last executing test programs: 2m3.517880219s ago: executing program 4 (id=2890): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x240, 0x4) io_setup(0x20, 0x0) getpeername$packet(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40480c0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 2m3.417766274s ago: executing program 4 (id=2891): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0xec, 0x28, 0x413, 0x70bd29, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcd, 0x8}, {0xfc}, 0x0, 0x4, 0x2, 0x0, 0x1}}, 0xec}}, 0x844) 2m3.30579754s ago: executing program 4 (id=2892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) 2m3.282667472s ago: executing program 4 (id=2893): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chdir(&(0x7f0000000340)='./file0\x00') mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0) 2m3.093670742s ago: executing program 4 (id=2895): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2m2.221829326s ago: executing program 4 (id=2904): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r1) creat(0x0, 0x1ab) 2m1.871229307s ago: executing program 32 (id=2904): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r1) creat(0x0, 0x1ab) 1m23.205147446s ago: executing program 2 (id=3076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)={@fallback=r0, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000002420000004000000", @ANYRES32=r2], 0x20) 1m22.969442228s ago: executing program 2 (id=3077): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, 0x0, 0x0, 0x2080, 0x0, 0x0) 1m22.910653285s ago: executing program 2 (id=3078): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ff00000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x34}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m22.237229992s ago: executing program 2 (id=3083): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chdir(&(0x7f0000000340)='./file0\x00') mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0) 1m22.204857588s ago: executing program 2 (id=3084): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m21.501043216s ago: executing program 2 (id=3086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x6, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10010007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x402, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x7, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3f, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x2, 0x2, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xa) 1m21.372130586s ago: executing program 33 (id=3086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x6, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10010007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x402, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x7, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3f, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x2, 0x2, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xa) 14.900109452s ago: executing program 5 (id=3460): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) close(r2) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r0, r0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='name', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002100)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000002200)=0xe8) getresgid(&(0x7f0000002240), &(0x7f0000002280), 0x0) fchown(r0, r5, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 14.695324382s ago: executing program 5 (id=3462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x21, "12279dfe7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11.59656424s ago: executing program 0 (id=3477): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r4, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r8, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) socket$nl_route(0x10, 0x3, 0x0) r9 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0xee01, 0x0) keyctl$setperm(0x5, r9, 0x112012) keyctl$invalidate(0x15, r9) 11.593007335s ago: executing program 5 (id=3479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.061515414s ago: executing program 5 (id=3484): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fadvise64(r2, 0x85f5, 0x4000000005, 0x4) 10.005783703s ago: executing program 5 (id=3489): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0006600000b2f"], 0xfce) 9.819080437s ago: executing program 0 (id=3491): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 9.721195651s ago: executing program 0 (id=3492): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00(_'], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.665434434s ago: executing program 0 (id=3497): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.597628393s ago: executing program 3 (id=3499): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000580)=""/174, 0xff56) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 7.584367884s ago: executing program 1 (id=3500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x8f, 0x3b16) lseek(0xffffffffffffffff, 0x4, 0x1) 6.466907082s ago: executing program 1 (id=3501): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r4, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r8, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) socket$nl_route(0x10, 0x3, 0x0) r9 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0xee01, 0x0) keyctl$setperm(0x5, r9, 0x112012) keyctl$invalidate(0x15, r9) 6.237410086s ago: executing program 3 (id=3503): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x9, 0x7}}]}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) 5.737713227s ago: executing program 3 (id=3505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.651622074s ago: executing program 3 (id=3506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 5.570074319s ago: executing program 3 (id=3508): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) write(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f00000044c0)={0x2020}, 0x2020) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 5.219778686s ago: executing program 1 (id=3509): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 3.782379335s ago: executing program 1 (id=3511): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000400)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4b66, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) 3.76129545s ago: executing program 0 (id=3512): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000f80)={0x0, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400101000000b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0xa, 0x2, "fe0d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.628878989s ago: executing program 1 (id=3514): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x80002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) 2.518730874s ago: executing program 6 (id=3516): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.462513925s ago: executing program 6 (id=3517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000e00)=""/219) 2.462235607s ago: executing program 6 (id=3518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 2.176401439s ago: executing program 6 (id=3519): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r4, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r6, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, 0xee01, 0x0) keyctl$setperm(0x5, r7, 0x112012) keyctl$invalidate(0x15, r7) 1.781947501s ago: executing program 6 (id=3520): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) close(r2) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r0, r0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='name', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002100)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000002200)=0xe8) getresgid(&(0x7f0000002240), &(0x7f0000002280), 0x0) read$FUSE(r3, &(0x7f0000002b00)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.673649354s ago: executing program 6 (id=3521): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb0000000109021200"], 0x0) 1.667937165s ago: executing program 5 (id=3522): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000d80)={{0x8, 0x4, 0xfffffbdb, 0x4, '\x00', 0xfffff801}, 0x0, [0x7f, 0xd, 0x2, 0x10000, 0x8c08, 0x9, 0x10000, 0x2, 0xf0f3, 0xfffffffffffffbff, 0x87, 0x4, 0x6c2b, 0xfffffffffffffffc, 0x100, 0x64, 0x402, 0x400000004, 0x6, 0x8000000000000000, 0x1, 0x8, 0x109, 0x1fb, 0x1, 0xbbd, 0x6, 0x8, 0x6, 0x5, 0x2002, 0xfff, 0x3, 0x9, 0x3, 0x8000000000000000, 0x803, 0x0, 0x1, 0x201, 0x3, 0x4, 0xdb4, 0x5, 0x19, 0x9, 0xe, 0x8f46, 0x7fff, 0x6, 0x0, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x6, 0x7ff, 0x1, 0xffff, 0x1, 0x5, 0x34c, 0x7, 0x7, 0x4, 0x4, 0xb77, 0x8, 0xfff, 0x81, 0x9, 0x83, 0x7, 0xf8, 0x0, 0x9, 0x4, 0x5, 0x82, 0x0, 0x10, 0x8, 0xb, 0x8000000000000001, 0xf, 0x4, 0x2, 0x4, 0x8527, 0x80000001, 0x4, 0x10003, 0xe72, 0x3ff, 0x7, 0xc08b, 0x410, 0x80000001, 0x40, 0xbbb283e000002, 0x100000000, 0x8bd, 0x1040, 0x1000000000001, 0x9, 0xc5, 0x0, 0x4006, 0x3, 0x33, 0x2f6f, 0x7, 0x5a73, 0x9, 0x7fffffff, 0x8, 0x5, 0x6d98, 0xdc, 0x6, 0x800000000, 0xffffffffffffff08, 0x2, 0x1f58, 0x4, 0x7, 0xfffffffffffffff7]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r5, r5, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) 61.372901ms ago: executing program 0 (id=3523): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r1], 0xc8}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000500)=0x0) 13.968439ms ago: executing program 3 (id=3524): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e00"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0xc, &(0x7f0000000200)={0x20, 0x11, 0x2, {0x2, 0x9}}, 0x0}, 0x0) 0s ago: executing program 1 (id=3525): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="4085") r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[], 