value for 'user_id' [ 118.705286][ T6036] fuse: Bad value for 'user_id' [ 120.888010][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.040010][ T6052] syzkaller0: entered promiscuous mode [ 121.040033][ T6052] syzkaller0: entered allmulticast mode [ 121.589235][ T6063] tmpfs: Unsupported parameter 'huge' [ 122.491644][ T6063] IPVS: Error connecting to the multicast addr [ 123.105753][ T6079] fuse: Bad value for 'user_id' [ 123.105773][ T6079] fuse: Bad value for 'user_id' [ 125.609849][ T5927] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.829072][ T5927] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 125.829105][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.892346][ T5927] usb 2-1: config 0 descriptor?? [ 125.928815][ T5927] gspca_main: spca508-2.14.0 probing 8086:0110 [ 126.629614][ T5927] gspca_spca508: reg_read err -110 [ 126.630003][ T5927] gspca_spca508: reg_read err -32 [ 126.630358][ T5927] gspca_spca508: reg_read err -32 [ 126.630718][ T5927] gspca_spca508: reg_read err -32 [ 126.631077][ T5927] gspca_spca508: reg write: error -32 [ 126.631144][ T5927] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 127.186172][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 127.867505][ T6129] sctp: failed to load transform for md5: -2 [ 128.161798][ T5901] usb 2-1: USB disconnect, device number 2 [ 129.719329][ T6169] syzkaller0: entered promiscuous mode [ 129.719360][ T6169] syzkaller0: entered allmulticast mode [ 130.816705][ T6190] IPVS: Error connecting to the multicast addr [ 134.567423][ T6240] delete_channel: no stack [ 134.676990][ T6237] syzkaller0: entered promiscuous mode [ 134.677022][ T6237] syzkaller0: entered allmulticast mode [ 134.871036][ T6241] netdevsim netdevsim0: Direct firmware load for . [ 134.871036][ T6241] failed with error -2 [ 134.871056][ T6241] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 134.871056][ T6241] [ 135.048436][ T5927] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.237015][ T5927] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.237042][ T5927] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.237071][ T5927] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.237087][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.320749][ T6242] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.355758][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.792137][ T6260] syz.4.81 uses obsolete (PF_INET,SOCK_PACKET) [ 138.251061][ T6274] tmpfs: Unsupported parameter 'huge' [ 138.277173][ T6274] IPVS: Error connecting to the multicast addr [ 138.355454][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.355524][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.965274][ T6282] fuse: Bad value for 'fd' [ 139.788519][ T1245] usb 2-1: USB disconnect, device number 3 [ 142.208534][ T1245] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.306646][ T6330] fuse: Bad value for 'fd' [ 142.358367][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 142.361175][ T1245] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.361197][ T1245] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 142.361214][ T1245] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.364957][ T1245] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 142.364987][ T1245] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 142.365008][ T1245] usb 5-1: Product: syz [ 142.365023][ T1245] usb 5-1: Manufacturer: syz [ 142.365037][ T1245] usb 5-1: SerialNumber: syz [ 142.445215][ T1245] usb 5-1: config 0 descriptor?? [ 142.598820][ T6328] program syz.1.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.889877][ T1245] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 142.889925][ T1245] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 143.101378][ T6338] delete_channel: no stack [ 143.515070][ T5901] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.680397][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.682103][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.741011][ T5901] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.741049][ T5901] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.741090][ T5901] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.741113][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.794470][ T6339] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.827112][ T5901] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.091992][ T5901] usb 5-1: USB disconnect, device number 2 [ 146.206116][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.353527][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.798462][ T5927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 147.979754][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 148.007988][ T5927] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.008021][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.008040][ T5927] usb 3-1: Product: syz [ 148.008053][ T5927] usb 3-1: Manufacturer: syz [ 148.008075][ T5927] usb 3-1: SerialNumber: syz [ 148.099630][ T5927] r8152-cfgselector 3-1: Unknown version 0x0000 [ 148.099657][ T5927] r8152-cfgselector 3-1: config 0 descriptor?? [ 148.538178][ T5927] r8152-cfgselector 3-1: Unknown version 0x0000 [ 148.540876][ T5927] r8152-cfgselector 3-1: bad CDC descriptors [ 148.678087][ T5927] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 149.041319][ T2240] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.503066][ T2240] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.505083][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.505131][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.743460][ T6396] fuse: Bad value for 'fd' [ 151.421226][ T6406] fuse: Unknown parameter 'grou00000000000000000000' [ 152.474953][ T5927] usb 4-1: USB disconnect, device number 3 [ 152.632762][ T6413] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.020572][ T6444] fuse: Bad value for 'fd' [ 154.602895][ T6459] delete_channel: no stack [ 155.018503][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.301688][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.301728][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.301771][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.301796][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.381027][ T6463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.431789][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.622317][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.623572][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.388626][ T6488] fuse: Bad value for 'fd' [ 158.510024][ T6520] fuse: Bad value for 'fd' [ 158.839229][ T45] usb 5-1: USB disconnect, device number 3 [ 160.980928][ T6565] fuse: Bad value for 'fd' [ 162.800207][ T6579] capability: warning: `syz.4.178' uses deprecated v2 capabilities in a way that may be insecure [ 164.888517][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.068596][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 170.100380][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.101588][ T10] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 170.101612][ T10] usb 4-1: chopping to 0 config(s) [ 170.101638][ T10] usb 4-1: can't read configurations, error -32 [ 170.238418][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.368439][ T10] usb 4-1: device descriptor read/64, error -32 [ 170.548546][ T10] usb usb4-port1: attempt power cycle [ 170.908413][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.930340][ T10] usb 4-1: device descriptor read/8, error -32 [ 175.441060][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 175.858064][ T6717] misc userio: No port type given on /dev/userio [ 177.467130][ T6739] syz.4.230 (6739) used greatest stack depth: 18968 bytes left [ 177.942209][ T5924] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 178.132950][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.132975][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.133004][ T5924] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 178.133037][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.156783][ T5924] usb 5-1: config 0 descriptor?? [ 178.602640][ T6752] tmpfs: Unsupported parameter 'huge' [ 178.689763][ T6751] IPVS: Error connecting to the multicast addr [ 178.706305][ T5924] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 178.830556][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 178.869990][ T6745] netlink: 14 bytes leftover after parsing attributes in process `syz.4.233'. [ 178.975704][ T5924] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 179.054821][ T5924] cp2112 0003:10C4:EA90.0001: error requesting version [ 179.145903][ T5924] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 179.158472][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 179.160899][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.160931][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 179.160959][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.160995][ T31] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 179.161020][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.168164][ T31] usb 3-1: config 0 descriptor?? [ 179.872179][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 179.872292][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 179.875964][ T31] usb 3-1: USB disconnect, device number 3 [ 181.001043][ T6745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.062004][ T6745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.178433][ T1245] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.210328][ T6745] bond0 (unregistering): Released all slaves [ 181.348875][ T1245] usb 3-1: Using ep0 maxpacket: 32 [ 181.351183][ T1245] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.351204][ T1245] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.351221][ T1245] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.353673][ T1245] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 181.353693][ T1245] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 181.353707][ T1245] usb 3-1: Product: syz [ 181.353717][ T1245] usb 3-1: Manufacturer: syz [ 181.353727][ T1245] usb 3-1: SerialNumber: syz [ 181.425588][ T1245] usb 3-1: config 0 descriptor?? [ 181.863571][ T1245] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 181.863618][ T1245] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 182.175379][ T6766] tipc: Started in network mode [ 182.175412][ T6766] tipc: Node identity f6e986ffadc4, cluster identity 4711 [ 182.197021][ T6766] tipc: Enabled bearer , priority 0 [ 182.258070][ T6766] tipc: Resetting bearer [ 182.550997][ T6744] syz.4.233 (6744) used greatest stack depth: 16760 bytes left [ 182.578674][ T6765] tipc: Disabling bearer [ 182.644420][ T9] usb 5-1: USB disconnect, device number 4 [ 183.931247][ T6042] usb 3-1: USB disconnect, device number 4 [ 184.570299][ T6795] input: syz1 as /devices/virtual/input/input9 [ 184.631540][ T6798] tipc: Started in network mode [ 184.631573][ T6798] tipc: Node identity d2620609dca7, cluster identity 4711 [ 184.631823][ T6798] tipc: Enabled bearer , priority 0 [ 184.952773][ T6803] tipc: Resetting bearer [ 185.283107][ T6797] tipc: Disabling bearer [ 185.508486][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 185.840213][ T38] audit: type=1326 audit(1756085231.691:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.918678][ T38] audit: type=1326 audit(1756085231.701:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.919856][ T38] audit: type=1326 audit(1756085231.781:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.920309][ T38] audit: type=1326 audit(1756085231.781:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.962873][ T38] audit: type=1326 audit(1756085231.801:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.962933][ T38] audit: type=1326 audit(1756085231.801:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.962988][ T38] audit: type=1326 audit(1756085231.801:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.963036][ T38] audit: type=1326 audit(1756085231.801:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.963086][ T38] audit: type=1326 audit(1756085231.811:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.963138][ T38] audit: type=1326 audit(1756085231.811:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ec24ebe9 code=0x7ffc0000 [ 185.966788][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 185.969898][ T6042] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 185.984913][ T31] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.984947][ T31] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.985042][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 186.032385][ T6825] pim6reg: entered allmulticast mode [ 186.045131][ T6825] pim6reg: left allmulticast mode [ 186.088103][ T31] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 186.088141][ T31] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 186.088165][ T31] usb 3-1: Product: syz [ 186.088182][ T31] usb 3-1: Manufacturer: syz [ 186.088199][ T31] usb 3-1: SerialNumber: syz [ 186.159660][ T6042] usb 2-1: Using ep0 maxpacket: 8 [ 186.165794][ T6042] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 186.165867][ T6042] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.165897][ T6042] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.165925][ T6042] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.165952][ T6042] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.166003][ T6042] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.166174][ T6042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.196025][ T31] usb 3-1: config 0 descriptor?? [ 186.430711][ T6042] usb 2-1: usb_control_msg returned -32 [ 186.430773][ T6042] usbtmc 2-1:16.0: can't read capabilities [ 186.907631][ T31] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 186.907682][ T31] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 188.117990][ T31] usb 2-1: USB disconnect, device number 4 [ 188.212561][ T9] usb 3-1: USB disconnect, device number 5 [ 189.351780][ T6857] tipc: Enabling of bearer rejected, failed to enable media [ 189.468521][ T6042] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.630504][ T6042] usb 4-1: Using ep0 maxpacket: 16 [ 190.758472][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 190.948642][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 190.953274][ T31] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 190.953303][ T31] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 190.953392][ T31] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 190.953415][ T31] usb 3-1: config 250 has no interface number 0 [ 190.953465][ T31] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 190.953554][ T31] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 190.953582][ T31] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.953606][ T31] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 190.953630][ T31] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 190.954604][ T31] usb 3-1: config 250 interface 228 has no altsetting 0 [ 191.082633][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 191.082736][ T31] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 191.082758][ T31] usb 3-1: Product: syz [ 191.082772][ T31] usb 3-1: SerialNumber: syz [ 191.188934][ T31] hub 3-1:250.228: bad descriptor, ignoring hub [ 191.188979][ T31] hub 3-1:250.228: probe with driver hub failed with error -5 [ 191.268480][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 191.399513][ T31] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 191.418430][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 191.423330][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.423424][ T5901] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 191.423451][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.427477][ T5901] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 191.427569][ T5901] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 191.427591][ T5901] usb 2-1: Product: syz [ 191.427606][ T5901] usb 2-1: Manufacturer: syz [ 191.427621][ T5901] usb 2-1: SerialNumber: syz [ 191.522901][ T5901] usb 2-1: config 0 descriptor?? [ 192.171858][ T5901] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 192.171938][ T5901] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 192.212677][ T31] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 192.518648][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.710885][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.710918][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.756373][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.756405][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.756426][ T9] usb 5-1: Product: syz [ 192.756442][ T9] usb 5-1: Manufacturer: syz [ 192.756457][ T9] usb 5-1: SerialNumber: syz [ 192.850668][ T9] usb 5-1: config 0 descriptor?? [ 192.978832][ T31] usb 3-1: USB disconnect, device number 6 [ 193.001597][ T31] usblp0: removed [ 193.098957][ T9] usb 5-1: selecting invalid altsetting 0 [ 193.577685][ T31] usb 2-1: USB disconnect, device number 5 [ 194.722386][ T6042] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.722477][ T6042] usb 4-1: no configurations [ 194.722490][ T6042] usb 4-1: can't read configurations, error -22 [ 194.878475][ T6042] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.008490][ T6042] usb 4-1: device descriptor read/64, error -32 [ 195.118760][ T6042] usb usb4-port1: attempt power cycle [ 195.468443][ T6042] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.488822][ T6042] usb 4-1: device descriptor read/8, error -32 [ 195.748495][ T6042] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 195.768838][ T6042] usb 4-1: device descriptor read/8, error -32 [ 195.878800][ T6042] usb usb4-port1: unable to enumerate USB device [ 196.757286][ T10] usb 5-1: USB disconnect, device number 5 [ 196.978511][ T1245] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 197.128506][ T1245] usb 4-1: Using ep0 maxpacket: 8 [ 197.131055][ T1245] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 197.131085][ T1245] usb 4-1: config 0 has no interface number 0 [ 197.131133][ T1245] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.131158][ T1245] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 197.131184][ T1245] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 197.131211][ T1245] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.139126][ T1245] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 197.139175][ T1245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.139198][ T1245] usb 4-1: Product: syz [ 197.139213][ T1245] usb 4-1: Manufacturer: syz [ 197.139230][ T1245] usb 4-1: SerialNumber: syz [ 197.165462][ T1245] usb 4-1: config 0 descriptor?? [ 197.591127][ T1245] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 197.679224][ T6042] usb 4-1: USB disconnect, device number 12 [ 197.830027][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.978826][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 197.983393][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.983434][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.983468][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.005040][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 198.005076][ T10] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 198.005098][ T10] usb 2-1: Product: syz [ 198.005114][ T10] usb 2-1: Manufacturer: syz [ 198.005131][ T10] usb 2-1: SerialNumber: syz [ 198.124579][ T10] usb 2-1: config 0 descriptor?? [ 198.232981][ T6952] netlink: 'syz.0.302': attribute type 6 has an invalid length. [ 198.252921][ T6952] QAT: failed to copy from user cfg_data. [ 198.556839][ T10] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 198.556886][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 199.132760][ T6961] netlink: 'syz.3.303': attribute type 7 has an invalid length. [ 199.132785][ T6961] netlink: 'syz.3.303': attribute type 8 has an invalid length. [ 199.837870][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.837956][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.480595][ T5901] usb 2-1: USB disconnect, device number 6 [ 203.009318][ T6991] netlink: 'syz.3.313': attribute type 4 has an invalid length. [ 205.218694][ T7034] netlink: 'syz.1.324': attribute type 6 has an invalid length. [ 208.467553][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.828218][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 217.227956][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 217.228074][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 217.228173][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 217.229388][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 217.229421][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 217.413057][ T7145] fuse: Bad value for 'fd' [ 217.729090][ T7142] netdevsim netdevsim3: Direct firmware load for Ò failed with error -2 [ 217.729132][ T7142] netdevsim netdevsim3: Falling back to sysfs fallback for: Ò [ 218.381566][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 218.549693][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 218.551938][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 218.551963][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.551981][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.551998][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.552028][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.552045][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.095840][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 219.095893][ T10] usbtmc 1-1:16.0: can't read capabilities [ 219.310664][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 219.315640][ T31] usb 1-1: USB disconnect, device number 2 [ 220.658492][ T1245] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.856179][ T1245] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 220.856209][ T1245] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.856231][ T1245] usb 2-1: config 1 has no interface number 0 [ 220.856278][ T1245] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.904189][ T1245] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.904211][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.904225][ T1245] usb 2-1: Product: syz [ 220.904235][ T1245] usb 2-1: Manufacturer: syz [ 220.904245][ T1245] usb 2-1: SerialNumber: syz [ 220.966117][ T1245] usb 2-1: selecting invalid altsetting 1 [ 222.517226][ T1245] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 222.517279][ T1245] cdc_ncm 2-1:1.1: bind() failure [ 222.628690][ T1245] usb 2-1: USB disconnect, device number 7 [ 222.902320][ T7187] fuse: Bad value for 'fd' [ 223.325605][ T7192] tmpfs: Unsupported parameter 'huge' [ 223.333440][ T7192] IPVS: Error connecting to the multicast addr [ 223.838408][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 224.010287][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 224.014843][ T45] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 224.014868][ T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 224.014885][ T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.014902][ T45] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.014932][ T45] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.014948][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.314101][ T45] usb 3-1: GET_CAPABILITIES returned 0 [ 224.314136][ T45] usbtmc 3-1:16.0: can't read capabilities [ 224.758594][ T45] usb 3-1: USB disconnect, device number 7 [ 225.248455][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 225.418538][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 225.422718][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.422744][ T9] usb 1-1: config 0 has no interfaces? [ 225.427797][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 225.427829][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.427850][ T9] usb 1-1: Product: syz [ 225.427882][ T9] usb 1-1: Manufacturer: syz [ 225.427897][ T9] usb 1-1: SerialNumber: syz [ 225.528636][ T9] usb 1-1: config 0 descriptor?? [ 225.845142][ T1245] usb 1-1: USB disconnect, device number 3 [ 228.128666][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.288512][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 228.317258][ T9] usb 3-1: config 0 has no interfaces? [ 228.367099][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 228.367132][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.367154][ T9] usb 3-1: Product: syz [ 228.367169][ T9] usb 3-1: Manufacturer: syz [ 228.367184][ T9] usb 3-1: SerialNumber: syz [ 228.419671][ T9] usb 3-1: config 0 descriptor?? [ 228.628957][ T7269] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[7269] [ 231.155786][ T10] usb 3-1: USB disconnect, device number 8 [ 233.326632][ T7306] process 'syz.1.394' launched './file0' with NULL argv: empty string added [ 233.374317][ T6042] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 233.528456][ T6042] usb 4-1: Using ep0 maxpacket: 16 [ 236.712066][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 237.448420][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.628430][ T6042] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.629390][ T6042] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 238.629408][ T6042] usb 4-1: chopping to 0 config(s) [ 238.629426][ T6042] usb 4-1: can't read configurations, error -32 [ 238.771422][ T6042] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 