last executing test programs: 7m28.397757636s ago: executing program 4 (id=96): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) 7m28.182758007s ago: executing program 4 (id=98): socket$inet(0x2, 0x80001, 0x84) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0xf5c, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800200601fe800000000000000000000000000022ff0200"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x114, &(0x7f00000002c0)={@link_local, @local, @val={@val={0x88a8, 0x4, 0x0, 0x3}}, {@llc={0x4, {@llc={0xfe, 0x7e, ']', "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"}}}}}, 0x0) close(r2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0xffff0001) 7m25.803549903s ago: executing program 4 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$vhost_msg_v2(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket(0x10, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) r6 = syz_clone(0x2000000, &(0x7f00000024c0)="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", 0x55b, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000001380)='ns/uts\x00') ioprio_get$pid(0x0, r6) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae", 0x24) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 7m23.108083446s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe0000010000000014001200"], 0x30}}, 0x0) 7m22.912427516s ago: executing program 4 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)='\'', 0x1}], 0x1}, 0x4004) 7m22.007480874s ago: executing program 4 (id=115): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000340)=""/227) 7m6.319842794s ago: executing program 32 (id=115): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000340)=""/227) 4m38.579836331s ago: executing program 1 (id=464): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000024000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6_vti0\x00'}}, 0x1e) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0307269da64d978edf251f"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) 4m37.480340409s ago: executing program 1 (id=466): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004800), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000004840)={0x14, r1, 0xdb34a680fbe173ff, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) 4m37.387470174s ago: executing program 1 (id=468): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000300)='\x8b\xc9\xac\xb5\x15\x85\xbey\xc2\xd0\xfd7O\xdb\xf2\xa3\xa6\xea\vi\x91|\xf7;;G\xee\xc2\xa5\xb1^\x19F\xbd\x8a\x13\xf9\xa6;\xce\xa9\x8e\x8bF.\xdc\x1e\xff\xed\xf0Rr\x93q\xbd{=3!-I\a\xc3\xe4\xdc\xf9y\xd5\x18\xa6\x17\xcc\xeb\xae-\x06\xed\xa7n\'\xa6\xdf\x84\x8b\x00\x00\x00\xcc]\x8f\xfd[\x8b;\x9ed\xe7_\xf6\xd4\xa2\xc6k\xee\xa3_J;\x9c\xf8r,\"B\x1atm\xd893\xf8\"\xbb]Z!\x80pU\x98\x00\\\x9e\"\xea\xa1[\xbc.%@xT\xb4\xa7\xf9\xb5\xa5eW\xf9\xfez{y\x95\x14\x1a\xfc\xb1%sP\x16\x1f\x15[\x00\xd7\x92u\x9d#\xee\xa9\xf9\x1a\xe1\xd6\xd3\x1a\xb3\xee\x80Y\x17&?\x10\x88s<5\xeb\xc3\xb5\xa3\x1fF\xcfOf\x13\xc7\xc4\xb0mUR\x84\xab\x8fp\x1aZV\x13\xff\xef\x18\f\xbc\x00[\x85|\xd0d\x9d\xef\xc8\xfc\xb9\xc2\x87\xd0M~c\xd7\xe0\xa0L\"c\xca\x94\x9a<\x98\xe6\x86\xc3\x9e\xc7}\x9ak\xe8\x86\xed\xbb<\xa3\xcd\xb5\xa8\xc1\xe6\x9f\xb6\xb3\x8c\x15\xda9\xf7H\xe4\x9c\x87\xe4\xe8{&v(\xe7\xc3\'K\bN\r\x04\xb8B(((\xce\xc2\xbf\xa7\xd5v7n\xd0N\x19\v\xf1\xd4\xc3\x98\x8c~`\x1e\xb4\x9e\x9f\xc5\xef\x85Bb\xba\xc3\xa1*\xfd\x02\xa3\x90mX\x03\x8c\x96Ch\x13\x9b^\x89CI\x7f\x99A:\x1a8\xa1\x01\x19\x1c!\xca\xd7D]\xaf\x9b_:\xba~9\xd2D\x9a3\xd9\xc3\xf5\a\xe5\x9f\x9aEJ\xc9\xb0sBh') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000000)=0x28, 0x4) shmget$private(0x0, 0x2000, 0xfa71340b9fef182d, &(0x7f0000ffe000/0x2000)=nil) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0x7fb, 0x2) r4 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000500)) 4m34.585300752s ago: executing program 1 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4m34.166332505s ago: executing program 1 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 4m33.427728723s ago: executing program 1 (id=480): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) 4m32.870586733s ago: executing program 33 (id=480): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) 2m19.654728931s ago: executing program 6 (id=1015): syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x5}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000000b0000000e0001"], 0x34}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) 2m15.445943765s ago: executing program 6 (id=1029): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x8090}, 0x24008040) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000007c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r3, &(0x7f0000000040)={[0xff]}, 0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, 0x0, 0x0) syz_usb_disconnect(r1) 2m12.807719224s ago: executing program 6 (id=1035): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0x0, 0xff, 0x7}]}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 2m11.843769475s ago: executing program 6 (id=1038): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2m10.581481682s ago: executing program 6 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') read$msr(r0, &(0x7f0000002180)=""/102386, 0x18ff2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x2}, 0x8) 2m10.464826088s ago: executing program 6 (id=1046): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0x0, 0x40000000000, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, 0x7, 0x4, 0x401, 0x2, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x840, 0xffffffff80000001, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10004, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x100000000000, 0x4000000000, 0x3, 0x2, 0x0, 0x8000007, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f00000045c0), 0x0, 0x300) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 1m54.9249568s ago: executing program 34 (id=1046): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0x0, 0x40000000000, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, 0x7, 0x4, 0x401, 0x2, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x840, 0xffffffff80000001, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10004, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x100000000000, 0x4000000000, 0x3, 0x2, 0x0, 0x8000007, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f00000045c0), 0x0, 0x300) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 14.656540335s ago: executing program 5 (id=1416): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) 10.862504336s ago: executing program 2 (id=1431): socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6_vti0\x00'}}, 0x1e) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0307269da64d978edf251f"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) 9.994584552s ago: executing program 5 (id=1436): socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 9.009666434s ago: executing program 5 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000005df0000000005000400000000000900020073797a3000000000140007800800134000000000080012400000000d050005000000000005000100060000000d000300686173683a6d616300"], 0x5c}}, 0x0) 8.815340014s ago: executing program 2 (id=1443): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101000) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="021604000a00000026bd7000fcdbdf250800120002000200bc6b6e00000000000600320009070016030000000000000064010101000000000000000000000000000000000000000000000000000000002b0dd6fea2182d6bdc3b7280b536daab1bb4e8aac76e7de7da5924edb62e54e913df87f66daf14519c91b1db5ef9c89d0b189c52759d1a60bfa2e08605928a84256a9b664de7ae765019f07eab6adfb3ce94cfbccd3fe424d7dcdaf2842b08ba6da298c1e6ae92f9338ea65dd9d82e351ef2380bb2b27f4b54047e10cf7d52b8865534da53ee1610cec78cb8c28b5310d89519e1db73983e65d2c7442b6f0e1f41d7e43d43fb018774c91fd94e7d53d2"], 0x50}}, 0x890) 8.683587131s ago: executing program 5 (id=1444): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$unix(0x1, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000300), &(0x7f0000000440)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000480)=""/106, 0x20980, 0x70, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 8.673480142s ago: executing program 3 (id=1445): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) close(0x4) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) 8.007484307s ago: executing program 5 (id=1446): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) 7.979254978s ago: executing program 3 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 6.915819935s ago: executing program 3 (id=1449): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fe", 0x80}, {&(0x7f00000000c0)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}], 0x2, 0x20000044) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 6.04766324s ago: executing program 2 (id=1450): socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 6.030212662s ago: executing program 3 (id=1451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sched_setattr(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x18) 5.804438173s ago: executing program 3 (id=1453): socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6_vti0\x00'}}, 0x1e) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0307269da64d978edf251f"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) 5.003688025s ago: executing program 2 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 4.811863996s ago: executing program 2 (id=1456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 4.811653236s ago: executing program 7 (id=1457): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$unix(0x1, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000300), &(0x7f0000000440)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000480)=""/106, 0x20980, 0x70, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 4.582055508s ago: executing program 7 (id=1459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 4.483569923s ago: executing program 2 (id=1461): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101000) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x50}}, 0x890) 3.501080855s ago: executing program 7 (id=1462): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc9, 0x12d5f, 0x3}}, 0x44) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x3, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x0, 0xc9, 0x80012d58, 0x12d5c}}, 0x44) 3.346638844s ago: executing program 7 (id=1463): socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001}) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x4001b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r1, 0x0, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x410040, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000004940)={&(0x7f0000005000)={[{&(0x7f0000000200)="41c78e9b8e0201e36179ecf0589d776355f2abecd69b1de1", 0x18, 0x2}, {&(0x7f0000000240)="a7000eba7cec2024bf61fffe6d734378858a8d", 0x13}, {&(0x7f0000000280)="5649425ddf0d42525baee779dcf5d7c5ebade73c256649368f641b59fb261acef59824952398f89b06c04a50fed2d974", 0x30, 0x3}, {&(0x7f0000001080)="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", 0x1000, 0x3}, {&(0x7f0000002080)="acb1e8370cdd243473c85c97213bc11901e6a6202ccf1efb88c05c4e9ea51d285138dca7dc5a07b865ad3675ca46706f42974bb6af691a418ee935b334ac80ffa416fada1d4638ff5c6b2bf1ea01afe88c00215c0edd5f6a7a1dc51a9027f0c7b6ae989491f49feb989dcd1465fc60406e6aab537300675489d9a15e03bfad163cfddf4eb97e1b538cbe397da559a4e4875ff955c7e817f2a3facc6edef07b5295abe30041b1b6c292959ab48f1af9292bac1d252e71e0a28607a239c3bc7b50386b7f93c084dd86b75db0c04b0eb1d1a077", 0xd2, 0x1}, {&(0x7f0000002640)="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", 0xffc}, {&(0x7f0000003640)="df36c4dd7e3f068717c3bcfb46c3beaa5985f9f77c9ace5361bdee1a6f5a7bd1de8b3f01e7c9a97d0afbb4e3cc37e93b27b40b58c2133d01c1f8caa3b7912942f53e31c97456955d4cd219b142b04378c7e1dd91da94ac0f743bead6264876f42c2b78be0d4dcd67e0c812c20d3f3c8df1d8f7b08a11991378ff22aae8253e9b64f35a7dc5ba10a9bf31306823335b57e869687ee4e8437f00253ccc65d6854b6a4d27c2509e79488438f9cf375416a057bf10024d87c992f436bf05033bc69db984064c0b4953979b8700308374e7f6c5", 0xd1, 0x3}, {&(0x7f0000003740)="a07b6a874ca6dcd128880b9109216c648fd6bb5e8bf20174ecb8720a3eedce95d77168e8dcba0a4e344cb67fb1aac086f0b3f7693ebd2c993e5dd183562fac5c8a0ecf6d32aeff097db816bb6be12db4fe0829933762c7c7fd7a1ea8b67edc87089dc3cedd295e4a198b97f676da80746a1bd4aa81e21f990c7558b4d1af57236a90e1df64f209a05af9803cdb1929acc36fd6409973a8371dbc73ea6359396ee9bbdff9472b19f752bd20f25fa6827d09a3f367038a3046f542e750173993081f83faa21966a862aebb", 0xca, 0x1}, {0x0, 0x0, 0x2}, {&(0x7f0000004840)="98736a9eceafca7646b6e1c4dc872ddb5ae3d52ecf1c3fefcf0c5675094d160cb21155ca4e331c201d9844b8bc769cc20788dfaac01222ff4513887194f170d4f00065bba155d7bff07849fc6966383466c785c8fb3bcf8ce9cecc6d086dd862e5b70c99610b987c45f3ed2c29606ca188ce9a22ab3bb9188093dd7f03c500508dbb4b4e0609cc6b778e3f8e36eb9674654754528495054b443e5ef0ed75a2482760b2aa9c4c39be98e11b414fc06e59cefc9789c67aee8d19099b630d9e8610a80436a6dca7ee15191b738462898844ef528bdbec7144e47cd08a4ef74839279c5e0334933bd4da5e61212b", 0xec, 0x1}]}, 0xa, 0x3}, 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x80605414, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1402, 0x10, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x20008000) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x400000) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x12) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000040)) 3.319802195s ago: executing program 0 (id=1464): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) fanotify_init(0x1, 0x80000) 3.143936154s ago: executing program 0 (id=1465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.916459107s ago: executing program 0 (id=1466): timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) 2.761762884s ago: executing program 0 (id=1467): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x7) 2.504484428s ago: executing program 0 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000062d50000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, 0x0, 0x41) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 2.353382496s ago: executing program 0 (id=1469): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r1, &(0x7f0000000240)=""/157, 0x9d) getdents(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.140931267s ago: executing program 5 (id=1470): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$unix(0x1, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000300), &(0x7f0000000440)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000480)=""/106, 0x20980, 0x70, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 2.071794551s ago: executing program 3 (id=1471): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0x0) 1.416313215s ago: executing program 7 (id=1472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 0s ago: executing program 7 (id=1473): timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x1, 0x38) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): mmended to keep mac addresses unique to avoid problems! [ 66.325595][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.574839][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.586057][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.603472][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.613737][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.748254][ C1] sched: RT throttling activated [ 66.770595][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.771623][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.974193][ T4290] misc userio: The device must be registered before sending interrupts [ 68.138918][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.148009][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.186195][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.221817][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.256181][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.290194][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.313684][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.331798][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.468480][ T4259] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.495973][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.511865][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.531995][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.580241][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.588569][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.599125][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.612968][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.666667][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.674880][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.729060][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.736928][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.775578][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.843179][ T4259] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 68.868408][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.900726][ T4259] usb 3-1: config 0 descriptor?? [ 68.957872][ T4259] cp210x 3-1:0.0: cp210x converter detected [ 69.153539][ T4309] serio: Serial port ttyS3 [ 69.158458][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.328437][ T4241] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.368494][ T4259] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 69.427003][ T4259] usb 3-1: cp210x converter now attached to ttyUSB0 [ 69.598376][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 69.642397][ T4226] usb 3-1: USB disconnect, device number 2 [ 69.664601][ T4226] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 69.688178][ T4226] cp210x 3-1:0.0: device disconnected [ 69.689443][ T4228] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 69.716985][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.726373][ T4228] usb 5-1: Product: syz [ 69.733880][ T4228] usb 5-1: Manufacturer: syz [ 69.738557][ T4241] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 69.738990][ T4228] usb 5-1: SerialNumber: syz [ 69.765219][ T4228] usb 5-1: config 0 descriptor?? [ 69.909017][ T4241] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 69.918112][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.927286][ T4241] usb 2-1: Product: syz [ 69.931801][ T4241] usb 2-1: Manufacturer: syz [ 69.936498][ T4241] usb 2-1: SerialNumber: syz [ 69.965527][ T4241] usb 2-1: config 0 descriptor?? [ 70.021070][ T4241] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 70.234723][ T4307] udc-core: couldn't find an available UDC or it's busy [ 70.248458][ T4228] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 70.266700][ T4228] usb 5-1: Firmware version (0.0) predates our first public release. [ 70.280409][ T4307] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.292482][ T4228] usb 5-1: Please update to version 0.2 or newer [ 70.339865][ T4228] usb 5-1: atusb_probe: initialization failed, error = -32 [ 70.356839][ T4228] atusb: probe of 5-1:0.0 failed with error -32 [ 70.375592][ T4228] usb 5-1: USB disconnect, device number 2 [ 71.424231][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.431047][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.468309][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 71.488304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 71.498299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 71.508298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 71.518295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 72.629431][ T4241] gspca_zc3xx: reg_w_i err -110 [ 73.258397][ T4241] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 73.268054][ T4241] gspca_zc3xx: probe of 2-1:0.0 failed with error -110 [ 73.303878][ T4241] usb 2-1: USB disconnect, device number 2 [ 73.619561][ T4355] tmpfs: Unknown parameter 'usrquota' [ 74.395962][ T4358] input: syz1 as /devices/virtual/input/input5 [ 74.714239][ T4373] tipc: Can't bind to reserved service type 1 [ 76.368291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.388306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.398280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.529684][ T4382] sctp: failed to load transform for md5: -2 [ 76.878107][ T4412] 9pnet: Insufficient options for proto=fd [ 77.958836][ T4259] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.038699][ T4259] usb 1-1: Using ep0 maxpacket: 32 [ 79.054911][ T4434] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.173041][ T4441] binder: 4440:4441 ioctl 4018620d 0 returned -22 [ 79.208453][ T4259] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.294985][ T4259] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 79.306029][ T4225] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 79.533890][ T4259] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 79.588551][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.596929][ T4259] usb 1-1: Product: syz [ 79.720971][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.957083][ T4225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 80.037358][ T4259] usb 1-1: Manufacturer: syz [ 80.058335][ T4259] usb 1-1: SerialNumber: syz [ 80.108749][ T4259] usb 1-1: can't set config #7, error -71 [ 80.122578][ T4459] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.158766][ T4259] usb 1-1: USB disconnect, device number 2 [ 80.238569][ T4225] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 80.247760][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.270803][ T4225] usb 3-1: Product: syz [ 80.275027][ T4225] usb 3-1: Manufacturer: syz [ 80.281753][ T4225] usb 3-1: SerialNumber: syz [ 80.319604][ T4225] usb 3-1: config 0 descriptor?? [ 80.564754][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.073290][ T4241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.106310][ T4241] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.126648][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.166906][ T4241] usb 5-1: config 0 descriptor?? [ 81.510359][ T21] usb 3-1: USB disconnect, device number 3 [ 81.538294][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 81.568276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 82.155862][ T23] cfg80211: failed to load regulatory.db [ 82.210156][ T4226] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.279064][ T4241] usbhid 5-1:0.0: can't add hid device: -71 [ 82.287823][ T4241] usbhid: probe of 5-1:0.0 failed with error -71 [ 82.316622][ T4241] usb 5-1: USB disconnect, device number 3 [ 82.628897][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.641421][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.651973][ T4226] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 82.661611][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.709211][ T4226] usb 2-1: config 0 descriptor?? [ 82.972215][ T4473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 83.344819][ T4241] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.293213][ T4226] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 5/7 [ 84.388102][ T4226] cp2112 0003:10C4:EA90.0001: parse failed [ 84.511113][ T4226] cp2112: probe of 0003:10C4:EA90.0001 failed with error -22 [ 84.663087][ T4241] usb 5-1: device descriptor read/all, error -71 [ 84.751710][ T4492] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.438371][ T1108] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 85.623146][ T4259] usb 2-1: USB disconnect, device number 3 [ 85.928428][ T1108] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 86.518524][ T4510] netlink: 'syz.1.72': attribute type 2 has an invalid length. [ 87.952529][ T1108] usb 3-1: config 6 has no interface number 0 [ 88.578546][ T4515] device syzkaller0 entered promiscuous mode [ 88.839874][ T1108] usb 3-1: config 6 interface 2 altsetting 90 endpoint 0xB has invalid wMaxPacketSize 0 [ 88.850824][ T1108] usb 3-1: config 6 interface 2 altsetting 90 has an invalid endpoint with address 0xE2, skipping [ 88.862160][ T1108] usb 3-1: config 6 interface 2 has no altsetting 0 [ 88.908412][ T1108] usb 3-1: string descriptor 0 read error: -71 [ 88.915788][ T1108] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 88.925093][ T1108] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 88.958435][ T1108] usb 3-1: can't set config #6, error -71 [ 88.967912][ T1108] usb 3-1: USB disconnect, device number 4 [ 89.081563][ T4520] smc: net device vcan0 applied user defined pnetid SYZ1 [ 89.093246][ T4520] smc: net device vcan0 erased user defined pnetid SYZ1 [ 89.766712][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.708407][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 90.868768][ T1108] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 91.161258][ T1108] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 91.228309][ T4259] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.511552][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.631459][ T1108] usb 3-1: Product: syz [ 91.635779][ T1108] usb 3-1: Manufacturer: syz [ 91.649510][ T1108] usb 3-1: SerialNumber: syz [ 91.669348][ T1108] usb 3-1: config 0 descriptor?? [ 91.720703][ T1108] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 91.734776][ T1108] usb 3-1: Detected FT232RL [ 91.848958][ T1108] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 91.878587][ T1108] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 91.912298][ T1108] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 91.942735][ T1108] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.964848][ T4553] device syzkaller0 entered promiscuous mode [ 91.968594][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.010416][ T1108] usb 3-1: USB disconnect, device number 5 [ 92.016469][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.197339][ T1108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.206823][ T4259] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 92.216597][ T1108] ftdi_sio 3-1:0.0: device disconnected [ 92.222597][ T4259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.236428][ T4259] usb 1-1: config 0 descriptor?? [ 92.291722][ T4558] Zero length message leads to an empty skb [ 93.710363][ T4259] cp2112 0003:10C4:EA90.0002: item fetching failed at offset 5/7 [ 93.827096][ T4259] cp2112 0003:10C4:EA90.0002: parse failed [ 93.938886][ T4259] cp2112: probe of 0003:10C4:EA90.0002 failed with error -22 [ 96.265078][ T4592] device syzkaller0 entered promiscuous mode [ 98.326496][ T4609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.106'. [ 99.527959][ T4229] usb 1-1: USB disconnect, device number 3 [ 100.468978][ T1108] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 102.568596][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.073250][ T1108] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 103.102004][ T1108] usb 3-1: can't read configurations, error -71 [ 103.810975][ T3520] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.199068][ T3520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.364718][ T3520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.375509][ T3520] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 104.981902][ T3520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.044740][ T3520] usb 1-1: config 0 descriptor?? [ 107.048405][ T3520] cp2112 0003:10C4:EA90.0003: item fetching failed at offset 5/7 [ 107.088788][ T3520] cp2112 0003:10C4:EA90.0003: parse failed [ 107.124225][ T3520] cp2112: probe of 0003:10C4:EA90.0003 failed with error -22 [ 108.623253][ T21] usb 1-1: USB disconnect, device number 4 [ 109.178306][ T4226] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.430849][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 109.482236][ T4226] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 109.619397][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 109.633346][ T4226] usb 2-1: config 0 has no interface number 0 [ 109.728843][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 109.787562][ T4226] usb 2-1: config 0 has no interface number 0 [ 109.919107][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 109.928369][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.951975][ T4226] usb 2-1: config 0 has no interface number 0 [ 110.068819][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.096181][ T4226] usb 2-1: config 0 has no interface number 0 [ 110.248900][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.298790][ T4226] usb 2-1: config 0 has no interface number 0 [ 110.448570][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.473284][ T4226] usb 2-1: config 0 has no interface number 0 [ 110.578513][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.586667][ T4226] usb 2-1: config 0 has no interface number 0 [ 110.728727][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.853558][ T4226] usb 2-1: config 0 has no interface number 0 [ 111.100874][ T4226] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 111.151485][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.260280][ T4226] usb 2-1: Product: syz [ 111.321779][ T4226] usb 2-1: Manufacturer: syz [ 111.448329][ T4226] usb 2-1: SerialNumber: syz [ 111.455376][ T4226] usb 2-1: config 0 descriptor?? [ 111.500027][ T4226] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) driver version 1.00 [ 112.153178][ T4226] etas_es58x 2-1:0.2: Product info: 籽鷳넄펈✙꛾菎噫茊䑾㬗慹곙蚩匴凞虋ﳦ਀㔰苨鴫㊶䤾䆽쪦ᭅ [ 112.911169][ T21] usb 2-1: USB disconnect, device number 4 [ 112.950897][ T21] etas_es58x 2-1:0.2: Disconnecting syz syz [ 113.009189][ T7] usb 1-1: unable to read config index 0 descriptor/all [ 113.016251][ T7] usb 1-1: can't read configurations, error -71 [ 113.238739][ T3520] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.159232][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.178463][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.192126][ T3520] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 115.204482][ T3520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.264072][ T3520] usb 3-1: config 0 descriptor?? [ 115.728249][ T4761] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 115.735259][ T4761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.744113][ T4761] vhci_hcd vhci_hcd.0: Device attached [ 116.013136][ T3520] usbhid 3-1:0.0: can't add hid device: -71 [ 116.028486][ T4229] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 116.045905][ T4762] vhci_hcd: connection closed [ 116.051687][ T4282] vhci_hcd: stop threads [ 116.182895][ T4282] vhci_hcd: release socket [ 116.330637][ T4282] vhci_hcd: disconnect device [ 116.552593][ T3520] usbhid: probe of 3-1:0.0 failed with error -71 [ 116.562481][ T3520] usb 3-1: USB disconnect, device number 8 [ 118.668469][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.908473][ T7] usb 2-1: device descriptor read/64, error -71 [ 119.198495][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.420297][ T7] usb 2-1: device descriptor read/64, error -71 [ 119.549126][ T7] usb usb2-port1: attempt power cycle [ 120.428408][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.568420][ T7] usb 2-1: device descriptor read/8, error -71 [ 121.638992][ T4229] vhci_hcd: vhci_device speed not set [ 122.992286][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 124.289029][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.310032][ T4792] chnl_net:caif_netlink_parms(): no params data found [ 124.938780][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.976770][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.436665][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.444917][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.568521][ T4792] device bridge_slave_0 entered promiscuous mode [ 125.588624][ T7] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 125.625178][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.652783][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.673060][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.692694][ T7] usb 2-1: config 0 descriptor?? [ 125.709592][ T4792] device bridge_slave_1 entered promiscuous mode [ 125.732208][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 127.251067][ T7] usb 2-1: can't set config #0, error -71 [ 127.377055][ T7] usb 2-1: USB disconnect, device number 8 [ 128.223952][ T4792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.280118][ T4792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.406673][ T4792] team0: Port device team_slave_0 added [ 128.459468][ T4792] team0: Port device team_slave_1 added [ 128.774964][ T4792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.821190][ T4792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.847588][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.048420][ T4792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.298173][ T4792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.318454][ T4792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.418364][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 129.448966][ T4792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.097698][ T4792] device hsr_slave_0 entered promiscuous mode [ 130.208952][ T4792] device hsr_slave_1 entered promiscuous mode [ 130.228715][ T4792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.252960][ T4792] Cannot create hsr debugfs directory [ 130.861497][ T4792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.959443][ T4792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.064406][ T4792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.250870][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 132.542417][ T4792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.862125][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.763748][ T4792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.800447][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.824677][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.953198][ T4792] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.975812][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.155140][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.184902][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.192418][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.664089][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.859547][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.962450][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.991244][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.998453][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.167182][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.217921][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.227186][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.237501][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.265178][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.300752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.326828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.344862][ T4965] syz.2.183 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 135.419351][ T4961] device syzkaller0 entered promiscuous mode [ 135.450087][ T4280] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.535935][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.562679][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.596792][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.616358][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.639384][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.691255][ T4280] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.715531][ T4479] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.399206][ T4280] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.568650][ T4479] usb 3-1: device descriptor read/all, error -71 [ 137.350428][ T4280] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.409434][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.417191][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.473988][ T4792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.625587][ T4996] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 137.746507][ T4996] device syzkaller0 entered promiscuous mode [ 138.736392][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.042421][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 139.654773][ T4227] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 139.832642][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.888418][ T4227] usb 4-1: Product: syz [ 139.892651][ T4227] usb 4-1: Manufacturer: syz [ 139.945796][ T4227] usb 4-1: SerialNumber: syz [ 140.075558][ T4227] usb 4-1: config 0 descriptor?? [ 140.939098][ T4227] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 140.948529][ T4227] RobotFuzz Open Source InterFace, OSIF: probe of 4-1:0.0 failed with error -71 [ 140.971135][ T4227] usb 4-1: USB disconnect, device number 2 [ 142.033069][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.063010][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.188131][ T4792] device veth0_vlan entered promiscuous mode [ 142.269991][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.709475][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.130225][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.193044][ T5058] process 'syz.1.202' launched './file0' with NULL argv: empty string added [ 143.206965][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.355348][ T4792] device veth1_vlan entered promiscuous mode [ 143.457315][ T4198] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 143.466398][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.478461][ T7] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 143.487279][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.584471][ T4792] device veth0_macvtap entered promiscuous mode [ 143.668878][ T3520] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.968597][ T3520] usb 1-1: Using ep0 maxpacket: 8 [ 144.009395][ T7] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 144.132857][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.140358][ T3520] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 144.165876][ T3520] usb 1-1: config 179 has no interface number 0 [ 144.166554][ T7] usb 3-1: config 0 descriptor?? [ 144.172411][ T3520] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 144.189076][ T3520] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 144.200712][ T3520] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 144.212604][ T3520] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 144.234929][ T3520] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 144.240251][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 144.276445][ T3520] usb 1-1: config 179 interface 65 has no altsetting 0 [ 144.283616][ T3520] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 144.324111][ T3520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.379164][ T4792] device veth1_macvtap entered promiscuous mode [ 144.395974][ T3520] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 144.492575][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.513593][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.564660][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.619037][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.641826][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.678459][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 144.682966][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.704683][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 144.729043][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.790781][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.854224][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.895449][ T3520] usb 3-1: USB disconnect, device number 11 [ 144.901614][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.935110][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.974437][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.017056][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.055352][ T1324] usb 1-1: USB disconnect, device number 7 [ 145.068539][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.072322][ T1324] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 145.116497][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.136543][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.245522][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.271348][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.283622][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.294969][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.306174][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.317472][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.327862][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.339745][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.350046][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.360951][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.378119][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.417150][ T4792] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.430187][ T4792] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.444374][ T4792] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.453504][ T4792] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.464691][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.475204][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.677291][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.700894][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.744653][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.788440][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 145.820605][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.850610][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.903478][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.956006][ T5115] device syzkaller0 entered promiscuous mode [ 146.002999][ T4280] device hsr_slave_0 left promiscuous mode [ 146.035787][ T4280] device hsr_slave_1 left promiscuous mode [ 146.052822][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.410140][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.567126][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.685905][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.805857][ T4280] device bridge_slave_1 left promiscuous mode [ 146.934447][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.981651][ T4280] device bridge_slave_0 left promiscuous mode [ 147.010062][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.222375][ T4280] device veth1_macvtap left promiscuous mode [ 147.240908][ T4280] device veth0_macvtap left promiscuous mode [ 147.247303][ T4280] device veth1_vlan left promiscuous mode [ 147.444671][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.453840][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.456079][ T4280] device veth0_vlan left promiscuous mode [ 147.463027][ T7] usb 2-1: Product: syz [ 147.473087][ T7] usb 2-1: Manufacturer: syz [ 147.477810][ T7] usb 2-1: SerialNumber: syz [ 147.533626][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 149.618786][ T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 149.679592][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 149.709721][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 149.734751][ T4241] usb 2-1: USB disconnect, device number 9 [ 149.755348][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.773904][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.903460][ T4280] bond0 (unregistering): Released all slaves [ 150.698666][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 150.763276][ T7] ath9k_htc: Failed to initialize the device [ 151.248200][ T4241] usb 2-1: ath9k_htc: USB layer deinitialized [ 154.988080][ T5200] netlink: 188 bytes leftover after parsing attributes in process `syz.5.230'. [ 158.212868][ T5212] device syzkaller0 entered promiscuous mode [ 158.259203][ T1324] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.849173][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.240096][ T1324] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.263096][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.754840][ T5249] device syzkaller0 entered promiscuous mode [ 159.850521][ T1324] usb 1-1: config 0 descriptor?? [ 159.974589][ T1324] usb 1-1: can't set config #0, error -71 [ 159.994522][ T1324] usb 1-1: USB disconnect, device number 8 [ 163.130822][ T5282] tipc: Started in network mode [ 163.136159][ T5282] tipc: Node identity da57b2b95596, cluster identity 4711 [ 163.165724][ T5282] tipc: Enabled bearer , priority 0 [ 163.277564][ T5287] device syzkaller0 entered promiscuous mode [ 163.365883][ T5281] tipc: Resetting bearer [ 163.534286][ T5281] tipc: Disabling bearer [ 165.194284][ T5299] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 165.200860][ T5299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.210098][ T5299] vhci_hcd vhci_hcd.0: Device attached [ 165.528463][ T4225] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 165.548029][ T5300] vhci_hcd: connection closed [ 165.553012][ T4281] vhci_hcd: stop threads [ 165.627352][ T4281] vhci_hcd: release socket [ 165.723427][ T4281] vhci_hcd: disconnect device [ 167.128494][ T5303] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 167.459319][ T5335] device syzkaller0 entered promiscuous mode [ 169.279449][ T5353] comedi comedi3: Minor 20259 is invalid! [ 169.818413][ T5303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.965274][ T5303] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 173.178864][ T5303] usb 3-1: can't read configurations, error -71 [ 173.260450][ T4225] vhci_hcd: vhci_device speed not set [ 175.854068][ T5397] device syzkaller0 entered promiscuous mode [ 181.168976][ T4225] Bluetooth: hci2: command 0x0406 tx timeout [ 181.170611][ T4479] Bluetooth: hci1: command 0x0406 tx timeout [ 181.192707][ T4225] Bluetooth: hci3: command 0x0406 tx timeout [ 182.162129][ T5475] device syzkaller0 entered promiscuous mode [ 182.488309][ T3520] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 182.504485][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.858667][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.888258][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.904941][ T4225] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 182.912782][ T13] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 182.918273][ T3520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.925599][ T13] usb 4-1: config 1 has no interface number 0 [ 182.958871][ T3520] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.964120][ T13] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 182.988276][ T3520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.005171][ T13] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.036045][ T3520] usb 3-1: config 0 descriptor?? [ 183.181876][ T13] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 183.198618][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.227015][ T13] usb 4-1: Product: syz [ 183.238140][ T13] usb 4-1: Manufacturer: syz [ 183.247274][ T13] usb 4-1: SerialNumber: syz [ 183.458620][ T5482] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.493903][ T13] usb 4-1: Expected 3 endpoints, found: 2 [ 184.332493][ T3520] plantronics 0003:047F:FFFF.0004: item fetching failed at offset 11/15 [ 184.341954][ T3520] plantronics 0003:047F:FFFF.0004: parse failed [ 184.348337][ T3520] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 184.365058][ T3520] usb 3-1: USB disconnect, device number 14 [ 185.488326][ T5303] usb 4-1: USB disconnect, device number 3 [ 185.738559][ T4225] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.868521][ T4225] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 185.996226][ T4225] usb 2-1: can't read configurations, error -71 [ 188.714482][ T5303] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.064633][ T5570] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 189.938400][ T5303] usb 1-1: Using ep0 maxpacket: 32 [ 190.181264][ T5303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.789536][ T5303] usb 1-1: unable to read config index 0 descriptor/all [ 190.807256][ T5303] usb 1-1: can't read configurations, error -71 [ 192.088470][ T4479] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 192.168611][ T5303] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 192.798448][ T4479] usb 6-1: unable to get BOS descriptor or descriptor too short [ 192.979242][ T4479] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 192.987168][ T4479] usb 6-1: can't read configurations, error -71 [ 194.094378][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 194.305454][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.058581][ T5303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.088491][ T4241] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 195.208579][ T26] audit: type=1326 audit(1777142397.221:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.5.