0x0) r2 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) syz_usb_connect$hid(0xfa1eae0da882f601, 0x36, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') fcntl$setstatus(r8, 0x4, 0x40800) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000001c0)={&(0x7f0000000080)=[{0x7, 0x10, 0x0, &(0x7f0000000100)}, {0x4001, 0x0, 0x54, &(0x7f0000000140)="c8c76ec8fe8a3c2c1ca198144c9d387d86c88118a61673e0254bc1ebae67555199ff8c0f2b21fa69003a7b2e9d9d674d1baf555f0cb6812e179f1615a09d713838de96924ecf0d944741b5ab203391dbc0af81a9"}], 0x2}) kernel console output (not intermixed with test programs): s an invalid bInterval 0, changing to 7 [ 453.981462][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.981488][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.981506][ T5892] usb 1-1: Product: syz [ 453.981520][ T5892] usb 1-1: Manufacturer: syz [ 453.981532][ T5892] usb 1-1: SerialNumber: syz [ 454.130221][T13270] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 454.309596][T13250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.309972][T13250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.316473][T13250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.317488][T13250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.501224][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.510429][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.510699][ T5892] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 454.581522][ T5941] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 454.677348][ T10] usb 5-1: USB disconnect, device number 11 [ 454.712168][ T5941] usb 4-1: device descriptor read/64, error -71 [ 454.831541][ T61] Bluetooth: hci5: command tx timeout [ 454.928964][ T31] usb 1-1: USB disconnect, device number 14 [ 454.952770][ T5941] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 454.988646][T13289] syzkaller0: entered promiscuous mode [ 454.988667][T13289] syzkaller0: entered allmulticast mode [ 455.010567][T13289] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 455.081593][ T5941] usb 4-1: device descriptor read/64, error -71 [ 455.105658][T13246] chnl_net:caif_netlink_parms(): no params data found [ 455.201778][ T5941] usb usb4-port1: attempt power cycle [ 455.239233][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 455.239247][ T37] audit: type=1326 audit(1768538372.188:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.240190][ T37] audit: type=1326 audit(1768538372.188:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.240546][ T37] audit: type=1326 audit(1768538372.188:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.240671][ T37] audit: type=1326 audit(1768538372.188:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.240928][ T37] audit: type=1326 audit(1768538372.188:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.241055][ T37] audit: type=1326 audit(1768538372.188:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.241193][ T37] audit: type=1326 audit(1768538372.188:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.241996][ T37] audit: type=1326 audit(1768538372.188:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.248747][ T37] audit: type=1326 audit(1768538372.198:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.249080][ T37] audit: type=1326 audit(1768538372.198:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13293 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f00f887f749 code=0x7ffc0000 [ 455.731480][ T5941] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 455.751958][ T5941] usb 4-1: device descriptor read/8, error -71 [ 456.111471][ T5941] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 456.777593][ T5941] usb 4-1: device descriptor read/8, error -71 [ 456.881951][ T5941] usb usb4-port1: unable to enumerate USB device [ 456.911483][ T61] Bluetooth: hci5: command tx timeout [ 457.420594][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 457.616500][ T4554] smc: removing ib device syz2 [ 458.182225][ T1148] bond1 (unregistering): (slave gretap1): Releasing active interface [ 458.992262][ T61] Bluetooth: hci5: command tx timeout [ 459.616500][ T1148] bond0 (unregistering): Released all slaves [ 459.628306][ T1148] bond1 (unregistering): Released all slaves [ 459.768011][T13329] veth0: entered promiscuous mode [ 459.768027][T13329] veth0: entered allmulticast mode [ 459.861987][T13332] warning: `syz.0.2771' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 459.863308][T13246] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.881474][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.881657][T13246] bridge_slave_0: entered allmulticast mode [ 459.884014][T13246] bridge_slave_0: entered promiscuous mode [ 459.887172][ T1148] tipc: Left network mode [ 459.887484][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.887596][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.887754][T13246] bridge_slave_1: entered allmulticast mode [ 459.901496][T13246] bridge_slave_1: entered promiscuous mode [ 460.332472][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.370854][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.744162][T13368] tipc: Enabled bearer , priority 0 [ 460.761580][T13374] syzkaller0: entered promiscuous mode [ 460.761602][T13374] syzkaller0: entered allmulticast mode [ 460.852872][T13381] tc_dump_action: action bad kind [ 461.076436][ T61] Bluetooth: hci5: command tx timeout [ 461.171689][T13363] tipc: Resetting bearer [ 461.241475][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 461.315158][T13363] tipc: Disabling bearer [ 461.401496][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 461.403110][ T31] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 461.403131][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.403151][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.405342][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.405368][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.405379][ T31] usb 2-1: Product: syz [ 461.405387][ T31] usb 2-1: Manufacturer: syz [ 461.405394][ T31] usb 2-1: SerialNumber: syz [ 461.513783][T13246] team0: Port device team_slave_0 added [ 461.573155][T13246] team0: Port device team_slave_1 added [ 461.725184][T13407] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2801'. [ 461.829453][ T31] usb 2-1: 0:2 : does not exist [ 461.968648][T13246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.968663][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.968689][T13246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.042623][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2806'. [ 462.094304][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2806'. [ 462.132013][ T1148] hsr_slave_0: left promiscuous mode [ 462.171533][ T1148] hsr_slave_1: left promiscuous mode [ 462.172734][ T1148] batman_adv: batadv0: Removing interface: virt_wifi0 [ 462.751470][ T5865] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 462.904931][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.904986][ T5865] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 462.905010][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.914663][ T5865] usb 1-1: config 0 descriptor?? [ 462.919671][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 463.319713][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 463.320726][ T5865] pwc: recv_control_msg error -32 req 02 val 2700 [ 463.321600][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00 [ 463.322549][ T5865] pwc: recv_control_msg error -32 req 04 val 1000 [ 463.323408][ T5865] pwc: recv_control_msg error -32 req 04 val 1300 [ 463.525998][ T5865] pwc: recv_control_msg error -71 req 02 val 2000 [ 463.526370][ T5865] pwc: recv_control_msg error -71 req 02 val 2100 [ 463.526695][ T5865] pwc: recv_control_msg error -71 req 04 val 1500 [ 463.527000][ T5865] pwc: recv_control_msg error -71 req 02 val 2500 [ 463.527401][ T5865] pwc: recv_control_msg error -71 req 02 val 2400 [ 463.527714][ T5865] pwc: recv_control_msg error -71 req 02 val 2600 [ 463.528017][ T5865] pwc: recv_control_msg error -71 req 02 val 2900 [ 463.528318][ T5865] pwc: recv_control_msg error -71 req 02 val 2800 [ 463.528790][ T5865] pwc: recv_control_msg error -71 req 04 val 1100 [ 463.529089][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 463.530460][ T5865] pwc: Registered as video103. [ 463.532976][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 463.541217][ T5865] usb 1-1: USB disconnect, device number 15 [ 463.951455][ T5814] Bluetooth: hci0: command 0x1003 tx timeout [ 463.951588][ T61] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 464.034801][ T31] usb 2-1: USB disconnect, device number 19 [ 464.861511][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 465.011448][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 465.014353][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.014375][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 465.019130][ T31] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 465.019159][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.019180][ T31] usb 2-1: Product: syz [ 465.019195][ T31] usb 2-1: Manufacturer: syz [ 465.019210][ T31] usb 2-1: SerialNumber: syz [ 465.089213][ T31] usb 2-1: config 0 descriptor?? [ 465.551440][ T5865] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 465.721006][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.721061][ T5865] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 465.721085][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.726250][ T5865] usb 1-1: config 0 descriptor?? [ 465.731252][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 466.138038][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 