238.971118][ T6042] usb 4-1: device descriptor read/64, error -32 [ 239.078787][ T6042] usb usb4-port1: attempt power cycle [ 239.448456][ T6042] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 239.468725][ T6042] usb 4-1: device descriptor read/8, error -32 [ 239.738464][ T6042] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 239.758798][ T6042] usb 4-1: device descriptor read/8, error -32 [ 239.868677][ T6042] usb usb4-port1: unable to enumerate USB device [ 242.149187][ T7359] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 243.749488][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.750096][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.546012][ T7364] bridge_slave_0: left allmulticast mode [ 244.546045][ T7364] bridge_slave_0: left promiscuous mode [ 244.546354][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.826466][ T7364] bridge_slave_1: left allmulticast mode [ 244.826501][ T7364] bridge_slave_1: left promiscuous mode [ 244.828105][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.141385][ T7364] bond0: (slave bond_slave_0): Releasing backup interface [ 245.335573][ T7364] bond0: (slave bond_slave_1): Releasing backup interface [ 245.469116][ T7364] team0: Port device team_slave_0 removed [ 245.574701][ T7364] team0: Port device team_slave_1 removed [ 245.636043][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.672244][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.877517][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.949973][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.370139][ T1245] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 246.538371][ T1245] usb 3-1: Using ep0 maxpacket: 16 [ 248.744724][ T7367] gretap1: entered promiscuous mode [ 248.850590][ T7367] bond1: (slave gretap1): making interface the new active one [ 248.884921][ T7367] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 249.357143][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.372215][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.372933][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.372964][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.396788][ T7388] misc userio: Invalid payload size [ 250.459902][ T7393] misc userio: No port type given on /dev/userio [ 251.618675][ T1245] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.619610][ T1245] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 251.619628][ T1245] usb 3-1: chopping to 0 config(s) [ 251.619646][ T1245] usb 3-1: can't read configurations, error -32 [ 251.748618][ T1245] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 252.026691][ T1245] usb 3-1: device descriptor read/64, error -32 [ 252.128713][ T1245] usb usb3-port1: attempt power cycle [ 252.427097][ T7409] delete_channel: no stack [ 252.512551][ T1245] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.568841][ T1245] usb 3-1: device descriptor read/8, error -32 [ 252.808609][ T1245] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 252.830871][ T1245] usb 3-1: device descriptor read/8, error -32 [ 253.094221][ T1245] usb usb3-port1: unable to enumerate USB device [ 258.328425][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 258.483661][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 258.486368][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.486398][ T31] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 258.486421][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.491409][ T31] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 258.491463][ T31] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 258.491486][ T31] usb 2-1: Product: syz [ 258.491503][ T31] usb 2-1: Manufacturer: syz [ 258.491517][ T31] usb 2-1: SerialNumber: syz [ 258.582806][ T31] usb 2-1: config 0 descriptor?? [ 259.000042][ T31] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 259.458850][ T31] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 259.459382][ T31] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 259.533671][ T31] usb 2-1: USB disconnect, device number 8 [ 260.704960][ T7490] syz.3.446 (7490): attempted to duplicate a private mapping with mremap. This is not supported. [ 261.229288][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.229370][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.479087][ T7492] fuse: root generation should be zero [ 265.128513][ T1245] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 265.148685][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 265.310052][ T1245] usb 3-1: Using ep0 maxpacket: 8 [ 265.310221][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 265.318098][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.318128][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.318152][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 265.357265][ T1245] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.357293][ T1245] usb 3-1: config 0 has no interfaces? [ 265.379026][ T1245] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 265.379056][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.379139][ T1245] usb 3-1: Product: syz [ 265.379155][ T1245] usb 3-1: Manufacturer: syz [ 265.379171][ T1245] usb 3-1: SerialNumber: syz [ 265.429789][ T1245] usb 3-1: config 0 descriptor?? [ 265.503491][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 265.503515][ T9] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 265.503531][ T9] usb 5-1: Product: syz [ 265.503541][ T9] usb 5-1: Manufacturer: syz [ 265.503551][ T9] usb 5-1: SerialNumber: syz [ 265.545738][ T9] usb 5-1: config 0 descriptor?? [ 266.229809][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 266.393458][ T31] usb 3-1: USB disconnect, device number 13 [ 266.431122][ T9] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 266.431202][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 266.463613][ T9] usb 5-1: USB disconnect, device number 6 [ 267.599175][ T7531] tmpfs: Unsupported parameter 'huge' [ 267.604692][ T7531] IPVS: Error connecting to the multicast addr [ 271.778428][ T1245] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 271.958425][ T1245] usb 2-1: Using ep0 maxpacket: 16 [ 273.049688][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 273.198477][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 273.206164][ T10] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 273.240323][ T10] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 273.240346][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.240360][ T10] usb 3-1: Product: syz [ 273.240371][ T10] usb 3-1: Manufacturer: syz [ 273.240381][ T10] usb 3-1: SerialNumber: syz [ 273.326782][ T10] usb 3-1: config 0 descriptor?? [ 273.370743][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 273.370796][ T10] usb 3-1: setting power ON [ 273.375186][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 273.478838][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.484735][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 273.484826][ T10] usb 3-1: media controller created [ 273.559398][ T7580] dvb-usb: bulk message failed: -22 (3/0) [ 273.559418][ T7580] cxusb: i2c wr: len=79 is too big! [ 273.559418][ T7580] [ 273.664232][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.870629][ T10] usb 3-1: selecting invalid altsetting 6 [ 273.870648][ T10] usb 3-1: digital interface selection failed (-22) [ 273.870659][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 273.875152][ T10] usb 3-1: setting power OFF [ 273.906878][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 273.906899][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 273.906909][ T10] (NULL device *): no alternate interface [ 274.697687][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 274.752527][ T10] usb 3-1: USB disconnect, device number 14 [ 276.978642][ T1245] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.979658][ T1245] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 276.979676][ T1245] usb 2-1: chopping to 0 config(s) [ 276.979694][ T1245] usb 2-1: can't read configurations, error -32 [ 277.108376][ T1245] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 277.258379][ T1245] usb 2-1: device descriptor read/64, error -32 [ 277.368792][ T1245] usb usb2-port1: attempt power cycle [ 277.877889][ T1245] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 277.908905][ T1245] usb 2-1: device descriptor read/8, error -32 [ 277.938635][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 277.938652][ T38] audit: type=1326 audit(1756085323.801:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.3.474" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3882ebebe9 code=0x0 [ 278.158539][ T1245] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 278.179233][ T1245] usb 2-1: device descriptor read/8, error -32 [ 278.288754][ T1245] usb usb2-port1: unable to enumerate USB device [ 279.543558][ T7629] tmpfs: Unsupported parameter 'huge' [ 279.546110][ T7629] IPVS: Error connecting to the multicast addr [ 281.148271][ T38] audit: type=1326 audit(1756085327.001:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 281.154963][ T38] audit: type=1326 audit(1756085327.011:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 281.155030][ T38] audit: type=1326 audit(1756085327.011:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 281.159762][ T38] audit: type=1326 audit(1756085327.011:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 281.159812][ T38] audit: type=1326 audit(1756085327.011:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 281.159857][ T38] audit: type=1326 audit(1756085327.011:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 281.159901][ T38] audit: type=1326 audit(1756085327.011:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 281.159949][ T38] audit: type=1326 audit(1756085327.011:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 281.160012][ T38] audit: type=1326 audit(1756085327.011:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882ebebe9 code=0x7ffc0000 [ 282.179340][ T7653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.210736][ T7658] binder: 7654:7658 ioctl c0306201 200000000540 returned -22 [ 282.296504][ T7643] netlink: 'syz.2.479': attribute type 20 has an invalid length. [ 284.728453][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 284.878500][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 287.738431][ T6042] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 287.888966][ T6042] usb 3-1: Using ep0 maxpacket: 32 [ 287.894336][ T6042] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.895372][ T6042] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 287.895401][ T6042] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.983461][ T6042] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 287.983484][ T6042] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 287.987893][ T6042] usb 3-1: Product: syz [ 287.987908][ T6042] usb 3-1: Manufacturer: syz [ 287.987919][ T6042] usb 3-1: SerialNumber: syz [ 288.096420][ T6042] usb 3-1: config 0 descriptor?? [ 288.548369][ T6042] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 288.814829][ T6042] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 288.814931][ T6042] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 289.197079][ T6042] usb 3-1: USB disconnect, device number 15 [ 290.188733][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 290.189680][ T45] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 290.189697][ T45] usb 4-1: chopping to 0 config(s) [ 290.189715][ T45] usb 4-1: can't read configurations, error -32 [ 290.348653][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 290.498975][ T45] usb 4-1: device descriptor read/64, error -32 [ 290.609335][ T45] usb usb4-port1: attempt power cycle [ 290.968551][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 290.988897][ T45] usb 4-1: device descriptor read/8, error -32 [ 291.100097][ T7700] fuse: Unknown parameter 'use00000000000000000000' [ 291.372689][ T7706] binder: 7701:7706 ioctl c0306201 200000000540 returned -22 [ 293.340144][ T7722] IPVS: length: 129 != 8 [ 293.608510][ T1245] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 293.781590][ T1245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 293.781626][ T1245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 293.781670][ T1245] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 293.781694][ T1245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.801963][ T1245] usb 4-1: config 0 descriptor?? [ 293.982879][ T7731] netlink: 216 bytes leftover after parsing attributes in process `syz.2.503'. [ 293.982940][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 294.056165][ T1245] ath6kl: Failed to submit usb