last executing test programs: 2m47.542526461s ago: executing program 4 (id=1035): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x6f, &(0x7f0000000900)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x4d, 0x0, @opaque="929025a5f90fa6da85c0f903a51a5b77be39071a34b428fd4b1008e17d21efb723319e05913969c80286f8fdc7ed1d09cfc5c21792fff04f4c45f8da1778b4e260a2855ef7"}}}}}, 0x0) 2m46.734733307s ago: executing program 4 (id=1040): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1f, 0x12, r0, 0x80000000) 2m44.30439889s ago: executing program 4 (id=1046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0xfc, 0x0, 0x1}]}, 0x10) listen(r0, 0xfffffff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.112887126s ago: executing program 4 (id=1051): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x1, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m42.425897051s ago: executing program 4 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0xa, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x401, &(0x7f0000003540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m41.141467528s ago: executing program 4 (id=1061): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0xf691, 0x10100, 0xfffffffe, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) 2m37.406628356s ago: executing program 0 (id=1091): mq_open(&(0x7f0000000e80)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLT\x9d\xbf\xfb\x93_\xa4\xcd\xe1\xf4\xab\xef2rw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xa8\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x9a\x9f\a\xce\xc3~\x04\x1a\x0e/@\x99\x92v\xe0\xe4\xab\xc7m\x047\x16|y\x10\n\x8a@8\xff=i\x05h\x98-f\xb39M\x91\xff|\x80\xfd\x1b\x83\xefz\xefx\x01nc\xa0\x9c~\\\xa4&\xc5Ij$\xc6\xad\x88\xdca\xf0\xc2w/2<5I\xb3\xa6/x\xbcf\xf8\xa8c\x04I\x89\xf8\x87\x1a1\x80\xeb\x1e1\x16\x7f\xab]+\x9b\xff}\x9b\xa2\xf8\x04\xbb\xa9\xe0\x84\xefm\"B\xf1\x00\x17\xda\r|.-/\x8d)(gD&xxw8\x1c\xcc\xd1\r\xcd\x16\x9d(-$\xfc\xeb<\xa2(\xab\xdfj\x8d\x14x\xd2?\xa4v\xa9\x85+c\x91\x9d\xa2O\xd3\xc2b\x0e=\xbf\xe3J\xcc\x82\x1b\xc3\xdaS8;\x89\x9eL\xe7\xf1d50l\xfd\x18\xac\xe7\x15K\x9f\x04]\xf8\x10}\xc4\xf2\x8e\x94&\x18\xf6R\x96L(.[\x88\xe3\xe3\x1c\v]\xc5\x8e\xa0r\xc4G~\xa0\xa5@D\xb4P\x06\xc2\xf3\xee\x0fV\x80\xfe\x99\x01\x10\xec\xf0\xecH\xd8\xdcq=f-\x81\x15\x95p\x80\x8a3\xc1\x18\x99\xcd7\x03\xc4\xd7[\xf3\xe6X\x97{\x8an \xfaQ\x9bz\xa3\xd0a)\xa8Q\xee\x02#\x01\xed\xfc\xd6&\xf9W\xb8\xa3M\xb1\x88Z\xd4\x81\xb9\xcd\xe2(\xbaw\xc7\x88\x9bAx\x90\xdd\xd5f\xd3\xf64k:\x1db\xf8\xf9\x1e|\x17\x8eCJZ\x1f\xb7w\x9d\x1c\xef\x16CF\xce$\x89\xd7\x98\xd3\xf4T\xae\x01\xc7\xdc\xfa8p\x90\xe5\x86\x18\x82\x125T\x84\xdf\xdd\xcc\xfd\x10\xec\x9c\xb0\x93\v\x03\x01\"B\xd4\xb2\x82\xf0\x11?\x04}r^5\xc0\xce\b\x00\x7f\aGN\x80\xe7gD\xeb\xe6\x10n@e\x8d:\xf4\x1a\xb6\x1ak\xc3,,\x05\b8O\xbc\x80\xd2\xf5\xc7(\x89\xa64\xfa6!\b\x87\xa3T\x161\xb2\xce\x84P\x85\x9c1\xdd\x84zj]\xa3\xa5\x15\xd5\x9f\xbbf1\xc9\xaa\x93\vtO\xa4\xaf}\x11\x98\xd3c\xb7KT\xa6\xbe$4\xe85KA\xeb\xbf\'\xae\xc0n\xb7\x84\xed_\x19\x82\xf8\xab\x98\xd8\xf7\x89I\xe5', 0x2, 0x141, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x3, 0x8000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x3b4, 0x3, 0x87, 0x0, 0x5, 0x0, 0xbdb], 0xf000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m36.592483329s ago: executing program 0 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000080)) 2m35.608741204s ago: executing program 0 (id=1099): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') 2m35.097706276s ago: executing program 0 (id=1104): socket$packet(0x11, 0x2, 0x300) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010000, &(0x7f0000007300)={0x0, 0x989680}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) close(0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) 2m34.432130273s ago: executing program 0 (id=1107): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) 2m34.223714978s ago: executing program 0 (id=1108): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m26.050582163s ago: executing program 32 (id=1061): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0xf691, 0x10100, 0xfffffffe, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) 2m18.84560283s ago: executing program 33 (id=1108): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.500816231s ago: executing program 2 (id=1480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x2c}}, 0x0) 3.145216854s ago: executing program 2 (id=1482): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xc, 0x7fffffff}]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) io_submit(0x0, 0x0, 0x0) 2.996304965s ago: executing program 2 (id=1483): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1b, &(0x7f0000000040)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.706542977s ago: executing program 2 (id=1484): pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') r0 = socket(0x10, 0x3, 0x0) unshare(0x22020600) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 2.431084232s ago: executing program 2 (id=1486): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.070635442s ago: executing program 1 (id=1490): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xcdf) syz_emit_ethernet(0x5a, &(0x7f0000000840)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x2, 0x3}]}}}}}}}}, 0x0) 1.950998399s ago: executing program 1 (id=1491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x6, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) 1.838903975s ago: executing program 3 (id=1492): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz0\x00', {0x7f, 0x1, 0xfffe, 0x7fff}, 0x23, [0x9, 0xa, 0x6, 0x0, 0x8, 0xd, 0x1cf7, 0x6, 0x8, 0x744, 0x7f, 0x1, 0x81, 0x7fffffff, 0xfffffffc, 0x100, 0x3, 0x401, 0x1ff, 0x8, 0x6, 0x8, 0x4, 0x9, 0x3ff, 0x33, 0x4, 0x1ff, 0x9, 0xffffffff, 0x5, 0xd, 0x2, 0x0, 0x0, 0x5, 0x1, 0x4, 0x1, 0x101, 0x0, 0x10000, 0x10, 0x2, 0x800, 0xfffffff8, 0x80000000, 0x9, 0x3, 0x6, 0x5, 0xd97c, 0xfffffff7, 0x4, 0x32ba8000, 0x400, 0xc, 0x20, 0x6, 0x3, 0x8, 0x10001, 0x3, 0x80000001], [0x0, 0x4, 0x8, 0x222, 0x2, 0x1, 0x0, 0x3, 0x7, 0x101, 0x4, 0x1, 0x2, 0xff, 0x1, 0x2, 0x30000000, 0x7, 0x0, 0x9, 0x7, 0x9, 0x80, 0xffff, 0x3, 0x1, 0xfffffffe, 0xa, 0x9, 0xc913, 0x8a, 0x0, 0x5, 0x7, 0x3, 0x0, 0x9, 0x4, 0x10, 0xc4, 0x1, 0x80, 0xffffffa0, 0x0, 0x45, 0x761a, 0x7, 0xcebb, 0x1, 0x4, 0x8001, 0xfffffff4, 0x400, 0xb, 0x9, 0x3b, 0x7, 0xdfaf, 0x3, 0x1, 0x200, 0x80, 0x10000, 0x1], [0xe06, 0x0, 0x3f800, 0x2, 0x5, 0x8000, 0x3, 0x0, 0x6, 0xfffffffe, 0x5, 0x6, 0x6, 0x1, 0x3, 0x0, 0xe, 0x6, 0x6, 0x8001, 0x2, 0x9, 0xfffffffa, 0x3, 0x24cd, 0x7, 0x543, 0x5, 0x5, 0x4, 0x9, 0xffffffff, 0x9, 0x8, 0x7, 0x5, 0x6, 0x2, 0x35e, 0x4, 0x6, 0x4, 0x1, 0xfffffff8, 0x400, 0xb494, 0x355b, 0x93, 0x7, 0x6, 0xd351, 0xe10, 0x7, 0x0, 0xffffffff, 0x7, 0x800, 0x2, 0x9, 0x80000000, 0x80000001, 0x9, 0x6, 0x7], [0xde46, 0xffff0001, 0x3ad, 0x0, 0x6, 0x8, 0xf0, 0xa46, 0x40, 0x3, 0x401, 0x8000, 0x3, 0x5, 0x6, 0x7a8750b9, 0x8, 0xfffff18d, 0xfe, 0x5, 0x70000, 0x0, 0xc, 0x9, 0xffffff6e, 0x9, 0x5, 0x2, 0xfffff605, 0x1, 0xfffffbff, 0x0, 0x3, 0x5, 0x1ff, 0x796, 0x1000, 0x6, 0xa, 0x9, 0x7, 0x80000001, 0xffffff81, 0xfffffffd, 0x1, 0x3, 0x8, 0x4, 0x5873e4f5, 0xfffff001, 0xffff, 0x8b, 0x3ff, 0x8, 0x9, 0x0, 0x7, 0x7, 0xfff, 0x8, 0x7f, 0x6, 0x6, 0x1]}, 0x45c) 1.823903994s ago: executing program 1 (id=1493): io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0xc4000) r6 = fcntl$getown(r3, 0x9) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7f, 0x8, 0x3, 0x0, 0x4, r6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.615815675s ago: executing program 3 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.425319043s ago: executing program 3 (id=1495): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001340)='wlan0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="84c4", 0x2}, {&(0x7f00000018c0)="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", 0x5b1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000380)='G$', 0x2, 0x24003b84, 0x0, 0x0) 989.656417ms ago: executing program 3 (id=1496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 723.634433ms ago: executing program 3 (id=1497): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 334.039511ms ago: executing program 1 (id=1498): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x103, 0x0) getdents(r0, 0x0, 0x0) 333.008499ms ago: executing program 2 (id=1499): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 146.728006ms ago: executing program 1 (id=1500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000280)="1b54beef9765f16d31f668d2db37f75318510ca6025213c6788499c98b9f0e2ff0ef3c7144fbf86f9f5723d4dd85b291e05f5e2aff1bf823e761dd38fed3c9d4fd078734acf85dae7e65c031996462832f2e43e417a5bb2caf853034fa56ca2546e93a9f675d2eb87a6a77b0", 0x6c}, {&(0x7f0000002b40)="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", 0xb95}], 0x2, 0x0, 0x0, 0x20000800}], 0x1, 0x4054) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2}, 0x400000f2) 64.221264ms ago: executing program 3 (id=1501): io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0xc4000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7f, 0x8, 0x3, 0x0, 0x4}) 0s ago: executing program 1 (id=1502): memfd_create(0x0, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): ][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.763406][ T7115] loop8: detected capacity change from 0 to 8 [ 191.827164][ T6199] Dev loop8: unable to read RDB block 8 [ 191.827211][ T6199] loop8: unable to read partition table [ 191.827463][ T6199] loop8: partition table beyond EOD, truncated [ 191.878727][ T7115] Dev loop8: unable to read RDB block 8 [ 191.878776][ T7115] loop8: unable to read partition table [ 191.879011][ T7115] loop8: partition table beyond EOD, truncated [ 191.879041][ T7115] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 192.412787][ T6695] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.459995][ T6695] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.562756][ T6695] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.640575][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.466'. [ 192.640609][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.466'. [ 192.755186][ T7135] gretap0: entered promiscuous mode [ 192.760771][ T7135] batadv_slave_1: entered promiscuous mode [ 192.761161][ T7135] batadv_slave_1: left promiscuous mode [ 192.824184][ T7135] gretap0: left promiscuous mode [ 192.960575][ T6695] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.377887][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.457414][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.505917][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.514908][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.545393][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.548123][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.584217][ T1217] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 193.734928][ T1217] usb 4-1: Using ep0 maxpacket: 16 [ 193.744281][ T1217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 193.760601][ T1217] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.760629][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.760648][ T1217] usb 4-1: Product: syz [ 193.760661][ T1217] usb 4-1: Manufacturer: syz [ 193.760675][ T1217] usb 4-1: SerialNumber: syz [ 193.780429][ T1217] usb 4-1: config 0 descriptor?? [ 193.803300][ T1217] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.803335][ T1217] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 194.401153][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.401217][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.407207][ T1217] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 194.726061][ T1217] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 194.726107][ T1217] em28xx 4-1:0.0: board has no eeprom [ 194.804486][ T1217] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 194.804525][ T1217] em28xx 4-1:0.0: dvb set to bulk mode. [ 194.805267][ T1858] em28xx 4-1:0.0: Binding DVB extension [ 194.825291][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.852973][ T1217] usb 4-1: USB disconnect, device number 8 [ 194.865035][ T1217] em28xx 4-1:0.0: Disconnecting em28xx [ 194.996280][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.996311][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.997515][ T31] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 194.997538][ T31] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 194.997554][ T31] usb 2-1: Manufacturer: syz [ 195.063367][ T31] usb 2-1: config 0 descriptor?? [ 195.163019][ T1858] em28xx 4-1:0.0: Registering input extension [ 195.180902][ T1217] em28xx 4-1:0.0: Closing input extension [ 195.552831][ T1217] em28xx 4-1:0.0: Freeing device [ 195.697556][ T7215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.731796][ T31] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 195.731866][ T31] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 195.731971][ T31] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 195.813035][ T31] usb 2-1: USB disconnect, device number 7 [ 195.839957][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.051233][ T6695] veth0_vlan: entered promiscuous mode [ 196.070449][ T6695] veth1_vlan: entered promiscuous mode [ 196.150631][ T6695] veth0_macvtap: entered promiscuous mode [ 196.163499][ T6695] veth1_macvtap: entered promiscuous mode [ 196.205277][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.230001][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.290480][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.291194][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.291627][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.297565][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.784007][ T5882] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.934351][ T3663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.934372][ T3663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.956066][ T5882] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 196.956123][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.956146][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.956171][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.956195][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.956234][ T5882] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.956255][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.058452][ T5882] usb 2-1: config 0 descriptor?? [ 197.059522][ T7233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.206746][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.206767][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.323883][ T1217] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 197.522791][ T5882] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 197.634648][ T5882] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 197.673491][ T1217] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.676326][ T1217] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 197.676360][ T1217] usb 1-1: can't read configurations, error -71 [ 197.910567][ T6043] usb 2-1: USB disconnect, device number 8 [ 198.097639][ T7262] fido_id[7262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 198.496888][ T7277] loop8: detected capacity change from 0 to 7 [ 198.501371][ T7277] Dev loop8: unable to read RDB block 7 [ 198.501419][ T7277] loop8: unable to read partition table [ 198.501645][ T7277] loop8: partition table beyond EOD, truncated [ 198.501663][ T7277] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 198.824611][ T37] kauditd_printk_skb: 821 callbacks suppressed [ 198.824628][ T37] audit: type=1326 audit(1761565130.707:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.833656][ T37] audit: type=1326 audit(1761565130.707:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.868448][ T37] audit: type=1326 audit(1761565130.737:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.932174][ T37] audit: type=1326 audit(1761565130.807:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.932230][ T37] audit: type=1326 audit(1761565130.807:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.944707][ T37] audit: type=1326 audit(1761565130.817:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.944755][ T37] audit: type=1326 audit(1761565130.817:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.949140][ T37] audit: type=1326 audit(1761565130.827:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.953900][ T37] audit: type=1326 audit(1761565130.827:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 198.958335][ T37] audit: type=1326 audit(1761565130.837:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7283 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd576b1efc9 code=0x7ffc0000 [ 200.335227][ T1217] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.493847][ T1217] usb 1-1: Using ep0 maxpacket: 32 [ 200.512786][ T1217] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 200.512815][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.526593][ T1217] usb 1-1: config 0 descriptor?? [ 200.742748][ T1217] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 200.786236][ T1217] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.808715][ T1217] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 200.808776][ T1217] usb 1-1: media controller created [ 201.028135][ T1217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.316372][ T7332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.371855][ T1217] DVB: Unable to find symbol dib7000p_attach() [ 201.371886][ T1217] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 201.465874][ T1217] rc_core: IR keymap rc-dib0700-rc5 not found [ 201.465895][ T1217] Registered IR keymap rc-empty [ 201.467819][ T1217] dvb-usb: could not initialize remote control. [ 201.467831][ T1217] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 201.499063][ T1217] usb 1-1: USB disconnect, device number 9 [ 201.581829][ T1217] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 201.992917][ T992] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 202.207824][ T992] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.207853][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.207872][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.207890][ T992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.207925][ T992] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.207941][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.286643][ T992] usb 5-1: config 0 descriptor?? [ 202.901663][ T992] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.936997][ T992] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 203.121018][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 203.123901][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 203.176944][ T5882] usb 5-1: USB disconnect, device number 7 [ 203.212382][ T7372] loop4: detected capacity change from 0 to 7 [ 203.227750][ T7372] Dev loop4: unable to read RDB block 7 [ 203.227798][ T7372] loop4: AHDI p1 p2 [ 203.227826][ T7372] loop4: partition table partially beyond EOD, truncated [ 203.228150][ T7372] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 203.283942][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 203.286540][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.286566][ T31] usb 4-1: config 179 has no interface number 0 [ 203.286618][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 203.286644][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 203.286670][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.286693][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 203.286718][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.286759][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 203.286781][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.406834][ T7360] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.988872][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 203.988942][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.993166][ T31] usb 4-1: USB disconnect, device number 9 [ 204.013233][ T7393] pim6reg: entered allmulticast mode [ 204.078019][ T7401] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.547'. [ 204.078853][ T7398] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.547'. [ 204.102386][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 207.453826][ T1217] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.613776][ T1217] usb 5-1: Using ep0 maxpacket: 8 [ 207.622295][ T1217] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 207.622352][ T1217] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.622371][ T1217] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.622393][ T1217] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.622413][ T1217] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.622451][ T1217] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.622472][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.918949][ T1217] usb 5-1: GET_CAPABILITIES returned 0 [ 207.918993][ T1217] usbtmc 5-1:16.0: can't read capabilities [ 208.117090][ T7514] input: syz1 as /devices/virtual/input/input14 [ 208.224516][ T1813] usb 5-1: USB disconnect, device number 8 [ 208.425718][ T7521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.087296][ T7542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.191397][ T7546] usb usb8: usbfs: process 7546 (syz.0.613) did not claim interface 0 before use [ 209.286639][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 209.368005][ T7548] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 209.368027][ T7548] netlink: 'syz.4.612': attribute type 2 has an invalid length. [ 209.990423][ T7569] input: syz0 as /devices/virtual/input/input15 [ 209.993962][ T992] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 210.163863][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 210.181395][ T992] usb 5-1: config index 0 descriptor too short (expected 12336, got 36) [ 210.181423][ T992] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 210.181443][ T992] usb 5-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 210.181461][ T992] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 210.225988][ T992] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 210.226018][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.226037][ T992] usb 5-1: Product: syz [ 210.226051][ T992] usb 5-1: Manufacturer: syz [ 210.226065][ T992] usb 5-1: SerialNumber: syz [ 210.708485][ T31] usb 5-1: USB disconnect, device number 9 [ 211.143901][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.343945][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 211.359023][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.359063][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.359101][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.359123][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.369525][ T31] usb 4-1: config 0 descriptor?? [ 211.385247][ T31] hub 4-1:0.0: USB hub found [ 211.617382][ T31] hub 4-1:0.0: 1 port detected [ 211.825325][ T7564] Bluetooth: hci0: command 0x0406 tx timeout [ 211.825455][ T7564] Bluetooth: hci3: command 0x0406 tx timeout [ 211.960736][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.645'. [ 211.960778][ T7622] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 211.960790][ T7622] netlink: 'syz.4.645': attribute type 2 has an invalid length. [ 212.153893][ T1813] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.226307][ T992] hub 4-1:0.0: activate --> -90 [ 212.327235][ T1813] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 212.327265][ T1813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.375876][ T1813] usb 2-1: config 0 descriptor?? [ 212.670201][ T1217] usb 4-1: USB disconnect, device number 10 [ 212.679138][ T992] usb 4-1: Failed to suspend device, error -71 [ 212.802308][ T1813] kye 0003:0458:0153.000A: collection stack underflow [ 212.802341][ T1813] kye 0003:0458:0153.000A: item 0 4 0 12 parsing failed [ 212.803129][ T1813] kye 0003:0458:0153.000A: parse failed [ 212.803198][ T1813] kye 0003:0458:0153.000A: probe with driver kye failed with error -22 [ 213.008685][ T992] usb 2-1: USB disconnect, device number 9 [ 213.494276][ T1813] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 213.623938][ T1217] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 213.651539][ T1813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.651564][ T1813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.674311][ T1813] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 213.674339][ T1813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.674358][ T1813] usb 4-1: SerialNumber: syz [ 213.721061][ T1813] usb 4-1: 0:2 : does not exist [ 213.783834][ T1217] usb 3-1: Using ep0 maxpacket: 8 [ 213.786949][ T1217] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 213.786978][ T1217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.828931][ T1217] usb 3-1: config 0 descriptor?? [ 213.977848][ T5807] Bluetooth: hci1: unexpected event 0x09 length: 11 > 3 [ 214.258797][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.259517][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.313612][ T1813] usb 4-1: USB disconnect, device number 11 [ 214.763466][ T7684] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 215.088879][ T1217] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 215.088906][ T1217] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 215.089118][ T1217] asix 3-1:0.0: probe with driver asix failed with error -71 [ 215.136096][ T1217] usb 3-1: USB disconnect, device number 5 [ 215.213834][ T1813] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 215.366881][ T1813] usb 4-1: Using ep0 maxpacket: 32 [ 215.382568][ T1813] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 215.382596][ T1813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.382615][ T1813] usb 4-1: Product: syz [ 215.382628][ T1813] usb 4-1: Manufacturer: syz [ 215.382642][ T1813] usb 4-1: SerialNumber: syz [ 215.427551][ T1813] usb 4-1: config 0 descriptor?? [ 215.856041][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.008321][ T992] Process accounting resumed [ 216.038156][ T31] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 216.038186][ T31] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 216.038206][ T31] usb 5-1: Product: syz [ 216.038219][ T31] usb 5-1: Manufacturer: syz [ 216.038233][ T31] usb 5-1: SerialNumber: syz [ 216.056406][ T31] usb 5-1: config 0 descriptor?? [ 216.080517][ T1813] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 216.080555][ T31] ch341 5-1:0.0: ch341-uart converter detected [ 216.080564][ T1813] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 216.080630][ T1813] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 216.212443][ T1813] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 216.343322][ T992] usb 4-1: USB disconnect, device number 12 [ 217.128427][ T31] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 217.318229][ T31] usb 5-1: USB disconnect, device number 10 [ 217.332876][ T31] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 217.354106][ T31] ch341 5-1:0.0: device disconnected [ 217.874171][ T992] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.981294][ T7754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.023925][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 218.028114][ T992] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.028138][ T992] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.039424][ T992] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.039451][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.039469][ T992] usb 2-1: Product: syz [ 218.039483][ T992] usb 2-1: Manufacturer: syz [ 218.039496][ T992] usb 2-1: SerialNumber: syz [ 218.311253][ T992] usb 2-1: 0:2 : does not exist [ 218.322391][ T992] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 218.346909][ T992] usb 2-1: USB disconnect, device number 10 [ 218.638689][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.534961][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.243891][ T6043] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.407278][ T6043] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.407336][ T6043] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 220.407358][ T6043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.420328][ T6043] usb 1-1: config 0 descriptor?? [ 220.695203][ T6043] usb 1-1: USB disconnect, device number 10 [ 221.396581][ T992] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 221.453871][ T992] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.511287][ T7805] syz.4.724 (7805) used obsolete PPPIOCDETACH ioctl [ 221.615734][ T7807] input: syz1 as /devices/virtual/input/input16 [ 222.665803][ T7840] use of bytesused == 0 is deprecated and will be removed in the future, [ 222.665819][ T7840] use the actual size instead. [ 223.044074][ T6043] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 223.214074][ T6043] usb 4-1: Using ep0 maxpacket: 8 [ 223.219217][ T6043] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 223.219276][ T6043] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.219298][ T6043] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.219321][ T6043] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.219342][ T6043] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.219382][ T6043] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.219403][ T6043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.609236][ T6043] usb 4-1: usb_control_msg returned -32 [ 223.609286][ T6043] usbtmc 4-1:16.0: can't read capabilities [ 224.143979][ T6043] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 224.296590][ T6043] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.297139][ T6043] usb 3-1: not running at top speed; connect to a high speed hub [ 224.298440][ T6043] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.298469][ T6043] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.298487][ T6043] usb 3-1: config 1 has no interface number 1 [ 224.298529][ T6043] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 224.298564][ T6043] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 224.315070][ T6043] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.315099][ T6043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.315118][ T6043] usb 3-1: Product: syz [ 224.315132][ T6043] usb 3-1: Manufacturer: syz [ 224.315166][ T6043] usb 3-1: SerialNumber: syz [ 224.535893][ T6043] hub 3-1:1.0: Invalid hub with more than one config or interface [ 224.535934][ T6043] hub 3-1:1.0: probe with driver hub failed with error -22 [ 224.567151][ T6043] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 224.583895][ T1217] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 224.689045][ T6043] usb 3-1: USB disconnect, device number 6 [ 224.701547][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 224.701602][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.701669][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.701682][ T5807] Workqueue: hci0 hci_rx_work [ 224.701715][ T5807] Call Trace: [ 224.701726][ T5807] [ 224.701736][ T5807] dump_stack_lvl+0x189/0x250 [ 224.701772][ T5807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.701798][ T5807] ? __pfx__printk+0x10/0x10 [ 224.701827][ T5807] ? kernfs_path_from_node+0x2c/0x280 [ 224.701847][ T5807] ? kernfs_path_from_node+0x243/0x280 [ 224.701866][ T5807] ? kernfs_path_from_node+0x2c/0x280 [ 224.701888][ T5807] sysfs_create_dir_ns+0x259/0x280 [ 224.701908][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 224.701930][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 224.701955][ T5807] ? rt_spin_unlock+0x161/0x200 [ 224.701978][ T5807] kobject_add_internal+0x5a5/0xb50 [ 224.702014][ T5807] kobject_add+0x155/0x220 [ 224.702043][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 224.702073][ T5807] ? get_device_parent+0x370/0x3a0 [ 224.702100][ T5807] device_add+0x408/0xb50 [ 224.702127][ T5807] hci_conn_add_sysfs+0xd5/0x1e0 [ 224.702160][ T5807] le_conn_complete_evt+0xf39/0x1500 [ 224.702198][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 224.702223][ T5807] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 224.702248][ T5807] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.702277][ T5807] ? skb_pull_data+0xfb/0x200 [ 224.702309][ T5807] hci_le_conn_complete_evt+0x187/0x450 [ 224.702342][ T5807] hci_event_packet+0x78f/0x1200 [ 224.702367][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 224.702395][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 224.702427][ T5807] ? hci_send_to_monitor+0xe2/0x570 [ 224.702458][ T5807] hci_rx_work+0x46a/0xe80 [ 224.702489][ T5807] ? process_scheduled_works+0x9ef/0x17b0 [ 224.702533][ T5807] process_scheduled_works+0xae1/0x17b0 [ 224.702591][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.702644][ T5807] worker_thread+0x8a0/0xda0 [ 224.702672][ T5807] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.702708][ T5807] ? __kthread_parkme+0x7b/0x200 [ 224.702746][ T5807] kthread+0x711/0x8a0 [ 224.702778][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 224.702803][ T5807] ? __pfx_kthread+0x10/0x10 [ 224.702827][ T5807] ? rt_spin_unlock+0x150/0x200 [ 224.702851][ T5807] ? rt_spin_unlock+0x161/0x200 [ 224.702866][ T5807] ? __pfx_kthread+0x10/0x10 [ 224.702893][ T5807] ret_from_fork+0x4bc/0x870 [ 224.702917][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 224.702949][ T5807] ? __switch_to_asm+0x39/0x70 [ 224.702969][ T5807] ? __switch_to_asm+0x33/0x70 [ 224.702987][ T5807] ? __pfx_kthread+0x10/0x10 [ 224.703018][ T5807] ret_from_fork_asm+0x1a/0x30 [ 224.703058][ T5807] [ 224.703095][ T5807] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 224.703136][ T5807] Bluetooth: hci0: failed to register connection device [ 224.737661][ T1217] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 224.737718][ T1217] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.737742][ T1217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.737765][ T1217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 224.737789][ T1217] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.737829][ T1217] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.737849][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.743661][ T1217] usb 1-1: config 0 descriptor?? [ 224.746531][ T7866] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 225.193658][ T1217] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 225.241300][ T1217] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 225.396615][ T1813] usb 1-1: USB disconnect, device number 11 [ 225.723855][ T1217] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 225.862619][ T1813] usb 4-1: USB disconnect, device number 13 [ 226.112646][ T7897] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 226.181604][ T7903] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 226.479423][ T7903] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 226.479646][ T7904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 226.481759][ T7901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.841928][ T7920] kvm: MWAIT instruction emulated as NOP! [ 227.157063][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157087][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157102][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157117][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157131][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157146][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157160][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157175][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157189][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.157203][ T6043] hid-generic 0003:0003:0000.000D: unknown main item tag 0x0 [ 227.269432][ T6043] hid-generic 0003:0003:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 227.702709][ T1217] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 228.003836][ T1217] usb 1-1: Using ep0 maxpacket: 32 [ 228.007520][ T1217] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 228.007545][ T1217] usb 1-1: config 0 has no interface number 0 [ 228.007596][ T1217] usb 1-1: config 0 interface 12 has no altsetting 0 [ 228.010105][ T1217] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 228.010133][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.010151][ T1217] usb 1-1: Product: syz [ 228.010158][ T1217] usb 1-1: Manufacturer: syz [ 228.010165][ T1217] usb 1-1: SerialNumber: syz [ 228.018760][ T1217] usb 1-1: config 0 descriptor?? [ 228.749119][ T7951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.917635][ T7979] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.917666][ T7979] overlayfs: missing 'lowerdir' [ 230.116493][ T1217] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 230.116551][ T1217] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 230.116567][ T1217] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 230.116651][ T1217] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 230.136819][ T1217] usb 1-1: USB disconnect, device number 12 [ 230.637826][ T7999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.973839][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 231.126340][ T31] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 231.126369][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.144376][ T31] usb 4-1: config 0 descriptor?? [ 231.416710][ T31] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 231.618239][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 231.711121][ T31] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 231.711146][ T31] [drm] Initialized udl on minor 2 [ 231.754008][ T31] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.784816][ T31] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 231.789440][ T5882] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.812789][ T31] usb 4-1: USB disconnect, device number 14 [ 231.828242][ T5882] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.829081][ T5882] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 231.943909][ T992] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.101158][ T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.101200][ T992] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.103672][ T992] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 232.103833][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.103853][ T992] usb 5-1: Product: syz [ 232.103865][ T992] usb 5-1: Manufacturer: syz [ 232.103879][ T992] usb 5-1: SerialNumber: syz [ 232.118367][ T992] usb 5-1: config 0 descriptor?? [ 232.137059][ T992] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 232.161940][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.165434][ T992] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 232.165490][ T992] usb 5-1: media controller created [ 232.309938][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.419883][ T992] DVB: Unable to find symbol tda10046_attach() [ 232.419899][ T992] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 232.419913][ T992] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 232.513871][ T1217] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 232.876431][ T1217] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.876459][ T1217] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 232.876477][ T1217] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.876529][ T1217] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 232.876552][ T1217] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 232.879675][ T1217] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.879701][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.879721][ T1217] usb 1-1: Product: syz [ 232.879734][ T1217] usb 1-1: Manufacturer: syz [ 233.534507][ T1217] cdc_wdm 1-1:1.0: skipping garbage [ 233.534528][ T1217] cdc_wdm 1-1:1.0: skipping garbage [ 233.539431][ T1217] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 233.539455][ T1217] cdc_wdm 1-1:1.0: Unknown control protocol [ 233.799656][ T1217] usb 1-1: USB disconnect, device number 13 [ 234.062781][ T992] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 234.095530][ T992] usb 5-1: USB disconnect, device number 11 [ 234.513935][ T1217] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 234.686342][ T1217] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.686371][ T1217] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 234.686389][ T1217] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.686440][ T1217] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 234.686465][ T1217] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 234.691417][ T1217] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.691447][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.691467][ T1217] usb 1-1: Product: syz [ 234.691481][ T1217] usb 1-1: Manufacturer: syz [ 234.787888][ T1217] cdc_wdm 1-1:1.0: skipping garbage [ 234.787907][ T1217] cdc_wdm 1-1:1.0: skipping garbage [ 234.805686][ T1217] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 234.805707][ T1217] cdc_wdm 1-1:1.0: Unknown control protocol [ 235.007084][ T9] usb 1-1: USB disconnect, device number 14 [ 235.369047][ T8091] af_packet: tpacket_rcv: packet too big, clamped from 176 to 4294967272. macoff=96 [ 235.454949][ T8096] trusted_key: syz.4.834 sent an empty control message without MSG_MORE. [ 235.853851][ T1217] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 236.006173][ T1217] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 236.006208][ T1217] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 236.006249][ T1217] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.006270][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.056770][ T8101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.056952][ T8101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.063679][ T1217] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.323641][ T1217] usb 1-1: USB disconnect, device number 15 [ 236.601927][ T8116] Invalid source name [ 238.304328][ T1217] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 239.552824][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.612741][ T1217] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 232, setting to 64 [ 239.612775][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.645224][ T1217] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.645253][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 239.645272][ T1217] usb 2-1: Product: syz [ 239.645285][ T1217] usb 2-1: Manufacturer: syz [ 239.645298][ T1217] usb 2-1: SerialNumber: syz [ 239.692719][ T1217] usb 2-1: config 0 descriptor?? [ 239.782766][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.788099][ T8160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.818383][ T1217] usb 2-1: selecting invalid altsetting 0 [ 240.086029][ T8186] batadv_slave_1: entered promiscuous mode [ 240.086843][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 240.086969][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.671766][ T8186] batadv_slave_1 (unregistering): left promiscuous mode [ 240.671859][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.010791][ T8212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.132876][ T8220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.880'. [ 242.339796][ T31] usb 2-1: USB disconnect, device number 11 [ 242.380950][ T8227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.797524][ T8239] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 242.958933][ T8239] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 242.965270][ T8238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.103935][ T1813] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 243.263888][ T1813] usb 1-1: Using ep0 maxpacket: 16 [ 243.269209][ T1813] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 243.269240][ T1813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.313684][ T1813] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.313782][ T1813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.313800][ T1813] usb 1-1: Product: syz [ 243.313813][ T1813] usb 1-1: Manufacturer: syz [ 243.313825][ T1813] usb 1-1: SerialNumber: syz [ 243.355144][ T1813] usb 1-1: config 0 descriptor?? [ 243.360637][ T1813] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.360668][ T1813] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 243.443856][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 243.604218][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 243.604255][ T9] usb 5-1: can't read configurations, error -61 [ 243.614084][ T8255] evm: overlay not supported [ 243.746145][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 243.746185][ T8259] netlink: 'syz.1.896': attribute type 7 has an invalid length. [ 243.746198][ T8259] netlink: 'syz.1.896': attribute type 8 has an invalid length. [ 243.746210][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 243.763915][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.948676][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 243.948715][ T9] usb 5-1: can't read configurations, error -61 [ 243.949265][ T9] usb usb5-port1: attempt power cycle [ 243.988387][ T1813] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 243.990061][ T1813] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 244.191607][ T1813] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 244.191628][ T1813] em28xx 1-1:0.0: No AC97 audio processor [ 244.212538][ T1813] usb 1-1: USB disconnect, device number 16 [ 244.222974][ T1813] em28xx 1-1:0.0: Disconnecting em28xx [ 244.235831][ T1813] em28xx 1-1:0.0: Freeing device [ 244.324046][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 244.374255][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 244.374293][ T9] usb 5-1: can't read configurations, error -61 [ 244.503901][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 244.530979][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 244.531015][ T9] usb 5-1: can't read configurations, error -61 [ 244.531431][ T9] usb usb5-port1: unable to enumerate USB device [ 244.680275][ T8283] syzkaller1: entered promiscuous mode [ 244.680291][ T8283] syzkaller1: entered allmulticast mode [ 245.571672][ T8303] Invalid ELF header len 1 [ 246.172222][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 246.349671][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 246.352559][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 246.352586][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.382664][ T9] usb 4-1: config 0 descriptor?? [ 246.407614][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 246.624104][ T5791] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 246.703335][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 246.793874][ T5791] usb 1-1: Using ep0 maxpacket: 16 [ 246.796472][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.796503][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.796524][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.796565][ T5791] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 246.796586][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.801756][ T5791] usb 1-1: config 0 descriptor?? [ 247.976808][ T8342] random: crng reseeded on system resumption [ 248.053622][ T5791] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 248.268047][ T5791] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 248.295759][ T5791] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 248.301927][ T9] gspca_vc032x: reg_w err -110 [ 248.301946][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.301956][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.301964][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.301971][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.301980][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.301987][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.301994][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302002][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302010][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302019][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302026][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302034][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302042][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302050][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302058][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302065][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302073][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302081][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.302104][ T9] gspca_vc032x: Unknown sensor... [ 248.302190][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 248.442657][ T5791] usb 1-1: USB disconnect, device number 17 [ 248.452764][ T992] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.452845][ T992] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.452914][ T992] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.452982][ T992] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.823464][ T8355] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.393869][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 250.046244][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.046270][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.047871][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.047898][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.047917][ T31] usb 1-1: SerialNumber: syz [ 250.254286][ T9] usb 4-1: USB disconnect, device number 15 [ 250.343053][ T31] usb 1-1: 0:2 : does not exist [ 250.343155][ T31] usb 1-1: unit 5: unexpected type 0x09 [ 250.408591][ T31] usb 1-1: USB disconnect, device number 18 [ 250.595762][ T8393] input: syz1 as /devices/virtual/input/input19 [ 252.101286][ T8448] QAT: Device 6 not found [ 252.932406][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 252.932425][ T37] audit: type=1800 audit(1761565184.797:862): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.965" name="bus" dev="ramfs" ino=21097 res=0 errno=0 [ 253.579464][ T8488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.613847][ T31] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 253.772902][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 253.772933][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.772952][ T31] usb 3-1: Product: syz [ 253.772965][ T31] usb 3-1: Manufacturer: syz [ 253.772978][ T31] usb 3-1: SerialNumber: syz [ 253.845461][ T31] usb 3-1: config 0 descriptor?? [ 253.945292][ T6043] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 254.075111][ T31] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 254.645268][ T6043] usb 2-1: config 0 has no interfaces? [ 254.645306][ T6043] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 254.645328][ T6043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.653626][ T6043] usb 2-1: config 0 descriptor?? [ 254.939302][ T992] usb 2-1: USB disconnect, device number 12 [ 255.854585][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.854656][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.946758][ T31] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 255.964099][ T31] usb 3-1: USB disconnect, device number 8 [ 256.273834][ T1813] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 256.423803][ T1813] usb 2-1: Using ep0 maxpacket: 16 [ 256.426531][ T1813] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 256.426554][ T1813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.426570][ T1813] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.432414][ T1813] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.432443][ T1813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.432461][ T1813] usb 2-1: Product: syz [ 256.432475][ T1813] usb 2-1: Manufacturer: syz [ 256.432488][ T1813] usb 2-1: SerialNumber: syz [ 256.987751][ T1813] usb 2-1: 0:2 : does not exist [ 258.261738][ T1813] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 258.337347][ T1813] usb 2-1: USB disconnect, device number 13 [ 261.134399][ T8640] overlayfs: failed to resolve './file1': -2 [ 264.177977][ T37] audit: type=1804 audit(1761565194.747:863): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1040" name="/newroot/226/file0" dev="tmpfs" ino=1184 res=1 errno=0 [ 264.701024][ T8681] syz.0.1043 (8681) used greatest stack depth: 16912 bytes left [ 268.431268][ T8733] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 268.580324][ T8733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.293987][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 269.443899][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 269.445976][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.446035][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.446061][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 269.446082][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 269.446110][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.447466][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 269.447491][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 269.447510][ T31] usb 3-1: Manufacturer: syz [ 269.450999][ T31] usb 3-1: config 0 descriptor?? [ 269.823893][ T31] rc_core: IR keymap rc-hauppauge not found [ 269.823914][ T31] Registered IR keymap rc-empty [ 269.824113][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.844009][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.865256][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 269.869312][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 269.872412][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.883920][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.904728][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.923984][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.946502][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.965602][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.983993][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.005956][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.026276][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.043922][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.076638][ T31] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 270.076662][ T31] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 270.089990][ T31] usb 3-1: USB disconnect, device number 9 [ 270.118619][ T8768] block nbd0: shutting down sockets [ 270.564751][ T1813] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 270.727915][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1081'. [ 270.728502][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1081'. [ 270.734612][ T1813] usb 4-1: Using ep0 maxpacket: 32 [ 270.752844][ T1813] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 270.752874][ T1813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.752893][ T1813] usb 4-1: Product: syz [ 270.752907][ T1813] usb 4-1: Manufacturer: syz [ 270.752920][ T1813] usb 4-1: SerialNumber: syz [ 270.800667][ T1813] usb 4-1: config 0 descriptor?? [ 270.807483][ T1813] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 271.056897][ T1813] gspca_ov534_9: reg_w failed -71 [ 271.351734][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.402888][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1084'. [ 271.485266][ T1813] gspca_ov534_9: Unknown sensor 0000 [ 271.485364][ T1813] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 271.488459][ T1813] usb 4-1: USB disconnect, device number 16 [ 271.752277][ T8803] dvmrp1: entered allmulticast mode [ 271.993913][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 272.143890][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 272.150759][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 272.150787][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.150805][ T31] usb 3-1: Product: syz [ 272.150819][ T31] usb 3-1: Manufacturer: syz [ 272.150832][ T31] usb 3-1: SerialNumber: syz [ 272.196511][ T31] usb 3-1: config 0 descriptor?? [ 272.257532][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.409981][ T31] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 273.237083][ T31] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 273.239468][ T31] usb 3-1: USB disconnect, device number 10 [ 273.533931][ T1813] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 273.597777][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.649261][ T8833] loop2: detected capacity change from 0 to 7 [ 273.661264][ T8833] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 273.661388][ T8833] loop2: p1 start 828335478 is beyond EOD, truncated [ 273.661407][ T8833] loop2: p2 start 1630500453 is beyond EOD, truncated [ 273.661422][ T8833] loop2: p3 start 1025 is beyond EOD, truncated [ 273.661437][ T8833] loop2: p4 start 1600481124 is beyond EOD, truncated [ 273.661453][ T8833] loop2: p5 start 256 is beyond EOD, truncated [ 273.693830][ T1813] usb 2-1: Using ep0 maxpacket: 16 [ 273.698816][ T1813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 273.701753][ T1813] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 273.701781][ T1813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.701800][ T1813] usb 2-1: Product: syz [ 273.701813][ T1813] usb 2-1: Manufacturer: syz [ 273.701826][ T1813] usb 2-1: SerialNumber: syz [ 273.712561][ T1813] usb 2-1: config 0 descriptor?? [ 273.727299][ T1813] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 273.727332][ T1813] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 273.773035][ T8835] bridge0: port 3(gretap0) entered blocking state [ 273.773269][ T8835] bridge0: port 3(gretap0) entered disabled state [ 273.773480][ T8835] gretap0: entered allmulticast mode [ 273.798424][ T8835] gretap0: entered promiscuous mode [ 273.800446][ T8835] bridge0: port 3(gretap0) entered blocking state [ 273.800628][ T8835] bridge0: port 3(gretap0) entered forwarding state [ 273.854067][ T8836] gretap0: left allmulticast mode [ 273.854097][ T8836] gretap0: left promiscuous mode [ 273.858878][ T8836] bridge0: port 3(gretap0) entered disabled state [ 273.862514][ T8838] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.196336][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 274.523332][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.543239][ T1813] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 274.971640][ T1813] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 274.971673][ T1813] em28xx 2-1:0.0: board has no eeprom [ 275.043884][ T1813] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 275.043912][ T1813] em28xx 2-1:0.0: dvb set to bulk mode. [ 275.044238][ T1217] em28xx 2-1:0.0: Binding DVB extension [ 275.076242][ T1813] usb 2-1: USB disconnect, device number 14 [ 275.078654][ T1813] em28xx 2-1:0.0: Disconnecting em28xx [ 275.118632][ T1217] em28xx 2-1:0.0: Registering input extension [ 275.120413][ T1813] em28xx 2-1:0.0: Closing input extension [ 275.248996][ T1813] em28xx 2-1:0.0: Freeing device [ 275.954508][ T8874] dvmrp0: entered allmulticast mode [ 276.090665][ T8877] loop2: detected capacity change from 0 to 7 [ 276.116304][ T8877] Dev loop2: unable to read RDB block 7 [ 276.116337][ T8877] loop2: unable to read partition table [ 276.116470][ T8877] loop2: partition table beyond EOD, truncated [ 276.116492][ T8877] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.604297][ T8903] netlink: 'syz.2.1123': attribute type 12 has an invalid length. [ 278.140074][ T8907] kvm: pic: non byte read [ 278.140513][ T8907] kvm: pic: level sensitive irq not supported [ 278.140577][ T8907] kvm: pic: non byte read [ 278.140785][ T8907] kvm: pic: level sensitive irq not supported [ 278.140834][ T8907] kvm: pic: non byte read [ 278.141038][ T8907] kvm: pic: level sensitive irq not supported [ 278.141085][ T8907] kvm: pic: non byte read [ 278.141297][ T8907] kvm: pic: level sensitive irq not supported [ 278.141345][ T8907] kvm: pic: non byte read [ 278.141541][ T8907] kvm: pic: level sensitive irq not supported [ 278.141588][ T8907] kvm: pic: non byte read [ 278.141790][ T8907] kvm: pic: level sensitive irq not supported [ 278.141838][ T8907] kvm: pic: non byte read [ 278.142045][ T8907] kvm: pic: level sensitive irq not supported [ 278.142086][ T8907] kvm: pic: non byte read [ 278.142291][ T8907] kvm: pic: level sensitive irq not supported [ 278.142336][ T8907] kvm: pic: non byte read [ 279.434977][ T6043] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 279.625809][ T37] audit: type=1107 audit(1761565211.437:864): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 279.894851][ T6043] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 279.894870][ T6043] usb 2-1: config 0 has no interface number 0 [ 279.894898][ T6043] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=9a.34 [ 279.894910][ T6043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.943980][ T1813] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 280.041082][ T6043] usb 2-1: config 0 descriptor?? [ 280.093875][ T1813] usb 3-1: Using ep0 maxpacket: 32 [ 280.095514][ T1813] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 280.095530][ T1813] usb 3-1: config 0 has no interface number 0 [ 280.095556][ T1813] usb 3-1: config 0 interface 89 has no altsetting 0 [ 280.097359][ T1813] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 280.097374][ T1813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.097384][ T1813] usb 3-1: Product: syz [ 280.097392][ T1813] usb 3-1: Manufacturer: syz [ 280.097399][ T1813] usb 3-1: SerialNumber: syz [ 280.100739][ T1813] usb 3-1: config 0 descriptor?? [ 280.106292][ T1813] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 280.106326][ T1813] em28xx 3-1:0.89: Video interface 89 found: bulk [ 280.272192][ T8924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.273108][ T8924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.747230][ T1813] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 281.974026][ T1813] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 281.974059][ T1813] em28xx 3-1:0.89: board has no eeprom [ 282.033780][ T1813] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 282.033808][ T1813] em28xx 3-1:0.89: analog set to bulk mode. [ 282.035526][ T9] em28xx 3-1:0.89: Registering V4L2 extension [ 282.044858][ T1813] usb 3-1: USB disconnect, device number 11 [ 282.048614][ T1813] em28xx 3-1:0.89: Disconnecting em28xx [ 282.151356][ T9] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 282.151378][ T9] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 282.151390][ T9] em28xx 3-1:0.89: No AC97 audio processor [ 282.205355][ T9] usb 3-1: Decoder not found [ 282.205375][ T9] em28xx 3-1:0.89: failed to create media graph [ 282.205431][ T9] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 282.235403][ T9] em28xx 3-1:0.89: Registering snapshot button... [ 282.252698][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input22 [ 282.333105][ T9] em28xx 3-1:0.89: Remote control support is not available for this card. [ 282.333167][ T1813] em28xx 3-1:0.89: Closing input extension [ 282.340129][ T1813] em28xx 3-1:0.89: Deregistering snapshot button [ 282.450680][ T1813] em28xx 3-1:0.89: Freeing device [ 282.796826][ T8947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.853829][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.931510][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.089829][ T44] usb 2-1: USB disconnect, device number 15 [ 283.223941][ T6043] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 283.382621][ T6043] usb 4-1: config 1 interface 0 has no altsetting 0 [ 283.386673][ T6043] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 283.386709][ T6043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.386728][ T6043] usb 4-1: Product: syz [ 283.386742][ T6043] usb 4-1: Manufacturer: syz [ 283.386755][ T6043] usb 4-1: SerialNumber: syz [ 283.692661][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.721007][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.757984][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.780366][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.783355][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.839137][ T6043] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 283.993158][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'. [ 284.033425][ T8965] vlan2: entered promiscuous mode [ 284.033440][ T8965] syz_tun: entered promiscuous mode [ 284.245801][ T8967] kvm: pic: non byte write [ 284.245887][ T8967] kvm: pic: non byte write [ 284.246205][ T8967] kvm: pic: single mode not supported [ 284.246216][ T8967] kvm: pic: level sensitive irq not supported [ 284.681277][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.745071][ T3522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.753813][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.908881][ T5807] Bluetooth: hci5: command tx timeout [ 285.965241][ T9] usb 4-1: USB disconnect, device number 17 [ 286.015839][ T9] usblp0: removed [ 286.117537][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.171310][ T3522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.283871][ T1858] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 286.440515][ T3522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.441561][ T1858] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 286.441588][ T1858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.491381][ T1858] usb 3-1: config 0 descriptor?? [ 288.036792][ T5807] Bluetooth: hci5: command tx timeout [ 288.321268][ T1858] ath6kl: Failed to submit usb control message: -110 [ 288.321348][ T1858] ath6kl: unable to send the bmi data to the device: -110 [ 288.321357][ T1858] ath6kl: Unable to send get target info: -110 [ 288.372530][ T1858] ath6kl: Failed to init ath6kl core: -110 [ 288.374206][ T1858] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 288.475041][ T3522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.476416][ T9002] binder: BINDER_SET_CONTEXT_MGR already set [ 288.476430][ T9002] binder: 9000:9002 ioctl 4018620d 200000000040 returned -16 [ 288.840770][ T8958] chnl_net:caif_netlink_parms(): no params data found [ 289.211225][ T1858] usb 3-1: USB disconnect, device number 12 [ 289.683781][ T8958] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.683908][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.684064][ T8958] bridge_slave_0: entered allmulticast mode [ 289.685565][ T8958] bridge_slave_0: entered promiscuous mode [ 289.687819][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.687898][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.688015][ T8958] bridge_slave_1: entered allmulticast mode [ 289.689611][ T8958] bridge_slave_1: entered promiscuous mode [ 290.067110][ T5807] Bluetooth: hci5: command tx timeout [ 290.459362][ T8958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.497907][ T3522] bridge_slave_1: left allmulticast mode [ 290.497934][ T3522] bridge_slave_1: left promiscuous mode [ 290.498677][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.905368][ T3522] bridge_slave_0: left allmulticast mode [ 290.905397][ T3522] bridge_slave_0: left promiscuous mode [ 290.905661][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.568065][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.672761][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.765365][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.773523][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.793045][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.143980][ T5807] Bluetooth: hci5: command tx timeout [ 292.685419][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.831509][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.061646][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.161941][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.229783][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.724639][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.080670][ T5807] Bluetooth: hci4: command tx timeout [ 294.100152][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.230856][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.425126][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.594111][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.725510][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.942630][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.176336][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.258318][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.380250][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.425394][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.577239][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.641503][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.028133][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.134727][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.144020][ T5807] Bluetooth: hci4: command tx timeout [ 296.214505][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.247414][ T3522] bond0 (unregistering): Released all slaves [ 296.301755][ T8958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.358191][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.499075][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.804245][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.236069][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.921454][ T8958] team0: Port device team_slave_0 added [ 297.985789][ T8958] team0: Port device team_slave_1 added [ 298.225450][ T5807] Bluetooth: hci4: command tx timeout [ 298.983861][ T5791] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 300.106540][ T5791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.106599][ T5791] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 300.107608][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.114512][ T5791] usb 4-1: config 0 descriptor?? [ 300.119767][ T5791] pwc: Askey VC010 type 2 USB webcam detected. [ 300.303922][ T5807] Bluetooth: hci4: command tx timeout [ 300.328220][ T8958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.328236][ T8958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.328261][ T8958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.528945][ T5791] pwc: recv_control_msg error -32 req 02 val 2b00 [ 300.530558][ T5791] pwc: recv_control_msg error -32 req 02 val 2700 [ 300.531611][ T5791] pwc: recv_control_msg error -32 req 02 val 2c00 [ 300.533124][ T5791] pwc: recv_control_msg error -32 req 04 val 1000 [ 300.534058][ T5791] pwc: recv_control_msg error -32 req 04 val 1300 [ 300.535100][ T5791] pwc: recv_control_msg error -32 req 04 val 1400 [ 300.535985][ T5791] pwc: recv_control_msg error -32 req 02 val 2000 [ 300.536669][ T5791] pwc: recv_control_msg error -32 req 02 val 2100 [ 300.537672][ T5791] pwc: recv_control_msg error -32 req 04 val 1500 [ 300.538361][ T5791] pwc: recv_control_msg error -32 req 02 val 2500 [ 300.539486][ T5791] pwc: recv_control_msg error -32 req 02 val 2400 [ 300.715033][ T8958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.715051][ T8958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.715078][ T8958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.745005][ T5791] pwc: recv_control_msg error -71 req 02 val 2900 [ 300.745404][ T5791] pwc: recv_control_msg error -71 req 02 val 2800 [ 300.745848][ T5791] pwc: recv_control_msg error -71 req 04 val 1100 [ 300.746167][ T5791] pwc: recv_control_msg error -71 req 04 val 1200 [ 300.753192][ T5791] pwc: Registered as video103. [ 300.755566][ T5791] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 301.874167][ T5791] usb 4-1: USB disconnect, device number 18 [ 303.158241][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 303.158259][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 303.158282][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 303.160894][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 303.160917][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 303.345070][ T3522] hsr_slave_0: left promiscuous mode [ 303.533754][ T3522] hsr_slave_1: left promiscuous mode [ 303.540529][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.540806][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.590599][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.590619][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.904306][ T3522] veth1_macvtap: left promiscuous mode [ 303.904370][ T3522] veth0_macvtap: left promiscuous mode [ 303.904503][ T3522] veth1_vlan: left promiscuous mode [ 303.904602][ T3522] veth0_vlan: left promiscuous mode [ 304.573799][ T9136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 304.589478][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.154899][ T5791] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 305.553868][ T5791] usb 2-1: Using ep0 maxpacket: 8 [ 305.570312][ T5791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.572729][ T5791] usb 2-1: config 4 interface 0 has no altsetting 0 [ 305.593188][ T5791] usb 2-1: string descriptor 0 read error: -22 [ 305.593345][ T5791] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 305.593368][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.688363][ T5791] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 305.780493][ T5791] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.781020][ T5791] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 305.781069][ T5791] usb 2-1: media controller created [ 306.027916][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.048386][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.091740][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.845115][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.924986][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.039230][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.176605][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.914203][ T5791] zl10353_read_register: readreg error (reg=127, ret==0) [ 308.003568][ T5791] usb 2-1: USB disconnect, device number 16 [ 308.111305][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.225848][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.277319][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.409166][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.456066][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.509834][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.544930][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.594101][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.714653][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.823333][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.989358][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.106535][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.157507][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.225647][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.424606][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 309.694592][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 313.216122][ T8958] hsr_slave_0: entered promiscuous mode [ 313.254756][ T8958] hsr_slave_1: entered promiscuous mode [ 313.424789][ T8958] debugfs: 'hsr0' already exists in 'hsr' [ 313.428413][ T8958] Cannot create hsr debugfs directory [ 315.101386][ T37] audit: type=1800 audit(1761565246.917:865): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1203" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 315.132253][ T9170] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 315.132379][ T9170] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 315.132446][ T9170] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 316.453878][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 316.624729][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 316.635695][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.635755][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.635812][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.635884][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 316.635940][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.691120][ T31] usb 2-1: config 0 descriptor?? [ 317.171606][ T31] hid_parser_main: 8 callbacks suppressed [ 317.171629][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.171661][ T31] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 317.173061][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.173093][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.173138][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.173166][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.173194][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.173221][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.173248][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.173275][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.173302][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 317.360379][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.360447][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.411590][ T31] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 317.411624][ T31] microsoft 0003:045E:07DA.000F: no inputs found [ 317.411638][ T31] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 317.467283][ T31] usb 2-1: USB disconnect, device number 17 [ 318.686235][ T9036] chnl_net:caif_netlink_parms(): no params data found [ 318.744811][ T3522] IPVS: stop unused estimator thread 0... [ 321.347816][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.183394][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.228928][ T9233] tipc: Started in network mode [ 322.228955][ T9233] tipc: Node identity 8a1558d80702, cluster identity 4711 [ 322.229479][ T9233] tipc: Enabled bearer , priority 0 [ 322.229812][ T9236] syzkaller0: entered promiscuous mode [ 322.229834][ T9236] syzkaller0: entered allmulticast mode [ 322.232642][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.232855][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.233035][ T9036] bridge_slave_0: entered allmulticast mode [ 322.312522][ T9036] bridge_slave_0: entered promiscuous mode [ 322.462228][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.625313][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.625463][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.625704][ T9036] bridge_slave_1: entered allmulticast mode [ 322.630059][ T9036] bridge_slave_1: entered promiscuous mode [ 322.633231][ T9233] tipc: Resetting bearer [ 323.235648][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.505024][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.506469][ T992] tipc: Node number set to 2367117528 [ 323.524541][ T9228] tipc: Resetting bearer [ 323.652427][ T9252] binder_alloc: 9251: pid 9251 spamming oneway? 1 buffers allocated for a total size of 4096 [ 323.652898][ T9252] binder_alloc: 9251: pid 9251 spamming oneway? 