466.138688][ T5865] pwc: recv_control_msg error -32 req 02 val 2700 [ 466.139311][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00 [ 466.140838][ T5865] pwc: recv_control_msg error -32 req 04 val 1000 [ 466.141958][ T5865] pwc: recv_control_msg error -32 req 04 val 1300 [ 466.374673][ T5865] pwc: recv_control_msg error -71 req 02 val 2000 [ 466.375214][ T5865] pwc: recv_control_msg error -71 req 02 val 2100 [ 466.375676][ T5865] pwc: recv_control_msg error -71 req 04 val 1500 [ 466.376212][ T5865] pwc: recv_control_msg error -71 req 02 val 2500 [ 466.376672][ T5865] pwc: recv_control_msg error -71 req 02 val 2400 [ 466.377709][ T5865] pwc: recv_control_msg error -71 req 02 val 2600 [ 466.378026][ T5865] pwc: recv_control_msg error -71 req 02 val 2900 [ 466.378397][ T5865] pwc: recv_control_msg error -71 req 02 val 2800 [ 466.378803][ T5865] pwc: recv_control_msg error -71 req 04 val 1100 [ 466.379100][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 466.381059][ T5865] pwc: Registered as video103. [ 466.383749][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 466.388866][ T5865] usb 1-1: USB disconnect, device number 16 [ 466.991559][ T61] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 467.265790][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 467.265807][ T37] audit: type=1326 audit(1768538384.218:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.266231][ T37] audit: type=1326 audit(1768538384.218:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.266932][ T37] audit: type=1326 audit(1768538384.218:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.268034][ T37] audit: type=1326 audit(1768538384.218:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.268617][ T37] audit: type=1326 audit(1768538384.218:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.268964][ T37] audit: type=1326 audit(1768538384.218:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.270431][ T37] audit: type=1326 audit(1768538384.218:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.270769][ T37] audit: type=1326 audit(1768538384.218:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.303744][T13478] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2827'. [ 467.411015][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 467.503019][T13246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.503089][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.503114][T13246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.505607][ T37] audit: type=1326 audit(1768538384.458:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.505906][ T37] audit: type=1326 audit(1768538384.458:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 467.525291][ T5865] hid-generic 0000:86010001:0006.0017: unknown main item tag 0x0 [ 467.527692][ T5865] hid-generic 0000:86010001:0006.0017: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 467.684249][ T5865] usb 2-1: USB disconnect, device number 20 [ 467.920006][T13246] hsr_slave_0: entered promiscuous mode [ 467.921258][T13246] hsr_slave_1: entered promiscuous mode [ 467.941909][T13246] debugfs: 'hsr0' already exists in 'hsr' [ 467.941933][T13246] Cannot create hsr debugfs directory [ 468.251527][ T5865] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 468.411461][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 468.413690][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.413720][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.413758][ T5865] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 468.413782][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.469335][ T5865] usb 4-1: config 0 descriptor?? [ 468.480601][ T5865] hub 4-1:0.0: USB hub found [ 468.679706][ T5865] hub 4-1:0.0: 1 port detected [ 468.871483][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 468.903252][ T5956] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 469.021451][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 469.024409][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 469.024432][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.024452][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.030009][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.030035][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.030102][ T10] usb 2-1: Product: syz [ 469.030117][ T10] usb 2-1: Manufacturer: syz [ 469.030133][ T10] usb 2-1: SerialNumber: syz [ 469.061403][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 469.109393][ T5956] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.109417][ T5956] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 469.115345][ T5956] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 469.115374][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.115394][ T5956] usb 1-1: Product: syz [ 469.115408][ T5956] usb 1-1: Manufacturer: syz [ 469.115423][ T5956] usb 1-1: SerialNumber: syz [ 469.198623][ T5956] usb 1-1: config 0 descriptor?? [ 469.303677][ T5956] hub 4-1:0.0: activate --> -90 [ 469.457936][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 469.586866][ T10] usb 2-1: 0:2 : does not exist [ 469.705769][ T5892] usb 4-1: USB disconnect, device number 16 [ 469.829402][T13246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 469.855051][T13246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 469.894264][T13246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 469.934817][T13246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 470.035109][T13246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.052984][T13246] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.059865][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.059984][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.090571][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.090835][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.470714][T13541] netlink: 'syz.3.2848': attribute type 1 has an invalid length. [ 471.627519][ T5956] usb 2-1: USB disconnect, device number 21 [ 471.672115][ T31] usb 1-1: USB disconnect, device number 17 [ 472.534025][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2857'. [ 472.534211][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.537771][T13566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2857'. [ 472.649890][T13246] veth0_vlan: entered promiscuous mode [ 472.659872][T13246] veth1_vlan: entered promiscuous mode [ 472.745506][T13246] veth0_macvtap: entered promiscuous mode [ 472.768027][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 472.805193][T13246] veth1_macvtap: entered promiscuous mode [ 472.821702][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2858'. [ 473.039168][T13246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.083768][T13246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.113750][ T3856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.114324][ T3856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.115632][ T3856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.116081][ T3856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.189205][T13592] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 473.451706][ T5892] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 473.497018][ T806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.497036][ T806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.577994][ T37] audit: type=1326 audit(1768538390.528:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.578220][ T37] audit: type=1326 audit(1768538390.528:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.579774][ T37] audit: type=1326 audit(1768538390.528:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.581883][ T37] audit: type=1326 audit(1768538390.538:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.582252][ T37] audit: type=1326 audit(1768538390.538:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.582836][ T37] audit: type=1326 audit(1768538390.538:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.583265][ T37] audit: type=1326 audit(1768538390.538:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.583710][ T37] audit: type=1326 audit(1768538390.538:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.584061][ T37] audit: type=1326 audit(1768538390.538:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.584294][ T37] audit: type=1326 audit(1768538390.538:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e459af749 code=0x7ffc0000 [ 473.614265][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 473.616513][ T5892] usb 5-1: config 0 has no interfaces? [ 473.684244][ T5892] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 473.684271][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.684290][ T5892] usb 5-1: Product: syz [ 473.684305][ T5892] usb 5-1: Manufacturer: syz [ 473.684318][ T5892] usb 5-1: SerialNumber: syz [ 473.689555][ T5892] usb 5-1: config 0 descriptor?? [ 473.788561][T13604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 473.869340][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.869357][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.044350][ T5892] usb 5-1: USB disconnect, device number 12 [ 474.262942][T13618] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 474.641956][T13618] gretap1: entered promiscuous mode [ 475.493255][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.498659][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.537591][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.543661][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2881'. [ 475.550348][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.552393][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.553572][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.577486][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.578373][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.867551][T13640] blktrace: Concurrent blktraces are not allowed on loop8 [ 476.335951][T13655] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2891'. [ 476.451481][T13630] infiniband syz2: set down [ 476.451499][T13630] infiniband syz2: added ip6_vti0 [ 476.516658][ T5892] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.537347][T13630] RDS/IB: syz2: added [ 476.537429][T13630] smc: adding ib device syz2 with port count 1 [ 476.537453][T13630] smc: ib device syz2 port 1 has no pnetid [ 476.677554][ T5809] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.700733][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.441722][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.571464][ T5809] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 477.631744][ T61] Bluetooth: hci0: command tx timeout [ 477.721420][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 477.727416][ T5809] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 477.727442][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.727464][ T5809] usb 4-1: Product: syz [ 477.727478][ T5809] usb 4-1: Manufacturer: syz [ 477.727493][ T5809] usb 4-1: SerialNumber: syz [ 477.732656][ T5809] usb 4-1: config 0 descriptor?? [ 477.737943][ T5809] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 477.957955][ T5920] usb 4-1: USB disconnect, device number 17 [ 478.102004][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.187650][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.204496][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.234510][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.236602][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.237421][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.265716][T13628] chnl_net:caif_netlink_parms(): no params data found [ 478.349833][ T4554] batadv1: left allmulticast mode [ 478.349924][ T4554] batadv1: left promiscuous mode [ 478.364806][ T4554] bridge0: port 3(batadv1) entered disabled state [ 478.412368][ T4554] bridge_slave_1: left allmulticast mode [ 478.412391][ T4554] bridge_slave_1: left promiscuous mode [ 478.412639][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.492986][ T4554] bridge_slave_0: left allmulticast mode [ 478.493009][ T4554] bridge_slave_0: left promiscuous mode [ 478.493316][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.795867][ T5920] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 478.941426][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 478.943201][ T5920] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 478.943222][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.943241][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.945571][ T5920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.945593][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.945603][ T5920] usb 4-1: Product: syz [ 478.945611][ T5920] usb 4-1: Manufacturer: syz [ 478.945618][ T5920] usb 4-1: SerialNumber: syz [ 479.111441][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 479.267120][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.267153][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.267202][ T31] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 479.267226][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.289212][ T31] usb 3-1: config 0 descriptor?? [ 479.365984][ T5920] usb 4-1: 0:2 : does not exist [ 479.706469][ T31] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 479.706492][ T31] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 479.706509][ T31] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 479.706525][ T31] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 479.706540][ T31] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 479.706556][ T31] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 479.706572][ T31] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 479.711661][ T61] Bluetooth: hci0: command tx timeout [ 479.770771][ T31] steelseries 0003:1038:12B6.0018: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 479.905191][ T31] steelseries 0003:1038:12B6.0018: hid_hw_raw_request() failed with -71 [ 479.909277][ T31] usb 3-1: USB disconnect, device number 16 [ 480.351602][ T61] Bluetooth: hci2: command tx timeout [ 480.575412][ T4554] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.592010][ T4554] bond_slave_0: left promiscuous mode [ 480.631991][ T4554] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.651832][ T4554] bond_slave_1: left promiscuous mode [ 480.652315][ T4554] $Hÿ (unregistering): Released all slaves [ 480.663493][ T4554] bond1 (unregistering): Released all slaves [ 480.805102][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.805916][ T4554] tipc: Left network mode [ 481.244773][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.313315][T13628] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.313505][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.313672][T13628] bridge_slave_0: entered allmulticast mode [ 481.333573][T13628] bridge_slave_0: entered promiscuous mode [ 481.339205][T13628] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.341563][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.341725][T13628] bridge_slave_1: entered allmulticast mode [ 481.344091][T13628] bridge_slave_1: entered promiscuous mode [ 481.564383][ T5920] usb 4-1: USB disconnect, device number 18 [ 481.801355][ T61] Bluetooth: hci0: command tx timeout [ 481.862887][T13689] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.919913][T13628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.961480][ T5920] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 481.969735][T13628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.123675][ T5920] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 482.123731][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.125037][ T5920] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 482.125063][ T5920] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 482.125083][ T5920] usb 4-1: Manufacturer: syz [ 482.127920][ T5920] usb 4-1: config 0 descriptor?? [ 482.183717][T13630] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.193340][T13628] team0: Port device team_slave_0 added [ 482.201899][ T5920] rc_core: IR keymap rc-hauppauge not found [ 482.201913][ T5920] Registered IR keymap rc-empty [ 482.203700][ T5920] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 482.206559][ T5920] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 482.213869][T13628] team0: Port device team_slave_1 added [ 482.431511][ T61] Bluetooth: hci2: command tx timeout [ 482.483694][T13628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.483708][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.483733][T13628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.513196][T13628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.513210][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.513234][T13628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.797106][ T5920] usb 4-1: USB disconnect, device number 19 [ 483.003612][T13628] hsr_slave_0: entered promiscuous mode [ 483.007416][T13628] hsr_slave_1: entered promiscuous mode [ 483.009897][T13628] debugfs: 'hsr0' already exists in 'hsr' [ 483.009920][T13628] Cannot create hsr debugfs directory [ 483.411528][ T4554] hsr_slave_0: left promiscuous mode [ 483.451505][ T4554] hsr_slave_1: left promiscuous mode [ 483.452147][ T4554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.621881][ T4554] pim6reg (unregistering): left allmulticast mode [ 483.897453][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'. [ 483.959025][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 484.033308][T13715] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 484.048733][T13738] loop2: detected capacity change from 0 to 7 [ 484.082021][T13738] Dev loop2: unable to read RDB block 7 [ 484.082064][T13738] loop2: unable to read partition table [ 484.082274][T13738] loop2: partition table beyond EOD, truncated [ 484.082337][T13738] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 484.331464][ T5920] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 484.451442][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 484.461463][ T5920] usb 2-1: device descriptor read/64, error -71 [ 484.511463][ T61] Bluetooth: hci2: command tx timeout [ 484.602432][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 484.605576][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 484.605600][ T10] usb 4-1: config 0 has no interface number 0 [ 484.605642][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.605660][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.605682][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 484.605694][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.608345][ T10] usb 4-1: config 0 descriptor?? [ 484.701485][ T5920] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 484.833081][ T5920] usb 2-1: device descriptor read/64, error -71 [ 484.950381][ T5920] usb usb2-port1: attempt power cycle [ 485.017643][ T10] usbhid 4-1:0.1: can't add hid device: -71 [ 485.017754][ T10] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 485.021156][ T10] usb 4-1: USB disconnect, device number 20 [ 485.291465][ T5920] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 485.312281][ T5920] usb 2-1: device descriptor read/8, error -71 [ 485.528051][ T4554] team0 (unregistering): Port device team_slave_1 removed [ 485.551467][ T5920] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 485.576562][ T5920] usb 2-1: device descriptor read/8, error -71 [ 485.644545][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2933'. [ 