control message: -71 [ 294.056222][ T1245] ath6kl: unable to send the bmi data to the device: -71 [ 294.056236][ T1245] ath6kl: Unable to send get target info: -71 [ 294.117097][ T1245] ath6kl: Failed to init ath6kl core: -71 [ 294.119803][ T1245] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 294.223602][ T1245] usb 4-1: USB disconnect, device number 21 [ 294.648520][ T6042] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 294.832946][ T6042] usb 1-1: Using ep0 maxpacket: 16 [ 294.992596][ T7742] fuse: Unknown parameter 'use00000000000000000000' [ 299.858649][ T6042] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.859665][ T6042] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 299.859683][ T6042] usb 1-1: chopping to 0 config(s) [ 299.859703][ T6042] usb 1-1: can't read configurations, error -32 [ 299.988430][ T6042] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 300.168410][ T6042] usb 1-1: device descriptor read/64, error -32 [ 300.278811][ T6042] usb usb1-port1: attempt power cycle [ 302.168435][ T7782] vivid-000: ================= START STATUS ================= [ 302.170908][ T7782] vivid-000: Test Pattern: 75% Colorbar [ 302.170957][ T7782] vivid-000: Fill Percentage of Frame: 100 [ 302.170981][ T7782] vivid-000: Horizontal Movement: No Movement [ 302.171000][ T7782] vivid-000: Vertical Movement: Move Down [ 302.171019][ T7782] vivid-000: OSD Text Mode: All [ 302.171037][ T7782] vivid-000: Show Border: false [ 302.171054][ T7782] vivid-000: Show Square: false [ 302.171071][ T7782] vivid-000: Sensor Flipped Horizontally: false [ 302.171098][ T7782] vivid-000: Sensor Flipped Vertically: false [ 302.171118][ T7782] vivid-000: Insert SAV Code in Image: false [ 302.171137][ T7782] vivid-000: Insert EAV Code in Image: false [ 302.171156][ T7782] vivid-000: Insert Video Guard Band: false [ 302.171175][ T7782] vivid-000: Reduced Framerate: false [ 302.171193][ T7782] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 302.171213][ T7782] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 302.171233][ T7782] vivid-000: Enable Capture Cropping: true grabbed [ 302.171256][ T7782] vivid-000: Enable Capture Composing: true grabbed [ 302.171280][ T7782] vivid-000: Enable Capture Scaler: true grabbed [ 302.171302][ T7782] vivid-000: Timestamp Source: End of Frame [ 302.171320][ T7782] vivid-000: Colorspace: sRGB [ 302.171337][ T7782] vivid-000: Transfer Function: Default [ 302.171355][ T7782] vivid-000: Y'CbCr Encoding: Default [ 302.171372][ T7782] vivid-000: HSV Encoding: Hue 0-179 [ 302.171390][ T7782] vivid-000: Quantization: Default [ 302.171407][ T7782] vivid-000: Apply Alpha To Red Only: false [ 302.171425][ T7782] vivid-000: Standard Aspect Ratio: 4x3 [ 302.171442][ T7782] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 302.171466][ T7782] vivid-000: DV Timings: 640x480p59 inactive [ 302.171488][ T7782] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 302.171507][ T7782] vivid-000: Maximum EDID Blocks: 2 [ 302.171535][ T7782] vivid-000: Limited RGB Range (16-235): false [ 302.171555][ T7782] vivid-000: Rx RGB Quantization Range: Automatic [ 302.171575][ T7782] vivid-000: Power Present: 0x00000001 [ 302.171603][ T7782] tpg source WxH: 320x240 (Y'CbCr) [ 302.171617][ T7782] tpg field: 1 [ 302.171625][ T7782] tpg crop: (0,0)/320x240 [ 302.171639][ T7782] tpg compose: (0,0)/320x240 [ 302.171653][ T7782] tpg colorspace: 8 [ 302.171661][ T7782] tpg transfer function: 0/0 [ 302.171678][ T7782] tpg Y'CbCr encoding: 0/0 [ 302.171688][ T7782] tpg quantization: 0/0 [ 302.171697][ T7782] tpg RGB range: 0/2 [ 302.171706][ T7782] vivid-000: ================== END STATUS ================== [ 303.021182][ T7789] fuse: Unknown parameter 'use00000000000000000000' [ 303.200332][ T6042] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 303.358457][ T6042] usb 4-1: Using ep0 maxpacket: 32 [ 303.364044][ T6042] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.364066][ T6042] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.364087][ T6042] usb 4-1: config 0 interface 0 has no altsetting 0 [ 303.366220][ T6042] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 303.366239][ T6042] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 303.366253][ T6042] usb 4-1: Product: syz [ 303.366263][ T6042] usb 4-1: Manufacturer: syz [ 303.366273][ T6042] usb 4-1: SerialNumber: syz [ 303.464279][ T6042] usb 4-1: config 0 descriptor?? [ 303.692415][ T7796] netlink: 276 bytes leftover after parsing attributes in process `syz.4.521'. [ 303.693437][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 303.873050][ T6042] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 304.088501][ T6042] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 304.088554][ T6042] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 304.276214][ T6042] usb 4-1: USB disconnect, device number 22 [ 305.838419][ T6042] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 306.095650][ T6042] usb 4-1: Using ep0 maxpacket: 16 [ 307.437467][ T7812] warning: `syz.0.527' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 307.900364][ T7814] autofs: Unknown parameter '0x0000000000000000' [ 308.599815][ T38] kauditd_printk_skb: 18 callbacks suppressed [ 308.599834][ T38] audit: type=1326 audit(1756085354.461:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.2.530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3e68cebe9 code=0x0 [ 310.558422][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 310.763832][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.763876][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 310.763948][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.806007][ T45] usb 1-1: config 0 descriptor?? [ 310.970432][ T5824] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 311.120017][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 311.122704][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.122723][ T5824] usb 3-1: config 0 has no interfaces? [ 311.125581][ T5824] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 311.125603][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.125668][ T5824] usb 3-1: Product: syz [ 311.125680][ T5824] usb 3-1: Manufacturer: syz [ 311.125690][ T5824] usb 3-1: SerialNumber: syz [ 311.140221][ T6042] usb 4-1: unable to get BOS descriptor or descriptor too short [ 311.142788][ T6042] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 311.142808][ T6042] usb 4-1: chopping to 0 config(s) [ 311.142874][ T6042] usb 4-1: can't read configurations, error -32 [ 311.199554][ T5824] usb 3-1: config 0 descriptor?? [ 311.268502][ T6042] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 311.306610][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 311.306750][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 311.343221][ T45] usb 1-1: USB disconnect, device number 7 [ 311.404475][ T6042] usb 4-1: device descriptor read/64, error -32 [ 311.467055][ T1245] usb 3-1: USB disconnect, device number 16 [ 311.520313][ T6042] usb usb4-port1: attempt power cycle [ 312.324475][ T7854] autofs: Unknown parameter 'fd0x0000000000000000' [ 314.618383][ T6042] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 314.788333][ T6042] usb 4-1: Using ep0 maxpacket: 16 [ 316.518665][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 316.698419][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 316.701031][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.701050][ T45] usb 2-1: config 0 has no interfaces? [ 316.704945][ T45] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 316.704967][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.704981][ T45] usb 2-1: Product: syz [ 316.704991][ T45] usb 2-1: Manufacturer: syz [ 316.705043][ T45] usb 2-1: SerialNumber: syz [ 316.774767][ T45] usb 2-1: config 0 descriptor?? [ 316.992562][ T9] usb 2-1: USB disconnect, device number 13 [ 318.862351][ T7905] autofs: Unknown parameter 'fd0x0000000000000000' [ 319.858654][ T6042] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.859588][ T6042] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 319.859605][ T6042] usb 4-1: chopping to 0 config(s) [ 319.859623][ T6042] usb 4-1: can't read configurations, error -32 [ 319.988411][ T6042] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 320.118392][ T6042] usb 4-1: device descriptor read/64, error -32 [ 320.228778][ T6042] usb usb4-port1: attempt power cycle [ 320.578404][ T6042] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 320.598721][ T6042] usb 4-1: device descriptor read/8, error -32 [ 320.838520][ T6042] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 320.859445][ T6042] usb 4-1: device descriptor read/8, error -32 [ 320.968803][ T6042] usb usb4-port1: unable to enumerate USB device [ 321.067534][ T7924] binder: 7921:7924 unknown command 0 [ 321.067551][ T7924] binder: 7921:7924 ioctl c0306201 200000000080 returned -22 [ 321.069283][ T7924] binder: BINDER_SET_CONTEXT_MGR already set [ 321.069294][ T7924] binder: 7921:7924 ioctl 4018620d 200000000040 returned -16 [ 321.069775][ T7924] binder: 7921:7924 ioctl c0306201 200000000280 returned -11 [ 322.623367][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 322.674508][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.674592][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.704205][ T7950] autofs: Unknown parameter 'fd0x0000000000000000' [ 324.759702][ T7967] netlink: 'syz.1.571': attribute type 4 has an invalid length. [ 324.873451][ T7968] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[7968] [ 324.895654][ T7968] netlink: 19 bytes leftover after parsing attributes in process `syz.1.571'. [ 326.562587][ T7982] syzkaller0: entered promiscuous mode [ 326.562610][ T7982] syzkaller0: entered allmulticast mode [ 326.749364][ T5927] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 326.913419][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 327.094344][ T5927] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 327.094412][ T5927] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.094435][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.094459][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.094482][ T5927] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.094526][ T5927] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.094549][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.427413][ T5927] usb 2-1: usb_control_msg returned -32 [ 327.427448][ T5927] usbtmc 2-1:16.0: can't read capabilities [ 328.148457][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 328.298501][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 328.302199][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.302229][ T45] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 328.302247][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.379436][ T45] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 328.379468][ T45] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 328.379489][ T45] usb 3-1: Product: syz [ 328.379503][ T45] usb 3-1: Manufacturer: syz [ 328.379518][ T45] usb 3-1: SerialNumber: syz [ 328.420776][ T45] usb 3-1: config 0 descriptor?? [ 328.838447][ T45] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 329.032328][ T45] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 329.049078][ T45] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 329.251794][ T5927] usb 3-1: USB disconnect, device number 17 [ 330.834809][ T45] usb 2-1: USB disconnect, device number 14 [ 331.689232][ T8032] usb usb8: usbfs: process 8032 (syz.1.591) did not claim interface 0 before use [ 334.758405][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 334.918350][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 334.921488][ T45] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 334.921537][ T45] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.921553][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.921570][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.921586][ T45] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.921615][ T45] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.921637][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.522959][ T8060] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 340.864793][ T8080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'. [ 340.910965][ T8080] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 340.970529][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 341.129842][ T8080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.258579][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 341.574542][ T8092] fuse: Bad value for 'fd' [ 341.674102][ T1245] usb 1-1: USB disconnect, device number 8 [ 342.149811][ T8097] syzkaller0: entered promiscuous mode [ 342.149842][ T8097] syzkaller0: entered allmulticast mode [ 343.017954][ T5927] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 343.054682][ T5927] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 344.414893][ T8116] fido_id[8116]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 345.399084][ T8129] delete_channel: no stack [ 346.368999][ T1245] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 346.613726][ T1245] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.613763][ T1245] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 346.613806][ T1245] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.613830][ T1245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.642557][ T8131] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 346.754334][ T1245] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.872367][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.872744][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.799867][ T8122] input: syz0 as /devices/virtual/input/input17 [ 349.712707][ T8160] netlink: 'syz.1.626': attribute type 3 has an invalid length. [ 349.935357][ T8162] syzkaller0: entered promiscuous mode [ 349.935387][ T8162] syzkaller0: entered allmulticast mode [ 350.980253][ T5927] usb 5-1: USB disconnect, device number 7 [ 352.180493][ T5824] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 352.224949][ T5824] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 353.743682][ T38] audit: type=1326 audit(1756085399.601:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8194 comm="syz.3.638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3882ebebe9 code=0x0 [ 354.234502][ T5927] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 354.238162][ T5927] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.725499][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'. [ 354.881072][ T8199] fido_id[8199]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 355.813689][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.641'. [ 357.738452][ T6042] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 357.888344][ T6042] usb 2-1: device descriptor read/64, error -71 [ 358.257844][ T6042] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 358.420768][ T6042] usb 2-1: device descriptor read/64, error -71 [ 358.531975][ T6042] usb usb2-port1: attempt power cycle [ 358.720433][ T8236] fuse: Bad value for 'fd' [ 358.958447][ T6042] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 358.979528][ T6042] usb 2-1: device descriptor read/8, error -71 [ 359.227996][ T6042] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 359.300120][ T6042] usb 2-1: device descriptor read/8, error -71 [ 359.321706][ T5824] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 359.339395][ T5824] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.414360][ T6042] usb usb2-port1: unable to enumerate USB device [ 361.605948][ T8257] fido_id[8257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 361.889370][ T8276] fuse: Bad value for 'fd' [ 365.354845][ T38] audit: type=1326 audit(1756085411.211:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.355912][ T38] audit: type=1326 audit(1756085411.211:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.356331][ T38] audit: type=1326 audit(1756085411.211:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.439165][ T38] audit: type=1326 audit(1756085411.301:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.479542][ T38] audit: type=1326 audit(1756085411.341:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.510512][ T38] audit: type=1326 audit(1756085411.371:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.540654][ T38] audit: type=1326 audit(1756085411.371:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.540712][ T38] audit: type=1326 audit(1756085411.371:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.540758][ T38] audit: type=1326 audit(1756085411.371:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 365.540805][ T38] audit: type=1326 audit(1756085411.371:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7a11febe9 code=0x7ffc0000 [ 366.916339][ T1245] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 366.929736][ T1245] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.083422][ T8315] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 367.083452][ T8315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.770096][ T45] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 367.850580][ T8315] vhci_hcd vhci_hcd.0: Device attached [ 368.178992][ T8329] vhci_hcd: connection reset by peer [ 368.198227][ T1114] vhci_hcd: stop threads [ 368.200023][ T1114] vhci_hcd: release socket [ 368.202608][ T8331] fido_id[8331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 368.248931][ T1114] vhci_hcd: disconnect device [ 370.340050][ T8355] autofs: Unknown parameter '0x0000000000000000' [ 371.657694][ T8363] mmap: syz.3.691 (8363) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 372.486982][ T8371] IPVS: Error connecting to the multicast addr [ 372.948969][ T45] vhci_hcd: vhci_device speed not set [ 374.309073][ T5927] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 374.528352][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 374.530376][ T5927] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 374.534461][ T5927] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 374.534491][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 374.534513][ T5927] usb 5-1: Product: syz [ 374.534528][ T5927] usb 5-1: Manufacturer: syz [ 374.534542][ T5927] usb 5-1: SerialNumber: syz [ 374.637099][ T5927] usb 5-1: config 0 descriptor?? [ 374.638057][ T8393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.739094][ T1245] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 374.928720][ T1245] usb 2-1: Using ep0 maxpacket: 32 [ 374.960000][ T1245] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 374.960024][ T1245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 375.057642][ T1245] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 375.057665][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.057679][ T1245] usb 2-1: Product: syz [ 375.057690][ T1245] usb 2-1: Manufacturer: syz [ 375.057700][ T1245] usb 2-1: SerialNumber: syz [ 375.093549][ T1245] usb 2-1: config 0 descriptor?? [ 375.431727][ T1245] usb 2-1: no audio or video endpoints found [ 376.054999][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 378.439639][ T1245] usb 5-1: USB disconnect, device number 8 [ 378.854041][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 378.854061][ T38] audit: type=1326 audit(1756085424.711:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.4.711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7a11febe9 code=0x0 [ 379.939160][ T5927] usb 2-1: USB disconnect, device number 19 [ 381.061702][ T8471] autofs: Unknown parameter '0x0000000000000000' [ 381.692154][ T38] audit: type=1326 audit(1756085427.551:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.4.723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7a11febe9 code=0x0 [ 382.263578][ T8498] netlink: 532 bytes leftover after parsing attributes in process `syz.0.722'. [ 384.118081][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.118307][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.433923][ T8522] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 388.250892][ T8537] autofs: Unknown parameter '0x0000000000000000' [ 391.094345][ T6042] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 391.106612][ T6042] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.782128][ T5901] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 396.978601][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 396.981440][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.981476][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.981499][ T5901] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.985005][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 396.985035][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 396.985056][ T5901] usb 1-1: Product: syz [ 396.985070][ T5901] usb 1-1: Manufacturer: syz [ 396.985084][ T5901] usb 1-1: SerialNumber: syz [ 397.278760][ T5901] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18 [ 397.358508][ T1245] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 397.511243][ T1245] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.511329][ T1245] usb 4-1: config 0 has no interface number 0 [ 397.511363][ T1245] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.511381][ T1245] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.511408][ T1245] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 397.511423][ T1245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.581245][ T1245] usb 4-1: config 0 descriptor?? [ 397.996460][ T9] usb 1-1: USB disconnect, device number 9 [ 398.045452][ T1245] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 398.045479][ T1245] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 398.079690][ T1245] prodikeys 0003:041E:2801.0009: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 398.083710][ T1245] hid_prodikeys: hid-prodikeys: failed to find output report [ 398.083710][ T1245] [ 398.285037][ T9] appletouch 1-1:1.0: input: appletouch disconnected [ 398.333880][ T5901] usb 4-1: USB disconnect, device number 30 [ 399.481244][ T8633] fido_id[8633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 399.568452][ T45] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 399.778403][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 399.819580][ T45] usb 4-1: config 0 has an invalid interface number: 236 but max is 1 [ 399.819610][ T45] usb 4-1: config 0 has an invalid interface number: 129 but max is 1 [ 399.819631][ T45] usb 4-1: config 0 has no interface number 0 [ 399.819647][ T45] usb 4-1: config 0 has no interface number 1 [ 399.819705][ T45] usb 4-1: config 0 interface 236 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 399.819725][ T45] usb 4-1: config 0 interface 236 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 399.819742][ T45] usb 4-1: config 0 interface 236 has no altsetting 0 [ 399.819755][ T45] usb 4-1: config 0 interface 129 has no altsetting 0 [ 399.823034][ T45] usb 4-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 399.823056][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.823070][ T45] usb 4-1: Product: syz [ 399.823080][ T45] usb 4-1: Manufacturer: syz [ 399.823090][ T45] usb 4-1: SerialNumber: syz [ 399.830784][ T45] usb 4-1: config 0 descriptor?? [ 400.227457][ T45] ir_usb 4-1:0.236: required endpoints missing [ 400.364105][ T45] usb 4-1: selecting invalid altsetting 0 [ 400.468623][ T45] usb 4-1: selecting invalid altsetting 0 [ 400.480002][ T45] usb 4-1: Found UVC 2.26 device syz (1ace:e9b2) [ 400.480046][ T45] usb 4-1: No valid video chain found. [ 400.528793][ T45] usb 4-1: USB disconnect, device number 31 [ 403.499038][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 403.499243][ T1245] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 403.668991][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 403.669179][ T1245] usb 2-1: Using ep0 maxpacket: 8 [ 403.673809][ T1245] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 403.673839][ T1245] usb 2-1: config 0 has no interface number 0 [ 403.704625][ T1245] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 403.704714][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.704737][ T1245] usb 2-1: Product: syz [ 403.704751][ T1245] usb 2-1: Manufacturer: syz [ 403.704765][ T1245] usb 2-1: SerialNumber: syz [ 403.746665][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 403.746730][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.746753][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.746778][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.746802][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.746846][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.746870][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.832652][ T1245] usb 2-1: config 0 descriptor?? [ 404.012417][ T38] audit: type=1326 audit(1756085449.871:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8674 comm="syz.4.771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7a11febe9 code=0x0 [ 404.050893][ T1245] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 404.051018][ T1245] usb 2-1: No valid video chain found. [ 404.062398][ T9] usb 4-1: usb_control_msg returned -32 [ 404.062494][ T9] usbtmc 4-1:16.0: can't read capabilities [ 404.206242][ T1245] usb 2-1: USB disconnect, device number 20 [ 404.436104][ T8671] usbtmc 4-1:16.0: usb_bulk_msg returned -71 [ 404.838506][ T5901] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 