last executing test programs: 3m51.763091575s ago: executing program 4 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x0, 0x2a, 0x0, 0x1}, 0x28) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x4c, 0x3, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0xc, "09904b30ad2bb70fdad1"}, @timestamp_addr={0x44, 0xc, 0xc, 0x1, 0xf, [{@local, 0x8001}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xc, 0xf989, "0b17cd5acd25bc51"}]}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 3m50.431335971s ago: executing program 4 (id=468): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000000000002, 0x141600) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x3) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) 3m50.357050294s ago: executing program 1 (id=469): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='vegas', 0x5) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)=@ax25={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000400)="8b6b8622d5b5d35c19178f4e68a139455ab25f6fc1f8f3d7d6581c34be24734e55a4136ed0bca48bf27ffba5c175611a9642f14d08d85f71bf67bbf5d27a6e98af269c1781f2ea04952f6d6f19cde1c4db9276e46efc12318bb6ed4c8ff3cf6f2411b25adf8bef49e67d45de3eee3997e7ac8a5d40f05ab18011e9b6134b67c11dc0ea6946b0d9c7ae0b3f95634d0b020c3eac171a8496a79fd4049476f48581581329f47b530d4a3b82ce2b8188e69f6503b312e2de0bb92aca4c56eb312c925d340d3cb021d093617cba4166165b1c4ce6431ad0785482f22537cd1acaf2a244600b319f0b3ecc7f58c215c44243ab7ed3d6d5f48b4006", 0xf8}], 0x1}, 0x40) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 3m50.315629266s ago: executing program 4 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 3m48.882549287s ago: executing program 4 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 3m48.851378809s ago: executing program 1 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m48.707995356s ago: executing program 4 (id=480): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "d4da3d32", {0x3, 0x2, 0x0, 0x3, 0x8, 0x7, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44000) 3m48.610125041s ago: executing program 1 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xc9, 0xa0, 0x4c, 0x10, 0x5fc9, 0x61, 0x7609, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x6, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0xfe, 0x0, 0xb4, 0xb3, 0x12, 0x3}}]}}]}}, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 3m48.22746276s ago: executing program 4 (id=486): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 3m48.079766396s ago: executing program 32 (id=486): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 3m46.81530654s ago: executing program 1 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 3m46.653849957s ago: executing program 1 (id=495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc010000000000000000000000000000ff0100000000000000000000000000014e22ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000002b000000ffffffff000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000008fcffffffffffffff00000000000000000000000000000000080000000000000000084000000000000000000000000000000400000000000000000000000000000000000000000000073500000a0004002c00000000000000580002"], 0x194}}, 0x4050) 3m46.19094448s ago: executing program 1 (id=499): r0 = syz_usb_connect(0x5, 0x166, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0xae, 0xca, 0x46, 0x40, 0xbfd, 0x111, 0x2bf4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x154, 0x1, 0x8c, 0x80, 0xd0, 0x6, "", [{{0x9, 0x4, 0xc0, 0x3, 0x4, 0xfb, 0xb7, 0xe6, 0x4, [@hid_hid={0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x84a}}], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0x2, 0x80, 0x7f, [@generic={0x23, 0x9, "866c54a8c72c120471f864e221fcfea1b74f012f9d214c39b0c009968961b59fe5"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x80, 0x5, 0x3, [@generic={0x70, 0x21, "b5658d6e56781e30e6fe13bdb765500975883a388ebfe0d5683f9a333d304ddfde40a48c212b05b687d4ee0a5c62ae20dac8bcbc1d8e3901fe4cf7c888a25c932980fc4f2b863eb6380f2b1aab92231f76a4ee46ae071698cd2a19aa1c98c360faaee0923f366858ff2a58a1cd56"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x55, 0x9}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x6, 0x7, 0x2, [@generic={0x2, 0xc}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x1, 0x4, 0x4, [@generic={0x79, 0x1, "5f8ad84fa3b1309b1cab81bad9092b240fb4a05109e678980143e2894409eba54c9b4387b805a1bd4c4b0581ba3028e5ed4d553d75087095414491fcfafab353bb80697186ed575acf1f5d815e7a90f682200795979e32fd66d7f63f39da74f50ff7b74f11b27a149242284296191d88cd84ee48d75c22"}]}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x80, 0x7, 0xff, 0x0, 0x5}, 0x3a, &(0x7f0000000100)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0x0, 0xa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "123530d43d32f259e99d490812e88fa8"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b6f9e76c3111a9ce3ee7e2438d5791af"}]}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f00000005c0)={0x40, 0xb, 0xde, {0xde, 0x31, "e35b6086373e65d15c5a335ae1239d8be987dd0170fcd4c2e09eea4f2d6738b8d5181a251476983d57f683dde8bb81c142cb6ae645c0f6fb8f582af7bf08c684621e680e409637508b9e55e87ce573b24818861eaa0a55868f4b802c30868ceff8d0c4dd22d18b29bb13885802f9cfc0b698f7412fc37f7e6123ed46f6bd4ce6ae71bc086eb276c827e8a53980eb92f0f2cc370cf5aded8a9c5513b271ea064afa6275d07392e17a3f1a2607ce4f8d5d3e722e5bb9f3061eff2a0a4f6b269c1f7ec418bdc9003015ae7930e8c427ee7ce1797dded85cee94c150b757"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="20073f0000004093a57af3f9bc2b6ec34440e395eb000a96e01628c6856d4f4b60d9fafa87261be7f8ae721928b93742580000008f1ccb8470219e013714a6bf58ece23fd7"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x80}}) r1 = syz_io_uring_setup(0x83e, &(0x7f00000000c0)={0x0, 0x811b, 0x400, 0x3, 0x3c4}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = socket(0x2a, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000080)=0x1, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02090000"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r1, 0x4ce1, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001000)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x1) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000840)={0x1, 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xc00c8d2) io_uring_enter(r1, 0x593b, 0x1489, 0x3a, 0x0, 0x0) 3m46.033410738s ago: executing program 33 (id=499): r0 = syz_usb_connect(0x5, 0x166, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0xae, 0xca, 0x46, 0x40, 0xbfd, 0x111, 0x2bf4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x154, 0x1, 0x8c, 0x80, 0xd0, 0x6, "", [{{0x9, 0x4, 0xc0, 0x3, 0x4, 0xfb, 0xb7, 0xe6, 0x4, [@hid_hid={0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x84a}}], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0x2, 0x80, 0x7f, [@generic={0x23, 0x9, "866c54a8c72c120471f864e221fcfea1b74f012f9d214c39b0c009968961b59fe5"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x80, 0x5, 0x3, [@generic={0x70, 0x21, "b5658d6e56781e30e6fe13bdb765500975883a388ebfe0d5683f9a333d304ddfde40a48c212b05b687d4ee0a5c62ae20dac8bcbc1d8e3901fe4cf7c888a25c932980fc4f2b863eb6380f2b1aab92231f76a4ee46ae071698cd2a19aa1c98c360faaee0923f366858ff2a58a1cd56"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x55, 0x9}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x6, 0x7, 0x2, [@generic={0x2, 0xc}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x1, 0x4, 0x4, [@generic={0x79, 0x1, "5f8ad84fa3b1309b1cab81bad9092b240fb4a05109e678980143e2894409eba54c9b4387b805a1bd4c4b0581ba3028e5ed4d553d75087095414491fcfafab353bb80697186ed575acf1f5d815e7a90f682200795979e32fd66d7f63f39da74f50ff7b74f11b27a149242284296191d88cd84ee48d75c22"}]}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x80, 0x7, 0xff, 0x0, 0x5}, 0x3a, &(0x7f0000000100)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0x0, 0xa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "123530d43d32f259e99d490812e88fa8"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b6f9e76c3111a9ce3ee7e2438d5791af"}]}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f00000005c0)={0x40, 0xb, 0xde, {0xde, 0x31, "e35b6086373e65d15c5a335ae1239d8be987dd0170fcd4c2e09eea4f2d6738b8d5181a251476983d57f683dde8bb81c142cb6ae645c0f6fb8f582af7bf08c684621e680e409637508b9e55e87ce573b24818861eaa0a55868f4b802c30868ceff8d0c4dd22d18b29bb13885802f9cfc0b698f7412fc37f7e6123ed46f6bd4ce6ae71bc086eb276c827e8a53980eb92f0f2cc370cf5aded8a9c5513b271ea064afa6275d07392e17a3f1a2607ce4f8d5d3e722e5bb9f3061eff2a0a4f6b269c1f7ec418bdc9003015ae7930e8c427ee7ce1797dded85cee94c150b757"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="20073f0000004093a57af3f9bc2b6ec34440e395eb000a96e01628c6856d4f4b60d9fafa87261be7f8ae721928b93742580000008f1ccb8470219e013714a6bf58ece23fd7"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x80}}) r1 = syz_io_uring_setup(0x83e, &(0x7f00000000c0)={0x0, 0x811b, 0x400, 0x3, 0x3c4}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = socket(0x2a, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000080)=0x1, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02090000"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r1, 0x4ce1, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001000)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x1) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000840)={0x1, 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xc00c8d2) io_uring_enter(r1, 0x593b, 0x1489, 0x3a, 0x0, 0x0) 3m46.010538679s ago: executing program 0 (id=501): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') writev(r0, &(0x7f0000000880)=[{&(0x7f00000000c0)="b9a0a0", 0x3}, {0x0}], 0x2) 3m45.883253036s ago: executing program 0 (id=503): openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xe080, 0x0) 3m45.78875267s ago: executing program 0 (id=505): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m45.411855889s ago: executing program 0 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 3m45.284645945s ago: executing program 0 (id=509): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x22) 3m44.854532206s ago: executing program 0 (id=510): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) r2 = timerfd_create(0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) 3m44.638443397s ago: executing program 34 (id=510): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) r2 = timerfd_create(0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) 9.399169924s ago: executing program 3 (id=1354): r0 = socket(0x2b, 0x80801, 0x1) connect$ax25(r0, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) 8.626839733s ago: executing program 5 (id=1357): openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x10, 0x0, 0x0) 8.381486485s ago: executing program 3 (id=1359): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d1050120001001020301090212"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 7.836318482s ago: executing program 5 (id=1360): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)="981d9e22", 0x4}], 0x1, &(0x7f0000001cc0)=ANY=[], 0xc8}}], 0x2, 0x4000000) 7.791220964s ago: executing program 6 (id=1362): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0xfffffffffffffffe, 0xf, 0x80000002, 0x8000}, 0x0, 0x0) 6.764188865s ago: executing program 5 (id=1364): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 6.706741798s ago: executing program 6 (id=1365): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r3, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r4 = syz_io_uring_setup(0x1e1d, &(0x7f0000000200)={0x0, 0x400086fc, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48ed, 0x0, 0x2, 0x0, 0x0) 6.438072102s ago: executing program 6 (id=1368): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x3, 0x0, 0x0, 0x10, 0x1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x108) getdents64(r2, 0x0, 0x0) 4.629308931s ago: executing program 6 (id=1372): openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x10, 0x0, 0x0) 4.613375491s ago: executing program 2 (id=1373): r0 = socket$l2tp6(0xa, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x4}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2700000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 4.431401221s ago: executing program 2 (id=1375): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0xfffffffffffffffe, 0xf, 0x80000002, 0x8000}, 0x0, 0x0) 3.492760037s ago: executing program 6 (id=1376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) 3.299829806s ago: executing program 7 (id=1377): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x0, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) fstatfs(r4, &(0x7f0000000040)=""/17) 3.23944312s ago: executing program 3 (id=1378): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@host, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={0x0}) 3.2392952s ago: executing program 2 (id=1379): r0 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@dev, @in6=@loopback}}, {{@in=@private}}}, &(0x7f0000000180)=0xffffffffffffffd5) 3.084348927s ago: executing program 6 (id=1380): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) unshare(0x28000600) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xc) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x7a9b00, 0x13d) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x9028, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 2.258721028s ago: executing program 7 (id=1381): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x410, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000640)={0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_restrict_self(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 2.143247764s ago: executing program 2 (id=1382): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x4}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x30520, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYBLOB="894902110156ad92f144f11fb2aa1ef29b3e9e22e47db9f7bce547abe17b85f6374509856a6997ee1c2e687ea6d4c16189bb3dba37210cbd5beba009705a4ab2234b90d7a5518a801afa9ad7028aba03fde6fbda1c943d7ae5189c0ceed791dc134aeb3b32334987945451f01bba34dae84e37196f404731c5e531aed0312910ce447a", @ANYBLOB="0000000000000000000000000000004700000000f11338831b9f703047c1beef5b5f78cf56aae98af3d4dc3ee56064d24f172efb20d4598ca850fc7739111f3ff36e1e294527e511671c531bc0aac8491b8bd1dbd0aa90e7c6c9b6579a7037ca027fea59d13f4d59c9173b888959fe1b5b550ff14983bdc4a01eb19695ac2401775693016f00000100b2b6dfc47f7c2252048e1659c3d68f56e90926fdcbb9bd1d0e48b140f26c9cded9bdf2773409608245fa38485393b5b8c83a3f40fb7c58d3f21c897ac55f82939247690115", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x8d38}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x1, 0x8008, 0x5, 0x1ff, 0x9995, 0x4, 0x9, r5}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040081) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) 2.143015204s ago: executing program 3 (id=1383): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x3, 0x0, 0x0, 0x10, 0x1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x108) getdents64(r2, 0x0, 0x0) 1.970989312s ago: executing program 7 (id=1384): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0) 1.382401871s ago: executing program 5 (id=1385): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) fadvise64(r1, 0x85f5, 0x4000000005, 0x4) 1.171835332s ago: executing program 3 (id=1386): openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x10, 0x0, 0x0) 1.022205579s ago: executing program 5 (id=1387): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1.021636199s ago: executing program 7 (id=1388): r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000180)={0x9, 0x0, 0x8}, 0xc) 819.40371ms ago: executing program 2 (id=1389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x1000}) 819.060419ms ago: executing program 7 (id=1390): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0xfffffffffffffffe, 0xf, 0x80000002, 0x8000}, 0x0, 0x0) 727.021864ms ago: executing program 5 (id=1391): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) socket(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) 725.091864ms ago: executing program 2 (id=1392): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 707.929495ms ago: executing program 7 (id=1393): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145c7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xff, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) 0s ago: executing program 3 (id=1394): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x0, 0x81, 0x8, 'syz0\x00', 0x210002}) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000400)="7a8d7fb069ec7640cea608980fde2e14a55deb1afbb7e9ecf0d631e92e51e956d9e60ee265e8e85b9b3eac709b81cf6a700fa21831d8d4b62794a6ed1033433039ed470170e78b38f308d20f4c0eb5c34af26f90e42fe5e3d6633cd790811915c1b8b9e34aef56fd2f343ab05dbe75029762bf1c999bebb63e3b59e8c34857b98d3f643f6468cea253e19503b8f32cebface5f868f0e791ac98db8bc096d4a05f9531ce7fea02ec0fcdca366b4e2d1f43bbf986951d5872881a3285179872dbca9f58cf5254777f232aa94ae8e0b7ed8f13638ce689909f8a7", 0xd9, 0x4546, 0x0, 0x3, r0}, &(0x7f0000000240)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x292000, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xff, 0x60, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x1, 0xfc, {0x7, 0x25, 0x1, 0xc, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x62, 0xe, {0x7, 0x25, 0x1, 0x0, 0xa0, 0xd}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) kernel console output (not intermixed with test programs): led perfctr wrmsr: 0xc2 data 0x100005081 [ 121.921438][ T4479] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 121.935739][ T5106] kvm [5105]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 121.954713][ T5106] kvm [5105]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x2900 [ 121.964294][ T5106] kvm [5105]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 122.069699][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 122.109828][ T5106] kvm [5105]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x6100 [ 122.132073][ T4479] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.151794][ T4479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.160020][ T4479] usb 4-1: Product: syz [ 122.181494][ T4479] usb 4-1: Manufacturer: syz [ 122.186189][ T4479] usb 4-1: SerialNumber: syz [ 122.192163][ T1325] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.211446][ T1325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.221233][ T1325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.248522][ T1325] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.252572][ T5106] kvm [5105]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x2080 [ 122.262972][ T1325] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.281337][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.285068][ T4479] cdc_mbim 4-1:1.0: skipping garbage [ 122.561859][ T1325] usb 2-1: GET_CAPABILITIES returned 0 [ 122.567503][ T1325] usbtmc 2-1:16.0: can't read capabilities [ 122.891764][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.901586][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.910886][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.920138][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.929480][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.938868][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.948048][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.957413][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.966763][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.975927][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.985026][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.994121][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.003392][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.012788][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.021974][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.031247][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.222615][ T4227] Bluetooth: hci5: command 0x1001 tx timeout [ 123.238219][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 123.248144][ T4227] Bluetooth: hci4: command 0x0405 tx timeout [ 123.615775][ T5121] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.671671][ T4479] cdc_mbim 4-1:1.0: bind() failure [ 123.729068][ T4479] usbtest: probe of 4-1:1.1 failed with error -71 [ 123.754718][ T4479] usb 4-1: USB disconnect, device number 7 [ 123.799677][ T1325] usb 2-1: USB disconnect, device number 4 [ 123.911251][ T5138] tmpfs: Unknown parameter 'usrquota' [ 125.301640][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 125.381109][ T5160] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 125.406464][ T5155] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.067961][ T5165] autofs4:pid:5165:autofs_fill_super: called with bogus options [ 126.147543][ T5168] netlink: 'syz.3.287': attribute type 39 has an invalid length. [ 126.159062][ T5168] netlink: 44 bytes leftover after parsing attributes in process `syz.3.287'. [ 126.181477][ T5168] netlink: 43 bytes leftover after parsing attributes in process `syz.3.287'. [ 126.254043][ T5168] netlink: 'syz.3.287': attribute type 5 has an invalid length. [ 126.262440][ T5168] netlink: 43 bytes leftover after parsing attributes in process `syz.3.287'. [ 126.279632][ T5175] tmpfs: Unknown parameter 'smackfsdef0000' [ 126.684883][ T5190] kAFS: No cell specified [ 129.917916][ T5228] netlink: 'syz.1.302': attribute type 39 has an invalid length. [ 129.971920][ T5228] netlink: 44 bytes leftover after parsing attributes in process `syz.1.302'. [ 130.031705][ T5228] netlink: 43 bytes leftover after parsing attributes in process `syz.1.302'. [ 130.040617][ T5228] netlink: 'syz.1.302': attribute type 5 has an invalid length. [ 130.109502][ T5228] netlink: 43 bytes leftover after parsing attributes in process `syz.1.302'. [ 130.341765][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.373597][ T5245] kvm_set_msr_common: 2 callbacks suppressed [ 130.373615][ T5245] kvm [5244]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 130.752009][ T4233] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 130.811829][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.906857][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.981204][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.171690][ T4233] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 131.774071][ T4233] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 131.782759][ T4233] usb 3-1: Manufacturer: syz [ 131.792180][ T4233] usb 3-1: config 0 descriptor?? [ 132.894239][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900717][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.915062][ T4233] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 132.924682][ T4233] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 132.945483][ T4233] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 133.151538][ T1325] usb 3-1: USB disconnect, device number 5 [ 133.225457][ T5291] fido_id[5291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 133.585190][ T5303] kAFS: No cell specified [ 134.643782][ T5309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.328'. [ 136.941987][ T4227] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.149174][ T5366] netlink: 'syz.2.344': attribute type 39 has an invalid length. [ 137.162805][ T5366] netlink: 44 bytes leftover after parsing attributes in process `syz.2.344'. [ 137.210536][ T5366] netlink: 43 bytes leftover after parsing attributes in process `syz.2.344'. [ 137.220464][ T5366] netlink: 'syz.2.344': attribute type 5 has an invalid length. [ 138.478811][ T5377] hfsplus: unable to find HFS+ superblock [ 138.556204][ T5366] netlink: 43 bytes leftover after parsing attributes in process `syz.2.344'. [ 138.611800][ T4227] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 138.649414][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.668093][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.710592][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 138.811905][ T4227] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 138.829170][ T4227] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 138.881435][ T4227] usb 1-1: Manufacturer: syz [ 138.910291][ T4227] usb 1-1: config 0 descriptor?? [ 139.462098][ T4227] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 139.502226][ T4233] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.574784][ T4227] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 139.954157][ T4227] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 139.971753][ T4233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.011416][ T4233] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.043343][ T4227] usb 1-1: USB disconnect, device number 7 [ 140.210386][ T5401] fido_id[5401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 140.303159][ T4233] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 140.325829][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.351547][ T4233] usb 2-1: Product: syz [ 140.358177][ T4233] usb 2-1: Manufacturer: syz [ 140.378444][ T4233] usb 2-1: SerialNumber: syz [ 140.403211][ T5414] netlink: 'syz.2.355': attribute type 14 has an invalid length. [ 140.431834][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 140.446855][ T5414] bond0: option xmit_hash_policy: invalid value (12) [ 140.723308][ T5426] netlink: 'syz.0.362': attribute type 39 has an invalid length. [ 140.750818][ T5426] netlink: 44 bytes leftover after parsing attributes in process `syz.0.362'. [ 140.788176][ T5426] netlink: 43 bytes leftover after parsing attributes in process `syz.0.362'. [ 140.801795][ T4233] usb 2-1: 0:1 : does not exist [ 140.814756][ T4233] usb 2-1: unit 0 not found! [ 140.816038][ T5426] netlink: 'syz.0.362': attribute type 5 has an invalid length. [ 140.857441][ T4233] usb 2-1: USB disconnect, device number 5 [ 140.935560][ T5426] netlink: 43 bytes leftover after parsing attributes in process `syz.0.362'. [ 141.134402][ T4759] udevd[4759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.397833][ T5444] overlayfs: failed to resolve './file0': -2 [ 142.240084][ T4233] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.354938][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.291485][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 143.364622][ T5472] netlink: 'syz.4.375': attribute type 39 has an invalid length. [ 143.392692][ T5472] netlink: 44 bytes leftover after parsing attributes in process `syz.4.375'. [ 143.420237][ T5472] netlink: 43 bytes leftover after parsing attributes in process `syz.4.375'. [ 143.431713][ T4233] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 143.440108][ T4233] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 143.457032][ T4233] usb 1-1: config 166 has no interface number 0 [ 143.464896][ T4233] usb 1-1: config 166 has no interface number 1 [ 143.471332][ T4233] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 143.471908][ T5472] netlink: 'syz.4.375': attribute type 5 has an invalid length. [ 143.494675][ T4233] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 143.506660][ T5472] netlink: 43 bytes leftover after parsing attributes in process `syz.4.375'. [ 143.516117][ T4233] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 143.527804][ T4233] usb 1-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 143.540728][ T4233] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 143.552963][ T4233] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 143.566593][ T4233] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 143.580346][ T4230] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.592793][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.605303][ T4233] usb 1-1: config 166 interface 177 has no altsetting 0 [ 143.615553][ T4233] usb 1-1: config 166 interface 34 has no altsetting 0 [ 143.627919][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.644252][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 143.772027][ T4230] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 143.788734][ T4230] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 143.805777][ T4230] usb 2-1: Manufacturer: syz [ 143.823202][ T4230] usb 2-1: config 0 descriptor?? [ 143.841871][ T4233] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 143.851270][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.870089][ T4233] usb 1-1: Product: syz [ 143.884960][ T4233] usb 1-1: Manufacturer: syz [ 143.889625][ T4233] usb 1-1: SerialNumber: syz [ 144.813087][ T4233] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 144.863726][ T4230] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 144.894456][ T4230] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 144.897817][ T4230] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 145.002701][ T4233] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 145.077521][ T1325] usb 2-1: USB disconnect, device number 6 [ 145.260710][ T5523] fido_id[5523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.361587][ T4233] usb 1-1: Found UVC 0.00 device syz (0bda:0138) [ 145.368466][ T4233] usb 1-1: No valid video chain found. [ 145.385590][ T4233] usb 1-1: USB disconnect, device number 8 [ 145.391834][ T4229] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 145.752124][ T4229] usb 5-1: config 247 has an invalid interface number: 226 but max is 0 [ 145.782888][ T4229] usb 5-1: config 247 has no interface number 0 [ 145.909867][ T4229] usb 5-1: config 247 interface 226 has no altsetting 0 [ 146.182390][ T4229] usb 5-1: New USB device found, idVendor=0403, idProduct=d012, bcdDevice=57.0a [ 146.224162][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.236290][ T4229] usb 5-1: Product: syz [ 146.241180][ T4229] usb 5-1: Manufacturer: syz [ 146.263901][ T4229] usb 5-1: SerialNumber: syz [ 146.309850][ T5539] netlink: 'syz.2.396': attribute type 39 has an invalid length. [ 146.320176][ T5539] netlink: 44 bytes leftover after parsing attributes in process `syz.2.396'. [ 146.340498][ T5539] netlink: 43 bytes leftover after parsing attributes in process `syz.2.396'. [ 146.350025][ T5539] netlink: 'syz.2.396': attribute type 5 has an invalid length. [ 146.373043][ T5539] netlink: 43 bytes leftover after parsing attributes in process `syz.2.396'. [ 146.511481][ T4230] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.602111][ T4229] usb-storage 5-1:247.226: USB Mass Storage device detected [ 146.769591][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 146.799760][ T4229] ftdi_sio 5-1:247.226: FTDI USB Serial Device converter detected [ 146.827460][ T4229] usb 5-1: Detected FT-X [ 146.952055][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.595239][ T4229] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 147.621568][ T4229] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 147.639078][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.645406][ T4229] ftdi_sio 5-1:247.226: GPIO initialisation failed: -71 [ 147.681848][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.742882][ T4230] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 147.757846][ T4229] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 147.884368][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.924395][ T4229] usb 5-1: USB disconnect, device number 8 [ 148.316156][ T4230] usb 4-1: config 0 descriptor?? [ 148.408868][ T4759] udevd[4759]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 148.436306][ T4229] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.531905][ T4759] udevd[4759]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 148.549912][ T4229] ftdi_sio 5-1:247.226: device disconnected [ 148.814616][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 148.862283][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 148.878758][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 148.890826][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 148.922011][ T5592] netlink: 'syz.4.413': attribute type 39 has an invalid length. [ 148.922180][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 148.969700][ T5592] netlink: 44 bytes leftover after parsing attributes in process `syz.4.413'. [ 148.971161][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.037313][ T5592] netlink: 43 bytes leftover after parsing attributes in process `syz.4.413'. [ 149.050449][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.101450][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.106956][ T5592] netlink: 'syz.4.413': attribute type 5 has an invalid length. [ 149.114861][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.164279][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.174383][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.182218][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.191048][ T5592] netlink: 43 bytes leftover after parsing attributes in process `syz.4.413'. [ 149.191728][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.219415][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.244639][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.261865][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.272920][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.295364][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.313527][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.333403][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.351796][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.364202][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.382250][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.389458][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.396867][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.407522][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.417358][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.427729][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.437734][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.449293][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.456917][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.468030][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.479544][ T4230] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 149.508232][ T4230] lenovo 0003:17EF:6067.