485.645616][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 485.691227][ T5920] usb usb2-port1: unable to enumerate USB device [ 485.823234][ T4554] team0 (unregistering): Port device team_slave_0 removed [ 486.580524][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 487.250879][ T61] Bluetooth: hci2: command tx timeout [ 488.810178][T13780] netlink: 'syz.3.2943': attribute type 3 has an invalid length. [ 488.829265][T13774] vlan2: entered allmulticast mode [ 488.829286][T13774] dummy0: entered allmulticast mode [ 489.471459][ T61] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 489.704799][T13689] chnl_net:caif_netlink_parms(): no params data found [ 491.262309][T13813] netlink: 'syz.3.2953': attribute type 12 has an invalid length. [ 491.262344][T13813] netlink: 'syz.3.2953': attribute type 29 has an invalid length. [ 491.262411][T13813] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2953'. [ 491.263418][T13813] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2953'. [ 492.210731][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2962'. [ 492.413472][T13689] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.413681][T13689] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.413861][T13689] bridge_slave_0: entered allmulticast mode [ 492.416920][T13689] bridge_slave_0: entered promiscuous mode [ 492.427662][T13689] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.431253][T13689] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.442465][T13689] bridge_slave_1: entered allmulticast mode [ 492.455795][T13689] bridge_slave_1: entered promiscuous mode [ 492.583995][T13839] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2963'. [ 492.807018][T13689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.817791][T13689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.203284][T13689] team0: Port device team_slave_0 added [ 493.213740][T13689] team0: Port device team_slave_1 added [ 493.660169][ T4554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.720550][T13689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.720566][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.720585][T13689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.720866][T13852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.861440][ T5920] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 494.011442][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 494.021239][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.021266][ T5920] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 494.021278][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.028561][ T5920] usb 3-1: config 0 descriptor?? [ 494.112862][ T5814] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 494.247226][T13689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.247236][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.247251][T13689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.481049][ T4554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.509171][ T5920] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 494.994493][ T3856] Bluetooth: hci3: Frame reassembly failed (-84) [ 495.107959][T13856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.108629][T13856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.137383][ T4554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.153205][T13856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.158610][T13856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.428809][T13887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.445171][T13887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.756013][ T5920] usb 3-1: USB disconnect, device number 17 [ 495.864741][ T4554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.001137][T13689] hsr_slave_0: entered promiscuous mode [ 496.003913][T13689] hsr_slave_1: entered promiscuous mode [ 496.006846][T13689] debugfs: 'hsr0' already exists in 'hsr' [ 496.006867][T13689] Cannot create hsr debugfs directory [ 496.014214][T13628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.072275][T13628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.172289][T13628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.216614][T13628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 496.541447][ T5956] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 496.691484][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 496.693741][ T5956] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 496.693765][ T5956] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.693784][ T5956] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.696499][ T5956] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.696526][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.696545][ T5956] usb 3-1: Product: syz [ 496.696560][ T5956] usb 3-1: Manufacturer: syz [ 496.696575][ T5956] usb 3-1: SerialNumber: syz [ 496.805318][ T4554] bridge_slave_1: left allmulticast mode [ 496.805408][ T4554] bridge_slave_1: left promiscuous mode [ 496.805797][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.885961][ T4554] bridge_slave_0: left allmulticast mode [ 496.885985][ T4554] bridge_slave_0: left promiscuous mode [ 496.886379][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.001483][ T5814] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 497.114030][ T5956] usb 3-1: 0:2 : does not exist [ 497.812390][ T4554] bond2 (unregistering): (slave gretap1): Releasing active interface [ 498.921913][ T4554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.982199][ T4554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.003240][ T4554] bond0 (unregistering): Released all slaves [ 499.042511][ T4554] bond1 (unregistering): (slave lo): Releasing backup interface [ 499.061834][ T4554] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 499.062085][ T4554] bond1 (unregistering): Released all slaves [ 499.071588][ T4554] bond2 (unregistering): Released all slaves [ 499.088031][ T4554] bond3 (unregistering): Released all slaves [ 499.103791][ T4554] bond4 (unregistering): Released all slaves [ 499.227158][ T4554] tipc: Left network mode [ 499.371236][ T5956] usb 3-1: USB disconnect, device number 18 [ 499.425445][ T4554] IPVS: stopping backup sync thread 9220 ... [ 499.467738][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'. [ 499.548040][ T10] hid-generic 0000:86010001:0006.001A: unknown main item tag 0x0 [ 499.566027][ T10] hid-generic 0000:86010001:0006.001A: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 501.397625][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.397694][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.481076][ T61] Bluetooth: hci3: command 0x1003 tx timeout [ 501.489863][ T5814] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 502.131399][ T5941] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 502.192734][T13689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 502.281555][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 502.283155][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.283206][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.283222][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.283234][ T5941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 502.283245][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.284417][ T5941] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.284442][ T5941] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.284462][ T5941] usb 3-1: Manufacturer: syz [ 502.287291][ T5941] usb 3-1: config 0 descriptor?? [ 502.433148][T13689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 502.564802][T13628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.601387][T13689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 502.689342][ T5057] Bluetooth: hci3: Frame reassembly failed (-90) [ 502.689595][ T1009] Bluetooth: hci3: Frame reassembly failed (-84) [ 502.690518][T13958] Bluetooth: hci3: Frame reassembly failed (-84) [ 502.690829][T13958] Bluetooth: hci3: Frame reassembly failed (-84) [ 502.691409][ T5941] rc_core: IR keymap rc-hauppauge not found [ 502.691424][ T5941] Registered IR keymap rc-empty [ 502.691572][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.710240][T13958] Bluetooth: hci3: Frame reassembly failed (-84) [ 502.725269][T13689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 502.750840][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.767971][ T5941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 502.790890][ T5941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 502.814541][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.831959][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.851604][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.871483][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.873903][T13628] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.895343][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.912640][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.917354][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.917647][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.925727][ T5920] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 502.959256][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.971591][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.995084][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.014196][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.067871][ T5941] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 503.067895][ T5941] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 503.093871][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.094169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.120867][ T5941] usb 3-1: USB disconnect, device number 19 [ 