404.988345][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 405.043800][ T5901] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 405.043832][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.043852][ T5901] usb 3-1: Product: syz [ 405.043866][ T5901] usb 3-1: Manufacturer: syz [ 405.043881][ T5901] usb 3-1: SerialNumber: syz [ 405.258617][ T5901] r8152-cfgselector 3-1: Unknown version 0x0000 [ 405.258644][ T5901] r8152-cfgselector 3-1: config 0 descriptor?? [ 405.482147][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 405.838796][ T5901] r8152-cfgselector 3-1: Unknown version 0x0000 [ 405.839361][ T5901] r8152-cfgselector 3-1: bad CDC descriptors [ 405.942568][ T5901] r8152-cfgselector 3-1: USB disconnect, device number 18 [ 406.243573][ T8693] bridge_slave_1: left allmulticast mode [ 406.243609][ T8693] bridge_slave_1: left promiscuous mode [ 406.244278][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.686508][ T8693] bridge_slave_0: left allmulticast mode [ 406.686548][ T8693] bridge_slave_0: left promiscuous mode [ 406.686857][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.002560][ T10] usb 4-1: USB disconnect, device number 32 [ 408.964902][ T5901] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 409.086498][ T10] IPVS: starting estimator thread 0... [ 409.159895][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 409.161988][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 409.165725][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 409.165745][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.165767][ T5901] usb 1-1: Product: syz [ 409.165782][ T5901] usb 1-1: Manufacturer: syz [ 409.165797][ T5901] usb 1-1: SerialNumber: syz [ 409.171130][ T5901] usb 1-1: config 0 descriptor?? [ 409.178708][ T8742] IPVS: using max 10 ests per chain, 24000 per kthread [ 409.182544][ T5901] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 409.182590][ T5901] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 409.799536][ T5901] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 410.505851][ T5901] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 410.505885][ T5901] em28xx 1-1:0.0: board has no eeprom [ 410.618322][ T5901] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 410.618367][ T5901] em28xx 1-1:0.0: dvb set to bulk mode. [ 410.620184][ T45] em28xx 1-1:0.0: Binding DVB extension [ 410.763713][ T5901] usb 1-1: USB disconnect, device number 10 [ 410.769940][ T5901] em28xx 1-1:0.0: Disconnecting em28xx [ 410.797880][ T45] em28xx 1-1:0.0: Registering input extension [ 410.858955][ T5901] em28xx 1-1:0.0: Closing input extension [ 411.271806][ T5901] em28xx 1-1:0.0: Freeing device [ 412.537912][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 412.798989][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 412.837175][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 412.837221][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.837237][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 412.837254][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.837270][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.837302][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 412.837318][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.143537][ T9] usb 1-1: usb_control_msg returned -32 [ 413.143593][ T9] usbtmc 1-1:16.0: can't read capabilities [ 413.562327][ T8773] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 415.138436][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 415.234764][ T45] usb 1-1: USB disconnect, device number 11 [ 415.318885][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 415.318908][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 415.322149][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 415.322172][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 415.322186][ T9] usb 3-1: Product: syz [ 415.322196][ T9] usb 3-1: Manufacturer: syz [ 415.322206][ T9] usb 3-1: SerialNumber: syz [ 415.344780][ T9] usb 3-1: config 0 descriptor?? [ 415.572874][ T9] usb 3-1: selecting invalid altsetting 0 [ 416.108602][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 416.258609][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 416.260616][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.263080][ T45] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.263101][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.263163][ T45] usb 5-1: Product: syz [ 416.263175][ T45] usb 5-1: Manufacturer: syz [ 416.263185][ T45] usb 5-1: SerialNumber: syz [ 416.434957][ T45] usb 5-1: config 0 descriptor?? [ 417.032182][ T45] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 417.032218][ T45] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 417.186974][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 417.558824][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 417.570184][ T45] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 417.790067][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 417.797330][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.797376][ T9] usb 2-1: config 0 has no interface number 0 [ 417.840384][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 417.840416][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.840437][ T9] usb 2-1: Product: syz [ 417.840452][ T9] usb 2-1: Manufacturer: syz [ 417.840467][ T9] usb 2-1: SerialNumber: syz [ 417.903455][ T9] usb 2-1: config 0 descriptor?? [ 417.923436][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 417.923475][ T9] usb 2-1: selecting invalid altsetting 1 [ 417.923493][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 417.965384][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 417.965906][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 417.965964][ T9] usb 2-1: media controller created [ 418.004734][ T45] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 418.004783][ T45] em28xx 5-1:0.0: board has no eeprom [ 418.037158][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.104831][ T8795] em28xx 5-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 419.148367][ T45] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 419.148397][ T45] em28xx 5-1:0.0: dvb set to bulk mode. [ 419.149936][ T5824] em28xx 5-1:0.0: Binding DVB extension [ 419.219329][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 419.219370][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 419.430447][ T45] usb 5-1: USB disconnect, device number 9 [ 419.432112][ T45] em28xx 5-1:0.0: Disconnecting em28xx [ 419.571221][ T5824] em28xx 5-1:0.0: Registering input extension [ 419.603530][ T45] em28xx 5-1:0.0: Closing input extension [ 419.776399][ T45] em28xx 5-1:0.0: Freeing device [ 420.637164][ T9] usb 2-1: USB disconnect, device number 21 [ 420.938476][ T5824] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 421.195995][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 421.260589][ T8828] netlink: 80 bytes leftover after parsing attributes in process `syz.1.819'. [ 421.308452][ T5824] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 421.308524][ T5824] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.308549][ T5824] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.308575][ T5824] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.308599][ T5824] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.308644][ T5824] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.308667][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.438397][ T5924] usb 3-1: USB disconnect, device number 19 [ 422.326348][ T5824] usb 4-1: usb_control_msg returned -32 [ 422.326402][ T5824] usbtmc 4-1:16.0: can't read capabilities [ 422.678380][ T8829] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 422.898292][ T8829] usb 2-1: Using ep0 maxpacket: 16 [ 422.903965][ T8829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 422.927136][ T8829] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 422.927180][ T8829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.927201][ T8829] usb 2-1: Product: syz [ 422.927217][ T8829] usb 2-1: Manufacturer: syz [ 422.927231][ T8829] usb 2-1: SerialNumber: syz [ 423.035595][ T8823] usbtmc 4-1:16.0: usb_bulk_msg returned -71 [ 423.691764][ T8829] usb 2-1: config 0 descriptor?? [ 423.725562][ T8829] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 423.725599][ T8829] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 424.421951][ T8829] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 424.831852][ T8829] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 424.831876][ T8829] em28xx 2-1:0.0: board has no eeprom [ 424.898479][ T8829] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 424.898509][ T8829] em28xx 2-1:0.0: dvb set to bulk mode. [ 424.906806][ T8829] usb 2-1: USB disconnect, device number 22 [ 424.906852][ T5924] em28xx 2-1:0.0: Binding DVB extension [ 424.963446][ T8829] em28xx 2-1:0.0: Disconnecting em28xx [ 424.983170][ T5901] usb 4-1: USB disconnect, device number 33 [ 425.403618][ T5924] em28xx 2-1:0.0: Registering input extension [ 425.403880][ T8829] em28xx 2-1:0.0: Closing input extension [ 425.491439][ T8829] em28xx 2-1:0.0: Freeing device [ 426.188963][ T8829] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 426.358056][ T8829] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 426.358080][ T8829] usb 5-1: config 0 interface 0 has no altsetting 0 [ 426.530361][ T8829] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.530393][ T8829] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 426.530414][ T8829] usb 5-1: Product: syz [ 426.530429][ T8829] usb 5-1: Manufacturer: syz [ 426.530443][ T8829] usb 5-1: SerialNumber: syz [ 426.535121][ T8829] usb 5-1: config 0 descriptor?? [ 426.585896][ T8829] usb 5-1: selecting invalid altsetting 0 [ 427.189245][ T8829] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 427.484623][ T8829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.484646][ T8829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.484661][ T8829] usb 4-1: Product: syz [ 427.484671][ T8829] usb 4-1: Manufacturer: syz [ 427.484681][ T8829] usb 4-1: SerialNumber: syz [ 427.564439][ T8829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.979489][ T5924] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.123544][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 429.329686][ T5924] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 429.333533][ T5924] ath9k_htc: Failed to initialize the device [ 429.380206][ T8829] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 429.397591][ T5924] usb 4-1: ath9k_htc: USB layer deinitialized [ 429.565884][ T8829] usb 2-1: Using ep0 maxpacket: 8 [ 429.580377][ T8829] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 429.580513][ T8829] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.580539][ T8829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.580564][ T8829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.580590][ T8829] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.580706][ T8829] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 429.580731][ T8829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.897112][ T8829] usb 2-1: usb_control_msg returned -32 [ 429.897246][ T8829] usbtmc 2-1:16.0: can't read capabilities [ 430.328565][ T8829] usb 4-1: USB disconnect, device number 34 [ 430.473939][ T8897] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 432.410191][ T10] usb 5-1: USB disconnect, device number 10 [ 432.647163][ T1245] usb 2-1: USB disconnect, device number 23 [ 433.017801][ T8912] fuse: Bad value for 'group_id' [ 433.017822][ T8912] fuse: Bad value for 'group_id' [ 434.187630][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 437.248291][ T5901] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 437.448275][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 437.468354][ T5901] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 437.468427][ T5901] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.468451][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.468477][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.468504][ T5901] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.468549][ T5901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.468572][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.907705][ T5901] usb 5-1: usb_control_msg returned -32 [ 437.907762][ T5901] usbtmc 5-1:16.0: can't read capabilities [ 440.184093][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 440.753599][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.865'. [ 440.753691][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.865'. [ 440.753705][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 