2 buffers allocated for a total size of 5120 [ 324.071385][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.248291][ T9259] overlayfs: missing 'lowerdir' [ 324.251267][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.770824][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.861234][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.882103][ T9228] tipc: Disabling bearer [ 324.960690][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.723615][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.077813][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.705867][ T8958] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.915309][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.917647][ T8958] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 328.085369][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.230106][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.869389][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.978392][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.597703][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.615046][ T8958] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.424324][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.460427][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.641946][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.227288][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.242794][ T8958] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.419492][ T9036] team0: Port device team_slave_0 added [ 331.466629][ T9036] team0: Port device team_slave_1 added [ 331.770385][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.415652][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.478730][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.587365][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.773962][ T5120] Bluetooth: hci2: command 0x0406 tx timeout [ 335.829741][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.829759][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.829785][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.864922][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.864938][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.864964][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.928130][ T5881] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 337.266916][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 337.266946][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 337.266971][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 337.266993][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 337.267032][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 337.267054][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.286312][ T5881] usb 2-1: config 0 descriptor?? [ 338.293347][ T5881] hdpvr 2-1:0.0: firmware version 0x0 dated [ 338.293360][ T5881] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 339.651625][ T9036] hsr_slave_0: entered promiscuous mode [ 339.653598][ T9036] hsr_slave_1: entered promiscuous mode [ 339.656117][ T9036] debugfs: 'hsr0' already exists in 'hsr' [ 339.656192][ T9036] Cannot create hsr debugfs directory [ 339.960866][ T5881] hdpvr 2-1:0.0: Could not setup controls [ 339.976120][ T5881] hdpvr 2-1:0.0: registering videodev failed [ 340.851243][ T5881] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 340.859781][ T5881] usb 2-1: USB disconnect, device number 18 [ 342.440242][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 347.287373][ T9036] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 347.351439][ T9036] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 347.486275][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.508040][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.509732][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.511537][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.512828][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.651586][ T9036] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.113102][ T9036] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.260708][ T61] Bluetooth: hci6: command tx timeout [ 351.862468][ T9402] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 352.255906][ T9036] kthread_run failed with err -4 [ 352.693845][ T61] Bluetooth: hci6: command 0x041b tx timeout [ 352.878613][ T9407] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input24 [ 354.580244][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.603975][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.605434][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.606601][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.607109][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.719736][ T61] Bluetooth: hci6: command 0x041b tx timeout [ 356.628200][ T61] Bluetooth: hci5: command tx timeout [ 356.783888][ T61] Bluetooth: hci6: command 0x041b tx timeout [ 358.246824][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.704570][ T61] Bluetooth: hci5: command tx timeout [ 358.863902][ T61] Bluetooth: hci6: command 0x041b tx timeout [ 359.631217][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.704042][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.938004][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.742700][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.787745][ T61] Bluetooth: hci5: command tx timeout [ 363.347102][ T61] Bluetooth: hci5: command tx timeout [ 367.957921][ T9486] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 367.957951][ T9486] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.252295][ T9486] vhci_hcd vhci_hcd.0: Device attached [ 368.316946][ T9485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.318031][ T44] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 368.328735][ T9485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.595710][ T9487] vhci_hcd: connection reset by peer [ 368.630041][ T1499] vhci_hcd: stop threads [ 368.639874][ T1499] vhci_hcd: release socket [ 368.668183][ T1499] vhci_hcd: disconnect device [ 368.927197][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.348984][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.539992][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.765312][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.324772][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.732177][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.957515][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.964187][ T44] vhci_hcd: vhci_device speed not set [ 376.358734][ T9371] chnl_net:caif_netlink_parms(): no params data found [ 376.440068][ T6774] bridge_slave_1: left allmulticast mode [ 376.440096][ T6774] bridge_slave_1: left promiscuous mode [ 376.440360][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.139283][ T6774] bridge_slave_0: left allmulticast mode [ 377.139304][ T6774] bridge_slave_0: left promiscuous mode [ 377.139486][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.215812][ T9541] binder: 9540:9541 ioctl c0306201 0 returned -14 [ 377.285669][ T37] audit: type=1326 audit(1761565309.167:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9540 comm="syz.2.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08010cefc9 code=0x0 [ 377.439069][ T9545] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1283'. [ 378.944253][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.944336][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.547456][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.563926][ T44] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 379.738129][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 379.740395][ T44] usb 2-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 379.740413][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.740423][ T44] usb 2-1: Product: syz [ 379.740431][ T44] usb 2-1: Manufacturer: syz [ 379.740438][ T44] usb 2-1: SerialNumber: syz [ 379.790627][ T44] r8152-cfgselector 2-1: Unknown version 0x0000 [ 379.790643][ T44] r8152-cfgselector 2-1: config 0 descriptor?? [ 379.792903][ T44] r8152 2-1:0.0: Expected endpoints are not found [ 379.845468][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.907855][ T6774] bond0 (unregistering): Released all slaves [ 380.043005][ T9539] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 380.096569][ T992] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 380.134698][ T9563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1290'. [ 380.574035][ T6774] hsr_slave_0: left promiscuous mode [ 380.633872][ T6774] hsr_slave_1: left promiscuous mode [ 380.634540][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.658671][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.594873][ T9580] input: syz0 as /devices/virtual/input/input25 [ 386.234453][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 386.364569][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 387.156328][ T9605] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1304'. [ 387.473886][ T5881] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 387.579080][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.579285][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.579533][ T9371] bridge_slave_0: entered allmulticast mode [ 387.582391][ T9371] bridge_slave_0: entered promiscuous mode [ 387.597449][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.597573][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.597762][ T9371] bridge_slave_1: entered allmulticast mode [ 387.600374][ T9371] bridge_slave_1: entered promiscuous mode [ 388.393445][ T5881] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 388.393475][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.393494][ T5881] usb 4-1: Product: syz [ 388.393507][ T5881] usb 4-1: Manufacturer: syz [ 388.393521][ T5881] usb 4-1: SerialNumber: syz [ 388.435791][ T5881] usb 4-1: config 0 descriptor?? [ 388.536246][ T9418] chnl_net:caif_netlink_parms(): no params data found [ 388.663994][ T5881] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 388.768332][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.812727][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.568598][ T9371] team0: Port device team_slave_0 added [ 390.603685][ T9371] team0: Port device team_slave_1 added [ 391.073316][ T5881] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 391.076724][ T5881] usb 4-1: USB disconnect, device number 19 [ 392.820122][ T9661] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 394.689582][ T9661] bridge0: port 3(netdevsim0) entered blocking state [ 394.689671][ T9661] bridge0: port 3(netdevsim0) entered disabled state [ 394.689836][ T9661] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 394.691638][ T9661] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 394.699303][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.699429][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.699675][ T9418] bridge_slave_0: entered allmulticast mode [ 394.713953][ T9418] bridge_slave_0: entered promiscuous mode [ 395.701958][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.701976][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.702002][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.704013][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.704138][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.704426][ T9418] bridge_slave_1: entered allmulticast mode [ 395.707155][ T9418] bridge_slave_1: entered promiscuous mode [ 395.939508][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.939520][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.939534][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.030364][ T9683] bond2: Removing last arp target with arp_interval on [ 396.299587][ T9418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.507188][ T9418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.164141][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.762525][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.868045][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.009394][ T9708] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 399.009429][ T9708] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 399.033039][ T9371] hsr_slave_0: entered promiscuous mode [ 399.041780][ T9371] hsr_slave_1: entered promiscuous mode [ 399.042739][ T9371] debugfs: 'hsr0' already exists in 'hsr' [ 399.042762][ T9371] Cannot create hsr debugfs directory [ 399.287357][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1350'. [ 399.354098][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.517896][ T44] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 399.556024][ T9418] team0: Port device team_slave_0 added [ 399.571892][ T9418] team0: Port device team_slave_1 added [ 399.673957][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 399.676942][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.676974][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.676995][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 399.677034][ T44] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 399.677057][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.742986][ T44] usb 2-1: config 0 descriptor?? [ 400.463506][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.490569][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f724800: rx timeout, send abort [ 400.612801][ T5807] Bluetooth: hci2: unexpected event for opcode 0x0c56 [ 400.836659][ T44] hid_parser_main: 11 callbacks suppressed [ 400.836686][ T44] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 400.836721][ T44] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 400.836747][ T44] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 400.836774][ T44] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 400.836801][ T44] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 400.886076][ T44] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 400.925824][ T44] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 400.926157][ T44] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 400.994087][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f724800: abort rx timeout. Force session deactivation [ 401.033969][ T992] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 401.038049][ T9732] random: crng reseeded on system resumption [ 401.086270][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.174507][ T5791] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.174855][ T5791] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.174970][ T9] usb 2-1: USB disconnect, device number 20 [ 401.175186][ T5791] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.177280][ T5791] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 401.207501][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.207533][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.207570][ T992] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 401.207591][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.229213][ T992] usb 3-1: config 0 descriptor?? [ 401.347963][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.347981][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.348006][ T9418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.474345][ T5807] Bluetooth: hci3: Malformed Event: 0x02 [ 401.622468][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.622486][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.622511][ T9418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.687780][ T992] hid-led 0003:04D8:F372.0011: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 401.834245][ T992] hid-led 0003:04D8:F372.0011: Greynut Luxafor initialized [ 401.896698][ T1813] usb 3-1: USB disconnect, device number 13 [ 402.525750][ T59] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 402.633258][ T13] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 402.644310][ T3663] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 403.457874][ T59] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 403.461286][ T59] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 403.464756][ T59] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 403.466842][ T159] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 403.468812][ T159] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 403.474759][ T159] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 403.478452][ T13] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 403.480032][ T13] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 403.481962][ T13] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 403.483368][ T13] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 403.502372][ T13] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 403.594033][ T159] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 403.596015][ T159] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 403.598974][ T159] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 403.884205][ T159] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 404.243952][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 404.322850][ T9418] hsr_slave_0: entered promiscuous mode [ 404.337219][ T9418] hsr_slave_1: entered promiscuous mode [ 404.337910][ T9418] debugfs: 'hsr0' already exists in 'hsr' [ 404.337925][ T9418] Cannot create hsr debugfs directory [ 404.394055][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 404.398604][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 404.407599][ T31] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 404.407615][ T31] usb 4-1: config 4 has no interface number 0 [ 404.407634][ T31] usb 4-1: config 4 interface 30 has no altsetting 0 [ 404.426942][ T31] usb 4-1: string descriptor 0 read error: -22 [ 404.427028][ T31] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 404.427040][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.434732][ T31] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 404.434762][ T31] dw2102: su3000_power_ctrl: 1, initialized 0 [ 404.435272][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 404.449158][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.454873][ T31] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 404.454910][ T31] usb 4-1: media controller created [ 404.455275][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 404.455283][ T31] dw2102: i2c transfer failed. [ 404.455294][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 404.455300][ T31] dw2102: i2c transfer failed. [ 404.455309][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 404.455316][ T31] dw2102: i2c transfer failed. [ 404.455325][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 404.455331][ T31] dw2102: i2c transfer failed. [ 404.455339][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 404.455346][ T31] dw2102: i2c transfer failed. [ 404.455355][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 404.455361][ T31] dw2102: i2c transfer failed. [ 404.455366][ T31] dvb-usb: MAC address: 02:02:02:02:02:02 [ 404.500238][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.792370][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 404.792399][ T31] dw2102: command 0x0e transfer failed. [ 404.792409][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 404.792422][ T31] dw2102: command 0x0e transfer failed. [ 405.094105][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 405.094129][ T31] dw2102: command 0x0e transfer failed. [ 405.094138][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 405.094151][ T31] dw2102: command 0x0e transfer failed. [ 405.094160][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 405.094172][ T31] dw2102: command 0x51 transfer failed. [ 405.094181][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 405.094193][ T31] dw2102: i2c probe for address 0x68 failed. [ 405.094204][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 405.094216][ T31] dw2102: i2c probe for address 0x69 failed. [ 405.094227][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 405.094240][ T31] dw2102: i2c probe for address 0x6a failed. [ 405.094250][ T31] dw2102: probing for demodulator failed. Is the external power switched on? [ 405.094260][ T31] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 405.363874][ T31] rc_core: IR keymap rc-tt-1500 not found [ 405.363894][ T31] Registered IR keymap rc-empty [ 405.365116][ T31] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 405.366789][ T31] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input27 [ 405.384310][ T31] dvb-usb: schedule remote query interval to 250 msecs. [ 405.384326][ T31] dw2102: su3000_power_ctrl: 0, initialized 1 [ 405.384333][ T31] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 405.414193][ T31] usb 4-1: USB disconnect, device number 20 [ 405.616415][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.621066][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.626336][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.627302][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.627909][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.884425][ T31] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 407.680336][ T5807] Bluetooth: hci4: command tx timeout [ 407.987025][ T6774] bridge_slave_1: left allmulticast mode [ 407.987046][ T6774] bridge_slave_1: left promiscuous mode [ 407.987196][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.082612][ T6774] bridge_slave_0: left allmulticast mode [ 408.082640][ T6774] bridge_slave_0: left promiscuous mode [ 408.082919][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.213951][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 408.363922][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 408.369061][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 408.369086][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 408.371274][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 408.371301][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.371311][ T31] usb 2-1: Product: syz [ 408.371318][ T31] usb 2-1: Manufacturer: syz [ 408.371325][ T31] usb 2-1: SerialNumber: syz [ 408.398535][ T31] usb 2-1: config 0 descriptor?? [ 408.435227][ T31] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 408.435260][ T31] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 408.544896][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.669006][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.768859][ T6774] bond0 (unregistering): Released all slaves [ 408.972922][ T9813] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1381'. [ 409.097353][ T31] em28xx 2-1:0.0: chip ID is em2840 [ 409.298232][ T31] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 409.298662][ T31] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 409.298678][ T31] em28xx 2-1:0.0: No AC97 audio processor [ 409.303096][ T31] usb 2-1: USB disconnect, device number 21 [ 409.306083][ T31] em28xx 2-1:0.0: Disconnecting em28xx [ 409.311531][ T31] em28xx 2-1:0.0: Freeing device [ 409.340514][ T6774] hsr_slave_0: left promiscuous mode [ 409.373926][ T6774] hsr_slave_1: left promiscuous mode [ 409.377275][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.397105][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.754369][ T5807] Bluetooth: hci4: command tx timeout [ 409.900626][ T9842] program syz.1.1394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.042269][ T9841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1393'. [ 410.282397][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 410.470328][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 411.824023][ T5807] Bluetooth: hci4: command tx timeout [ 412.220790][ T9854] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1397'. [ 412.388570][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.396161][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.410559][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.414227][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.416631][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 412.435068][ T992] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 412.587345][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 412.598756][ T992] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 412.598786][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.598806][ T992] usb 2-1: Product: syz [ 412.598819][ T992] usb 2-1: Manufacturer: syz [ 412.598832][ T992] usb 2-1: SerialNumber: syz [ 412.607581][ T992] usb 2-1: config 0 descriptor?? [ 412.627655][ T992] gspca_main: sq930x-2.14.0 probing 2770:930c [ 413.538663][ T992] gspca_sq930x: ucbus_write failed -71 [ 413.753987][ T992] gspca_sq930x: Sensor ov9630 not yet treated [ 413.754085][ T992] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 413.758050][ T992] usb 2-1: USB disconnect, device number 22 [ 413.795336][ T9883] program syz.2.1408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.903792][ T5807] Bluetooth: hci4: command tx timeout [ 413.961689][ T9786] chnl_net:caif_netlink_parms(): no params data found [ 414.558529][ T5807] Bluetooth: hci6: command tx timeout [ 414.874317][ T9786] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.874473][ T9786] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.874688][ T9786] bridge_slave_0: entered allmulticast mode [ 414.876975][ T9786] bridge_slave_0: entered promiscuous mode [ 414.880108][ T9786] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.880246][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.880436][ T9786] bridge_slave_1: entered allmulticast mode [ 414.882866][ T9786] bridge_slave_1: entered promiscuous mode [ 415.126518][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.247608][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.523831][ T5881] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 415.646831][ T9786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.660061][ T9786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.660476][ T9862] chnl_net:caif_netlink_parms(): no params data found [ 415.955869][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.995472][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 416.000978][ T5881] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 416.001008][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.001028][ T5881] usb 4-1: Product: syz [ 416.001041][ T5881] usb 4-1: Manufacturer: syz [ 416.001055][ T5881] usb 4-1: SerialNumber: syz [ 416.049609][ T5881] usb 4-1: config 0 descriptor?? [ 416.063450][ T5881] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 416.121861][ T9952] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1437'. [ 416.121994][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1437'. [ 416.399718][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.517262][ T9958] Bluetooth: MGMT ver 1.23 [ 416.577949][ T9786] team0: Port device team_slave_0 added [ 416.623844][ T5807] Bluetooth: hci6: command tx timeout [ 416.675376][ T6774] bridge_slave_1: left allmulticast mode [ 416.675412][ T6774] bridge_slave_1: left promiscuous mode [ 416.675747][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.765390][ T6774] bridge_slave_0: left allmulticast mode [ 416.765411][ T6774] bridge_slave_0: left promiscuous mode [ 416.765657][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.828126][ T6774] bridge_slave_1: left allmulticast mode [ 416.828157][ T6774] bridge_slave_1: left promiscuous mode [ 416.828427][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.865428][ T5881] gspca_stk1135: reg_w 0x5 err -71 [ 416.866485][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 416.866495][ T5881] gspca_stk1135: Sensor write failed [ 416.866509][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 416.866514][ T5881] gspca_stk1135: Sensor write failed [ 416.866529][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 416.866534][ T5881] gspca_stk1135: Sensor read failed [ 416.866548][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 416.866553][ T5881] gspca_stk1135: Sensor read failed [ 416.866556][ T5881] gspca_stk1135: Detected sensor type unknown (0x0) [ 416.866576][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 416.866581][ T5881] gspca_stk1135: Sensor read failed [ 416.866595][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 416.866600][ T5881] gspca_stk1135: Sensor read failed [ 416.866614][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 416.866619][ T5881] gspca_stk1135: Sensor write failed [ 416.866634][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 416.866638][ T5881] gspca_stk1135: Sensor write failed [ 416.866693][ T5881] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 416.868638][ T5881] usb 4-1: USB disconnect, device number 21 [ 416.925970][ T6774] bridge_slave_0: left allmulticast mode [ 416.925997][ T6774] bridge_slave_0: left promiscuous mode [ 416.926237][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.125543][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.276525][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.374456][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.456193][ T6774] bond0 (unregistering): Released all slaves [ 417.654551][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.734561][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.799478][ T6774] bond0 (unregistering): Released all slaves [ 417.846903][ T9786] team0: Port device team_slave_1 added [ 418.125234][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.181888][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.258028][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.325872][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.612953][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.655675][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.655691][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.655713][ T9786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.658458][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.658473][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.658494][ T9786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.713858][ T5807] Bluetooth: hci6: command tx timeout [ 418.823923][ T6774] hsr_slave_0: left promiscuous mode [ 418.869392][ T6774] hsr_slave_1: left promiscuous mode [ 418.870599][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.904933][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.024198][ T6774] hsr_slave_0: left promiscuous mode [ 419.064060][ T6774] hsr_slave_1: left promiscuous mode [ 419.065125][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.108052][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.965927][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 420.114584][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 420.783880][ T5807] Bluetooth: hci6: command tx timeout [ 421.174446][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 421.294440][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 421.955126][ T9994] bridge0: port 3(veth1_to_bridge) entered blocking state [ 421.955352][ T9994] bridge0: port 3(veth1_to_bridge) entered disabled state [ 421.955570][ T9994] veth1_to_bridge: entered allmulticast mode [ 421.958655][ T9994] veth1_to_bridge: entered promiscuous mode [ 421.958866][ T9994] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 421.959673][ T9994] bridge0: port 3(veth1_to_bridge) entered blocking state [ 421.959841][ T9994] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 422.506058][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.513106][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.513354][ T9862] bridge_slave_0: entered allmulticast mode [ 422.535134][ T9862] bridge_slave_0: entered promiscuous mode [ 422.687286][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.687450][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.687690][ T9862] bridge_slave_1: entered allmulticast mode [ 422.718819][ T9862] bridge_slave_1: entered promiscuous mode [ 422.760966][ T9786] hsr_slave_0: entered promiscuous mode [ 422.762476][ T9786] hsr_slave_1: entered promiscuous mode [ 422.763489][ T9786] debugfs: 'hsr0' already exists in 'hsr' [ 422.763513][ T9786] Cannot create hsr debugfs directory [ 423.295949][T10016] blktrace: Concurrent blktraces are not allowed on loop1 [ 424.041219][T10018] blktrace: Concurrent blktraces are not allowed on loop1 [ 424.307443][ T9862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.520737][ T9862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.054842][ T9862] team0: Port device team_slave_0 added [ 425.055741][T10043] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.082317][ T9862] team0: Port device team_slave_1 added [ 425.191466][T10045] binder: 10044:10045 ioctl c0306201 200000000480 returned -22 [ 425.269346][T10047] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1474'. [ 425.481112][T10053] blktrace: Concurrent blktraces are not allowed on loop1 [ 425.637771][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.637788][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.637813][ T9862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.710137][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.710152][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.710177][ T9862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.890682][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.890931][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.891173][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.891419][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.891434][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 426.426749][ T9862] hsr_slave_0: entered promiscuous mode [ 426.428111][ T9862] hsr_slave_1: entered promiscuous mode [ 426.429073][ T9862] debugfs: 'hsr0' already exists in 'hsr' [ 426.429097][ T9862] Cannot create hsr debugfs directory [ 426.462853][T10070] blktrace: Concurrent blktraces are not allowed on loop1 [ 426.577156][T10072] netlink: 'syz.2.1484': attribute type 3 has an invalid length. [ 426.577180][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 427.084566][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 427.243958][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 427.249246][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 427.249277][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.249296][ T9] usb 3-1: Product: syz [ 427.249308][ T9] usb 3-1: Manufacturer: syz [ 427.249321][ T9] usb 3-1: SerialNumber: syz [ 427.292485][ T9] usb 3-1: config 0 descriptor?? [ 427.307700][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 427.927770][ T9862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.963981][T10096] blktrace: Concurrent blktraces are not allowed on loop1 [ 428.190713][ T9862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 428.229932][ T9862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 428.292459][ T9862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 428.304887][T10098] netlink: 'syz.3.1496': attribute type 11 has an invalid length. [ 428.335421][ T9] usb 3-1: USB disconnect, device number 14 [ 428.607236][ T9786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 428.646546][ T9786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 428.701280][ T9786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.765254][ T9786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 429.072470][ T9862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.125982][ T9862] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.143843][ T1813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 429.166552][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.166697][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.218845][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.219033][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.257504][ T9786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.265372][ T38] INFO: task syz.0.1108:8856 blocked for more than 143 seconds. [ 429.265393][ T38] Not tainted syzkaller #0 [ 429.265403][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.265411][ T38] task:syz.0.1108 state:D stack:25160 pid:8856 tgid:8856 ppid:5809 task_flags:0x400040 flags:0x00080003 [ 429.265472][ T38] Call Trace: [ 429.265483][ T38] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 429.265495][ T38] __schedule+0x16f3/0x4c20 [ 429.265536][ T38] ? __lock_acquire+0xab9/0xd20 [ 429.265566][ T38] ? __lock_acquire+0xab9/0xd20 [ 429.265588][ T38] ? __pfx___schedule+0x10/0x10 [ 429.265625][ T38] ? schedule+0x91/0x360 [ 429.265648][ T38] schedule+0x165/0x360 [ 429.265670][ T38] __fuse_simple_request+0x11d2/0x1bb0 [ 429.265707][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 429.265731][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.265766][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.265800][ T38] fuse_flush+0x5dd/0x810 [ 429.265829][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 429.265851][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 429.265873][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.265914][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 429.265934][ T38] ? rt_spin_unlock+0x150/0x200 [ 429.265953][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 429.265973][ T38] filp_flush+0xc0/0x190 [ 429.265995][ T38] filp_close+0x1d/0x40 [ 429.266012][ T38] __se_sys_close_range+0x35c/0x650 [ 429.266042][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 429.266070][ T38] ? do_syscall_64+0xbe/0xfa0 [ 429.266094][ T38] do_syscall_64+0xfa/0xfa0 [ 429.266114][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.266135][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.266152][ T38] ? clear_bhb_loop+0x60/0xb0 [ 429.266179][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.266196][ T38] RIP: 0033:0x7fd576b1efc9 [ 429.266217][ T38] RSP: 002b:00007ffc23bee2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 429.266235][ T38] RAX: ffffffffffffffda RBX: 00007fd576d77da0 RCX: 00007fd576b1efc9 [ 429.266249][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 429.266260][ T38] RBP: 00007fd576d77da0 R08: 000000000000a23c R09: 0000000a23bee5cf [ 429.266273][ T38] R10: 00007fd576d77cb0 R11: 0000000000000246 R12: 00000000000434de [ 429.266284][ T38] R13: 00007ffc23bee3d0 R14: ffffffffffffffff R15: 00007ffc23bee3f0 [ 429.266316][ T38] [ 429.266344][ T38] [ 429.266344][ T38] Showing all locks held in the system: [ 429.266355][ T38] 3 locks held by kworker/0:0/9: [ 429.266366][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 429.266412][ T38] #1: ffffc900000e7ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 429.266457][ T38] #2: ffff8880346a9260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x224/0x3e0 [ 429.266503][ T38] 4 locks held by pr/legacy/17: [ 429.266516][ T38] 1 lock held by khungtaskd/38: [ 429.266525][ T38] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 429.266567][ T38] 3 locks held by kworker/1:1/44: [ 429.266578][ T38] 3 locks held by kworker/u8:3/59: [ 429.266587][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 429.266635][ T38] #1: ffffc9000125fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 429.266677][ T38] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 429.266729][ T38] 6 locks held by kworker/0:3/1813: [ 429.266739][ T38] #0: ffff888019f03138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 429.266781][ T38] #1: ffffc90005fb7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 429.266824][ T38] #2: ffff888146399188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 429.266864][ T38] #3: ffff8880274445b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 429.266904][ T38] #4: ffff888145fee258 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 429.266943][ T38] #5: ffffffff8e124760 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1740 [ 429.266995][ T38] 2 locks held by getty/5559: [ 429.267005][ T38] #0: ffff88823bf3c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 429.267048][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 429.267099][ T38] 3 locks held by kworker/u8:13/6774: [ 429.267109][ T38] #0: ffff88814d340938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 429.267151][ T38] #1: ffffc9000404fba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 429.267206][ T38] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 429.267254][ T38] 3 locks held by syz-executor/9786: [ 429.267264][ T38] 1 lock held by syz-executor/9862: [ 429.267274][ T38] #0: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 429.267320][ T38] 2 locks held by syz.3.1501/10121: [ 429.267329][ T38] 1 lock held by syz.1.1502/10123: [ 429.267340][ T38] [ 429.267344][ T38] ============================================= [ 429.267344][ T38] [ 429.267353][ T38] NMI backtrace for cpu 1 [ 429.267373][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 429.267393][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.267403][ T38] Call Trace: [ 429.267410][ T38] [ 429.267417][ T38] dump_stack_lvl+0x189/0x250 [ 429.267444][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.267467][ T38] ? __pfx__printk+0x10/0x10 [ 429.267505][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 429.267526][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 429.267545][ T38] ? __pfx__printk+0x10/0x10 [ 429.267583][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 429.267605][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 429.267626][ T38] watchdog+0xf60/0xfa0 [ 429.267653][ T38] ? watchdog+0x1e2/0xfa0 [ 429.267681][ T38] kthread+0x711/0x8a0 [ 429.267707][ T38] ? __pfx_watchdog+0x10/0x10 [ 429.267728][ T38] ? __pfx_kthread+0x10/0x10 [ 429.267747][ T38] ? rt_spin_unlock+0x150/0x200 [ 429.267768][ T38] ? rt_spin_unlock+0x161/0x200 [ 429.267783][ T38] ? __pfx_kthread+0x10/0x10 [ 429.267807][ T38] ret_from_fork+0x4bc/0x870 [ 429.267829][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 429.267854][ T38] ? __switch_to_asm+0x39/0x70 [ 429.267870][ T38] ? __switch_to_asm+0x33/0x70 [ 429.267885][ T38] ? __pfx_kthread+0x10/0x10 [ 429.267909][ T38] ret_from_fork_asm+0x1a/0x30 [ 429.267936][ T38] [ 429.267942][ T38] Sending NMI from CPU 1 to CPUs 0: [ 429.267966][ C0] NMI backtrace for cpu 0 [ 429.267980][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 429.267998][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.268006][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 429.268027][ C0] Code: e8 de 0d ba fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f c5 1b fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 4f bf 05 cc 44 89 f9 80 e1 07 [ 429.268041][ C0] RSP: 0018:ffffc90000167870 EFLAGS: 00000202 [ 429.268054][ C0] RAX: 1ffffffff31d1700 RBX: 00000000000003fd RCX: 0000000000000000 [ 429.268065][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 429.268075][ C0] RBP: ffffffff98e8c0f0 R08: 0000000000000000 R09: 0000000000000000 [ 429.268085][ C0] R10: dffffc0000000000 R11: ffffffff8504afd0 R12: dffffc0000000000 [ 429.268097][ C0] R13: 0000000000000000 R14: ffffffff98e8be60 R15: 0000000000000000 [ 429.268107][ C0] FS: 0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 429.268120][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.268131][ C0] CR2: 0000001b2f823ffc CR3: 00000000588ee000 CR4: 00000000003526f0 [ 429.268145][ C0] Call Trace: [ 429.268151][ C0] [ 429.268159][ C0] wait_for_lsr+0x1aa/0x2f0 [ 429.268184][ C0] serial8250_console_write+0x11bd/0x1b40 [ 429.268210][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 429.268228][ C0] ? console_flush_all+0x13a/0xb40 [ 429.268248][ C0] ? console_flush_all+0x476/0xb40 [ 429.268266][ C0] console_flush_all+0x666/0xb40 [ 429.268283][ C0] ? console_flush_all+0x13a/0xb40 [ 429.268302][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 429.268325][ C0] __console_flush_and_unlock+0x9b/0x160 [ 429.268341][ C0] ? legacy_kthread_func+0x136/0x1a0 [ 429.268359][ C0] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 429.268375][ C0] ? schedule+0x91/0x360 [ 429.268395][ C0] legacy_kthread_func+0x13b/0x1a0 [ 429.268412][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 429.268429][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.268447][ C0] ? __kthread_parkme+0x7b/0x200 [ 429.268464][ C0] ? __kthread_parkme+0x1a1/0x200 [ 429.268489][ C0] kthread+0x711/0x8a0 [ 429.268509][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 429.268526][ C0] ? __pfx_kthread+0x10/0x10 [ 429.268543][ C0] ? rt_spin_unlock+0x150/0x200 [ 429.268560][ C0] ? rt_spin_unlock+0x161/0x200 [ 429.268573][ C0] ? __pfx_kthread+0x10/0x10 [ 429.268592][ C0] ret_from_fork+0x4bc/0x870 [ 429.268609][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 429.268629][ C0] ? __switch_to_asm+0x39/0x70 [ 429.268643][ C0] ? __switch_to_asm+0x33/0x70 [ 429.268656][ C0] ? __pfx_kthread+0x10/0x10 [ 429.268676][ C0] ret_from_fork_asm+0x1a/0x30 [ 429.268698][ C0] [ 429.296121][ T1813] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 429.296147][ T1813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.495463][ T9786] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.527847][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.527997][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.568848][ T1813] usb 3-1: config 0 descriptor?? [ 429.595916][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.596063][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.904920][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.905324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.905750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.906141][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.906533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.906920][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.907320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.907734][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.908219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.908668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.244031][ T1813] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 430.820818][ T1813] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 430.820843][ T1813] [drm] Initialized udl on minor 2 [ 434.535720][ T1813] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.565684][ T1813] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 434.659316][ T5881] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.659429][ T5881] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 434.723877][ T1813] usb 3-1: USB disconnect, device number 15 [ 434.914151][ C0] net_ratelimit: 13007 callbacks suppressed [ 434.914174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.914567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.914961][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.915355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.915732][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.916142][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.916527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.916914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.917313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.917684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.107379][ T6774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.400562][ T6774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.750839][ T6774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.054042][ T6774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.354443][ T6774] bridge_slave_1: left allmulticast mode [ 437.354472][ T6774] bridge_slave_1: left promiscuous mode [ 437.354738][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.429389][ T6774] bridge_slave_0: left allmulticast mode [ 437.429417][ T6774] bridge_slave_0: left promiscuous mode [ 437.429672][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.755951][ T6774] dvmrp0 (unregistering): left allmulticast mode