503.121418][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 503.136009][ T5920] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 503.136035][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.136055][ T5920] usb 4-1: Product: syz [ 503.136069][ T5920] usb 4-1: Manufacturer: syz [ 503.136082][ T5920] usb 4-1: SerialNumber: syz [ 503.138885][ T5920] usb 4-1: config 0 descriptor?? [ 503.315662][ T4554] hsr_slave_0: left promiscuous mode [ 503.351480][ T4554] hsr_slave_1: left promiscuous mode [ 503.352089][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.352194][ T4554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.447316][ T4554] veth1_macvtap: left promiscuous mode [ 503.447434][ T4554] veth0_macvtap: left promiscuous mode [ 503.447635][ T4554] veth1_vlan: left promiscuous mode [ 503.447771][ T4554] veth0_vlan: left promiscuous mode [ 504.416576][T13969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3008'. [ 504.752050][ T61] Bluetooth: hci3: command 0x1003 tx timeout [ 504.752196][ T5814] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 505.491817][ T4554] team0 (unregistering): Port device team_slave_1 removed [ 505.658871][ T5920] usb 4-1: USB disconnect, device number 21 [ 505.742236][ T4554] team0 (unregistering): Port device team_slave_0 removed [ 505.744482][ T1009] smc: removing ib device syz! [ 506.088641][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 508.392237][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 508.410998][T14011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3025'. [ 508.920068][T13689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.047218][T13689] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.072320][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.074033][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.110354][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.110513][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.739873][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3032'. [ 510.235352][T13628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.266186][T13689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.992031][T13628] veth0_vlan: entered promiscuous mode [ 511.035713][T13628] veth1_vlan: entered promiscuous mode [ 511.304681][T13689] veth0_vlan: entered promiscuous mode [ 511.341132][T13628] veth0_macvtap: entered promiscuous mode [ 511.361906][T13689] veth1_vlan: entered promiscuous mode [ 511.383025][T13628] veth1_macvtap: entered promiscuous mode [ 511.450823][T13628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.504311][T13628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.543548][T13689] veth0_macvtap: entered promiscuous mode [ 511.569047][ T3482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.582219][ T3482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.585534][ T3482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.586940][T13689] veth1_macvtap: entered promiscuous mode [ 511.625784][ T3482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.962676][T13689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.031868][T13689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.106928][ T2149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.133249][ T2149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.133907][ T2149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.133939][ T2149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.361047][T14082] binder: BINDER_SET_CONTEXT_MGR already set [ 512.361059][T14082] binder: 14081:14082 ioctl 4018620d 200000000040 returned -16 [ 512.368777][T14079] netlink: 'syz.1.3045': attribute type 12 has an invalid length. [ 512.368800][T14079] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 512.368812][T14079] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3045'. [ 512.368835][T14079] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3045'. [ 512.468606][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.468622][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.856030][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.856047][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.991554][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.991571][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.927880][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.927900][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.149238][T14103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3054'. [ 514.205705][T14106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'. [ 514.750068][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 514.776030][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 514.778414][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.784636][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.785933][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.965541][T14115] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.097601][T14154] netlink: 664 bytes leftover after parsing attributes in process `syz.5.3073'. [ 516.162222][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3074'. [ 516.311458][ T5892] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 516.451476][ T5892] usb 1-1: device descriptor read/64, error -71 [ 516.650631][T14115] chnl_net:caif_netlink_parms(): no params data found [ 516.711452][ T5892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 516.831549][ T5814] Bluetooth: hci3: command tx timeout [ 516.844580][ T5892] usb 1-1: device descriptor read/64, error -71 [ 516.896011][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'. [ 516.962257][ T5892] usb usb1-port1: attempt power cycle [ 517.312112][ T5892] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 517.342103][ T5892] usb 1-1: device descriptor read/8, error -71 [ 517.591551][ T5892] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 517.622082][ T5892] usb 1-1: device descriptor read/8, error -71 [ 517.671438][ T5956] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 517.716700][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.716902][T14115] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.717070][T14115] bridge_slave_0: entered allmulticast mode [ 517.731974][ T5892] usb usb1-port1: unable to enumerate USB device [ 517.756549][T14115] bridge_slave_0: entered promiscuous mode [ 517.758614][T14115] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.758726][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.758827][T14115] bridge_slave_1: entered allmulticast mode [ 517.760237][T14115] bridge_slave_1: entered promiscuous mode [ 517.821420][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 517.823222][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.823267][ T5956] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 517.823333][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.826111][ T5956] usb 2-1: config 0 descriptor?? [ 517.828400][ T5956] hub 2-1:0.0: bad descriptor, ignoring hub [ 517.828420][ T5956] hub 2-1:0.0: probe with driver hub failed with error -5 [ 517.830038][ T5956] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 518.233565][T14115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.243790][T14115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.480586][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.490862][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.492581][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.494298][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.494897][T14115] team0: Port device team_slave_0 added [ 518.495020][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 518.586904][T14115] team0: Port device team_slave_1 added [ 518.785323][T14115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.785338][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.785364][T14115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.788964][T14193] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.875423][T14115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.875436][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.875462][T14115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.911389][ T5814] Bluetooth: hci3: command tx timeout [ 518.945838][ T3517] bridge_slave_1: left allmulticast mode [ 518.945862][ T3517] bridge_slave_1: left promiscuous mode [ 518.948078][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.002971][ T3517] bridge_slave_0: left allmulticast mode [ 519.002995][ T3517] bridge_slave_0: left promiscuous mode [ 519.003227][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.259883][T14201] netlink: 664 bytes leftover after parsing attributes in process `syz.0.3091'. [ 520.492084][ T3517] bond1 (unregistering): (slave gretap1): Releasing active interface [ 520.561276][T14076] usb 2-1: USB disconnect, device number 26 [ 520.602909][ T5814] Bluetooth: hci4: command tx timeout [ 520.993296][ T5814] Bluetooth: hci3: command tx timeout [ 521.623004][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.682099][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.702172][ T3517] bond0 (unregistering): Released all slaves [ 521.710510][ T3517] bond1 (unregistering): Released all slaves [ 521.731691][ T3517] bond2 (unregistering): Released all slaves [ 521.741269][ T3517] bond3 (unregistering): Released all slaves [ 521.764694][ T3517] bond4 (unregistering): Released all slaves [ 521.785292][ T3517] bond5 (unregistering): Released all slaves [ 522.061995][T14188] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.221406][ T5865] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 522.303301][T14115] hsr_slave_0: entered promiscuous mode [ 522.314080][T14115] hsr_slave_1: entered promiscuous mode [ 522.314995][T14115] debugfs: 