440.790239][ T8976] Bluetooth: MGMT ver 1.23 [ 441.880364][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.569821][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.312524][ T8999] tipc: Started in network mode [ 443.312576][ T8999] tipc: Node identity 320c2fcdb889, cluster identity 4711 [ 443.312814][ T8999] tipc: Enabled bearer , priority 0 [ 443.313778][ T8999] syzkaller0: entered promiscuous mode [ 443.313804][ T8999] syzkaller0: entered allmulticast mode [ 443.643328][ T9004] tipc: Resetting bearer [ 443.737115][ T8998] tipc: Resetting bearer [ 443.753414][ T5824] usb 5-1: USB disconnect, device number 11 [ 443.911526][ T10] libceph: connect (1)[c::]:6789 error -101 [ 443.912040][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 443.976052][ T10] libceph: connect (1)[c::]:6789 error -101 [ 443.985491][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 444.201128][ T8998] tipc: Disabling bearer [ 444.243244][ T10] libceph: connect (1)[c::]:6789 error -101 [ 444.243481][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 444.431401][ T9] tipc: Node number set to 2323984333 [ 444.682079][ T9008] ceph: No mds server is up or the cluster is laggy [ 444.749406][ T9] libceph: connect (1)[c::]:6789 error -101 [ 444.749652][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 444.798332][ T5924] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 444.969453][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 444.975520][ T5924] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 444.975551][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.975572][ T5924] usb 3-1: Product: syz [ 444.975587][ T5924] usb 3-1: Manufacturer: syz [ 444.975602][ T5924] usb 3-1: SerialNumber: syz [ 445.291580][ T5924] r8152-cfgselector 3-1: Unknown version 0x0000 [ 445.291601][ T5924] r8152-cfgselector 3-1: config 0 descriptor?? [ 445.456027][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.563116][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.564151][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.022537][ T5924] r8152-cfgselector 3-1: Unknown version 0x0000 [ 446.023307][ T5924] r8152-cfgselector 3-1: bad CDC descriptors [ 446.043281][ T5924] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 447.153465][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.244560][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.688320][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 448.927575][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 448.933216][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 448.933278][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.933294][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.933311][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.933327][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.933356][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.933371][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.258557][ T10] usb 1-1: usb_control_msg returned -32 [ 449.258609][ T10] usbtmc 1-1:16.0: can't read capabilities [ 449.781847][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.962689][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.471119][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.716575][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.795502][ T9059] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 452.014217][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x7 [ 452.014264][ T10] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max [ 452.020097][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.020151][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.020190][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.020220][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.020363][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.020393][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.020423][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.020454][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.020483][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 452.143595][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 452.377908][ T9077] fido_id[9077]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 454.856177][ T1245] usb 1-1: USB disconnect, device number 12 [ 457.041914][ T5901] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 457.728383][ T5901] usb 2-1: device descriptor read/64, error -71 [ 457.749142][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.912'. [ 457.978436][ T5901] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 458.248394][ T5901] usb 2-1: device descriptor read/64, error -71 [ 458.858286][ T5901] usb usb2-port1: attempt power cycle [ 459.238298][ T5901] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 459.269429][ T5901] usb 2-1: device descriptor read/8, error -71 [ 459.522362][ T5901] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 459.610328][ T5901] usb 2-1: device descriptor read/8, error -71 [ 459.728979][ T5901] usb usb2-port1: unable to enumerate USB device [ 460.188948][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 461.235085][ T9183] usb usb8: usbfs: process 9183 (syz.2.931) did not claim interface 0 before use [ 461.596045][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.592304][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.830940][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.949673][ T9193] netlink: 'syz.1.933': attribute type 20 has an invalid length. [ 462.982556][ T9193] block nbd0: Attempted send on invalid socket [ 462.982663][ T9193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 468.949420][ T9255] ucma_write: process 578 (syz.3.951) changed security contexts after opening file descriptor, this is not allowed. [ 470.949998][ T5901] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 471.098345][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 471.101474][ T5901] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 471.104153][ T5901] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 471.104173][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.104187][ T5901] usb 4-1: Product: syz [ 471.104197][ T5901] usb 4-1: Manufacturer: syz [ 471.104207][ T5901] usb 4-1: SerialNumber: syz [ 471.165843][ T5901] usb 4-1: config 0 descriptor?? [ 471.215820][ T5901] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 471.215918][ T5901] usb 4-1: setting power ON [ 471.215939][ T5901] dvb-usb: bulk message failed: -22 (2/0) [ 471.255726][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.256510][ T5901] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 471.256566][ T5901] usb 4-1: media controller created [ 471.336675][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.396005][ T5901] usb 4-1: selecting invalid altsetting 6 [ 471.396029][ T5901] usb 4-1: digital interface selection failed (-22) [ 471.396045][ T5901] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 471.429268][ T5901] usb 4-1: setting power OFF [ 471.429295][ T5901] dvb-usb: bulk message failed: -22 (2/0) [ 471.429313][ T5901] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 471.429326][ T5901] (NULL device *): no alternate interface [ 471.743303][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.779406][ T5901] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 472.767586][ T9282] input: syz1 as /devices/virtual/input/input24 [ 472.815818][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.828364][ T5901] usb 4-1: USB disconnect, device number 35 [ 474.754971][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.554383][ T5837] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 478.888426][ T5824] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 479.048323][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 479.078365][ T5824] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 479.078396][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.078417][ T5824] usb 2-1: Product: syz [ 479.078432][ T5824] usb 2-1: Manufacturer: syz [ 479.078446][ T5824] usb 2-1: SerialNumber: syz [ 479.188271][ T5924] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 479.237867][ T5824] r8152-cfgselector 2-1: Unknown version 0x0000 [ 479.237887][ T5824] r8152-cfgselector 2-1: config 0 descriptor?? [ 479.378312][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 479.422572][ T5924] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 479.445894][ T5924] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 479.445927][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.446055][ T5924] usb 3-1: Product: syz [ 479.446072][ T5924] usb 3-1: Manufacturer: syz [ 479.446087][ T5924] usb 3-1: SerialNumber: syz [ 479.512401][ T5924] usb 3-1: config 0 descriptor?? [ 479.561164][ T5924] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 479.561536][ T5924] usb 3-1: setting power ON [ 479.561560][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 479.652480][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 479.654166][ T5924] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 479.654464][ T5924] usb 3-1: media controller created [ 479.685795][ T5824] r8152-cfgselector 2-1: Unknown version 0x0000 [ 479.686365][ T5824] r8152-cfgselector 2-1: bad CDC descriptors [ 479.715171][ T5824] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 479.786474][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.836933][ T5924] usb 3-1: selecting invalid altsetting 6 [ 479.836958][ T5924] usb 3-1: digital interface selection failed (-22) [ 479.836973][ T5924] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 479.837853][ T5924] usb 3-1: setting power OFF [ 479.837874][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 479.837892][ T5924] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 479.837906][ T5924] (NULL device *): no alternate interface [ 479.930701][ T5924] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 479.962552][ T5924] usb 3-1: USB disconnect, device number 21 [ 483.663242][ T9361] tipc: Enabled bearer , priority 10 [ 484.664820][ T5924] tipc: Node number set to 1529710335 [ 485.248464][ T5924] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 485.406449][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 485.414356][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 485.435460][ T5924] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 485.435483][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 485.435497][ T5924] usb 4-1: Product: syz [ 485.435508][ T5924] usb 4-1: Manufacturer: syz [ 485.435518][ T5924] usb 4-1: SerialNumber: syz [ 485.490056][ T5924] usb 4-1: config 0 descriptor?? [ 485.499375][ T9370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.618726][ T5924] usb 4-1: USB disconnect, device number 36 [ 490.001115][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.997'. [ 490.001148][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.997'. [ 490.001165][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 491.600915][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 491.611210][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 491.612527][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 491.615386][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 491.616648][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 491.802986][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.634375][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.555394][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.699151][ T5843] Bluetooth: hci5: command tx timeout [ 494.387187][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.122239][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.422872][ T9412] chnl_net:caif_netlink_parms(): no params data found [ 495.779035][ T5843] Bluetooth: hci5: command tx timeout [ 496.218266][ T8829] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 496.551521][ T8829] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 496.551555][ T8829] usb 4-1: config 0 interface 0 has no altsetting 0 [ 496.658080][ T8829] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 496.658104][ T8829] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 496.675692][ T8829] usb 4-1: Product: syz [ 496.675706][ T8829] usb 4-1: Manufacturer: syz [ 496.675716][ T8829] usb 4-1: SerialNumber: syz [ 496.695605][ T8829] usb 4-1: config 0 descriptor?? [ 496.731159][ T8829] usb 4-1: selecting invalid altsetting 0 [ 497.898927][ T5843] Bluetooth: hci5: command tx timeout [ 498.008120][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.293742][ T9483] [ 498.293754][ T9483] ====================================================== [ 498.293760][ T9483] WARNING: possible circular locking dependency