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fcafe6dd9 code=0x0 [ 195.488580][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 195.638970][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 196.070551][ T4241] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.108389][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.188437][ T4241] usb 4-1: Product: syz [ 196.243848][ T4241] usb 4-1: Manufacturer: syz [ 196.280376][ T4241] usb 4-1: SerialNumber: syz [ 196.535192][ T4241] usb 4-1: config 0 descriptor?? [ 196.581254][ T4241] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 196.608395][ T5303] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 196.628121][ T5303] usb 1-1: can't read configurations, error -71 [ 196.788661][ T4241] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 196.808814][ T5303] usb usb1-port1: attempt power cycle [ 197.122347][ T5664] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 197.132372][ T5664] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 197.142534][ T5664] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 197.155375][ T5664] syz.0.330 (5664) used greatest stack depth: 17304 bytes left [ 197.163584][ T26] audit: type=1800 audit(1777142399.201:3): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.330" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 197.478518][ T4241] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 198.110155][ T4241] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 198.239750][ T4241] em28xx 4-1:0.0: board has no eeprom [ 198.732084][ T4241] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 198.749654][ T4241] em28xx 4-1:0.0: dvb set to bulk mode. [ 198.803961][ T4241] em28xx 4-1:0.0: Binding DVB extension [ 198.862112][ T4226] usb 4-1: USB disconnect, device number 4 [ 198.885322][ T4226] em28xx 4-1:0.0: Disconnecting em28xx [ 199.129178][ T4241] em28xx 4-1:0.0: Registering input extension [ 199.136397][ T4226] em28xx 4-1:0.0: Closing input extension [ 201.251089][ T4226] em28xx 4-1:0.0: Freeing device [ 206.942841][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.950346][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.960032][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.967405][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.974955][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.982325][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.536946][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 214.348579][ T3520] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 224.713258][ T3520] usb 3-1: Using ep0 maxpacket: 32 [ 224.968341][ T3520] usb 3-1: device descriptor read/all, error -71 [ 226.310034][ T5837] binder: 5834:5837 ioctl c018620b 0 returned -14 [ 226.518626][ T3520] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 229.188364][ T3520] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.328622][ T3520] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 229.336589][ T3520] usb 2-1: can't read configurations, error -71 [ 230.648378][ T3520] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 230.877499][ T5879] ======================================================= [ 230.877499][ T5879] WARNING: The mand mount option has been deprecated and [ 230.877499][ T5879] and is ignored by this kernel. Remove the mand [ 230.877499][ T5879] option from the mount to silence this warning. [ 230.877499][ T5879] ======================================================= [ 230.913220][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.921240][ T3520] usb 2-1: Using ep0 maxpacket: 32 [ 231.004471][ T5876] capability: warning: `syz.5.384' uses deprecated v2 capabilities in a way that may be insecure [ 231.038472][ T3520] usb 2-1: config 4 has an invalid interface number: 56 but max is 0 [ 231.046808][ T3520] usb 2-1: config 4 has no interface number 0 [ 231.098623][ T3520] usb 2-1: config 4 interface 56 has no altsetting 0 [ 231.264738][ T3520] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=20.83 [ 231.292716][ T3520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.317221][ T3520] usb 2-1: Product: syz [ 231.331948][ T3520] usb 2-1: Manufacturer: syz [ 231.338311][ T3520] usb 2-1: SerialNumber: syz [ 231.392830][ T5893] block device autoloading is deprecated and will be removed. [ 231.558301][ T13] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 231.691311][ T3520] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.56/input/input11 [ 231.738604][ T3545] bcm5974 2-1:4.56: could not read from device [ 231.752702][ T3520] usb 2-1: USB disconnect, device number 13 [ 232.044603][ T5914] overlayfs: conflicting options: nfs_export=on,index=off [ 234.468320][ T13] usb 6-1: unable to get BOS descriptor or descriptor too short [ 234.618848][ T13] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 234.634985][ T13] usb 6-1: can't read configurations, error -71 [ 235.414624][ T5937] overlayfs: failed to resolve './file1': -2 [ 235.878588][ T3520] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 236.203182][ T5965] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 236.248544][ T3520] usb 2-1: Using ep0 maxpacket: 16 [ 236.398772][ T3520] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 236.415651][ T3520] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.473800][ T3520] usb 2-1: config 0 has no interface number 0 [ 236.709747][ T3520] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 237.114956][ T3520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.157708][ T3520] usb 2-1: Product: syz [ 237.165791][ T3520] usb 2-1: Manufacturer: syz [ 237.171690][ T3520] usb 2-1: SerialNumber: syz [ 237.184584][ T3520] usb 2-1: config 0 descriptor?? [ 237.734780][ T3520] usb 2-1: USB disconnect, device number 14 [ 238.256018][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 240.642295][ T13] usb 6-1: device not accepting address 6, error -71 [ 241.038867][ T6016] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 241.045467][ T6016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.055971][ T6016] vhci_hcd vhci_hcd.0: Device attached [ 241.378372][ T4226] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 243.163051][ T6026] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 243.169650][ T6026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.713878][ T6017] vhci_hcd: connection reset by peer [ 243.719800][ T508] vhci_hcd: stop threads [ 243.724372][ T508] vhci_hcd: release socket [ 243.734147][ T6026] vhci_hcd vhci_hcd.0: Device attached [ 243.768303][ T508] vhci_hcd: disconnect device [ 243.903005][ T6029] overlayfs: failed to resolve './file1': -2 [ 243.915813][ T6027] vhci_hcd: connection closed [ 243.917737][ T9] vhci_hcd: stop threads [ 243.947189][ T9] vhci_hcd: release socket [ 243.969368][ T9] vhci_hcd: disconnect device [ 244.018552][ T21] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 244.026094][ T21] usb 35-1: enqueue for inactive port 0 [ 244.293336][ T6048] tmpfs: Unknown parameter 'usrquotauencer' [ 245.104294][ T21] vhci_hcd: vhci_device speed not set [ 245.778368][ T4241] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 246.469917][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.573834][ T4226] vhci_hcd: vhci_device speed not set [ 246.762062][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.948244][ T4241] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 246.957532][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.989173][ T4241] usb 1-1: config 0 descriptor?? [ 247.591535][ T4230] Bluetooth: hci5: command 0x0406 tx timeout [ 248.644049][ T4241] cp2112 0003:10C4:EA90.0005: item fetching failed at offset 5/7 [ 248.655281][ T4241] cp2112 0003:10C4:EA90.0005: parse failed [ 248.717349][ T4230] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 248.769462][ T4241] cp2112: probe of 0003:10C4:EA90.0005 failed with error -22 [ 250.297818][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.316894][ T4228] usb 1-1: USB disconnect, device number 12 [ 250.355402][ T4230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.400298][ T6097] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 250.407277][ T6097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.425769][ T4230] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 250.430307][ T6097] vhci_hcd vhci_hcd.0: Device attached [ 251.010486][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.723154][ T4230] usb 3-1: config 0 descriptor?? [ 251.758485][ T4230] usb 3-1: can't set config #0, error -71 [ 251.794995][ T4230] usb 3-1: USB disconnect, device number 17 [ 252.912919][ T5303] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 253.038475][ T4228] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 253.553694][ T6100] vhci_hcd: connection reset by peer [ 253.568568][ T4335] vhci_hcd: stop threads [ 253.572865][ T4335] vhci_hcd: release socket [ 253.604958][ T4335] vhci_hcd: disconnect device [ 253.610244][ T4228] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 253.627590][ T4228] usb 1-1: can't read configurations, error -71 [ 253.635121][ T6135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 253.868463][ T4241] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 255.741729][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.178932][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.251421][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.038331][ T4241] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 257.357800][ T6158] overlayfs: missing 'lowerdir' [ 258.246084][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.294539][ T4241] usb 4-1: config 0 descriptor?? [ 258.348048][ T5303] vhci_hcd: vhci_device speed not set [ 259.055105][ T4241] usb 4-1: can't set config #0, error -71 [ 259.401092][ T4241] usb 4-1: USB disconnect, device number 5 [ 259.905472][ T6176] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 259.912226][ T6176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.968348][ T6176] vhci_hcd vhci_hcd.0: Device attached [ 260.268546][ T4241] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 260.288315][ T4227] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 260.318568][ T5224] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 260.745838][ T6193] tmpfs: Unknown parameter 'usrquotauencer' [ 260.979279][ T4227] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 262.818318][ T5224] usb 4-1: Using ep0 maxpacket: 8 [ 263.428773][ T4227] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.458335][ T5224] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 263.470251][ T5224] usb 4-1: can't read configurations, error -71 [ 263.471311][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.502837][ T6177] vhci_hcd: connection reset by peer [ 263.512570][ T4232] vhci_hcd: stop threads [ 263.516992][ T4232] vhci_hcd: release socket [ 263.539289][ T4232] vhci_hcd: disconnect device [ 263.609448][ T4227] usb 6-1: config 0 descriptor?? [ 263.628416][ T4227] usb 6-1: can't set config #0, error -71 [ 263.646323][ T4227] usb 6-1: USB disconnect, device number 8 [ 263.648304][ T5342] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 264.009500][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.036826][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.919063][ T5342] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 264.943098][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.993624][ T5342] usb 3-1: config 0 descriptor?? [ 267.768366][ T4241] vhci_hcd: vhci_device speed not set [ 268.078852][ T5342] usbhid 3-1:0.0: can't add hid device: -71 [ 268.093151][ T5342] usbhid: probe of 3-1:0.0 failed with error -71 [ 268.148586][ T5342] usb 3-1: USB disconnect, device number 18 [ 269.618396][ T4241] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 270.008725][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.057766][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.197618][ T4241] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 270.197654][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.199893][ T4241] usb 3-1: config 0 descriptor?? [ 272.298610][ T4241] usbhid 3-1:0.0: can't add hid device: -71 [ 272.298704][ T4241] usbhid: probe of 3-1:0.0 failed with error -71 [ 272.301851][ T4241] usb 3-1: USB disconnect, device number 19 [ 273.127116][ T26] audit: type=1326 audit(1777142475.201:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.5.493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fcafe6dd9 code=0x0 [ 273.256701][ T6277] chnl_net:caif_netlink_parms(): no params data found [ 273.618865][ T4227] Bluetooth: hci0: command 0x0409 tx timeout [ 273.997413][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.012846][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.237066][ T6277] device bridge_slave_0 entered promiscuous mode [ 275.562549][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.570245][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.578790][ T6277] device bridge_slave_1 entered promiscuous mode [ 275.628362][ T5303] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 275.668351][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 275.734153][ T6277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.747127][ T6277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.780633][ T6277] team0: Port device team_slave_0 added [ 275.840772][ T6277] team0: Port device team_slave_1 added [ 276.012626][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.018461][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.037840][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.060555][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.088519][ T5303] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 276.097877][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.554079][ T6277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.560653][ T5303] usb 3-1: config 0 descriptor?? [ 276.567390][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.577194][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.118728][ T6277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.152369][ T5303] usb 3-1: can't set config #0, error -71 [ 277.187566][ T5303] usb 3-1: USB disconnect, device number 20 [ 277.748307][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 280.898427][ T6366] tmpfs: Unknown parameter 'usrquota' [ 281.104412][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 281.931714][ T6277] device hsr_slave_0 entered promiscuous mode [ 282.095284][ T6277] device hsr_slave_1 entered promiscuous mode [ 282.134837][ T6277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.162862][ T6277] Cannot create hsr debugfs directory [ 282.418282][ T21] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 282.599855][ T6277] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.656872][ T6277] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.682837][ T6277] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.705992][ T6277] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.929222][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.016674][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.128002][ T21] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 283.220592][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.455280][ T6277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.470294][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.479537][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.491731][ T6277] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.514491][ T21] usb 1-1: config 0 descriptor?? [ 283.545370][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.564745][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.586202][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.593555][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.625303][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.636280][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.655913][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.677575][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.684878][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.698587][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.722881][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.745624][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.763106][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.793122][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.801942][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.816413][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.832361][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.845904][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.855129][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.868130][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.881071][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.959094][ T21] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 5/7 [ 285.137297][ T21] cp2112 0003:10C4:EA90.0006: parse failed [ 285.233949][ T21] cp2112: probe of 0003:10C4:EA90.0006 failed with error -22 [ 285.505005][ T508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.644345][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.683566][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.788599][ T5342] usb 1-1: USB disconnect, device number 15 [ 286.937285][ T6277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.132884][ T508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.229757][ T508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.311606][ T508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.486531][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.507319][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.658278][ T4196] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 291.058486][ T4196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.212185][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.260091][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.365954][ T4196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.376397][ T4196] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 291.385844][ T4196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.388815][ T6277] device veth0_vlan entered promiscuous mode [ 291.395724][ T4196] usb 3-1: config 0 descriptor?? [ 291.488999][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.499969][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.537828][ T6277] device veth1_vlan entered promiscuous mode [ 291.725272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.739712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.759401][ T6277] device veth0_macvtap entered promiscuous mode [ 291.789793][ T6277] device veth1_macvtap entered promiscuous mode [ 291.887202][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.911281][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.930905][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.973620][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.013132][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.026760][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.037035][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.048316][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.058248][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.072410][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.004740][ T4196] cp2112 0003:10C4:EA90.0007: item fetching failed at offset 5/7 [ 293.015057][ T4196] cp2112 0003:10C4:EA90.0007: parse failed [ 293.021090][ T4196] cp2112: probe of 0003:10C4:EA90.0007 failed with error -22 [ 293.030263][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.054380][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.092211][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.125375][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.191426][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.271974][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.314604][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.354977][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.401096][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.430041][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.441591][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.452228][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.488805][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.499383][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.510115][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.533523][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.557026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.577352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.683687][ T6277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.700998][ T6277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.715384][ T6277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.727349][ T6277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.039333][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.083205][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.099665][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.295829][ T6454] usb 3-1: USB disconnect, device number 21 [ 294.325505][ T508] device hsr_slave_0 left promiscuous mode [ 294.436338][ T508] device hsr_slave_1 left promiscuous mode [ 294.486257][ T508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.728816][ T508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.752469][ T508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.517374][ T508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.086590][ T508] device bridge_slave_1 left promiscuous mode [ 296.100968][ T508] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.122892][ T508] device bridge_slave_0 left promiscuous mode [ 296.143528][ T508] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.184351][ T508] device veth1_macvtap left promiscuous mode [ 296.191182][ T508] device veth0_macvtap left promiscuous mode [ 296.197478][ T508] device veth1_vlan left promiscuous mode [ 296.203389][ T508] device veth0_vlan left promiscuous mode [ 297.552138][ T508] team0 (unregistering): Port device team_slave_1 removed [ 297.588416][ T508] team0 (unregistering): Port device team_slave_0 removed [ 297.645648][ T508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.663746][ T508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.837805][ T508] bond0 (unregistering): Released all slaves [ 297.896003][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.905246][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.991182][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.719514][ T6416] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 301.148711][ T6416] usb 7-1: unable to get BOS descriptor or descriptor too short [ 301.728481][ T6416] usb 7-1: not running at top speed; connect to a high speed hub [ 301.748410][ T4259] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 301.858526][ T6416] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 301.893481][ T6416] usb 7-1: config 1 interface 0 has no altsetting 0 [ 302.178298][ T6416] usb 7-1: string descriptor 0 read error: -22 [ 302.184659][ T6416] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 303.212925][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 303.336340][ T6416] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.378364][ T6416] usb 7-1: can't set config #1, error -71 [ 305.268262][ T4259] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.315772][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 306.370255][ T6416] usb 7-1: USB disconnect, device number 2 [ 306.378365][ T4259] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 306.388490][ T4259] usb 3-1: can't read configurations, error -71 [ 306.891021][ T6658] fuse: Bad value for 'fd' [ 309.108413][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 310.266156][ T6701] fuse: Bad value for 'fd' [ 310.269222][ T6684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.923425][ T6742] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 313.997090][ T6742] netlink: 'syz.0.600': attribute type 2 has an invalid length. [ 316.376217][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 317.676181][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.059666][ T6781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 318.179462][ T4196] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 321.728333][ T4196] usb 3-1: unable to get BOS descriptor or descriptor too short [ 322.378465][ T4196] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 322.386192][ T4196] usb 3-1: can't read configurations, error -71 [ 322.398511][ T6846] fuse: Bad value for 'fd' [ 323.989661][ T6880] No source specified [ 324.067270][ T6882] netlink: 14 bytes leftover after parsing attributes in process `syz.0.634'. [ 324.162725][ T6881] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 324.277187][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.326460][ T6881] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 324.338101][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.358300][ T4229] infiniband syz1: ib_query_port failed (-19) [ 324.382127][ T6882] bond0 (unregistering): Released all slaves [ 324.405103][ T6416] bond0 speed is unknown, defaulting to 1000 [ 324.636163][ T6881] siw: device registration error -19 [ 342.373810][ T7122] trusted_key: encrypted_key: key user:syz not found [ 344.829370][ T7161] mmap: syz.2.709 (7161) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 345.088457][ T4259] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 345.479050][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.553519][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.692815][ T4259] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 345.796514][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.909745][ T4259] usb 6-1: config 0 descriptor?? [ 347.288232][ T4259] cp2112 0003:10C4:EA90.0008: item fetching failed at offset 5/7 [ 347.296632][ T4259] cp2112 0003:10C4:EA90.0008: parse failed [ 347.303140][ T4259] cp2112: probe of 0003:10C4:EA90.0008 failed with error -22 [ 347.320562][ T4259] usb 6-1: USB disconnect, device number 9 [ 352.003025][ T7296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 352.068295][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 352.138543][ T7301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 352.158854][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 354.086598][ T7344] netlink: 'syz.6.768': attribute type 7 has an invalid length. [ 354.094397][ T7344] netlink: 'syz.6.768': attribute type 8 has an invalid length. [ 354.103008][ T7343] netlink: 'syz.6.768': attribute type 7 has an invalid length. [ 354.111079][ T7343] netlink: 'syz.6.768': attribute type 8 has an invalid length. [ 368.048498][ T23] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 368.338381][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 368.509563][ T23] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 368.635425][ T7627] fuse: Bad value for 'fd' [ 368.699893][ T23] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 368.716265][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.744268][ T23] usb 6-1: Product: syz [ 368.760960][ T23] usb 6-1: Manufacturer: syz [ 368.779713][ T23] usb 6-1: SerialNumber: syz [ 368.807442][ T23] usb 6-1: config 0 descriptor?? [ 368.876641][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 368.890440][ T23] usb 6-1: setting power ON [ 368.897902][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 368.948617][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.022262][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 369.032827][ T7644] binder: binder_mmap: 7643 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 369.042938][ T23] usb 6-1: media controller created [ 369.067756][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.156305][ T23] usb 6-1: selecting invalid altsetting 6 [ 369.175071][ T23] usb 6-1: digital interface selection failed (-22) [ 369.197803][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 369.278737][ T23] usb 6-1: setting power OFF [ 369.286750][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 369.302990][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 369.340179][ T23] (NULL device *): no alternate interface [ 369.902656][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 369.934323][ T23] usb 6-1: USB disconnect, device number 10 [ 372.471891][ T7693] fuse: Bad value for 'fd' [ 374.489836][ T7720] qnx6: unable to read the first superblock [ 378.364941][ T7776] usb usb2: usbfs: process 7776 (syz.3.885) did not claim interface 0 before use [ 378.622794][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.650031][ T7784] netlink: 296 bytes leftover after parsing attributes in process `syz.0.889'. [ 378.690669][ T26] audit: type=1326 audit(1777142579.782:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 378.737437][ T26] audit: type=1326 audit(1777142579.812:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 378.768296][ T26] audit: type=1326 audit(1777142579.812:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 379.100527][ T26] audit: type=1326 audit(1777142579.812:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 379.468493][ T26] audit: type=1326 audit(1777142579.812:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 379.498858][ T26] audit: type=1326 audit(1777142579.812:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 379.521146][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.565322][ T26] audit: type=1326 audit(1777142579.812:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 379.587459][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.661569][ T26] audit: type=1326 audit(1777142579.812:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 379.683889][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.693383][ T26] audit: type=1326 audit(1777142579.812:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 379.724267][ T26] audit: type=1326 audit(1777142579.812:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae79d25dd9 code=0x7ffc0000 [ 380.052041][ T4229] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 380.489628][ T4229] usb 7-1: unable to get BOS descriptor or descriptor too short [ 380.588476][ T4229] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1951, setting to 1024 [ 380.616211][ T4229] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 380.645121][ T4229] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 380.662731][ T4229] usb 7-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.685216][ T4229] usb 7-1: config 1 interface 0 has no altsetting 0 [ 380.751715][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.911'. [ 380.833843][ T7840] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 