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 149.567052][ T4230] usb 4-1: USB disconnect, device number 8 [ 149.848826][ T5599] fido_id[5599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 152.511570][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.711236][ T5639] tipc: Enabling of bearer rejected, failed to enable media [ 152.749871][ T5641] netlink: 'syz.2.427': attribute type 39 has an invalid length. [ 152.781448][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 152.784399][ T5641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.427'. [ 152.846858][ T5641] netlink: 43 bytes leftover after parsing attributes in process `syz.2.427'. [ 152.931741][ T5641] netlink: 'syz.2.427': attribute type 5 has an invalid length. [ 152.941565][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.000467][ T5641] netlink: 43 bytes leftover after parsing attributes in process `syz.2.427'. [ 153.024009][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.878588][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.087422][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.097512][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.853472][ T21] usb 5-1: string descriptor 0 read error: -71 [ 154.861627][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.870950][ T21] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.881076][ T21] usb 5-1: config 0 descriptor?? [ 154.903727][ T21] usb 5-1: can't set config #0, error -71 [ 154.939398][ T21] usb 5-1: USB disconnect, device number 9 [ 155.904412][ T5686] netlink: 'syz.1.444': attribute type 39 has an invalid length. [ 155.905253][ T5686] netlink: 44 bytes leftover after parsing attributes in process `syz.1.444'. [ 155.905277][ T5686] netlink: 43 bytes leftover after parsing attributes in process `syz.1.444'. [ 155.905304][ T5686] netlink: 'syz.1.444': attribute type 5 has an invalid length. [ 155.905318][ T5686] netlink: 43 bytes leftover after parsing attributes in process `syz.1.444'. [ 157.405699][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 157.586870][ T26] kauditd_printk_skb: 103 callbacks suppressed [ 157.586887][ T26] audit: type=1804 audit(1774156266.307:130): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.454" name="/newroot/74/file1" dev="fuse" ino=1 res=1 errno=0 [ 158.839309][ T5743] netlink: 'syz.1.462': attribute type 39 has an invalid length. [ 158.962885][ T5748] netlink: 44 bytes leftover after parsing attributes in process `syz.1.462'. [ 159.019097][ T5748] netlink: 43 bytes leftover after parsing attributes in process `syz.1.462'. [ 159.049511][ T5748] netlink: 'syz.1.462': attribute type 5 has an invalid length. [ 159.057441][ T5748] netlink: 43 bytes leftover after parsing attributes in process `syz.1.462'. [ 162.561496][ T4229] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.841475][ T4229] usb 2-1: Using ep0 maxpacket: 16 [ 162.913315][ T5808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 163.036170][ T5808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 163.185382][ T5808] device ip6gretap0 entered promiscuous mode [ 163.196149][ T5808] device syz_tun entered promiscuous mode [ 163.519125][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 163.921543][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.981500][ T4229] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 163.989244][ T4229] usb 2-1: can't read configurations, error -71 [ 164.094594][ T4201] Bluetooth: Wrong link type (-22) [ 164.139121][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 164.404196][ T4184] device syz_tun left promiscuous mode [ 164.446774][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 164.658774][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.701314][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.759458][ T5839] device bridge_slave_0 entered promiscuous mode [ 164.781463][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.801478][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.813250][ T5839] device bridge_slave_1 entered promiscuous mode [ 164.863751][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.910668][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.008477][ T5839] team0: Port device team_slave_0 added [ 165.048485][ T5839] team0: Port device team_slave_1 added [ 165.116901][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.129540][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.158633][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.180484][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.198926][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.299473][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.364594][ T5872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 165.372058][ T5839] device hsr_slave_0 entered promiscuous mode [ 165.388481][ T5839] device hsr_slave_1 entered promiscuous mode [ 165.397386][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.414657][ T5839] Cannot create hsr debugfs directory [ 165.537417][ T5877] binder: 5873:5877 unknown command 1074553619 [ 165.548518][ T5877] binder: 5873:5877 ioctl c0306201 200000000540 returned -22 [ 165.725811][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 165.800443][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.808578][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.817530][ T5868] device bridge_slave_0 entered promiscuous mode [ 165.827189][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.835012][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.843656][ T5868] device bridge_slave_1 entered promiscuous mode [ 165.861929][ T5839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.883738][ T5839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.897305][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.908221][ T5839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.920653][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.931926][ T5839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.079476][ T4287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.115845][ T5868] team0: Port device team_slave_0 added [ 166.141267][ T5868] team0: Port device team_slave_1 added [ 166.226517][ T4287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.252409][ T4230] Bluetooth: hci3: command 0x0409 tx timeout [ 166.269592][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.279229][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.404027][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.436341][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.471499][ T5897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.514'. [ 166.487451][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.491451][ T5897] netlink: 43 bytes leftover after parsing attributes in process `syz.2.514'. [ 166.519654][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.535031][ T5897] netlink: 'syz.2.514': attribute type 5 has an invalid length. [ 166.544153][ T5897] netlink: 43 bytes leftover after parsing attributes in process `syz.2.514'. [ 166.570521][ T4287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.588022][ T5891] netlink: 'syz.2.514': attribute type 39 has an invalid length. [ 166.600436][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.713834][ T4287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.753487][ T5868] device hsr_slave_0 entered promiscuous mode [ 166.760685][ T5868] device hsr_slave_1 entered promiscuous mode [ 166.792726][ T5868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.800910][ T5868] Cannot create hsr debugfs directory [ 166.859825][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.869123][ T5906] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.892456][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.905488][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.965750][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.034658][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.051129][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.058280][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.069324][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.145165][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.158418][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.167846][ T817] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.175077][ T817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.185217][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.196146][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.215215][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.220269][ T4233] Bluetooth: hci0: command 0x0409 tx timeout [ 167.233227][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.244192][ T5919] comedi comedi4: bad chanlist[0]=0x00000106 chan=262 range length=2 [ 167.251451][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.277671][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.293262][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.330508][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'. [ 167.338646][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.340114][ T4479] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.358491][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.380213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.389993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.399520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.417353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.427476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.622786][ T4479] usb 4-1: Using ep0 maxpacket: 32 [ 167.681089][ T5894] chnl_net:caif_netlink_parms(): no params data found [ 167.741645][ T4479] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 167.754634][ T4479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.809953][ T4479] usb 4-1: config 0 descriptor?? [ 167.849478][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.871635][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.884804][ T5894] device bridge_slave_0 entered promiscuous mode [ 167.953789][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.962677][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.970950][ T5894] device bridge_slave_1 entered promiscuous mode [ 167.981939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.995710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.044286][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.063959][ T5868] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.094316][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.121782][ T4479] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 168.136764][ T5868] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.159134][ T4479] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.215430][ T5868] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.223065][ T4479] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 168.241752][ T4479] usb 4-1: media controller created [ 168.271052][ T4479] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.351022][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 168.362260][ T4479] az6027: usb out operation failed. (-71) [ 168.401692][ T4479] az6027: usb out operation failed. (-71) [ 168.408270][ T4479] stb0899_attach: Driver disabled by Kconfig [ 168.411440][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.443024][ T5868] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 168.443487][ T4479] az6027: no front-end attached [ 168.443487][ T4479] [ 168.717873][ T5894] team0: Port device team_slave_0 added [ 169.142712][ T5894] team0: Port device team_slave_1 added [ 169.209688][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.273584][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 169.298439][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 169.305727][ T4479] az6027: usb out operation failed. (-71) [ 169.311798][ T4479] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 169.320924][ T4479] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 169.341480][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.412133][ T4479] dvb-usb: schedule remote query interval to 400 msecs. [ 169.421654][ T4479] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 169.433911][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.449401][ T5961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.526'. [ 169.452056][ T4479] usb 4-1: USB disconnect, device number 9 [ 169.477221][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.503298][ T5961] netlink: 43 bytes leftover after parsing attributes in process `syz.3.526'. [ 169.511555][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.538089][ T5961] netlink: 'syz.3.526': attribute type 5 has an invalid length. [ 169.562525][ T5961] netlink: 43 bytes leftover after parsing attributes in process `syz.3.526'. [ 169.576782][ T4479] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 169.591435][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.648382][ T5957] netlink: 'syz.3.526': attribute type 39 has an invalid length. [ 169.943125][ T5894] device hsr_slave_0 entered promiscuous mode [ 169.970971][ T5894] device hsr_slave_1 entered promiscuous mode [ 170.037716][ T5894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.063775][ T5894] Cannot create hsr debugfs directory [ 172.397541][ T4479] Bluetooth: hci3: command 0x040f tx timeout [ 172.465273][ T4479] Bluetooth: hci1: command 0x041b tx timeout [ 172.477307][ T4479] Bluetooth: hci0: command 0x040f tx timeout [ 172.495937][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.743066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.762723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.148310][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.208183][ T6012] netlink: 'syz.3.536': attribute type 39 has an invalid length. [ 174.231763][ T6013] netlink: 44 bytes leftover after parsing attributes in process `syz.3.536'. [ 174.240818][ T6013] netlink: 43 bytes leftover after parsing attributes in process `syz.3.536'. [ 174.244545][ T5839] device veth0_vlan entered promiscuous mode [ 174.251321][ T6013] netlink: 'syz.3.536': attribute type 5 has an invalid length. [ 174.263644][ T6013] netlink: 43 bytes leftover after parsing attributes in process `syz.3.536'. [ 174.284362][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.309216][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.328660][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.331207][ T6015] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.348251][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.412809][ T5839] device veth1_vlan entered promiscuous mode [ 174.430309][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.450878][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.491656][ T4479] Bluetooth: hci1: command 0x040f tx timeout [ 174.498536][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.511429][ T4479] Bluetooth: hci3: command 0x0419 tx timeout [ 174.524750][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.535121][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.542553][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.552263][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.571509][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 174.579175][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.588468][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.596303][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.615233][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.660041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.680665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.781490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.792858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.807434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.818688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.827829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.838553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.855333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.956391][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.998095][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.043494][ T5839] device veth0_macvtap entered promiscuous mode [ 175.061948][ T5839] device veth1_macvtap entered promiscuous mode [ 175.075868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.086375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.105551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.152474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.274056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.437834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.962156][ T4227] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.009318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.039629][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.070285][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.090675][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.111397][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.129792][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.153756][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.171545][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.191721][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.211476][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 176.216160][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.348599][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.373595][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.384171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.398953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.436428][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.471251][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.478328][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.546'. [ 176.518219][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.538716][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.561972][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.571446][ T6063] netlink: 43 bytes leftover after parsing attributes in process `syz.2.546'. [ 176.573222][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 176.591510][ T6063] netlink: 'syz.2.546': attribute type 5 has an invalid length. [ 176.597387][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.599259][ T6063] netlink: 43 bytes leftover after parsing attributes in process `syz.2.546'. [ 176.611577][ T4227] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.628039][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.628978][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.636479][ T4227] usb 4-1: Product: syz [ 176.651456][ T4227] usb 4-1: Manufacturer: syz [ 176.656013][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.656064][ T4227] usb 4-1: SerialNumber: syz [ 176.673535][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.683485][ T5894] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 176.693567][ T6060] netlink: 'syz.2.546': attribute type 39 has an invalid length. [ 176.758518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.767825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.793643][ T5839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.804130][ T5839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.813596][ T5839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.824303][ T5839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.835474][ T5894] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 176.861217][ T6066] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.898508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.909375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.949545][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.990304][ T4287] device hsr_slave_0 left promiscuous mode [ 177.002501][ T4287] device hsr_slave_1 left promiscuous mode [ 177.010456][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.018535][ T4227] usb 4-1: 0:2 : does not exist [ 177.065990][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.073799][ T4227] usb 4-1: USB disconnect, device number 10 [ 177.122966][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.130441][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.169266][ T4287] device bridge_slave_1 left promiscuous mode [ 177.180379][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.210790][ T4287] device bridge_slave_0 left promiscuous mode [ 177.226022][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.257026][ T4287] device veth1_macvtap left promiscuous mode [ 177.270555][ T4287] device veth0_macvtap left promiscuous mode [ 177.287544][ T4287] device veth1_vlan left promiscuous mode [ 177.299900][ T4287] device veth0_vlan left promiscuous mode [ 177.336140][ T4759] udevd[4759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.971263][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 178.165739][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 178.318814][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.401628][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.473009][ T4287] bond0 (unregistering): Released all slaves [ 178.528057][ T5894] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 178.594384][ T5894] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 178.812766][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.820751][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.895854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.041084][ T5868] device veth0_vlan entered promiscuous mode [ 179.079495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.096420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.108862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.117894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.127395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.135731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.144932][ T6108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.555'. [ 179.155904][ T6108] netlink: 43 bytes leftover after parsing attributes in process `syz.2.555'. [ 179.162815][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.165555][ T6107] netlink: 'syz.2.555': attribute type 39 has an invalid length. [ 179.183064][ T6108] netlink: 'syz.2.555': attribute type 5 has an invalid length. [ 179.187498][ T5868] device veth1_vlan entered promiscuous mode [ 179.192712][ T6108] netlink: 43 bytes leftover after parsing attributes in process `syz.2.555'. [ 179.224594][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.265972][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.295629][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.323524][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.344703][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.357415][ T6111] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.361052][ T5868] device veth0_macvtap entered promiscuous mode [ 179.386225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.406788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.417219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.482742][ T5894] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.493464][ T5868] device veth1_macvtap entered promiscuous mode [ 179.525032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.548219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.592637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.600630][ T6118] netlink: 44 bytes leftover after parsing attributes in process `syz.2.564'. [ 179.630825][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.662423][ T6118] netlink: 43 bytes leftover after parsing attributes in process `syz.2.564'. [ 179.686101][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.699690][ T6118] netlink: 'syz.2.564': attribute type 5 has an invalid length. [ 179.706426][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.738522][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.739709][ T6118] netlink: 43 bytes leftover after parsing attributes in process `syz.2.564'. [ 179.765159][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.782801][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.811392][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.831409][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.851630][ T1325] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 179.865361][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.873722][ T6115] netlink: 'syz.2.564': attribute type 39 has an invalid length. [ 179.894349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.905542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.929538][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.936881][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.954655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.968615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.002406][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.032403][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.050819][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.074594][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.110279][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.131057][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.163222][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.183237][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.203331][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.243912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.262143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.279433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.289501][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.296740][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.301633][ T1325] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 180.315108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.321420][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.328914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.361966][ T5868] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.372518][ T1325] usb 6-1: config 0 descriptor?? [ 180.386335][ T5868] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.395780][ T5868] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.405870][ T5868] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.434265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.450356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.512953][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.531847][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.560875][ T5894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.581519][ T5894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.596357][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.606893][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.617025][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.627035][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.636105][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.645147][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.654400][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.696693][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.722067][ T1325] [drm] vendor descriptor length:c3 data:00 00 00 00 00 00 00 00 00 00 00 [ 180.750386][ T1325] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 180.769020][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.796926][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.832408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.855170][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.881381][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.889085][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.932072][ T1325] [drm:udl_init] *ERROR* Selecting channel failed [ 180.970403][ T1325] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 181.035637][ T1325] [drm] Initialized udl on minor 2 [ 181.051740][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 181.057952][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 181.076029][ T1325] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.096962][ T1325] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 181.154141][ T1325] usb 6-1: USB disconnect, device number 2 [ 181.188040][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 181.269041][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 182.181992][ T4231] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 183.108303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.710116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.420930][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.441798][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.531907][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.582657][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.621408][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 186.656293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.692940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.719536][ T5894] device veth0_vlan entered promiscuous mode [ 186.746422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.771802][ T4231] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 186.780446][ T4231] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.792071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.821514][ T4231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.872612][ T5894] device veth1_vlan entered promiscuous mode [ 186.900564][ T4231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.951705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.960961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.972376][ T4231] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.014040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.032519][ T4231] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.051237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.062751][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.082971][ T5894] device veth0_macvtap entered promiscuous mode [ 187.127750][ T5894] device veth1_macvtap entered promiscuous mode [ 187.186924][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.197735][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.207642][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.218548][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.239780][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.637948][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.151554][ T4231] usb 3-1: usb_control_msg returned -32 [ 188.157197][ T4231] usbtmc 3-1:16.0: can't read capabilities [ 188.173966][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.196001][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.216358][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.263553][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.313752][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.324074][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.350156][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.389177][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.425244][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.447171][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.473893][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.498380][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.521552][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.538762][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.553295][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.573273][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.590332][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.605263][ T5894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.624342][ T5894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.663102][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.673043][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.683060][ T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.699632][ T5894] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.389099][ T5894] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.423878][ T5894] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.475493][ T5894] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.215581][ T1325] usb 3-1: USB disconnect, device number 6 [ 190.428663][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.448350][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.476758][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.505463][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.522072][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.585258][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.971635][ T23] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 191.502340][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 191.600288][ T6291] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.643733][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.438366][ T23] usb 3-1: Product: syz [ 192.465136][ T23] usb 3-1: Manufacturer: syz [ 192.499389][ T23] usb 3-1: SerialNumber: syz [ 192.624095][ T23] usb 3-1: config 0 descriptor?? [ 193.061926][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 196.246726][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.253215][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.315426][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 196.441531][ T23] usb 3-1: USB disconnect, device number 7 [ 197.427126][ T6325] netlink: 'syz.7.595': attribute type 29 has an invalid length. [ 197.461840][ T6325] netlink: 'syz.7.595': attribute type 29 has an invalid length. [ 197.524576][ T6325] netlink: 76 bytes leftover after parsing attributes in process `syz.7.595'. [ 201.118711][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 201.821847][ T1108] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.302415][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.855092][ T1108] usb 4-1: config 0 has no interfaces? [ 203.031630][ T1108] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 203.048246][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.067886][ T1108] usb 4-1: Product: syz [ 203.077543][ T1108] usb 4-1: Manufacturer: syz [ 203.087576][ T1108] usb 4-1: SerialNumber: syz [ 203.098823][ T1108] usb 4-1: config 0 descriptor?? [ 203.390981][ T1108] usb 4-1: USB disconnect, device number 11 [ 206.816384][ T6421] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.839802][ T4233] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 208.101978][ T21] Bluetooth: hci2: command 0x0401 tx timeout [ 208.121932][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 208.242693][ T4233] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.781571][ T4233] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.792712][ T4233] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.821488][ T4233] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.915791][ T4233] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.935692][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.232032][ T4233] usb 3-1: GET_CAPABILITIES returned 0 [ 209.237982][ T4233] usbtmc 3-1:16.0: can't read capabilities [ 209.456714][ T21] usb 3-1: USB disconnect, device number 8 [ 212.604884][ T6494] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.416740][ T6544] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.118530][ T6565] netlink: 32 bytes leftover after parsing attributes in process `syz.7.657'. [ 218.210929][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.219095][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.810747][ T4227] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.881477][ T4231] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 220.929493][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.986259][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.251665][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.266366][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.276845][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.290257][ T4231] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.300074][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.320282][ T4231] usb 4-1: config 0 descriptor?? [ 221.351854][ T4227] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 221.370873][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.381117][ T4227] usb 3-1: Product: syz [ 221.385858][ T4227] usb 3-1: Manufacturer: syz [ 221.390669][ T4227] usb 3-1: SerialNumber: syz [ 221.405640][ T4227] usb 3-1: config 0 descriptor?? [ 221.416135][ T6557] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.427915][ T6557] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.437752][ T6557] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.447041][ T6557] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.453246][ T4227] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 009 [ 221.550105][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.657'. [ 221.662889][ T6622] udc-core: couldn't find an available UDC or it's busy [ 221.680605][ T6622] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 221.741736][ T4227] (null): failure setting delay to 10us [ 221.747810][ T4227] i2c-tiny-usb: probe of 3-1:0.0 failed with error -5 [ 221.788810][ T4227] usb 3-1: USB disconnect, device number 9 [ 221.813880][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 221.852885][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 221.891533][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 221.920443][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 221.949924][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 221.965213][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 221.981828][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 222.844818][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 222.852979][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 222.860507][ T4231] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 222.868379][ T4231] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 222.878813][ T4231] plantronics 0003:047F:FFFF.0006: parse failed [ 222.914497][ T4231] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 222.947768][ T6650] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 222.974793][ T4231] usb 4-1: USB disconnect, device number 12 [ 223.003949][ T6650] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.081565][ T26] audit: type=1326 audit(1774156332.787:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.7.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8248cb6799 code=0x0 [ 224.512228][ T6679] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.553421][ T6683] netlink: 32 bytes leftover after parsing attributes in process `syz.5.691'. [ 224.603761][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.691'. [ 224.757619][ T26] audit: type=1326 audit(1774156333.477:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 224.824673][ T26] audit: type=1326 audit(1774156333.477:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 225.566207][ T26] audit: type=1326 audit(1774156333.477:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 225.590866][ T6703] overlayfs: failed to resolve './bus': -2 [ 225.695440][ T26] audit: type=1326 audit(1774156333.497:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 225.821530][ T26] audit: type=1326 audit(1774156333.497:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 225.931800][ T26] audit: type=1326 audit(1774156333.497:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 225.955232][ T26] audit: type=1326 audit(1774156333.497:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 225.988561][ T26] audit: type=1326 audit(1774156333.507:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 226.022356][ T26] audit: type=1326 audit(1774156333.507:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.7.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8248cb6799 code=0x7ffc0000 [ 226.878971][ T6731] netlink: 312 bytes leftover after parsing attributes in process `syz.2.704'. [ 226.908074][ T6727] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.929523][ T6747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.709'. [ 227.965362][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 227.981596][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 229.851537][ T1325] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 229.998377][ T6790] netlink: 36 bytes leftover after parsing attributes in process `syz.5.720'. [ 230.121426][ T1325] usb 3-1: Using ep0 maxpacket: 8 [ 230.242634][ T1325] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 230.991581][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.124351][ T1325] pvrusb2: Hardware description: Terratec Grabster AV400 [ 231.181522][ T1325] pvrusb2: ********** [ 231.194899][ T1325] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 231.234586][ T1325] pvrusb2: Important functionality might not be entirely working. [ 231.293465][ T1325] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 231.348495][ T1325] pvrusb2: ********** [ 231.367702][ T6800] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.876640][ T2426] pvrusb2: Invalid write control endpoint [ 232.087389][ T6568] usb 3-1: USB disconnect, device number 10 [ 232.290782][ T2426] pvrusb2: Invalid write control endpoint [ 232.311569][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 232.335014][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 232.350497][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 232.380706][ T2426] pvrusb2: Device being rendered inoperable [ 232.392580][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 232.399959][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 232.412128][ T2426] pvrusb2: Attached sub-driver cx25840 [ 232.417872][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 233.161460][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 235.803513][ T6854] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.680142][ T4229] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 236.749833][ T6872] netlink: 'syz.5.745': attribute type 39 has an invalid length. [ 236.961474][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 237.081837][ T4229] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 237.081860][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.123527][ T4229] pvrusb2: Hardware description: Terratec Grabster AV400 [ 237.123543][ T4229] pvrusb2: ********** [ 237.123547][ T4229] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 237.123555][ T4229] pvrusb2: Important functionality might not be entirely working. [ 237.123561][ T4229] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 237.123568][ T4229] pvrusb2: ********** [ 237.270709][ T6892] device syzkaller0 entered promiscuous mode [ 237.352812][ T2426] pvrusb2: Invalid write control endpoint [ 237.669645][ T6863] pvrusb2: Invalid write control endpoint [ 237.670494][ T4285] usb 4-1: USB disconnect, device number 13 [ 237.821782][ T6904] 9pnet_virtio: no channels available for device 127.0.0.1 [ 237.936656][ T2426] pvrusb2: Invalid write control endpoint [ 237.936804][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 237.937122][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 237.937185][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 237.937276][ T2426] pvrusb2: Device being rendered inoperable [ 237.938676][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 237.962987][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 237.996065][ T2426] pvrusb2: Attached sub-driver cx25840 [ 237.997870][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 237.998004][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 243.600573][ T6965] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 246.223482][ T7007] trusted_key: encrypted_key: insufficient parameters specified [ 246.536211][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.5.775'. [ 247.003108][ T7013] netlink: 'syz.5.777': attribute type 39 has an invalid length. [ 247.071932][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 248.327690][ T7035] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 248.441527][ T7035] CIFS mount error: No usable UNC path provided in device string! [ 248.441527][ T7035] [ 248.483859][ T7035] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 248.845404][ T4479] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 250.111815][ T4479] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 250.132198][ T4479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.171463][ T4479] usb 4-1: Product: syz [ 250.190403][ T4479] usb 4-1: Manufacturer: syz [ 250.209706][ T4479] usb 4-1: SerialNumber: syz [ 250.250073][ T4479] usb 4-1: config 0 descriptor?? [ 250.764045][ T4479] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 250.792799][ T4479] usb 4-1: Firmware version (0.0) predates our first public release. [ 250.801017][ T4479] usb 4-1: Please update to version 0.2 or newer [ 250.891912][ T4479] usb 4-1: Firmware: build [ 250.896679][ T4479] usb 4-1: atusb_probe: initialization failed, error = -32 [ 250.924707][ T4479] atusb: probe of 4-1:0.0 failed with error -32 [ 251.597464][ T7066] netlink: 'syz.2.792': attribute type 39 has an invalid length. [ 251.634396][ T7066] netlink: 44 bytes leftover after parsing attributes in process `syz.2.792'. [ 251.670278][ T7066] netlink: 43 bytes leftover after parsing attributes in process `syz.2.792'. [ 251.702601][ T7066] netlink: 'syz.2.792': attribute type 5 has an invalid length. [ 251.750026][ T7066] netlink: 43 bytes leftover after parsing attributes in process `syz.2.792'. [ 252.989973][ T6627] usb 4-1: USB disconnect, device number 14 [ 253.977333][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.7.799'. [ 254.090131][ T7072] ODEBUG: Out of memory. ODEBUG disabled [ 255.008518][ T7104] netlink: 'syz.6.804': attribute type 39 has an invalid length. [ 255.084363][ T7106] netlink: 44 bytes leftover after parsing attributes in process `syz.6.804'. [ 255.119630][ T7106] netlink: 43 bytes leftover after parsing attributes in process `syz.6.804'. [ 255.163464][ T7106] netlink: 'syz.6.804': attribute type 5 has an invalid length. [ 255.184322][ T7106] netlink: 43 bytes leftover after parsing attributes in process `syz.6.804'. [ 259.099776][ T7149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.816'. [ 259.159992][ T7150] netlink: 'syz.5.817': attribute type 39 has an invalid length. [ 259.184645][ T7145] netlink: 44 bytes leftover after parsing attributes in process `syz.5.817'. [ 259.223546][ T7145] netlink: 43 bytes leftover after parsing attributes in process `syz.5.817'. [ 259.233351][ T7145] netlink: 'syz.5.817': attribute type 5 has an invalid length. [ 259.241109][ T7145] netlink: 43 bytes leftover after parsing attributes in process `syz.5.817'. [ 259.902869][ T4229] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 260.181538][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 260.612118][ T4229] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 260.631256][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.941058][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.952058][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.091519][ T4229] usb 4-1: Product: syz [ 261.103609][ T4229] usb 4-1: Manufacturer: syz [ 261.125211][ T4229] usb 4-1: SerialNumber: syz [ 261.151726][ T4229] usb 4-1: config 0 descriptor?? [ 261.632117][ T4229] airspy 4-1:0.0: Board ID: 00 [ 261.637737][ T4229] airspy 4-1:0.0: Firmware version: [ 262.655197][ T4229] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 262.709584][ T4229] airspy 4-1:0.0: Registered as swradio24 [ 262.726004][ T4229] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 262.777214][ T4229] usb 4-1: USB disconnect, device number 15 [ 262.801644][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.6.837'. [ 265.525933][ T7233] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.997456][ T7279] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.274689][ T6627] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 269.521583][ T6627] usb 8-1: Using ep0 maxpacket: 32 [ 269.691993][ T6627] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.702709][ T6627] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 269.713592][ T6627] usb 8-1: config 0 interface 0 has no altsetting 0 [ 270.051618][ T6627] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 270.060908][ T6627] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.069507][ T6627] usb 8-1: Product: syz [ 270.083353][ T6627] usb 8-1: Manufacturer: syz [ 270.097117][ T6627] usb 8-1: SerialNumber: syz [ 270.230655][ T6627] usb 8-1: config 0 descriptor?? [ 272.084635][ T7334] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.229017][ T4227] usb 8-1: USB disconnect, device number 2 [ 272.284482][ T7340] netlink: 'syz.7.882': attribute type 39 has an invalid length. [ 272.342865][ T7344] netlink: 44 bytes leftover after parsing attributes in process `syz.7.882'. [ 272.421857][ T7344] netlink: 43 bytes leftover after parsing attributes in process `syz.7.882'. [ 272.421884][ T7344] netlink: 'syz.7.882': attribute type 5 has an invalid length. [ 272.421899][ T7344] netlink: 43 bytes leftover after parsing attributes in process `syz.7.882'. [ 272.533330][ T7349] snd_dummy snd_dummy.0: control 3:5:2:syz1:9 is already present [ 272.781500][ T6627] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 274.557314][ T6627] usb 6-1: Using ep0 maxpacket: 8 [ 274.721501][ T6627] usb 6-1: unable to get BOS descriptor or descriptor too short [ 274.791695][ T6627] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 274.799414][ T6627] usb 6-1: can't read configurations, error -71 [ 276.003863][ T7387] netlink: 'syz.5.899': attribute type 39 has an invalid length. [ 276.043791][ T7387] netlink: 44 bytes leftover after parsing attributes in process `syz.5.899'. [ 276.101478][ T7387] netlink: 43 bytes leftover after parsing attributes in process `syz.5.899'. [ 276.115342][ T7387] netlink: 'syz.5.899': attribute type 5 has an invalid length. [ 276.131592][ T7387] netlink: 43 bytes leftover after parsing attributes in process `syz.5.899'. [ 276.609688][ T7410] device bond_slave_0 entered promiscuous mode [ 276.616469][ T7410] device bond_slave_1 entered promiscuous mode [ 276.623404][ T4231] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 276.672666][ T7410] device vlan2 entered promiscuous mode [ 276.684696][ T7410] device bond0 entered promiscuous mode [ 277.031497][ T4231] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.875609][ T4231] usb 7-1: config 0 has no interfaces? [ 277.881243][ T4231] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 277.891462][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.913210][ T4231] usb 7-1: config 0 descriptor?? [ 278.175980][ T4479] usb 7-1: USB disconnect, device number 2 [ 278.852290][ T7427] netlink: 'syz.5.915': attribute type 39 has an invalid length. [ 279.193009][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.921'. [ 279.658839][ T7465] netlink: 44 bytes leftover after parsing attributes in process `syz.6.932'. [ 279.684817][ T7465] netlink: 43 bytes leftover after parsing attributes in process `syz.6.932'. [ 279.715251][ T7469] netlink: 40 bytes leftover after parsing attributes in process `syz.7.934'. [ 279.739529][ T7465] netlink: 'syz.6.932': attribute type 5 has an invalid length. [ 279.794822][ T7465] netlink: 43 bytes leftover after parsing attributes in process `syz.6.932'. [ 280.241537][ T6627] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 280.268583][ T7482] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 280.277180][ T7482] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 280.287289][ T7482] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 280.294684][ T7482] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 280.302221][ T7482] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 280.310336][ T7482] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 280.325309][ T7482] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 280.335976][ T7482] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 280.347306][ T7482] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 280.357462][ T7482] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 280.365814][ T7482] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 280.379605][ T7482] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 280.387589][ T7482] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 280.395371][ T7482] comedi comedi3: 8255: I/O port conflict (0x800061,4) [ 280.407684][ T7482] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 280.418217][ T7482] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 280.429799][ T7482] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 280.443002][ T7482] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 280.452199][ T7482] comedi comedi3: 8255: I/O port conflict (0x1000000,4) [ 280.460907][ T7482] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 280.481600][ T6627] usb 4-1: Using ep0 