detected [ 498.293775][ T9483] syzkaller #0 Not tainted [ 498.293783][ T9483] ------------------------------------------------------ [ 498.293789][ T9483] syz.2.1016/9483 is trying to acquire lock: [ 498.293797][ T9483] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 498.293847][ T9483] [ 498.293847][ T9483] but task is already holding lock: [ 498.293852][ T9483] ffff8881427383a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 498.293887][ T9483] [ 498.293887][ T9483] which lock already depends on the new lock. [ 498.293887][ T9483] [ 498.293892][ T9483] [ 498.293892][ T9483] the existing dependency chain (in reverse order) is: [ 498.293898][ T9483] [ 498.293898][ T9483] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 498.293918][ T9483] lock_acquire+0x120/0x360 [ 498.293937][ T9483] rt_spin_lock+0x88/0x2c0 [ 498.293950][ T9483] drm_crtc_vblank_on_config+0x2cd/0x860 [ 498.293968][ T9483] drm_crtc_vblank_on+0x88/0xc0 [ 498.293983][ T9483] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 498.294001][ T9483] vkms_atomic_commit_tail+0x69/0x210 [ 498.294017][ T9483] commit_tail+0x281/0x3a0 [ 498.294033][ T9483] drm_atomic_helper_commit+0xa6b/0xb10 [ 498.294051][ T9483] drm_atomic_commit+0x262/0x2c0 [ 498.294064][ T9483] drm_client_modeset_commit_atomic+0x620/0x760 [ 498.294088][ T9483] drm_client_modeset_commit_locked+0xce/0x4d0 [ 498.294111][ T9483] drm_client_modeset_commit+0x4a/0x70 [ 498.294133][ T9483] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 498.294150][ T9483] drm_fb_helper_set_par+0xaf/0x100 [ 498.294166][ T9483] fbcon_init+0x1255/0x2370 [ 498.294185][ T9483] visual_init+0x2ef/0x650 [ 498.294202][ T9483] do_bind_con_driver+0x890/0xf70 [ 498.294220][ T9483] do_take_over_console+0x899/0xa10 [ 498.294239][ T9483] do_fbcon_takeover+0x118/0x200 [ 498.294258][ T9483] fbcon_fb_registered+0x35e/0x610 [ 498.294289][ T9483] register_framebuffer+0x70f/0x890 [ 498.294315][ T9483] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 498.294334][ T9483] drm_fbdev_client_hotplug+0x16f/0x230 [ 498.294351][ T9483] drm_client_register+0x16f/0x210 [ 498.294370][ T9483] drm_fbdev_client_setup+0x19f/0x3f0 [ 498.294387][ T9483] drm_client_setup+0x10a/0x230 [ 498.294421][ T9483] vkms_init+0x3e0/0x4b0 [ 498.294439][ T9483] do_one_initcall+0x233/0x820 [ 498.294452][ T9483] do_initcall_level+0x104/0x190 [ 498.294474][ T9483] do_initcalls+0x59/0xa0 [ 498.294494][ T9483] kernel_init_freeable+0x334/0x4b0 [ 498.294516][ T9483] kernel_init+0x1d/0x1d0 [ 498.294527][ T9483] ret_from_fork+0x3fc/0x770 [ 498.294546][ T9483] ret_from_fork_asm+0x1a/0x30 [ 498.294559][ T9483] [ 498.294559][ T9483] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 498.294579][ T9483] lock_acquire+0x120/0x360 [ 498.294596][ T9483] rt_spin_lock+0x88/0x2c0 [ 498.294609][ T9483] vblank_disable_fn+0x72/0x190 [ 498.294622][ T9483] call_timer_fn+0x17b/0x5f0 [ 498.294640][ T9483] __run_timer_base+0x648/0x970 [ 498.294656][ T9483] run_timer_softirq+0xb7/0x180 [ 498.294672][ T9483] handle_softirqs+0x22c/0x710 [ 498.294689][ T9483] run_ktimerd+0xcf/0x190 [ 498.294708][ T9483] smpboot_thread_fn+0x542/0xa60 [ 498.294725][ T9483] kthread+0x711/0x8a0 [ 498.294745][ T9483] ret_from_fork+0x3fc/0x770 [ 498.294762][ T9483] ret_from_fork_asm+0x1a/0x30 [ 498.294775][ T9483] [ 498.294775][ T9483] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 498.294794][ T9483] lock_acquire+0x120/0x360 [ 498.294812][ T9483] call_timer_fn+0xdb/0x5f0 [ 498.294830][ T9483] __run_timer_base+0x648/0x970 [ 498.294845][ T9483] run_timer_softirq+0xb7/0x180 [ 498.294861][ T9483] handle_softirqs+0x22c/0x710 [ 498.294878][ T9483] run_ktimerd+0xcf/0x190 [ 498.294897][ T9483] smpboot_thread_fn+0x542/0xa60 [ 498.294913][ T9483] kthread+0x711/0x8a0 [ 498.294933][ T9483] ret_from_fork+0x3fc/0x770 [ 498.294950][ T9483] ret_from_fork_asm+0x1a/0x30 [ 498.294964][ T9483] [ 498.294964][ T9483] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 498.294983][ T9483] lock_acquire+0x120/0x360 [ 498.295000][ T9483] rt_spin_lock+0x88/0x2c0 [ 498.295012][ T9483] __run_timer_base+0x114/0x970 [ 498.295027][ T9483] run_timer_softirq+0x67/0x180 [ 498.295043][ T9483] handle_softirqs+0x22c/0x710 [ 498.295062][ T9483] run_ktimerd+0xcf/0x190 [ 498.295081][ T9483] smpboot_thread_fn+0x542/0xa60 [ 498.295098][ T9483] kthread+0x711/0x8a0 [ 498.295118][ T9483] ret_from_fork+0x3fc/0x770 [ 498.295136][ T9483] ret_from_fork_asm+0x1a/0x30 [ 498.295149][ T9483] [ 498.295149][ T9483] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 498.295168][ T9483] validate_chain+0xb9b/0x2140 [ 498.295189][ T9483] __lock_acquire+0xab9/0xd20 [ 498.295207][ T9483] reacquire_held_locks+0x127/0x1d0 [ 498.295229][ T9483] lock_release+0x1b4/0x3e0 [ 498.295247][ T9483] __local_bh_enable_ip+0x10c/0x270 [ 498.295264][ T9483] hrtimer_cancel+0x39/0x60 [ 498.295284][ T9483] drm_vblank_disable_and_save+0x1bc/0x380 [ 498.295306][ T9483] drm_crtc_vblank_off+0x22e/0x820 [ 498.295322][ T9483] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 498.295340][ T9483] vkms_atomic_commit_tail+0x51/0x210 [ 498.295356][ T9483] commit_tail+0x281/0x3a0 [ 498.295371][ T9483] drm_atomic_helper_commit+0xa6b/0xb10 [ 498.295387][ T9483] drm_atomic_commit+0x262/0x2c0 [ 498.295400][ T9483] drm_atomic_helper_set_config+0xe2/0x160 [ 498.295418][ T9483] drm_mode_setcrtc+0x9a4/0x1c50 [ 498.295438][ T9483] drm_ioctl_kernel+0x2d2/0x3a0 [ 498.295457][ T9483] drm_ioctl+0x685/0xb20 [ 498.295475][ T9483] __se_sys_ioctl+0xfc/0x170 [ 498.295490][ T9483] do_syscall_64+0xfa/0x3b0 [ 498.295509][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.295524][ T9483] [ 498.295524][ T9483] other info that might help us debug this: [ 498.295524][ T9483] [ 498.295529][ T9483] Chain exists of: [ 498.295529][ T9483] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 498.295529][ T9483] [ 498.295553][ T9483] Possible unsafe locking scenario: [ 498.295553][ T9483] [ 498.295557][ T9483] CPU0 CPU1 [ 498.295561][ T9483] ---- ---- [ 498.295565][ T9483] lock(&dev->vblank_time_lock); [ 498.295576][ T9483] lock(&dev->vbl_lock); [ 498.295587][ T9483] lock(&dev->vblank_time_lock); [ 498.295598][ T9483] lock((softirq_ctrl.lock)); [ 498.295607][ T9483] [ 498.295607][ T9483] *** DEADLOCK *** [ 498.295607][ T9483] [ 498.295612][ T9483] 8 locks held by syz.2.1016/9483: [ 498.295621][ T9483] #0: ffffc9000310fb20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50 [ 498.295662][ T9483] #1: ffffc9000310fb48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50 [ 498.295703][ T9483] #2: ffff8881427384b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 498.295740][ T9483] #3: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 498.295773][ T9483] #4: ffff888142738420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 498.295809][ T9483] #5: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 498.295842][ T9483] #6: ffff8881427383a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 498.295878][ T9483] #7: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 498.295911][ T9483] [ 498.295911][ T9483] stack backtrace: [ 498.295934][ T9483] CPU: 0 UID: 0 PID: 9483 Comm: syz.2.1016 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.295952][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.295968][ T9483] Call Trace: [ 498.295974][ T9483] [ 498.295981][ T9483] dump_stack_lvl+0x189/0x250 [ 498.296005][ T9483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.296028][ T9483] ? __pfx__printk+0x10/0x10 [ 498.296045][ T9483] ? print_lock_name+0xde/0x100 [ 498.296079][ T9483] print_circular_bug+0x2ee/0x310 [ 498.296096][ T9483] check_noncircular+0x134/0x160 [ 498.296122][ T9483] validate_chain+0xb9b/0x2140 [ 498.296147][ T9483] ? __lock_acquire+0xab9/0xd20 [ 498.296170][ T9483] ? do_raw_spin_lock+0x121/0x290 [ 498.296190][ T9483] __lock_acquire+0xab9/0xd20 [ 498.296212][ T9483] reacquire_held_locks+0x127/0x1d0 [ 498.296236][ T9483] ? __local_bh_disable_ip+0x264/0x400 [ 498.296257][ T9483] lock_release+0x1b4/0x3e0 [ 498.296277][ T9483] ? __local_bh_enable_ip+0x100/0x270 [ 498.296307][ T9483] __local_bh_enable_ip+0x10c/0x270 [ 498.296326][ T9483] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 498.296347][ T9483] ? rt_spin_unlock+0x65/0x80 [ 498.296364][ T9483] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 498.296387][ T9483] ? hrtimer_cancel_wait_running+0x142/0x180 [ 498.296411][ T9483] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 498.296431][ T9483] hrtimer_cancel+0x39/0x60 [ 498.296453][ T9483] drm_vblank_disable_and_save+0x1bc/0x380 [ 498.296470][ T9483] drm_crtc_vblank_off+0x22e/0x820 [ 498.296489][ T9483] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 498.296513][ T9483] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 498.296533][ T9483] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 498.296557][ T9483] vkms_atomic_commit_tail+0x51/0x210 [ 498.296573][ T9483] ? read_tsc+0x9/0x20 [ 498.296590][ T9483] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 498.296607][ T9483] commit_tail+0x281/0x3a0 [ 498.296627][ T9483] drm_atomic_helper_commit+0xa6b/0xb10 [ 498.296647][ T9483] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 498.296665][ T9483] drm_atomic_commit+0x262/0x2c0 [ 498.296680][ T9483] ? __pfx_drm_atomic_commit+0x10/0x10 [ 498.296694][ T9483] ? __pfx___drm_printfn_info+0x10/0x10 [ 498.296722][ T9483] ? drm_atomic_state_init+0x231/0x310 [ 498.296748][ T9483] drm_atomic_helper_set_config+0xe2/0x160 [ 498.296768][ T9483] drm_mode_setcrtc+0x9a4/0x1c50 [ 498.296799][ T9483] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 498.296819][ T9483] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.296840][ T9483] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 498.296871][ T9483] ? rt_spin_unlock+0x65/0x80 [ 498.296887][ T9483] ? drm_is_current_master+0x1a2/0x210 [ 498.296906][ T9483] drm_ioctl_kernel+0x2d2/0x3a0 [ 498.296927][ T9483] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 498.296949][ T9483] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 498.296973][ T9483] drm_ioctl+0x685/0xb20 [ 498.296992][ T9483] ? smk_tskacc+0x2fc/0x370 [ 498.297016][ T9483] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 498.297039][ T9483] ? __pfx_drm_ioctl+0x10/0x10 [ 498.297066][ T9483] ? __fget_files+0x2a/0x420 [ 498.297089][ T9483] ? bpf_lsm_file_ioctl+0x9/0x20 [ 498.297107][ T9483] ? __pfx_drm_ioctl+0x10/0x10 [ 498.297127][ T9483] __se_sys_ioctl+0xfc/0x170 [ 498.297144][ T9483] do_syscall_64+0xfa/0x3b0 [ 498.297165][ T9483] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.297184][ T9483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.297199][ T9483] ? clear_bhb_loop+0x60/0xb0 [ 498.297216][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.297234][ T9483] RIP: 0033:0x7fd3e68cebe9 [ 498.297251][ T9483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.297265][ T9483] RSP: 002b:00007fd3e4aec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.297281][ T9483] RAX: ffffffffffffffda RBX: 00007fd3e6af6180 RCX: 00007fd3e68cebe9 [ 498.297293][ T9483] RDX: 0000200000000740 RSI: 00000000c06864a2 RDI: 0000000000000005 [ 498.297308][ T9483] RBP: 00007fd3e6951e19 R08: 0000000000000000 R09: 0000000000000000 [ 498.297318][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.297327][ T9483] R13: 00007fd3e6af6218 R14: 00007fd3e6af6180 R15: 00007fffce194138 [ 498.297345][ T9483] [ 499.939651][ T5843] Bluetooth: hci5: command tx timeout [ 501.382571][ T8829] usb 4-1: USB disconnect, device number 37 [ 502.398522][ T2240] bridge_slave_1: left allmulticast mode [ 502.398549][ T2240] bridge_slave_1: left promiscuous mode [ 502.398728][ T2240] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.479608][ T2240] bridge_slave_0: left allmulticast mode [ 502.479636][ T2240] bridge_slave_0: left promiscuous mode [ 502.479815][ T2240] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.132845][ T2240] bond1 (unregistering): (slave gretap1): Releasing active interface [ 504.179679][ T2240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.243027][ T2240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.259923][ T2240] bond0 (unregistering): Released all slaves [ 504.266664][ T2240] bond1 (unregistering): Released all slaves [ 505.219739][ T2240] hsr_slave_0: left promiscuous mode [ 505.239237][ T2240] hsr_slave_1: left promiscuous mode [ 505.239944][ T2240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.290415][ T2240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.980874][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.980932][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.188727][ T2240] team0 (unregistering): Port device team_slave_1 removed [ 507.402941][ T2240] team0 (unregistering): Port device team_slave_0 removed