380.858697][ T4229] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.880738][ T4229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.895470][ T4229] usb 7-1: Product: syz [ 380.902050][ T4229] usb 7-1: Manufacturer: syz [ 380.907096][ T4229] usb 7-1: SerialNumber: syz [ 380.968624][ T7808] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 380.985847][ T7808] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 381.329152][ T4229] usb 7-1: bad CDC descriptors [ 381.368542][ T4229] usb 7-1: USB disconnect, device number 3 [ 384.588689][ T7918] device syzkaller0 entered promiscuous mode [ 386.124485][ T4259] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 386.133363][ T4259] Bluetooth: hci3: Injecting HCI hardware error event [ 386.142300][ T4191] Bluetooth: hci3: hardware error 0x00 [ 389.476466][ T7958] device syzkaller0 entered promiscuous mode [ 390.250129][ T7974] binder: 7973:7974 ioctl c0306201 200000000080 returned -14 [ 390.428335][ T7974] binder: 7973:7974 ioctl c0306201 2000000003c0 returned -14 [ 391.077479][ T7980] sg_write: data in/out 327647/26 bytes for SCSI command 0x3a-- guessing data in; [ 391.077479][ T7980] program syz.0.962 not setting count and/or reply_len properly [ 392.307393][ T7988] device syzkaller0 entered promiscuous mode [ 394.188265][ T6454] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 394.475898][ T8033] device syzkaller0 entered promiscuous mode [ 394.568541][ T6454] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.583151][ T6454] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 394.633451][ T6454] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.663965][ T6454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.775417][ T6454] usb 1-1: invalid MIDI out EP 0 [ 395.573028][ T6454] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 395.840459][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.865319][ T6454] usb 1-1: USB disconnect, device number 16 [ 396.098603][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 396.173299][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.5.992'. [ 396.246038][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.5.992'. [ 396.741841][ T8067] device syzkaller0 entered promiscuous mode [ 402.438792][ T4196] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 403.068814][ T4196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.137352][ T4196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.148315][ T4196] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 403.157607][ T4196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.193808][ T4196] usb 3-1: config 0 descriptor?? [ 403.685447][ T4196] cp2112 0003:10C4:EA90.0009: item fetching failed at offset 5/7 [ 403.713608][ T4196] cp2112 0003:10C4:EA90.0009: parse failed [ 403.728148][ T4196] cp2112: probe of 0003:10C4:EA90.0009 failed with error -22 [ 403.744863][ T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 403.892681][ T4196] usb 3-1: USB disconnect, device number 26 [ 403.948270][ T4228] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 404.128924][ T21] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.156912][ T21] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 404.177226][ T21] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 404.197632][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.259632][ T8124] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 404.658551][ T4228] usb 1-1: unable to get BOS descriptor or descriptor too short [ 404.790611][ T4228] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 405.065007][ T4228] usb 1-1: can't read configurations, error -71 [ 405.308551][ T8140] device syzkaller0 entered promiscuous mode [ 406.270199][ T7] usb 7-1: USB disconnect, device number 4 [ 407.388303][ T21] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 407.794692][ T21] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.808764][ T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.851931][ T21] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.888889][ T21] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.058577][ T21] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 408.077934][ T21] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.088047][ T21] usb 7-1: Product: syz [ 408.098188][ T21] usb 7-1: Manufacturer: syz [ 408.179268][ T21] cdc_wdm 7-1:1.0: skipping garbage [ 408.184558][ T21] cdc_wdm 7-1:1.0: skipping garbage [ 408.208212][ T4196] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 408.230508][ T21] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 408.236575][ T21] cdc_wdm 7-1:1.0: Unknown control protocol [ 408.484623][ T8179] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 408.493271][ T8179] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 408.502319][ T8179] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 408.888535][ T4196] usb 6-1: unable to get BOS descriptor or descriptor too short [ 409.025735][ T4196] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 409.038268][ T4196] usb 6-1: can't read configurations, error -71 [ 409.600699][ T21] usb 7-1: USB disconnect, device number 5 [ 410.759154][ T8196] device syzkaller0 entered promiscuous mode [ 412.319235][ T23] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 412.878281][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 413.008308][ T23] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 413.015948][ T23] usb 6-1: can't read configurations, error -71 [ 416.169568][ T8262] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1051'. [ 418.069759][ T13] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 418.568497][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 418.748558][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 418.769524][ T13] usb 3-1: can't read configurations, error -71 [ 419.408352][ T7] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 419.668228][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 419.729542][ T8302] qnx6: unable to read the first superblock [ 420.029120][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.139279][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.388170][ T21] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 420.438210][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.515886][ T21] usb 4-1: config 0 descriptor?? [ 420.768349][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 420.796911][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.813583][ T7] usb 1-1: Product: syz [ 420.828824][ T7] usb 1-1: Manufacturer: syz [ 420.834075][ T7] usb 1-1: SerialNumber: syz [ 420.883439][ T7] usb 1-1: config 0 descriptor?? [ 421.036114][ T21] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 421.064066][ T21] cp2112 0003:10C4:EA90.000A: parse failed [ 421.087729][ T21] cp2112: probe of 0003:10C4:EA90.000A failed with error -22 [ 421.185281][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 421.234788][ T21] usb 4-1: USB disconnect, device number 8 [ 423.448427][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 423.462005][ T7] usb 1-1: USB disconnect, device number 19 [ 424.451799][ T8340] lo speed is unknown, defaulting to 1000 [ 424.457682][ T8340] lo speed is unknown, defaulting to 1000 [ 424.464449][ T8340] lo speed is unknown, defaulting to 1000 [ 424.476892][ T8340] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 424.551766][ T8340] lo speed is unknown, defaulting to 1000 [ 424.559437][ T8340] lo speed is unknown, defaulting to 1000 [ 424.566598][ T8340] lo speed is unknown, defaulting to 1000 [ 424.573536][ T8340] lo speed is unknown, defaulting to 1000 [ 424.580372][ T8340] lo speed is unknown, defaulting to 1000 [ 428.085042][ T8377] device syzkaller0 entered promiscuous mode [ 428.668250][ T8387] lo speed is unknown, defaulting to 1000 [ 429.183288][ T8387] chnl_net:caif_netlink_parms(): no params data found [ 429.406895][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.416840][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.442698][ T8387] device bridge_slave_0 entered promiscuous mode [ 429.479613][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.528176][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.573512][ T8387] device bridge_slave_1 entered promiscuous mode [ 429.655667][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.780819][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.851138][ T8387] team0: Port device team_slave_0 added [ 429.887883][ T8387] team0: Port device team_slave_1 added [ 430.048647][ T4337] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.118379][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.137286][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.226960][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.258528][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.265708][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.358297][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.428496][ T4337] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.538371][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 430.634596][ T8387] device hsr_slave_0 entered promiscuous mode [ 430.668746][ T8387] device hsr_slave_1 entered promiscuous mode [ 430.712690][ T8387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.730638][ T8387] Cannot create hsr debugfs directory [ 430.753012][ T4337] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.945183][ T4337] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.397366][ T8387] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.479368][ T8387] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.552388][ T8387] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.564452][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 431.564467][ T26] audit: type=1326 audit(1777142632.652:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f6d69dd9 code=0x7ffc0000 [ 431.612908][ T8387] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 431.727458][ T26] audit: type=1326 audit(1777142632.692:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb6f6d69dd9 code=0x7ffc0000 [ 431.814120][ T26] audit: type=1326 audit(1777142632.692:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb6f6d69dd9 code=0x7ffc0000 [ 432.029567][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.084100][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.093081][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.111643][ T8387] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.151854][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.214857][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.374934][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.382211][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.423707][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.597387][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.618279][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 432.621981][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.670395][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.677505][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.617440][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.230022][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.250633][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.286780][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.345016][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.417767][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.447916][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.479414][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.512214][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.574832][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.605070][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.653317][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.698374][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 434.856285][ T4337] device hsr_slave_0 left promiscuous mode [ 434.885458][ T4337] device hsr_slave_1 left promiscuous mode [ 434.906220][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.930323][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.967085][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.998974][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.039169][ T4337] device bridge_slave_1 left promiscuous mode [ 435.045448][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.168300][ T4230] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 435.227562][ T4337] device bridge_slave_0 left promiscuous mode [ 435.254424][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.628619][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.658657][ T4230] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 435.689438][ T4230] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 435.737217][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.801741][ T4230] usb 4-1: config 0 descriptor?? [ 435.810525][ T4337] device veth1_macvtap left promiscuous mode [ 435.816700][ T4337] device veth0_macvtap left promiscuous mode [ 435.844151][ T4337] device veth1_vlan left promiscuous mode [ 435.858718][ T4337] device veth0_vlan left promiscuous mode [ 436.058382][ T4230] Bluetooth: Can't get state to change to load ram patch err [ 436.065833][ T4230] Bluetooth: Loading patch file failed [ 436.092387][ T4230] ath3k: probe of 4-1:0.0 failed with error -121 [ 436.268636][ T4230] usb 4-1: USB disconnect, device number 9 [ 436.666901][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 436.698047][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 436.737986][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.771838][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.780722][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 436.894206][ T4337] bond0 (unregistering): Released all slaves [ 438.077879][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.178243][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.197865][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.459808][ T8505] device syzkaller0 entered promiscuous mode [ 439.898375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.917094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.965864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 440.004432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 440.062603][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.084917][ T8387] device veth0_vlan entered promiscuous mode [ 440.131109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 440.164926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 440.217548][ T8387] device veth1_vlan entered promiscuous mode [ 440.383058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 440.399042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 440.419313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 440.464658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.821436][ T8387] device veth0_macvtap entered promiscuous mode [ 441.920821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 441.934200][ T8387] device veth1_macvtap entered promiscuous mode [ 442.394651][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.656161][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.826575][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.859575][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.888207][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.928130][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.972927][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.997258][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.075382][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.116066][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.135707][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.216161][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.258134][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.304519][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.346314][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.397345][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.438145][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.483454][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.504684][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.519161][ T4230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 443.672164][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.711162][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.732084][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.911413][ T8387] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.922615][ T8387] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.932080][ T8387] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.941682][ T8387] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.988832][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 444.089141][ T4230] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 444.102439][ T4230] usb 4-1: config 0 has no interface number 0 [ 444.136645][ T4230] usb 4-1: config 0 interface 214 has no altsetting 0 [ 444.348414][ T4230] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f8.15 [ 444.357542][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.386603][ T4877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.416297][ T4877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.424811][ T4230] usb 4-1: Product: syz [ 444.440441][ T4230] usb 4-1: Manufacturer: syz [ 444.463258][ T4230] usb 4-1: SerialNumber: syz [ 444.527943][ T4230] usb 4-1: config 0 descriptor?? [ 444.535037][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 444.554544][ T4877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.564200][ T4877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.604585][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.878980][ T4230] qmi_wwan 4-1:0.214: bogus CDC Union: master=5, slave=4 [ 444.909941][ T4230] qmi_wwan: probe of 4-1:0.214 failed with error -22 [ 445.028585][ T4230] usb 4-1: USB disconnect, device number 10 [ 449.699830][ T8665] binder: BINDER_SET_CONTEXT_MGR already set [ 449.775692][ T8665] binder: 8662:8665 ioctl 4018620d 200000000100 returned -16 [ 450.535661][ T8679] fuse: Unknown parameter 'grou00000000000000000000' [ 451.441421][ T8694] device syzkaller0 entered promiscuous mode [ 453.380091][ T8718] fuse: Bad value for 'user_id' [ 453.654196][ T8734] fuse: Unknown parameter 'grou00000000000000000000' [ 453.688180][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 453.910270][ T8744] device syzkaller0 entered promiscuous mode [ 453.938327][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 454.058483][ T7] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 454.077155][ T7] usb 4-1: config 0 has no interface number 0 [ 454.117635][ T7] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 454.178464][ T7] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 454.408385][ T7] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 454.420654][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.476353][ T7] usb 4-1: Product: syz [ 454.573721][ T7] usb 4-1: Manufacturer: syz [ 454.588289][ T7] usb 4-1: SerialNumber: syz [ 454.620399][ T7] usb 4-1: config 0 descriptor?? [ 454.668456][ T8725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 454.675549][ T8725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 455.020230][ T8725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 455.020641][ T8725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 456.080457][ T8785] fuse: Unknown parameter 'grou00000000000000000000' [ 456.138683][ T6454] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 456.389303][ T4228] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 456.494067][ T8795] device syzkaller0 entered promiscuous mode [ 456.500468][ T6454] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 456.509339][ T6454] usb 6-1: config 179 has no interface number 0 [ 456.515654][ T6454] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 456.539192][ T6454] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 456.554963][ T6454] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 456.573914][ T6454] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 456.585016][ T6454] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 456.598931][ T6454] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 456.608703][ T6454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.634685][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 456.664710][ T8782] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 456.741208][ T6454] xpad: probe of 6-1:179.65 failed with error -5 [ 456.918426][ T4228] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 456.927714][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.967582][ T4228] usb 3-1: Product: syz [ 456.978401][ T4228] usb 3-1: Manufacturer: syz [ 456.987231][ T4228] usb 3-1: SerialNumber: syz [ 457.014196][ T4228] usb 3-1: config 0 descriptor?? [ 457.043448][ T6454] usb 6-1: USB disconnect, device number 15 [ 457.096922][ T8801] devpts: called with bogus options [ 457.218399][ T7] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 457.235063][ T7] asix: probe of 4-1:0.34 failed with error -71 [ 457.260254][ T7] usb 4-1: USB disconnect, device number 11 [ 457.446877][ T6454] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 458.362578][ T6454] usb 6-1: config index 0 descriptor too short (expected 11812, got 36) [ 458.696484][ T6454] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 458.724295][ T6454] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 458.740887][ T6454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 8 [ 458.748485][ T8820] netlink: 'syz.3.1185': attribute type 3 has an invalid length. [ 458.755651][ T6454] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 458.778708][ T6454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.817674][ T6454] usb 6-1: config 0 descriptor?? [ 458.898362][ T6454] usb 6-1: can't set config #0, error -71 [ 458.909522][ T6454] usb 6-1: USB disconnect, device number 16 [ 459.009151][ T8827] fuse: Unknown parameter 'group_i00000000000000000000' [ 459.115295][ T23] usb 3-1: USB disconnect, device number 29 [ 459.359399][ T8833] device syzkaller0 entered promiscuous mode [ 461.183155][ T8870] fuse: Unknown parameter 'group_i00000000000000000000' [ 461.838453][ T4229] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 462.184022][ T8895] device syzkaller0 entered promiscuous mode [ 462.374133][ T4229] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 462.394225][ T4229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.411785][ T4229] usb 8-1: Product: syz [ 462.426301][ T4229] usb 8-1: Manufacturer: syz [ 462.437195][ T4229] usb 8-1: SerialNumber: syz [ 463.311548][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 463.533586][ T7] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 464.628202][ T4228] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 464.768250][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 464.838254][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 464.898416][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 464.938605][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 464.978328][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 464.998246][ T4228] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.005216][ T4228] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 465.017010][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.026383][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 465.055823][ T4228] usb 3-1: config 0 descriptor?? [ 465.063729][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 465.098303][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 465.138277][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 465.182767][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 465.201706][ T4229] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 465.218350][ T4229] lan78xx: probe of 8-1:1.0 failed with error -71 [ 465.246836][ T4229] usb 8-1: USB disconnect, device number 2 [ 465.548292][ T4228] video4linux radio48: keene_cmd_main failed (-71) [ 465.555438][ T4228] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 465.598423][ T4228] usb 3-1: USB disconnect, device number 30 [ 465.778317][ T21] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 466.038320][ T21] usb 8-1: Using ep0 maxpacket: 8 [ 466.195936][ T21] usb 8-1: config 255 has an invalid interface number: 106 but max is 0 [ 466.209684][ T21] usb 8-1: config 255 has no interface number 0 [ 466.230789][ T21] usb 8-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 466.250964][ T21] usb 8-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 466.267079][ T21] usb 8-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 951, setting to 64 [ 466.285905][ T21] usb 8-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 466.297947][ T21] usb 8-1: config 255 interface 106 has no altsetting 0 [ 466.494637][ T21] usb 8-1: New USB device found, idVendor=1199, idProduct=0018, bcdDevice=9a.00 [ 466.509890][ T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.533626][ T21] usb 8-1: Product: syz [ 466.545460][ T21] usb 8-1: Manufacturer: syz [ 466.562642][ T21] usb 8-1: SerialNumber: syz [ 466.728228][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 466.848280][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 466.855922][ T7] usb 1-1: can't read configurations, error -71 [ 466.922376][ T21] sierra 8-1:255.106: Sierra USB modem converter detected [ 467.408433][ T21] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 467.428858][ T21] usb 8-1: Sierra USB modem converter now attached to ttyUSB1 [ 467.439572][ T21] usb 8-1: Sierra USB modem converter now attached to ttyUSB2 [ 467.463279][ T21] usb 8-1: USB disconnect, device number 3 [ 467.479063][ T21] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 467.496709][ T21] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 467.528896][ T21] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 467.560474][ T21] sierra 8-1:255.106: device disconnected [ 468.799853][ T9004] fuse: Unknown parameter 'group_i00000000000000000000' [ 468.900735][ T9006] device syzkaller0 entered promiscuous mode [ 470.088202][ T6416] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 471.878171][ T21] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 472.869118][ T21] usb 3-1: device descriptor read/64, error -71 [ 472.916912][ T9054] fuse: Unknown parameter 'group_id00000000000000000000' [ 473.159953][ T9062] device syzkaller0 entered promiscuous mode [ 473.169011][ T21] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 473.518169][ T21] usb 3-1: device descriptor read/64, error -71 [ 473.648726][ T21] usb usb3-port1: attempt power cycle [ 474.088236][ T21] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 474.188398][ T21] usb 3-1: device descriptor read/8, error -71 [ 474.488271][ T21] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 475.161950][ T21] usb 3-1: device not accepting address 34, error -71 [ 475.285143][ T21] usb usb3-port1: unable to enumerate USB device [ 475.348722][ T6416] usb 8-1: unable to get BOS descriptor or descriptor too short [ 475.678258][ T6416] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 475.706260][ T6416] usb 8-1: can't read configurations, error -71 [ 477.095596][ T9115] fuse: Unknown parameter 'group_id00000000000000000000' [ 477.326896][ T9119] device syzkaller0 entered promiscuous mode [ 478.046524][ T6416] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 478.483264][ T6416] usb 8-1: device descriptor read/64, error -71 [ 478.971503][ T6416] usb usb8-port1: attempt power cycle [ 479.418302][ T6416] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 479.438297][ T23] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 479.518333][ T6416] usb 8-1: device descriptor read/8, error -71 [ 479.798660][ T6416] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 480.113494][ T6416] usb 8-1: device descriptor read/8, error -71 [ 480.248551][ T6416] usb usb8-port1: unable to enumerate USB device [ 481.582348][ T9186] fuse: Unknown parameter 'group_id00000000000000000000' [ 481.871614][ T9189] device syzkaller0 entered promiscuous mode [ 485.535806][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 485.688186][ T23] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 485.706170][ T23] usb 3-1: chopping to 0 config(s) [ 485.726464][ T23] usb 3-1: can't read configurations, error -32 [ 485.820729][ T9232] fuse: Bad value for 'user_id' [ 485.918167][ T23] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 485.926024][ T3520] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 486.188300][ T3520] usb 8-1: device descriptor read/64, error -71 [ 486.240597][ T9236] device syzkaller0 entered promiscuous mode [ 486.864636][ T3520] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 487.098547][ T3520] usb 8-1: device descriptor read/64, error -71 [ 487.318886][ T3520] usb usb8-port1: attempt power cycle [ 487.806960][ T3520] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 488.438383][ T3520] usb 8-1: device not accepting address 10, error -71 [ 490.030004][ T9283] fuse: Bad value for 'user_id' [ 490.268414][ T23] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 491.727017][ T9302] device syzkaller0 entered promiscuous mode [ 491.738197][ T3520] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 491.948290][ T3520] usb 4-1: device descriptor read/64, error -71 [ 492.218185][ T3520] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 492.438181][ T3520] usb 4-1: device descriptor read/64, error -71 [ 492.562039][ T3520] usb usb4-port1: attempt power cycle [ 493.608191][ T3520] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 493.738346][ T3520] usb 4-1: device descriptor read/8, error -71 [ 494.068575][ T3520] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 494.198592][ T3520] usb 4-1: device descriptor read/8, error -71 [ 494.329688][ T3520] usb usb4-port1: unable to enumerate USB device [ 495.625283][ T9335] fuse: Bad value for 'user_id' [ 495.858230][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 496.078278][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 496.085915][ T23] usb 3-1: can't read configurations, error -71 [ 496.276001][ T9348] device syzkaller0 entered promiscuous mode [ 497.178346][ T6416] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 497.398243][ T6416] usb 4-1: device descriptor read/64, error -71 [ 497.694474][ T6416] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 497.918199][ T6416] usb 4-1: device descriptor read/64, error -71 [ 498.972954][ T6416] usb usb4-port1: attempt power cycle [ 499.408297][ T6416] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 499.548371][ T6416] usb 4-1: device descriptor read/8, error -71 [ 499.838364][ T6416] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 499.938259][ T6416] usb 4-1: device descriptor read/8, error -71 [ 500.015142][ T9385] fuse: Bad value for 'fd' [ 500.195601][ T6416] usb usb4-port1: unable to enumerate USB device [ 500.429792][ T9389] device syzkaller0 entered promiscuous mode [ 500.633112][ T3520] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 501.502671][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.048215][ T6454] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 504.248243][ T6454] usb 8-1: device descriptor read/64, error -71 [ 504.518255][ T6454] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 504.728826][ T6454] usb 8-1: device descriptor read/64, error -71 [ 504.848410][ T6454] usb usb8-port1: attempt power cycle [ 505.248271][ T9428] fuse: Bad value for 'fd' [ 505.258303][ T6454] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 505.369580][ T6454] usb 8-1: device descriptor read/8, error -71 [ 505.918272][ T6454] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 505.918297][ T3520] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.008447][ T6454] usb 8-1: device descriptor read/8, error -71 [ 506.078415][ T3520] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 506.096183][ T3520] usb 6-1: can't read configurations, error -71 [ 506.138434][ T6454] usb usb8-port1: unable to enumerate USB device [ 507.039358][ T9468] fuse: Bad value for 'fd' [ 507.732835][ T1108] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 507.814505][ T9477] device syzkaller0 entered promiscuous mode [ 510.618343][ T6454] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 511.018289][ T6454] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.084355][ T6454] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 511.139274][ T9511] fuse: Bad value for 'fd' [ 511.184340][ T6454] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 511.293690][ T9514] device syzkaller0 entered promiscuous mode [ 511.305143][ T6454] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.387607][ T6454] usb 8-1: config 0 descriptor?? [ 511.878410][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 512.008216][ T1108] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 512.016199][ T1108] usb 3-1: can't read configurations, error -71 [ 513.514286][ T6454] usb 8-1: USB disconnect, device number 16 [ 515.191928][ T9552] fuse: Bad value for 'fd' [ 515.419564][ T6416] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 515.878771][ T9560] device syzkaller0 entered promiscuous mode [ 516.764708][ C0] hrtimer: interrupt took 70720 ns [ 517.358127][ T3520] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 517.768729][ T3520] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.939545][ T3520] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.112304][ T3520] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 518.400948][ T3520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.426308][ T3520] usb 4-1: config 0 descriptor?? [ 519.528188][ T6416] usb 1-1: unable to get BOS descriptor or descriptor too short [ 520.198262][ T6416] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 520.206224][ T6416] usb 1-1: can't read configurations, error -71 [ 520.484103][ T6454] usb 4-1: USB disconnect, device number 20 [ 520.523941][ T9597] fuse: Bad value for 'fd' [ 520.583622][ T9599] device syzkaller0 entered promiscuous mode [ 521.767264][ T1108] Bluetooth: hci5: command 0x2016 tx timeout [ 521.938781][ T6454] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 523.583958][ T9633] fuse: Invalid rootmode [ 523.648132][ T6416] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 524.078443][ T6416] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.110173][ T6416] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 524.139861][ T6416] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 524.166296][ T6416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.267151][ T6416] usb 6-1: config 0 descriptor?? [ 525.148350][ T6454] usb 4-1: unable to get BOS descriptor or descriptor too short [ 525.278478][ T6454] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 525.287923][ T6454] usb 4-1: can't read configurations, error -71 [ 526.436304][ T7] usb 6-1: USB disconnect, device number 19 [ 526.511663][ T9664] fuse: Invalid rootmode [ 527.829997][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1415'. [ 528.078310][ T7] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 529.116959][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'. [ 529.493366][ T9713] fuse: Invalid rootmode [ 529.588364][ T1108] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 530.758484][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.779648][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.813710][ T1108] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 530.864384][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.943755][ T1108] usb 1-1: config 0 descriptor?? [ 531.555074][ T1108] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 532.428958][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 532.558512][ T7] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 532.574681][ T7] usb 6-1: can't read configurations, error -71 [ 532.975085][ T1108] usb 1-1: USB disconnect, device number 24 [ 533.179230][ T9756] fuse: Bad value for 'rootmode' [ 533.706410][ T9765] device syzkaller0 entered promiscuous mode [ 534.898196][ T4228] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 535.528457][ T4228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.552577][ T4228] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.576352][ T4228] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 535.586927][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.593921][ T4228] usb 1-1: config 0 descriptor?? [ 535.648152][ T3520] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 535.660173][ T4228] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 536.556150][ T146] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 537.680699][ T4241] usb 1-1: USB disconnect, device number 25 [ 537.802600][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 539.511118][ T4241] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 539.928299][ T4241] usb 8-1: config 0 interface 0 has no altsetting 0 [ 539.935604][ T4241] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 539.961936][ T4241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.009577][ T4241] usb 8-1: config 0 descriptor?? [ 540.188256][ T3520] usb 6-1: unable to get BOS descriptor or descriptor too short [ 540.348422][ T3520] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 540.439687][ T23] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 540.451004][ T3520] usb 6-1: can't read configurations, error -71 [ 540.573672][ T4241] video4linux radio48: keene_cmd_main failed (-71) [ 540.636734][ T9847] loop9: detected capacity change from 0 to 7 [ 540.655605][ T9847] Dev loop9: unable to read RDB block 7 [ 540.661659][ T9847] loop9: unable to read partition table [ 540.667486][ T9847] loop9: partition table beyond EOD, truncated [ 540.673785][ T9847] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 542.403038][ T9843] [ 542.405402][ T9843] ====================================================== [ 542.412407][ T9843] WARNING: possible circular locking dependency detected [ 542.419803][ T9843] syzkaller #0 Not tainted [ 542.424203][ T9843] ------------------------------------------------------ [ 542.431207][ T9843] syz.3.1471/9843 is trying to acquire lock: [ 542.437280][ T9843] ffff88807f31e138 ((wq_completion)loop9){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 542.447099][ T9843] [ 542.447099][ T9843] but task is already holding lock: [ 542.454461][ T9843] ffff888020770468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 542.463300][ T9843] [ 542.463300][ T9843] which lock already depends on the new lock. [ 542.463300][ T9843] [ 542.473708][ T9843] [ 542.473708][ T9843] the existing dependency chain (in reverse order) is: [ 542.482750][ T9843] [ 542.482750][ T9843] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 542.490218][ T9843] __mutex_lock_common+0x1e3/0x2400 [ 542.495955][ T9843] mutex_lock_killable_nested+0x17/0x20 [ 542.502043][ T9843] lo_open+0x6a/0x100 [ 542.506552][ T9843] blkdev_get_whole+0x90/0x390 [ 542.511919][ T9843] blkdev_get_by_dev+0x2d0/0xa60 [ 542.517377][ T9843] blkdev_open+0x12d/0x2c0 [ 542.522336][ T9843] do_dentry_open+0x7ff/0xf80 [ 542.527534][ T9843] path_openat+0x26f5/0x2fa0 [ 542.532639][ T9843] do_filp_open+0x1e2/0x410 [ 542.537834][ T9843] do_sys_openat2+0x150/0x4b0 [ 542.543407][ T9843] __x64_sys_openat+0x135/0x160 [ 542.548768][ T9843] do_syscall_64+0x4c/0xa0 [ 542.553697][ T9843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.560102][ T9843] [ 542.560102][ T9843] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 542.567936][ T9843] __mutex_lock_common+0x1e3/0x2400 [ 542.573650][ T9843] mutex_lock_nested+0x17/0x20 [ 542.578931][ T9843] blkdev_get_by_dev+0x157/0xa60 [ 542.584387][ T9843] swsusp_check+0xa1/0x2b0 [ 542.589341][ T9843] software_resume+0xc6/0x3b0 [ 542.594536][ T9843] resume_store+0xe4/0x130 [ 542.599478][ T9843] kernfs_fop_write_iter+0x379/0x4c0 [ 542.605282][ T9843] vfs_write+0x745/0xd60 [ 542.610133][ T9843] ksys_write+0x152/0x260 [ 542.614988][ T9843] do_syscall_64+0x4c/0xa0 [ 542.619930][ T9843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.626348][ T9843] [ 542.626348][ T9843] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 542.634855][ T9843] __mutex_lock_common+0x1e3/0x2400 [ 542.640663][ T9843] mutex_lock_nested+0x17/0x20 [ 542.645963][ T9843] software_resume+0x7c/0x3b0 [ 542.651159][ T9843] resume_store+0xe4/0x130 [ 542.656121][ T9843] kernfs_fop_write_iter+0x379/0x4c0 [ 542.661927][ T9843] vfs_write+0x745/0xd60 [ 542.666704][ T9843] ksys_write+0x152/0x260 [ 542.671546][ T9843] do_syscall_64+0x4c/0xa0 [ 542.676477][ T9843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.682884][ T9843] [ 542.682884][ T9843] -> #3 (&of->mutex){+.+.}-{3:3}: [ 542.690090][ T9843] __mutex_lock_common+0x1e3/0x2400 [ 542.696095][ T9843] mutex_lock_nested+0x17/0x20 [ 542.701474][ T9843] kernfs_seq_start+0x51/0x3c0 [ 542.706924][ T9843] seq_read_iter+0x3c4/0xd50 [ 542.712028][ T9843] vfs_read+0x759/0xd60 [ 542.716691][ T9843] ksys_read+0x152/0x260 [ 542.721443][ T9843] do_syscall_64+0x4c/0xa0 [ 542.726380][ T9843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.732867][ T9843] [ 542.732867][ T9843] -> #2 (&p->lock){+.+.}-{3:3}: [ 542.739888][ T9843] __mutex_lock_common+0x1e3/0x2400 [ 542.745597][ T9843] mutex_lock_nested+0x17/0x20 [ 542.750879][ T9843] seq_read_iter+0xad/0xd50 [ 542.755907][ T9843] do_iter_readv_writev+0x47e/0x5f0 [ 542.761619][ T9843] do_iter_read+0x20b/0x7c0 [ 542.766759][ T9843] loop_process_work+0x16dd/0x24a0 [ 542.772481][ T9843] process_one_work+0x85f/0x1010 [ 542.777930][ T9843] worker_thread+0xaa6/0x1290 [ 542.783120][ T9843] kthread+0x436/0x520 [ 542.787699][ T9843] ret_from_fork+0x1f/0x30 [ 542.792649][ T9843] [ 542.792649][ T9843] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 542.801857][ T9843] process_one_work+0x7bb/0x1010 [ 542.807308][ T9843] worker_thread+0xaa6/0x1290 [ 542.812506][ T9843] kthread+0x436/0x520 [ 542.817192][ T9843] ret_from_fork+0x1f/0x30 [ 542.822126][ T9843] [ 542.822126][ T9843] -> #0 ((wq_completion)loop9){+.+.}-{0:0}: [ 542.830388][ T9843] __lock_acquire+0x2c42/0x7d10 [ 542.835762][ T9843] lock_acquire+0x19e/0x400 [ 542.840950][ T9843] flush_workqueue+0x16c/0x13d0 [ 542.846469][ T9843] drain_workqueue+0xcf/0x380 [ 542.851670][ T9843] destroy_workqueue+0x7b/0xb20 [ 542.857033][ T9843] __loop_clr_fd+0x234/0xb90 [ 542.862141][ T9843] blkdev_put+0x53f/0x7d0 [ 542.866998][ T9843] blkdev_close+0x76/0xa0 [ 542.871858][ T9843] __fput+0x234/0x930 [ 542.876362][ T9843] task_work_run+0x125/0x1a0 [ 542.881466][ T9843] exit_to_user_mode_loop+0x10f/0x130 [ 542.887354][ T9843] exit_to_user_mode_prepare+0xee/0x180 [ 542.893414][ T9843] syscall_exit_to_user_mode+0x16/0x40 [ 542.899507][ T9843] do_syscall_64+0x58/0xa0 [ 542.904476][ T9843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.911007][ T9843] [ 542.911007][ T9843] other info that might help us debug this: [ 542.911007][ T9843] [ 542.921227][ T9843] Chain exists of: [ 542.921227][ T9843] (wq_completion)loop9 --> &disk->open_mutex --> &lo->lo_mutex [ 542.921227][ T9843] [ 542.934709][ T9843] Possible unsafe locking scenario: [ 542.934709][ T9843] [ 542.942233][ T9843] CPU0 CPU1 [ 542.947587][ T9843] ---- ---- [ 542.952945][ T9843] lock(&lo->lo_mutex); [ 542.957176][ T9843] lock(&disk->open_mutex); [ 542.964311][ T9843] lock(&lo->lo_mutex); [ 542.971160][ T9843] lock((wq_completion)loop9); [ 542.976002][ T9843] [ 542.976002][ T9843] *** DEADLOCK *** [ 542.976002][ T9843] [ 542.984133][ T9843] 2 locks held by syz.3.1471/9843: [ 542.989234][ T9843] #0: ffff8880206e2118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 542.998530][ T9843] #1: ffff888020770468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 543.007760][ T9843] [ 543.007760][ T9843] stack backtrace: [ 543.013646][ T9843] CPU: 0 PID: 9843 Comm: syz.3.1471 Not tainted syzkaller #0 [ 543.021097][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.031327][ T9843] Call Trace: [ 543.034622][ T9843] [ 543.037548][ T9843] dump_stack_lvl+0x188/0x250 [ 543.042235][ T9843] ? load_image+0x400/0x400 [ 543.046732][ T9843] ? show_regs_print_info+0x20/0x20 [ 543.051923][ T9843] ? print_circular_bug+0x12b/0x1a0 [ 543.057115][ T9843] check_noncircular+0x296/0x330 [ 543.062061][ T9843] ? add_chain_block+0x940/0x940 [ 543.066994][ T9843] ? lockdep_lock+0xf1/0x1f0 [ 543.071765][ T9843] ? mark_lock+0x94/0x320 [ 543.076114][ T9843] __lock_acquire+0x2c42/0x7d10 [ 543.080958][ T9843] ? __lock_acquire+0x13bc/0x7d10 [ 543.085972][ T9843] ? verify_lock_unused+0x140/0x140 [ 543.091161][ T9843] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 543.097131][ T9843] ? verify_lock_unused+0x140/0x140 [ 543.102322][ T9843] ? memset+0x1e/0x40 [ 543.106299][ T9843] lock_acquire+0x19e/0x400 [ 543.110802][ T9843] ? flush_workqueue+0x150/0x13d0 [ 543.115832][ T9843] ? __mutex_trylock_common+0x155/0x260 [ 543.121486][ T9843] ? read_lock_is_recursive+0x10/0x10 [ 543.126959][ T9843] ? __init_swait_queue_head+0xa5/0x150 [ 543.132498][ T9843] flush_workqueue+0x16c/0x13d0 [ 543.137343][ T9843] ? flush_workqueue+0x150/0x13d0 [ 543.142451][ T9843] ? __lock_acquire+0x7d10/0x7d10 [ 543.147482][ T9843] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 543.153454][ T9843] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 543.158922][ T9843] ? rcu_work_rcufn+0x120/0x120 [ 543.163850][ T9843] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 543.169568][ T9843] ? finish_wait+0xc0/0x1d0 [ 543.174604][ T9843] drain_workqueue+0xcf/0x380 [ 543.179377][ T9843] destroy_workqueue+0x7b/0xb20 [ 543.184229][ T9843] __loop_clr_fd+0x234/0xb90 [ 543.188903][ T9843] ? lo_release+0x172/0x1f0 [ 543.193404][ T9843] ? lo_open+0x100/0x100 [ 543.197662][ T9843] blkdev_put+0x53f/0x7d0 [ 543.201993][ T9843] blkdev_close+0x76/0xa0 [ 543.206320][ T9843] ? blkdev_open+0x2c0/0x2c0 [ 543.210932][ T9843] __fput+0x234/0x930 [ 543.214908][ T9843] task_work_run+0x125/0x1a0 [ 543.219494][ T9843] exit_to_user_mode_loop+0x10f/0x130 [ 543.224858][ T9843] exit_to_user_mode_prepare+0xee/0x180 [ 543.230393][ T9843] syscall_exit_to_user_mode+0x16/0x40 [ 543.235846][ T9843] do_syscall_64+0x58/0xa0 [ 543.240255][ T9843] ? clear_bhb_loop+0x30/0x80 [ 543.244935][ T9843] ? clear_bhb_loop+0x30/0x80 [ 543.249692][ T9843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 543.255749][ T9843] RIP: 0033:0x7fb6f6d69dd9 [ 543.260316][ T9843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.280023][ T9843] RSP: 002b:00007ffc4c43c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 543.288436][ T9843] RAX: 0000000000000000 RBX: 00007fb6f6fe4da0 RCX: 00007fb6f6d69dd9 [ 543.296401][ T9843] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 543.304365][ T9843] RBP: 00007fb6f6fe4da0 R08: 0000000000000006 R09: 0000000000000000 [ 543.312420][ T9843] R10: 00007fb6f6fe4cb0 R11: 0000000000000246 R12: 00000000000841e3 [ 543.320396][ T9843] R13: 00007fb6f6fe318c R14: 000000000008400d R15: 00007fb6f6fe3180 [ 543.328374][ T9843] [ 543.374709][ T4241] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 543.499049][ T4241] usb 8-1: USB disconnect, device number 17 [ 543.594076][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1473'. [ 544.148279][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.158474][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.171632][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 544.180726][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.190746][ T23] usb 1-1: config 0 descriptor?? [ 544.240050][ T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 544.346809][ T23] usb 1-1: USB disconnect, device number 26