maxpacket: 8 [ 280.831504][ T6627] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.964349][ T6627] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 281.055155][ T6627] usb 4-1: can't read configurations, error -71 [ 281.463963][ T4479] Bluetooth: hci1: command 0x0411 tx timeout [ 281.741600][ T4285] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 281.989172][ T7502] Malformed UNC in devname [ 281.989172][ T7502] [ 281.996420][ T7502] CIFS: VFS: Malformed UNC in devname [ 282.271886][ T4285] usb 6-1: unable to get BOS descriptor or descriptor too short [ 283.021602][ T4285] usb 6-1: not running at top speed; connect to a high speed hub [ 283.111525][ T4285] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.146712][ T4285] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.233351][ T7519] netlink: 44 bytes leftover after parsing attributes in process `syz.3.948'. [ 283.308510][ T7519] netlink: 43 bytes leftover after parsing attributes in process `syz.3.948'. [ 283.342443][ T4285] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 283.369391][ T4285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.390315][ T7519] netlink: 'syz.3.948': attribute type 5 has an invalid length. [ 283.421454][ T4285] usb 6-1: Product: syz [ 283.422899][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.947'. [ 283.425866][ T4285] usb 6-1: Manufacturer: syz [ 283.439564][ T4285] usb 6-1: SerialNumber: syz [ 283.451804][ T7519] netlink: 43 bytes leftover after parsing attributes in process `syz.3.948'. [ 283.811624][ T4285] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 283.861512][ T4285] usb 6-1: failed to enable PITCH for EP 0x1 [ 284.001470][ T4285] usb 6-1: unit 2 not found! [ 284.007328][ T4285] usb 6-1: unit 8 not found! [ 285.138174][ T4285] usb 6-1: USB disconnect, device number 5 [ 285.518490][ T7554] netlink: 44 bytes leftover after parsing attributes in process `syz.5.960'. [ 285.556262][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.600995][ T7554] netlink: 43 bytes leftover after parsing attributes in process `syz.5.960'. [ 285.762290][ T7554] netlink: 'syz.5.960': attribute type 5 has an invalid length. [ 285.963224][ T7554] netlink: 43 bytes leftover after parsing attributes in process `syz.5.960'. [ 286.252930][ T4229] Bluetooth: hci4: command 0x2016 tx timeout [ 287.807411][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 287.807430][ T26] audit: type=1107 audit(1774156907.715:147): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 287.808795][ T4227] Bluetooth: hci1: command 0x201b tx timeout [ 287.995861][ T4300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.182135][ T4285] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 288.215843][ T4300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.282846][ T7597] netlink: 'syz.2.975': attribute type 39 has an invalid length. [ 288.335095][ T7597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.975'. [ 288.348261][ T4300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.355964][ T7597] netlink: 43 bytes leftover after parsing attributes in process `syz.2.975'. [ 288.412193][ T7597] netlink: 'syz.2.975': attribute type 5 has an invalid length. [ 288.457269][ T7597] netlink: 43 bytes leftover after parsing attributes in process `syz.2.975'. [ 288.551856][ T4285] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 288.580796][ T4285] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 288.582834][ T4231] Bluetooth: hci3: command 0x0406 tx timeout [ 288.751861][ T4285] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 288.761116][ T4285] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.767614][ T4231] Bluetooth: hci0: command 0x0406 tx timeout [ 288.771341][ T4285] usb 7-1: Product: syz [ 288.780338][ T4285] usb 7-1: Manufacturer: syz [ 288.789902][ T4285] usb 7-1: SerialNumber: syz [ 288.826811][ T4285] usb 7-1: config 0 descriptor?? [ 288.941795][ T7593] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.042745][ T7593] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.062066][ T4285] usb 7-1: ucan: probing device on interface #0 [ 289.068873][ T4285] usb 7-1: ucan: invalid EP count (1) [ 289.075727][ T4285] usb 7-1: ucan: probe failed; try to update the device firmware [ 289.172784][ T4300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.619186][ T7608] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 289.631384][ T7608] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 289.641407][ T7608] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 289.650872][ T7608] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.669515][ T7608] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 289.691532][ T7608] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 289.703441][ T7608] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.714009][ T7608] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 289.714727][ T7608] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 289.717473][ T7608] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.720942][ T7608] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 289.723300][ T7608] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.731337][ T7608] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.732821][ T7608] comedi comedi3: 8255: I/O port conflict (0x800061,4) [ 289.742090][ T7608] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.743276][ T7608] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 289.744388][ T7608] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 289.754397][ T7608] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 289.778893][ T7608] comedi comedi3: 8255: I/O port conflict (0x1000000,4) [ 289.783798][ T7608] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 290.164648][ T4300] device ip6gretap0 left promiscuous mode [ 290.945258][ T4231] usb 7-1: USB disconnect, device number 3 [ 291.185626][ T7628] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 292.615517][ T7657] netlink: 44 bytes leftover after parsing attributes in process `syz.5.987'. [ 292.641630][ T7648] netlink: 'syz.5.987': attribute type 39 has an invalid length. [ 292.902438][ T7657] netlink: 43 bytes leftover after parsing attributes in process `syz.5.987'. [ 294.236447][ T7657] netlink: 'syz.5.987': attribute type 5 has an invalid length. [ 294.275105][ T7657] netlink: 43 bytes leftover after parsing attributes in process `syz.5.987'. [ 295.124369][ T4300] device hsr_slave_0 left promiscuous mode [ 295.140802][ T4300] device hsr_slave_1 left promiscuous mode [ 295.157859][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.175772][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.190703][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.208686][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.248401][ T4300] device bridge_slave_1 left promiscuous mode [ 295.262867][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.281372][ T6627] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 295.313070][ T4300] device bridge_slave_0 left promiscuous mode [ 295.319350][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.398441][ T4300] device veth1_macvtap left promiscuous mode [ 295.412136][ T4300] device veth0_macvtap left promiscuous mode [ 295.428596][ T4300] device veth1_vlan left promiscuous mode [ 295.442535][ T4300] device veth0_vlan left promiscuous mode [ 295.675728][ T6627] usb 4-1: Using ep0 maxpacket: 8 [ 296.174543][ T6627] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.212864][ T6627] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.084176][ T6627] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.097180][ T6627] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.111163][ T6627] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.121236][ T6627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.380372][ T7706] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 297.399918][ T6627] usb 4-1: GET_CAPABILITIES returned 0 [ 297.405963][ T6627] usbtmc 4-1:16.0: can't read capabilities [ 297.831884][ T6627] usb 4-1: USB disconnect, device number 18 [ 298.511480][ T7718] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1005'. [ 298.528211][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 298.541140][ T7718] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1005'. [ 298.569830][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 298.586290][ T7718] netlink: 'syz.3.1005': attribute type 5 has an invalid length. [ 298.616788][ T7718] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1005'. [ 298.637826][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.670314][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.735568][ T4300] bond0 (unregistering): Released all slaves [ 298.839652][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 298.881406][ T7715] device netdevsim0 entered promiscuous mode [ 298.916981][ T7715] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1004'. [ 298.946954][ T7717] netlink: 'syz.3.1005': attribute type 39 has an invalid length. [ 299.341851][ T7749] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 300.700160][ T4479] Bluetooth: hci1: command 0x2016 tx timeout [ 301.206347][ T7770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.441360][ T7774] device erspan0 entered promiscuous mode [ 302.496452][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 302.506672][ T7781] netlink: 'syz.3.1022': attribute type 39 has an invalid length. [ 302.506945][ T7784] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1022'. [ 302.637559][ T7784] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1022'. [ 302.707972][ T7784] netlink: 'syz.3.1022': attribute type 5 has an invalid length. [ 302.778683][ T7784] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1022'. [ 303.370980][ T6627] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 303.751466][ T6627] usb 7-1: Using ep0 maxpacket: 32 [ 303.951673][ T6627] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 303.980205][ T6627] usb 7-1: config 0 has no interface number 0 [ 304.671809][ T6627] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 305.252354][ T4263] Bluetooth: hci0: command 0x2016 tx timeout [ 305.263695][ T6627] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.271902][ T6627] usb 7-1: Product: syz [ 305.280061][ T6627] usb 7-1: Manufacturer: syz [ 305.285270][ T6627] usb 7-1: SerialNumber: syz [ 305.322997][ T6627] usb 7-1: config 0 descriptor?? [ 305.335151][ T7819] binder: BINDER_SET_CONTEXT_MGR already set [ 305.416582][ T7819] binder: 7818:7819 ioctl 4018620d 2000000002c0 returned -16 [ 306.561443][ T6627] usb 7-1: can't set config #0, error -71 [ 306.577617][ T6627] usb 7-1: USB disconnect, device number 4 [ 307.972085][ T7862] process 'syz.5.1040' launched './file0' with NULL argv: empty string added [ 309.017546][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.211168][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.290767][ T7877] device erspan0 entered promiscuous mode [ 309.330492][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1043'. [ 309.789152][ T26] audit: type=1326 audit(1774156930.505:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 309.848733][ T26] audit: type=1326 audit(1774156930.505:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 309.996578][ T26] audit: type=1326 audit(1774156930.505:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 310.595893][ T26] audit: type=1326 audit(1774156930.545:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 311.131490][ T4229] Bluetooth: hci2: command 0x2016 tx timeout [ 311.156852][ T26] audit: type=1326 audit(1774156930.545:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 311.271541][ T26] audit: type=1326 audit(1774156930.545:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 311.321460][ T4229] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 311.365061][ T26] audit: type=1326 audit(1774156930.545:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 311.409481][ T26] audit: type=1326 audit(1774156930.545:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 311.753367][ T26] audit: type=1326 audit(1774156930.545:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 311.776747][ T4229] usb 6-1: Using ep0 maxpacket: 8 [ 311.783558][ T26] audit: type=1326 audit(1774156930.545:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33caf47799 code=0x7ffc0000 [ 311.956261][ T7932] crypto_alloc_aead failed rc=-2 [ 312.326724][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.421609][ T4229] usb 6-1: config 8 has an invalid interface number: 243 but max is 0 [ 312.441092][ T4229] usb 6-1: config 8 has no interface number 0 [ 312.448041][ T4229] usb 6-1: config 8 interface 243 altsetting 5 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 312.496481][ T4229] usb 6-1: config 8 interface 243 has no altsetting 0 [ 312.628202][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.675523][ T7951] device erspan0 entered promiscuous mode [ 312.715166][ T4229] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=ae.5f [ 312.739030][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1066'. [ 312.761518][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.802742][ T4229] usb 6-1: Product: syz [ 312.827527][ T4229] usb 6-1: Manufacturer: syz [ 312.841333][ T4229] usb 6-1: SerialNumber: syz [ 313.223644][ T4229] qmi_wwan: probe of 6-1:8.243 failed with error -22 [ 313.255093][ T4229] usb 6-1: USB disconnect, device number 6 [ 313.739436][ T7998] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 313.807286][ T7998] VFS: Can't find a romfs filesystem on dev nullb0. [ 313.807286][ T7998] [ 313.911951][ T8006] binder: 8005:8006 ioctl c00c620f 200000000200 returned -22 [ 314.401411][ T6568] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 314.581806][ T8031] netlink: 320 bytes leftover after parsing attributes in process `syz.7.1098'. [ 314.771670][ T6568] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.780708][ T6568] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 314.813235][ T6568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.854303][ T6568] usb 6-1: config 0 descriptor?? [ 315.001351][ T4479] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 315.409034][ T4479] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.429632][ T4479] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.454804][ T4479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.491621][ T4479] usb 3-1: config 0 descriptor?? [ 315.551898][ T4479] pwc: Askey VC010 type 2 USB webcam detected. [ 315.992189][ T6568] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 316.200924][ T6568] usb 6-1: USB disconnect, device number 7 [ 316.441405][ T4479] pwc: recv_control_msg error -32 req 02 val 2b00 [ 316.511504][ T4479] pwc: recv_control_msg error -32 req 02 val 2700 [ 316.560193][ T4479] pwc: recv_control_msg error -32 req 02 val 2c00 [ 316.841577][ T4479] pwc: recv_control_msg error -32 req 04 val 1300 [ 316.911449][ T4479] pwc: recv_control_msg error -32 req 04 val 1400 [ 316.961681][ T4479] pwc: recv_control_msg error -32 req 02 val 2000 [ 317.021483][ T4479] pwc: recv_control_msg error -32 req 02 val 2100 [ 317.061568][ T4479] pwc: recv_control_msg error -32 req 04 val 1500 [ 317.094031][ T6627] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 317.268643][ T4479] pwc: recv_control_msg error -32 req 02 val 2500 [ 317.791672][ T6627] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 317.829654][ T6627] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.911086][ T6627] usb 8-1: Product: syz [ 317.946406][ T6627] usb 8-1: Manufacturer: syz [ 317.951070][ T6627] usb 8-1: SerialNumber: syz [ 318.119061][ T4479] pwc: recv_control_msg error -71 req 02 val 2600 [ 318.151435][ T4479] pwc: recv_control_msg error -71 req 02 val 2900 [ 318.191455][ T4479] pwc: recv_control_msg error -71 req 02 val 2800 [ 318.221492][ T4479] pwc: recv_control_msg error -71 req 04 val 1100 [ 318.251510][ T4479] pwc: recv_control_msg error -71 req 04 val 1200 [ 318.271873][ T4479] pwc: Registered as video103. [ 318.286909][ T4479] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 318.351417][ T4479] usb 3-1: USB disconnect, device number 11 [ 318.512470][ T6627] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 319.061690][ T6627] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 319.128813][ T7960] Set syz1 is full, maxelem 65536 reached [ 319.172976][ T6627] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 319.366832][ T6627] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 319.382672][ T6627] lan78xx: probe of 8-1:1.0 failed with error -71 [ 319.443102][ T6627] usb 8-1: USB disconnect, device number 3 [ 319.841454][ T4479] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 319.879065][ T8145] 9pnet: Insufficient options for proto=fd [ 320.251534][ T4479] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 320.261174][ T4479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.282474][ T4479] usb 3-1: config 0 descriptor?? [ 321.182483][ T4479] usb 3-1: Cannot set autoneg [ 321.214675][ T4479] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 321.425683][ T4479] usb 3-1: USB disconnect, device number 12 [ 322.340205][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.346790][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.575002][ T8218] netlink: 'syz.2.1138': attribute type 39 has an invalid length. [ 324.172583][ T8218] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1138'. [ 324.172610][ T8218] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1138'. [ 324.172627][ T8218] netlink: 'syz.2.1138': attribute type 5 has an invalid length. [ 324.172641][ T8218] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1138'. [ 324.270325][ T8227] IPVS: Error connecting to the multicast addr [ 326.670693][ T8276] netlink: 'syz.6.1150': attribute type 39 has an invalid length. [ 326.746276][ T8276] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1150'. [ 326.788306][ T8276] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1150'. [ 326.835741][ T8276] netlink: 'syz.6.1150': attribute type 5 has an invalid length. [ 326.882536][ T8276] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1150'. [ 330.630072][ T8337] netlink: 'syz.5.1166': attribute type 39 has an invalid length. [ 330.684534][ T8337] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1166'. [ 330.781851][ T8337] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1166'. [ 330.816444][ T8337] netlink: 'syz.5.1166': attribute type 5 has an invalid length. [ 330.835726][ T8337] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1166'. [ 330.947759][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 330.947775][ T26] audit: type=1326 audit(1774156951.665:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 331.455223][ T26] audit: type=1326 audit(1774156951.765:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 331.903164][ T26] audit: type=1326 audit(1774156951.775:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 332.081611][ T26] audit: type=1326 audit(1774156951.785:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 332.154896][ T26] audit: type=1326 audit(1774156951.805:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 333.055585][ T4285] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 333.401413][ T4285] usb 3-1: Using ep0 maxpacket: 8 [ 333.651658][ T4285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.687078][ T4285] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 333.751909][ T4285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.273407][ T4285] usb 3-1: config 0 descriptor?? [ 334.278659][ T26] audit: type=1326 audit(1774156951.805:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 334.314101][ T4285] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 334.341213][ T26] audit: type=1326 audit(1774156951.805:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 334.440095][ T26] audit: type=1326 audit(1774156951.815:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 334.462564][ T26] audit: type=1326 audit(1774156951.825:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 334.547359][ T26] audit: type=1326 audit(1774156951.845:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbaf462b799 code=0x7ffc0000 [ 335.081486][ T4285] gspca_vc032x: reg_r err -32 [ 335.086846][ T4285] vc032x: probe of 3-1:0.0 failed with error -32 [ 336.007288][ T8413] netlink: 'syz.6.1182': attribute type 39 has an invalid length. [ 336.025971][ T8413] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1182'. [ 336.041856][ T8413] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1182'. [ 336.053907][ T8413] netlink: 'syz.6.1182': attribute type 5 has an invalid length. [ 336.061955][ T8413] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1182'. [ 336.287447][ T4479] usb 3-1: USB disconnect, device number 13 [ 336.476499][ T8436] IPVS: Unknown mcast interface: syz_tun [ 338.523600][ T8480] netlink: 'syz.5.1198': attribute type 39 has an invalid length. [ 338.550765][ T8480] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1198'. [ 338.575788][ T8480] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1198'. [ 338.608059][ T8480] netlink: 'syz.5.1198': attribute type 5 has an invalid length. [ 338.663223][ T8480] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1198'. [ 340.489558][ T8533] netlink: 'syz.3.1211': attribute type 39 has an invalid length. [ 340.544735][ T8533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1211'. [ 340.919510][ T8533] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1211'. [ 340.967990][ T8533] netlink: 'syz.3.1211': attribute type 5 has an invalid length. [ 341.272190][ T8533] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1211'. [ 341.749951][ T8560] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 341.756618][ T8560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.900136][ T8560] vhci_hcd vhci_hcd.0: Device attached [ 342.710267][ T4263] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 343.743315][ T4285] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 343.831455][ T6627] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 344.371642][ T6627] usb 7-1: Using ep0 maxpacket: 8 [ 344.377015][ T4285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.419797][ T4285] usb 3-1: config 0 has no interfaces? [ 344.476482][ T4285] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 344.568519][ T4285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.623064][ T4285] usb 3-1: config 0 descriptor?? [ 344.692626][ T6627] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 344.736393][ T8562] vhci_hcd: connection reset by peer [ 344.742205][ T6627] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.744262][ T817] vhci_hcd: stop threads [ 344.770884][ T817] vhci_hcd: release socket [ 344.788437][ T6627] usb 7-1: Product: syz [ 344.797143][ T817] vhci_hcd: disconnect device [ 344.824396][ T6627] usb 7-1: Manufacturer: syz [ 344.854870][ T6627] usb 7-1: SerialNumber: syz [ 344.863426][ T4285] usb 3-1: USB disconnect, device number 14 [ 344.912383][ T6627] usb 7-1: config 0 descriptor?? [ 345.155460][ T6627] gspca_main: se401-2.14.0 probing 047d:5003 [ 345.421414][ T6627] gspca_se401: ExtraFeatures: 49 [ 345.644478][ T6627] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9 [ 345.736969][ T6627] usb 7-1: USB disconnect, device number 5 [ 347.681423][ T4229] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 347.851439][ T4263] vhci_hcd: vhci_device speed not set [ 347.863271][ T8682] [U] ^F [ 347.971440][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 349.580692][ T8694] syz.6.1244 (8694): drop_caches: 2 [ 349.706474][ T4229] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.731286][ T4229] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.790964][ T4229] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 349.851304][ T4229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 349.912171][ T4229] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 350.047113][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.124147][ T4229] usb 3-1: config 0 descriptor?? [ 350.277366][ T4229] usb 3-1: can't set config #0, error -71 [ 350.759699][ T4229] usb 3-1: USB disconnect, device number 15 [ 350.926387][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 351.158493][ T4245] bond0: (slave syz_tun): link status definitely up [ 351.178776][ T4245] bond0: active interface up! [ 351.321334][ T4245] bond0: (slave syz_tun): interface is now down [ 351.547330][ T4245] bond0: now running without any active interface! [ 351.715651][ T6491] bond0: (slave syz_tun): link status definitely up [ 351.727525][ T6491] bond0: active interface up! [ 351.751526][ T6491] bond0: (slave syz_tun): interface is now down [ 352.551611][ T6491] bond0: now running without any active interface! [ 352.754317][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1261'. [ 352.794451][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1261'. [ 353.834684][ T8772] netlink: 'syz.6.1267': attribute type 39 has an invalid length. [ 353.865938][ T8772] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1267'. [ 353.939853][ T8772] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1267'. [ 354.041613][ T8772] netlink: 'syz.6.1267': attribute type 5 has an invalid length. [ 354.049728][ T8772] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1267'. [ 357.758964][ T8814] netlink: 'syz.6.1283': attribute type 39 has an invalid length. [ 357.764332][ T8814] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1283'. [ 358.353233][ T8814] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1283'. [ 358.461128][ T8814] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 358.481614][ T8814] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1283'. [ 359.900377][ T8848] overlayfs: failed to clone upperpath [ 360.187156][ T4229] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 360.582019][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.961679][ T4229] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 360.992003][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.000179][ T4229] usb 3-1: Product: syz [ 361.033529][ T4229] usb 3-1: Manufacturer: syz [ 361.061389][ T4229] usb 3-1: SerialNumber: syz [ 361.500707][ T8867] ufs: You didn't specify the type of your ufs filesystem [ 361.500707][ T8867] [ 361.500707][ T8867] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 361.500707][ T8867] [ 361.500707][ T8867] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 361.532552][ T8867] ufs: ufstype=old is supported read-only [ 361.590122][ T8867] ufs: ufs_fill_super(): bad magic number [ 362.998621][ T8879] syz.3.1299 (8879): drop_caches: 2 [ 363.651518][ T4229] usb 3-1: unit 8 not found! [ 363.656443][ T4229] usb 3-1: unit 6 not found! [ 363.761100][ T8891] netlink: 'syz.2.1303': attribute type 39 has an invalid length. [ 363.884521][ T8891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1303'. [ 363.934675][ T8891] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1303'. [ 364.074851][ T8891] netlink: 'syz.2.1303': attribute type 5 has an invalid length. [ 364.154663][ T8891] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1303'. [ 364.244135][ T4229] usb 3-1: USB disconnect, device number 16 [ 366.112882][ T8916] overlayfs: failed to clone upperpath [ 370.831406][ T6568] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 371.711479][ T6568] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 371.795288][ T8957] overlayfs: failed to clone upperpath [ 372.083862][ T6568] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 372.099674][ T6568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.112050][ T6568] usb 3-1: Product: syz [ 372.125429][ T6568] usb 3-1: Manufacturer: syz [ 372.130216][ T6568] usb 3-1: SerialNumber: syz [ 373.051535][ T6568] usb 3-1: MIDIStreaming interface descriptor not found [ 373.149871][ T6568] usb 3-1: USB disconnect, device number 17 [ 373.534450][ T8977] udevd[8977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.145648][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 376.145666][ T26] audit: type=1326 audit(1774156996.865:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 376.271309][ T26] audit: type=1326 audit(1774156996.865:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 376.342608][ T26] audit: type=1326 audit(1774156996.865:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 376.429307][ T26] audit: type=1326 audit(1774156996.875:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 377.454048][ T26] audit: type=1326 audit(1774156996.875:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 377.604111][ T9017] overlayfs: failed to clone upperpath [ 377.674559][ T26] audit: type=1326 audit(1774156996.875:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 377.899120][ T26] audit: type=1326 audit(1774156996.875:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 377.980017][ T26] audit: type=1326 audit(1774156996.875:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 378.070647][ T26] audit: type=1326 audit(1774156996.875:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.5.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6b51cfb799 code=0x7ffc0000 [ 379.876418][ T9033] process '/newroot/162/file0' started with executable stack [ 381.055720][ T9053] overlayfs: failed to clone upperpath [ 383.774980][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.782002][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.061425][ T4285] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 384.232478][ T26] audit: type=1804 audit(1774157004.955:187): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1365" name="/newroot/142/file1" dev="fuse" ino=1 res=1 errno=0 [ 384.280951][ T26] audit: type=1804 audit(1774157004.975:188): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1365" name="/newroot/142/file1" dev="fuse" ino=1 res=1 errno=0 [ 384.331457][ T4285] usb 4-1: Using ep0 maxpacket: 16 [ 384.527367][ T4285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.545164][ T4285] usb 4-1: config 0 has no interfaces? [ 385.082211][ T4285] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 385.136662][ T4285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.289035][ T4285] usb 4-1: Product: syz [ 385.297662][ T4285] usb 4-1: Manufacturer: syz [ 385.308217][ T4285] usb 4-1: SerialNumber: syz [ 385.319639][ T4285] usb 4-1: config 0 descriptor?? [ 386.183378][ T9085] device gretap0 entered promiscuous mode [ 386.222360][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 386.289287][ T9085] device gretap0 left promiscuous mode [ 386.302837][ T4285] usb 4-1: USB disconnect, device number 19 [ 388.703962][ T9146] netlink: 'syz.2.1382': attribute type 39 has an invalid length. [ 388.733292][ T9146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1382'. [ 388.791324][ T9146] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1382'. [ 388.820993][ T9146] netlink: 'syz.2.1382': attribute type 5 has an invalid length. [ 388.879973][ T9146] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1382'. [ 389.723393][ T4285] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 389.981417][ T4285] usb 7-1: Using ep0 maxpacket: 8 [ 390.309633][ T4285] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.378459][ T4285] usb 7-1: config 0 has no interfaces? [ 390.386073][ T4285] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 390.396935][ T4285] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.520526][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.533095][ T9175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.545987][ T9175] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.820867][ T9173] [ 390.823247][ T9173] ===================================================== [ 390.830200][ T9173] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 390.837669][ T9173] syzkaller #0 Not tainted [ 390.842098][ T9173] ----------------------------------------------------- [ 390.849033][ T9173] syz.2.1392/9173 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 390.856693][ T9173] ffffffff8c00a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xd2/0x330 [ 390.859698][ T9181] ubi0: attaching mtd0 [ 390.865262][ T9173] [ 390.865262][ T9173] and this task is already holding: [ 390.865274][ T9173] ffff888023dcb538 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x330 [ 390.865332][ T9173] which would create a new lock dependency: [ 390.865339][ T9173] (&f->f_owner.lock){....}-{2:2} [ 390.870500][ T9181] ubi0: scanning is finished [ 390.876779][ T9173] -> (tasklist_lock){.+.+}-{2:2} [ 390.876815][ T9173] [ 390.876815][ T9173] but this new dependency connects a HARDIRQ-irq-safe lock: [ 390.876823][ T9173] (&dev->event_lock#2){-...}-{2:2} [ 390.876849][ T9173] [ 390.876849][ T9173] ... which became HARDIRQ-irq-safe at: [ 390.876857][ T9173] lock_acquire+0x19e/0x400 [ 390.876880][ T9173] _raw_spin_lock_irqsave+0xb0/0x100 [ 390.876898][ T9173] input_event+0x76/0xb0 [ 390.876916][ T9173] psmouse_report_standard_packet+0x4f/0x200 [ 390.876938][ T9173] psmouse_process_byte+0x42b/0x620 [ 390.876957][ T9173] psmouse_handle_byte+0x43/0x490 [ 390.876976][ T9173] psmouse_interrupt+0x699/0x1130 [ 390.876995][ T9173] serio_interrupt+0x87/0x130 [ 390.877009][ T9173] i8042_interrupt+0x363/0x710 [ 390.877025][ T9173] __handle_irq_event_percpu+0x299/0x9d0 [ 390.877044][ T9173] handle_irq_event+0xa5/0x220 [ 390.877060][ T9173] handle_edge_irq+0x243/0xb20 [ 390.989723][ T9173] __common_interrupt+0xd7/0x1e0 [ 390.994775][ T9173] common_interrupt+0xb0/0xd0 [ 390.999542][ T9173] asm_common_interrupt+0x22/0x40 [ 391.004656][ T9173] unwind_next_frame+0x956/0x1d90 [ 391.009764][ T9173] arch_stack_walk+0x10c/0x140 [ 391.014615][ T9173] stack_trace_save+0xa6/0xf0 [ 391.019371][ T9173] __kasan_slab_alloc+0x9c/0xd0 [ 391.024398][ T9173] slab_post_alloc_hook+0x4c/0x380 [ 391.029606][ T9173] kmem_cache_alloc+0x100/0x290 [ 391.034630][ T9173] __kernfs_new_node+0xe3/0x6c0 [ 391.039554][ T9173] kernfs_new_node+0x148/0x250 [ 391.044404][ T9173] kernfs_create_link+0xa3/0x200 [ 391.049419][ T9173] sysfs_do_create_link_sd+0x83/0x110 [ 391.054986][ T9173] module_add_driver+0x132/0x290 [ 391.060019][ T9173] bus_add_driver+0x372/0x5a0 [ 391.064805][ T9173] driver_register+0x32d/0x430 [ 391.069682][ T9173] usb_register_driver+0x202/0x3d0 [ 391.074985][ T9173] do_one_initcall+0x272/0x730 [ 391.079840][ T9173] do_initcall_level+0x137/0x1f0 [ 391.084973][ T9173] do_initcalls+0x4b/0x90 [ 391.089380][ T9173] kernel_init_freeable+0x3e9/0x570 [ 391.094665][ T9173] kernel_init+0x19/0x1b0 [ 391.099091][ T9173] ret_from_fork+0x1f/0x30 [ 391.103596][ T9173] [ 391.103596][ T9173] to a HARDIRQ-irq-unsafe lock: [ 391.110705][ T9173] (tasklist_lock){.+.+}-{2:2} [ 391.110727][ T9173] [ 391.110727][ T9173] ... which became HARDIRQ-irq-unsafe at: [ 391.123481][ T9173] ... [ 391.123489][ T9173] lock_acquire+0x19e/0x400 [ 391.131101][ T9173] _raw_read_lock+0x32/0x40 [ 391.135786][ T9173] do_wait+0x293/0xac0 [ 391.139950][ T9173] kernel_wait+0xd3/0x1c0 [ 391.144362][ T9173] call_usermodehelper_exec_work+0xb5/0x220 [ 391.150335][ T9173] process_one_work+0x85f/0x1010 [ 391.155363][ T9173] worker_thread+0xaa6/0x1290 [ 391.160222][ T9173] kthread+0x436/0x520 [ 391.164482][ T9173] ret_from_fork+0x1f/0x30 [ 391.169088][ T9173] [ 391.169088][ T9173] other info that might help us debug this: [ 391.169088][ T9173] [ 391.179399][ T9173] Chain exists of: [ 391.179399][ T9173] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 391.179399][ T9173] [ 391.192710][ T9173] Possible interrupt unsafe locking scenario: [ 391.192710][ T9173] [ 391.201016][ T9173] CPU0 CPU1 [ 391.206372][ T9173] ---- ---- [ 391.211726][ T9173] lock(tasklist_lock); [ 391.215967][ T9173] local_irq_disable(); [ 391.222979][ T9173] lock(&dev->event_lock#2); [ 391.230177][ T9173] lock(&f->f_owner.lock); [ 391.237190][ T9173] [ 391.240659][ T9173] lock(&dev->event_lock#2); [ 391.245501][ T9173] [ 391.245501][ T9173] *** DEADLOCK *** [ 391.245501][ T9173] [ 391.253815][ T9173] 6 locks held by syz.2.1392/9173: [ 391.258928][ T9173] #0: ffff88802b566460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 391.268153][ T9173] #1: ffffffff8c437bf0 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x180/0x12b0 [ 391.277282][ T9173] #2: ffff888079c9fa68 (&ctx->flc_lock){+.+.}-{2:2}, at: __break_lease+0x18d/0x12b0 [ 391.286881][ T9173] #3: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 391.296193][ T9173] #4: ffff888074f0d2b8 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16d/0x490 [ 391.305417][ T9173] #5: ffff888023dcb538 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x330 [ 391.314673][ T9173] [ 391.314673][ T9173] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 391.325388][ T9173] -> (&dev->event_lock#2){-...}-{2:2} { [ 391.331239][ T9173] IN-HARDIRQ-W at: [ 391.335493][ T9173] lock_acquire+0x19e/0x400 [ 391.342170][ T9173] _raw_spin_lock_irqsave+0xb0/0x100 [ 391.349624][ T9173] input_event+0x76/0xb0 [ 391.356038][ T9173] psmouse_report_standard_packet+0x4f/0x200 [ 391.364289][ T9173] psmouse_process_byte+0x42b/0x620 [ 391.371654][ T9173] psmouse_handle_byte+0x43/0x490 [ 391.378855][ T9173] psmouse_interrupt+0x699/0x1130 [ 391.386236][ T9173] serio_interrupt+0x87/0x130 [ 391.393247][ T9173] i8042_interrupt+0x363/0x710 [ 391.400264][ T9173] __handle_irq_event_percpu+0x299/0x9d0 [ 391.408147][ T9173] handle_irq_event+0xa5/0x220 [ 391.415189][ T9173] handle_edge_irq+0x243/0xb20 [ 391.422131][ T9173] __common_interrupt+0xd7/0x1e0 [ 391.429399][ T9173] common_interrupt+0xb0/0xd0 [ 391.436239][ T9173] asm_common_interrupt+0x22/0x40 [ 391.443512][ T9173] unwind_next_frame+0x956/0x1d90 [ 391.450702][ T9173] arch_stack_walk+0x10c/0x140 [ 391.457625][ T9173] stack_trace_save+0xa6/0xf0 [ 391.464658][ T9173] __kasan_slab_alloc+0x9c/0xd0 [ 391.471687][ T9173] slab_post_alloc_hook+0x4c/0x380 [ 391.479074][ T9173] kmem_cache_alloc+0x100/0x290 [ 391.486113][ T9173] __kernfs_new_node+0xe3/0x6c0 [ 391.493320][ T9173] kernfs_new_node+0x148/0x250 [ 391.500268][ T9173] kernfs_create_link+0xa3/0x200 [ 391.507384][ T9173] sysfs_do_create_link_sd+0x83/0x110 [ 391.514944][ T9173] module_add_driver+0x132/0x290 [ 391.522058][ T9173] bus_add_driver+0x372/0x5a0 [ 391.528906][ T9173] driver_register+0x32d/0x430 [ 391.536010][ T9173] usb_register_driver+0x202/0x3d0 [ 391.543302][ T9173] do_one_initcall+0x272/0x730 [ 391.550412][ T9173] do_initcall_level+0x137/0x1f0 [ 391.557597][ T9173] do_initcalls+0x4b/0x90 [ 391.564095][ T9173] kernel_init_freeable+0x3e9/0x570 [ 391.571478][ T9173] kernel_init+0x19/0x1b0 [ 391.577980][ T9173] ret_from_fork+0x1f/0x30 [ 391.584566][ T9173] INITIAL USE at: [ 391.588709][ T9173] lock_acquire+0x19e/0x400 [ 391.595301][ T9173] _raw_spin_lock_irqsave+0xb0/0x100 [ 391.602682][ T9173] input_inject_event+0x9e/0x2c0 [ 391.609781][ T9173] led_trigger_event+0x10a/0x1e0 [ 391.616893][ T9173] kbd_led_trigger_activate+0xb9/0x100 [ 391.624424][ T9173] led_trigger_set+0x50c/0x910 [ 391.631354][ T9173] led_trigger_set_default+0x19c/0x1e0 [ 391.638902][ T9173] led_classdev_register_ext+0x6df/0x8c0 [ 391.646604][ T9173] input_leds_connect+0x51d/0x750 [ 391.653705][ T9173] input_register_device+0xda7/0x1140 [ 391.661164][ T9173] atkbd_connect+0x766/0xa20 [ 391.667843][ T9173] serio_driver_probe+0x76/0x90 [ 391.674772][ T9173] really_probe+0x284/0xc80 [ 391.681440][ T9173] __driver_probe_device+0x18c/0x330 [ 391.688907][ T9173] driver_probe_device+0x4f/0x420 [ 391.696039][ T9173] __driver_attach+0x46b/0x670 [ 391.702883][ T9173] bus_for_each_dev+0x182/0x1f0 [ 391.709804][ T9173] serio_handle_event+0x29c/0x840 [ 391.716914][ T9173] process_one_work+0x85f/0x1010 [ 391.723927][ T9173] worker_thread+0xaa6/0x1290 [ 391.730778][ T9173] kthread+0x436/0x520 [ 391.736929][ T9173] ret_from_fork+0x1f/0x30 [ 391.743510][ T9173] } [ 391.746261][ T9173] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 391.755706][ T9173] -> (&client->buffer_lock){....}-{2:2} { [ 391.761612][ T9173] INITIAL USE at: [ 391.765672][ T9173] lock_acquire+0x19e/0x400 [ 391.772087][ T9173] _raw_spin_lock+0x2a/0x40 [ 391.778511][ T9173] evdev_pass_values+0xcb/0xab0 [ 391.785266][ T9173] evdev_events+0x1c0/0x2f0 [ 391.791684][ T9173] input_pass_values+0x87e/0x1210 [ 391.798755][ T9173] input_handle_event+0xb3f/0x1490 [ 391.805783][ T9173] input_inject_event+0x1b9/0x2c0 [ 391.812723][ T9173] evdev_write+0x35b/0x490 [ 391.819046][ T9173] vfs_write+0x30b/0xd60 [ 391.825217][ T9173] ksys_write+0x152/0x260 [ 391.831460][ T9173] do_syscall_64+0x4c/0xa0 [ 391.837791][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.845597][ T9173] } [ 391.848290][ T9173] ... key at: [] evdev_open.__key.22+0x0/0x20 [ 391.856692][ T9173] ... acquired at: [ 391.860921][ T9173] _raw_spin_lock+0x2a/0x40 [ 391.865673][ T9173] evdev_pass_values+0xcb/0xab0 [ 391.870694][ T9173] evdev_events+0x1c0/0x2f0 [ 391.875359][ T9173] input_pass_values+0x87e/0x1210 [ 391.880558][ T9173] input_handle_event+0xb3f/0x1490 [ 391.885832][ T9173] input_inject_event+0x1b9/0x2c0 [ 391.891040][ T9173] evdev_write+0x35b/0x490 [ 391.895632][ T9173] vfs_write+0x30b/0xd60 [ 391.900051][ T9173] ksys_write+0x152/0x260 [ 391.904548][ T9173] do_syscall_64+0x4c/0xa0 [ 391.909127][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.915200][ T9173] [ 391.917522][ T9173] -> (&new->fa_lock){....}-{2:2} { [ 391.922730][ T9173] INITIAL USE at: [ 391.926695][ T9173] lock_acquire+0x19e/0x400 [ 391.932922][ T9173] _raw_write_lock_irq+0xab/0xf0 [ 391.939586][ T9173] fasync_remove_entry+0xf0/0x1c0 [ 391.946344][ T9173] lease_modify+0x1a2/0x390 [ 391.952570][ T9173] locks_remove_file+0x52f/0xec0 [ 391.959295][ T9173] __fput+0x18d/0x930 [ 391.965010][ T9173] task_work_run+0x125/0x1a0 [ 391.971332][ T9173] do_exit+0x626/0x20c0 [ 391.977219][ T9173] do_group_exit+0x12e/0x300 [ 391.983542][ T9173] get_signal+0x6ca/0x12c0 [ 391.989692][ T9173] arch_do_signal_or_restart+0xe7/0x12c0 [ 391.997077][ T9173] exit_to_user_mode_loop+0x9e/0x130 [ 392.004216][ T9173] exit_to_user_mode_prepare+0xee/0x180 [ 392.011487][ T9173] syscall_exit_to_user_mode+0x16/0x40 [ 392.018696][ T9173] do_syscall_64+0x58/0xa0 [ 392.024941][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.032570][ T9173] INITIAL READ USE at: [ 392.036975][ T9173] lock_acquire+0x19e/0x400 [ 392.043640][ T9173] _raw_read_lock_irqsave+0xb8/0x100 [ 392.051098][ T9173] kill_fasync+0x16d/0x490 [ 392.057696][ T9173] lease_break_callback+0x22/0x30 [ 392.064974][ T9173] __break_lease+0x4a1/0x12b0 [ 392.071810][ T9173] do_dentry_open+0x771/0xf80 [ 392.078672][ T9173] path_openat+0x26f5/0x2fa0 [ 392.085422][ T9173] do_filp_open+0x1e2/0x410 [ 392.092094][ T9173] do_sys_openat2+0x150/0x4b0 [ 392.098951][ T9173] __x64_sys_openat+0x135/0x160 [ 392.105966][ T9173] do_syscall_64+0x4c/0xa0 [ 392.112551][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.120739][ T9173] } [ 392.123323][ T9173] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 392.132084][ T9173] ... acquired at: [ 392.135968][ T9173] _raw_read_lock_irqsave+0xb8/0x100 [ 392.141510][ T9173] kill_fasync+0x16d/0x490 [ 392.146100][ T9173] evdev_pass_values+0x54b/0xab0 [ 392.151203][ T9173] evdev_events+0x1c0/0x2f0 [ 392.155879][ T9173] input_pass_values+0x87e/0x1210 [ 392.161078][ T9173] input_handle_event+0xb3f/0x1490 [ 392.166373][ T9173] input_inject_event+0x1b9/0x2c0 [ 392.171562][ T9173] evdev_write+0x35b/0x490 [ 392.176179][ T9173] vfs_write+0x30b/0xd60 [ 392.180584][ T9173] ksys_write+0x152/0x260 [ 392.185164][ T9173] do_syscall_64+0x4c/0xa0 [ 392.189756][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.195909][ T9173] [ 392.198223][ T9173] -> (&f->f_owner.lock){....}-{2:2} { [ 392.203684][ T9173] INITIAL USE at: [ 392.207571][ T9173] lock_acquire+0x19e/0x400 [ 392.213813][ T9173] _raw_write_lock_irq+0xab/0xf0 [ 392.220481][ T9173] __f_setown+0x37/0x330 [ 392.226275][ T9173] fcntl_dirnotify+0x6a7/0x8b0 [ 392.232607][ T9173] do_fcntl+0x5be/0x1360 [ 392.238402][ T9173] __se_sys_fcntl+0xcc/0x190 [ 392.244573][ T9173] do_syscall_64+0x4c/0xa0 [ 392.250544][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.257986][ T9173] INITIAL READ USE at: [ 392.262305][ T9173] lock_acquire+0x19e/0x400 [ 392.268885][ T9173] _raw_read_lock_irqsave+0xb8/0x100 [ 392.276160][ T9173] send_sigurg+0x25/0x390 [ 392.282469][ T9173] sk_send_sigurg+0x6b/0xc0 [ 392.288957][ T9173] tcp_urg+0x2bc/0xb20 [ 392.295178][ T9173] tcp_rcv_established+0xac2/0x1ce0 [ 392.302373][ T9173] tcp_v4_do_rcv+0x44b/0x9b0 [ 392.308945][ T9173] __release_sock+0x1e1/0x450 [ 392.315604][ T9173] release_sock+0x5b/0x1b0 [ 392.322109][ T9173] tcp_sendmsg+0x35/0x40 [ 392.328369][ T9173] __sys_sendto+0x46d/0x620 [ 392.334947][ T9173] __x64_sys_sendto+0xda/0xf0 [ 392.341619][ T9173] do_syscall_64+0x4c/0xa0 [ 392.348040][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.356042][ T9173] } [ 392.358547][ T9173] ... key at: [] __alloc_file.__key+0x0/0x10 [ 392.366619][ T9173] ... acquired at: [ 392.370412][ T9173] _raw_read_lock_irqsave+0xb8/0x100 [ 392.375990][ T9173] send_sigio+0x2f/0x330 [ 392.380456][ T9173] kill_fasync+0x20a/0x490 [ 392.385131][ T9173] lease_break_callback+0x22/0x30 [ 392.390330][ T9173] __break_lease+0x4a1/0x12b0 [ 392.395171][ T9173] do_dentry_open+0x771/0xf80 [ 392.400021][ T9173] path_openat+0x26f5/0x2fa0 [ 392.404872][ T9173] do_filp_open+0x1e2/0x410 [ 392.409535][ T9173] do_sys_openat2+0x150/0x4b0 [ 392.414381][ T9173] __x64_sys_openat+0x135/0x160 [ 392.419417][ T9173] do_syscall_64+0x4c/0xa0 [ 392.424003][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.430068][ T9173] [ 392.432393][ T9173] [ 392.432393][ T9173] the dependencies between the lock to be acquired [ 392.432400][ T9173] and HARDIRQ-irq-unsafe lock: [ 392.445908][ T9173] -> (tasklist_lock){.+.+}-{2:2} { [ 392.451069][ T9173] HARDIRQ-ON-R at: [ 392.455135][ T9173] lock_acquire+0x19e/0x400 [ 392.461464][ T9173] _raw_read_lock+0x32/0x40 [ 392.467625][ T9173] do_wait+0x293/0xac0 [ 392.473356][ T9173] kernel_wait+0xd3/0x1c0 [ 392.479350][ T9173] call_usermodehelper_exec_work+0xb5/0x220 [ 392.486910][ T9173] process_one_work+0x85f/0x1010 [ 392.493500][ T9173] worker_thread+0xaa6/0x1290 [ 392.499832][ T9173] kthread+0x436/0x520 [ 392.505644][ T9173] ret_from_fork+0x1f/0x30 [ 392.511711][ T9173] SOFTIRQ-ON-R at: [ 392.515694][ T9173] lock_acquire+0x19e/0x400 [ 392.521849][ T9173] _raw_read_lock+0x32/0x40 [ 392.527999][ T9173] do_wait+0x293/0xac0 [ 392.533803][ T9173] kernel_wait+0xd3/0x1c0 [ 392.539777][ T9173] call_usermodehelper_exec_work+0xb5/0x220 [ 392.547345][ T9173] process_one_work+0x85f/0x1010 [ 392.553929][ T9173] worker_thread+0xaa6/0x1290 [ 392.560252][ T9173] kthread+0x436/0x520 [ 392.565967][ T9173] ret_from_fork+0x1f/0x30 [ 392.572035][ T9173] INITIAL USE at: [ 392.575929][ T9173] lock_acquire+0x19e/0x400 [ 392.582185][ T9173] _raw_write_lock_irq+0xab/0xf0 [ 392.588678][ T9173] copy_process+0x236f/0x3e20 [ 392.594914][ T9173] kernel_clone+0x23f/0x990 [ 392.600969][ T9173] kernel_thread+0xfa/0x160 [ 392.607021][ T9173] rest_init+0x21/0x330 [ 392.612732][ T9173] start_kernel+0x489/0x540 [ 392.618797][ T9173] secondary_startup_64_no_verify+0xb1/0xbb [ 392.626279][ T9173] INITIAL READ USE at: [ 392.630640][ T9173] lock_acquire+0x19e/0x400 [ 392.637134][ T9173] _raw_read_lock+0x32/0x40 [ 392.643638][ T9173] do_wait+0x293/0xac0 [ 392.649699][ T9173] kernel_wait+0xd3/0x1c0 [ 392.656028][ T9173] call_usermodehelper_exec_work+0xb5/0x220 [ 392.663917][ T9173] process_one_work+0x85f/0x1010 [ 392.670846][ T9173] worker_thread+0xaa6/0x1290 [ 392.677512][ T9173] kthread+0x436/0x520 [ 392.683577][ T9173] ret_from_fork+0x1f/0x30 [ 392.689991][ T9173] } [ 392.692484][ T9173] ... key at: [] tasklist_lock+0x18/0x40 [ 392.700198][ T9173] ... acquired at: [ 392.703988][ T9173] _raw_read_lock+0x32/0x40 [ 392.708757][ T9173] send_sigio+0xd2/0x330 [ 392.713172][ T9173] kill_fasync+0x20a/0x490 [ 392.717757][ T9173] lease_break_callback+0x22/0x30 [ 392.722948][ T9173] __break_lease+0x4a1/0x12b0 [ 392.727788][ T9173] vfs_truncate+0x1fb/0x2f0 [ 392.732470][ T9173] do_sys_truncate+0xf2/0x1c0 [ 392.737409][ T9173] do_syscall_64+0x4c/0xa0 [ 392.741997][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.748062][ T9173] [ 392.750375][ T9173] [ 392.750375][ T9173] stack backtrace: [ 392.756267][ T9173] CPU: 1 PID: 9173 Comm: syz.2.1392 Not tainted syzkaller #0 [ 392.763629][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.773786][ T9173] Call Trace: [ 392.777078][ T9173] [ 392.780021][ T9173] dump_stack_lvl+0x188/0x250 [ 392.784700][ T9173] ? load_image+0x400/0x400 [ 392.789200][ T9173] ? show_regs_print_info+0x20/0x20 [ 392.794495][ T9173] ? load_image+0x400/0x400 [ 392.799007][ T9173] ? print_shortest_lock_dependencies+0xf0/0x160 [ 392.805333][ T9173] __lock_acquire+0x6688/0x7d10 [ 392.810206][ T9173] ? verify_lock_unused+0x140/0x140 [ 392.815496][ T9173] ? do_syscall_64+0x4c/0xa0 [ 392.820105][ T9173] lock_acquire+0x19e/0x400 [ 392.824628][ T9173] ? send_sigio+0xd2/0x330 [ 392.829050][ T9173] ? read_lock_is_recursive+0x10/0x10 [ 392.834528][ T9173] ? read_lock_is_recursive+0x10/0x10 [ 392.839897][ T9173] ? do_raw_read_lock+0x39/0x80 [ 392.844747][ T9173] ? _raw_read_lock_irqsave+0xc4/0x100 [ 392.850294][ T9173] ? _raw_read_lock+0x40/0x40 [ 392.855057][ T9173] ? do_raw_read_lock+0x39/0x80 [ 392.859920][ T9173] _raw_read_lock+0x32/0x40 [ 392.864427][ T9173] ? send_sigio+0xd2/0x330 [ 392.868831][ T9173] send_sigio+0xd2/0x330 [ 392.873078][ T9173] kill_fasync+0x20a/0x490 [ 392.877507][ T9173] lease_break_callback+0x22/0x30 [ 392.882539][ T9173] __break_lease+0x4a1/0x12b0 [ 392.887223][ T9173] ? lease_modify+0x390/0x390 [ 392.892009][ T9173] ? privileged_wrt_inode_uidgid+0x1ed/0x240 [ 392.898185][ T9173] ? generic_permission+0x30e/0x510 [ 392.903416][ T9173] vfs_truncate+0x1fb/0x2f0 [ 392.907924][ T9173] do_sys_truncate+0xf2/0x1c0 [ 392.912686][ T9173] ? lock_chain_count+0x20/0x20 [ 392.917530][ T9173] ? break_lease+0xd0/0xd0 [ 392.921945][ T9173] ? lockdep_hardirqs_on+0x94/0x140 [ 392.927158][ T9173] do_syscall_64+0x4c/0xa0 [ 392.931594][ T9173] ? clear_bhb_loop+0x30/0x80 [ 392.936267][ T9173] ? clear_bhb_loop+0x30/0x80 [ 392.940930][ T9173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.946812][ T9173] RIP: 0033:0x7fbaf462b799 [ 392.951224][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.972058][ T9173] RSP: 002b:00007fbaf2885028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 392.980582][ T9173] RAX: ffffffffffffffda RBX: 00007fbaf48a4fa0 RCX: 00007fbaf462b799 [ 392.988566][ T9173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 392.996698][ T9173] RBP: 00007fbaf46c1c99 R08: 0000000000000000 R09: 0000000000000000 [ 393.004768][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.012994][ T9173] R13: 00007fbaf48a5038 R14: 00007fbaf48a4fa0 R15: 00007ffefbbdf3c8 [ 393.021135][ T9173] [ 393.043708][ T9181] ubi0: empty MTD device detected [ 393.058782][ T4285] usb 7-1: config 0 descriptor?? [ 393.112723][ T4285] usb 7-1: can't set config #0, error -71 [ 393.120601][ T4285] usb 7-1: USB disconnect, device number 6 [ 393.131404][ T9175] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 393.140054][ T9175] chnl_net:chnl_net_open(): state disconnected [ 393.146527][ T9175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.215264][ T9181] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 393.225358][ T9181] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3903 bytes [ 393.233530][ T9181] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 393.240702][ T9181] ubi0: VID header offset: 129 (aligned 129), data offset: 193 [ 393.252722][ T9181] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 393.259631][ T9181] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 22 [ 393.270245][ T9181] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1995514877 [ 393.280937][ T9181] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 393.294266][ T9186] ubi0: background thread "ubi_bgt0d" started, PID 9186 [ 393.351300][ T4231] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 393.551435][ T4231] usb 4-1: device descriptor read/64, error -71 [ 393.822255][ T4231] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 394.011584][ T4231] usb 4-1: device descriptor read/64, error -71 [ 394.131469][ T4231] usb usb4-port1: attempt power cycle