'hsr0' already exists in 'hsr' [ 522.315016][T14115] Cannot create hsr debugfs directory [ 522.383911][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 522.383943][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.383980][ T5865] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 522.384004][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.388086][ T5865] usb 2-1: config 0 descriptor?? [ 522.671464][ T5814] Bluetooth: hci4: command tx timeout [ 522.785048][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3098'. [ 522.804545][ T5865] chicony 0003:04F2:1421.001B: unknown main item tag 0x0 [ 522.804567][ T5865] chicony 0003:04F2:1421.001B: unknown main item tag 0x0 [ 522.821760][ T5865] chicony 0003:04F2:1421.001B: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.1-1/input0 [ 522.836487][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3098'. [ 523.008369][T14076] usb 2-1: USB disconnect, device number 27 [ 523.076195][ T5814] Bluetooth: hci3: command tx timeout [ 523.461550][ T5865] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 523.612083][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 523.613731][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.613783][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.613799][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.613811][ T5865] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 523.613823][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.615518][ T5865] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.615533][ T5865] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.615544][ T5865] usb 1-1: Manufacturer: syz [ 523.618367][ T5865] usb 1-1: config 0 descriptor?? [ 523.821486][ T3517] hsr_slave_0: left promiscuous mode [ 523.841504][ T3517] hsr_slave_1: left promiscuous mode [ 523.901491][ T5865] rc_core: IR keymap rc-hauppauge not found [ 523.901508][ T5865] Registered IR keymap rc-empty [ 523.901659][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.929438][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.943054][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 523.946305][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 523.950263][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.982487][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.002699][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.021572][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.041678][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.062579][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.082562][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.101508][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.131522][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.168631][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 524.188517][ T5865] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.188539][ T5865] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.326713][ T5892] usb 1-1: USB disconnect, device number 22 [ 524.751427][ T5814] Bluetooth: hci4: command tx timeout [ 524.916245][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 524.979752][T14252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3107'. [ 525.963294][ T3517] team0 (unregistering): Port device team_slave_1 removed [ 526.171822][ T3517] team0 (unregistering): Port device team_slave_0 removed [ 526.837341][ T5814] Bluetooth: hci4: command tx timeout [ 528.567959][T14188] chnl_net:caif_netlink_parms(): no params data found [ 528.691531][T14279] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 528.691557][T14279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 528.694311][T14279] vhci_hcd vhci_hcd.0: Device attached [ 528.723502][T14280] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 528.753378][ T68] vhci_hcd vhci_hcd.5: stop threads [ 528.753394][ T68] vhci_hcd vhci_hcd.5: release socket [ 528.753474][ T68] vhci_hcd vhci_hcd.5: disconnect device [ 528.764504][ T5956] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 528.789722][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'. [ 528.841241][T14284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3118'. [ 528.913181][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 528.919536][ T5956] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 528.919569][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.919589][ T5956] usb 1-1: Product: syz [ 528.919603][ T5956] usb 1-1: Manufacturer: syz [ 528.919617][ T5956] usb 1-1: SerialNumber: syz [ 528.927292][ T5956] usb 1-1: config 0 descriptor?? [ 528.937755][ T5956] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 529.187674][ T5956] gspca_topro: reg_w err -71 [ 529.211434][ T5956] gspca_topro: Sensor soi763a [ 529.217768][ T5956] usb 1-1: USB disconnect, device number 23 [ 529.231426][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 529.251239][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.256482][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.256645][T14188] bridge_slave_0: entered allmulticast mode [ 529.259226][T14188] bridge_slave_0: entered promiscuous mode [ 529.262405][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.271605][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.271771][T14188] bridge_slave_1: entered allmulticast mode [ 529.274194][T14188] bridge_slave_1: entered promiscuous mode [ 529.391401][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 529.393377][ T31] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 529.393401][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.397249][ T31] usb 2-1: config 0 descriptor?? [ 529.434065][ T31] gspca_main: sunplus-2.14.0 probing 041e:400b [ 529.507719][T14188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.581059][T14188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.822937][ T5865] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 529.972225][ T5865] usb 6-1: no configurations [ 529.972242][ T5865] usb 6-1: can't read configurations, error -22 [ 530.103493][ T5865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 530.210418][ T31] gspca_sunplus: reg_r err -71 [ 530.210516][ T31] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 530.231804][ T31] usb 2-1: USB disconnect, device number 28 [ 530.237233][ T3517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.254127][ T5865] usb 6-1: no configurations [ 530.254143][ T5865] usb 6-1: can't read configurations, error -22 [ 530.254445][ T5865] usb usb6-port1: attempt power cycle [ 530.284680][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 530.336350][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3127'. [ 530.376130][T14188] team0: Port device team_slave_0 added [ 530.547111][ T3517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.591541][ T5865] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 530.593474][T14188] team0: Port device team_slave_1 added [ 530.618878][ T5865] usb 6-1: no configurations [ 530.618895][ T5865] usb 6-1: can't read configurations, error -22 [ 530.741420][ T5865] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 530.763232][ T5865] usb 6-1: no configurations [ 530.763247][ T5865] usb 6-1: can't read configurations, error -22 [ 530.763553][ T5865] usb usb6-port1: unable to enumerate USB device [ 531.051494][ T5865] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 531.055308][ T3517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.096365][T14188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.096378][T14188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.096401][T14188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.097816][T14188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.097828][T14188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.097846][T14188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.197772][T14115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.204767][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 531.209542][ T5865] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 531.209567][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.209586][ T5865] usb 2-1: Product: syz [ 531.209601][ T5865] usb 2-1: Manufacturer: syz [ 531.209614][ T5865] usb 2-1: SerialNumber: syz [ 531.214562][ T5865] usb 2-1: config 0 descriptor?? [ 531.421181][ T5865] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 531.442758][T14115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.615314][ T3517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.772172][T14115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.926110][T14115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.985849][T14188] hsr_slave_0: entered promiscuous mode [ 531.987387][T14188] hsr_slave_1: entered promiscuous mode [ 532.228591][T14334] netlink: 1656 bytes leftover after parsing attributes in process `syz.0.3136'. [ 532.234217][ T5865] gspca_sunplus: reg_w_riv err -71 [ 532.234303][ T5865] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 532.250654][ T5865] usb 2-1: USB disconnect, device number 29 [ 532.632577][T14344] ======================================================= [ 532.632577][T14344] WARNING: The mand mount option has been deprecated and [ 532.632577][T14344] and is ignored by this kernel. Remove the mand [ 532.632577][T14344] option from the mount to silence this warning. [ 532.632577][T14344] ======================================================= [ 532.693801][ T3517] bridge_slave_1: left allmulticast mode [ 532.693824][ T3517] bridge_slave_1: left promiscuous mode [ 532.694037][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.773150][ T3517] bridge_slave_0: left allmulticast mode [ 532.773173][ T3517] bridge_slave_0: left promiscuous mode [ 532.773391][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.981454][ T5864] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 533.140826][ T5864] usb 6-1: config 0 has an invalid interface number: 82 but max is 0 [ 533.140852][ T5864] usb 6-1: config 0 has no interface number 0 [ 533.140882][ T5864] usb 6-1: config 0 interface 82 has no altsetting 0 [ 533.163157][ T5864] usb 6-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=22.6d [ 533.163178][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.163189][ T5864] usb 6-1: Product: syz [ 533.163197][ T5864] usb 6-1: Manufacturer: syz [ 533.163205][ T5864] usb 6-1: SerialNumber: syz [ 533.167893][ T5864] usb 6-1: config 0 descriptor?? [ 533.170536][ T5864] quatech2 6-1:0.82: Quatech 2nd gen USB to Serial Driver converter detected [ 533.373985][ T5864] usb 6-1: qt2_attach - failed to power on unit: -71 [ 533.374118][ T5864] quatech2 6-1:0.82: probe with driver quatech2 failed with error -71 [ 533.377868][ T5864] usb 6-1: USB disconnect, device number 6 [ 534.519324][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.572307][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.595114][ T3517] bond0 (unregistering): Released all slaves [ 534.610243][ T3517] bond1 (unregistering): Released all slaves [ 534.808286][T14360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3147'. [ 535.331447][ T5892] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 535.371762][ T5956] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 535.495165][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.495189][ T5892] usb 6-1: config 0 has no interfaces? [ 535.495217][ T5892] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 535.495230][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.498000][ T5892] usb 6-1: config 0 descriptor?? [ 535.558559][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.558590][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.558628][ T5956] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 535.558652][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.604161][ T5956] usb 1-1: config 0 descriptor?? [ 536.020275][ T5956] usbhid 1-1:0.0: can't add hid device: -71 [ 536.020394][ T5956] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 536.039958][T14188] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 536.050221][ T5956] usb 1-1: USB disconnect, device number 24 [ 536.109472][T14188] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 536.142850][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 536.142866][ T37] audit: type=1326 audit(1768538453.088:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.143382][ T37] audit: type=1326 audit(1768538453.098:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.143991][ T37] audit: type=1326 audit(1768538453.098:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.150332][ T37] audit: type=1326 audit(1768538453.098:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.150797][ T37] audit: type=1326 audit(1768538453.098:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.151200][ T37] audit: type=1326 audit(1768538453.098:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.151564][ T37] audit: type=1326 audit(1768538453.108:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.151919][ T37] audit: type=1326 audit(1768538453.108:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.345384][ T37] audit: type=1326 audit(1768538453.298:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.345660][ T37] audit: type=1326 audit(1768538453.298:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14377 comm="syz.1.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 536.345784][T14188] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 536.468313][T14188] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 536.585018][T14393] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3156'. [ 536.601525][ T3517] hsr_slave_0: left promiscuous mode [ 536.646106][ T3517] hsr_slave_1: left promiscuous mode [ 536.646927][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.646950][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.693415][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.693440][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.887662][ T3517] veth1_macvtap: left promiscuous mode [ 536.887761][ T3517] veth0_macvtap: left promiscuous mode [ 536.888000][ T3517] veth1_vlan: left promiscuous mode [ 536.888166][ T3517] veth0_vlan: left promiscuous mode [ 538.105311][ T5956] usb 6-1: USB disconnect, device number 7 [ 539.001778][ T3517] team0 (unregistering): Port device team_slave_1 removed [ 539.218900][ T3517] team0 (unregistering): Port device team_slave_0 removed [ 541.150704][T14421] hsr0: entered promiscuous mode [ 541.151185][T14421] macvlan2: entered allmulticast mode [ 541.151202][T14421] hsr0: entered allmulticast mode [ 541.151215][T14421] hsr_slave_0: entered allmulticast mode [ 541.151234][T14421] hsr_slave_1: entered allmulticast mode [ 541.186306][T14421] hsr0: left allmulticast mode [ 541.186324][T14421] hsr_slave_0: left allmulticast mode [ 541.186342][T14421] hsr_slave_1: left allmulticast mode [ 541.456403][T14115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.508245][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3168'. [ 541.717070][T14115] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.739100][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.739214][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.770015][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.770173][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.791496][ T56] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 541.948267][T14188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.951474][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 541.968417][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.968448][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.968486][ T56] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 541.968511][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.975344][ T56] usb 1-1: config 0 descriptor?? [ 542.005015][ T56] hub 1-1:0.0: USB hub found [ 542.119610][T14188] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.151557][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.151767][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.196486][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.196915][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.246107][ T56] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 542.453383][ T56] usbhid 1-1:0.0: can't add hid device: -71 [ 542.453502][ T56] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 542.498317][ T56] usb 1-1: USB disconnect, device number 25 [ 542.508212][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 542.508226][ T37] audit: type=1326 audit(1768538459.458:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.508617][ T37] audit: type=1326 audit(1768538459.458:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.509029][ T37] audit: type=1326 audit(1768538459.458:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.509488][ T37] audit: type=1326 audit(1768538459.458:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.509738][ T37] audit: type=1326 audit(1768538459.458:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.522523][ T37] audit: type=1326 audit(1768538459.478:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.523002][ T37] audit: type=1326 audit(1768538459.478:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.523331][ T37] audit: type=1326 audit(1768538459.478:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.523586][ T37] audit: type=1326 audit(1768538459.478:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.523880][ T37] audit: type=1326 audit(1768538459.478:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88a817f749 code=0x7ffc0000 [ 542.880439][T14115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.025037][T14115] veth0_vlan: entered promiscuous mode [ 543.051103][T14115] veth1_vlan: entered promiscuous mode [ 543.060030][T14188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.096176][T14115] veth0_macvtap: entered promiscuous mode [ 543.128079][T14115] veth1_macvtap: entered promiscuous mode [ 543.174868][T14115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.214891][T14115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.241393][ T3584] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.261050][ T3584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.309876][ T3584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.310850][ T3584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.500416][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.500434][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.622268][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.622285][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.894229][T14188] veth0_vlan: entered promiscuous mode [ 543.919725][T14188] veth1_vlan: entered promiscuous mode [ 543.966982][T14188] veth0_macvtap: entered promiscuous mode [ 543.979182][T14188] veth1_macvtap: entered promiscuous mode [ 544.004692][T14188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.023239][T14188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.041011][ T1121] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.052536][ T1121] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.053855][ T1121] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.053915][ T1121] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.153211][T14376] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 544.326362][T14376] usb 4-1: Using ep0 maxpacket: 16 [ 544.337291][T14515] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3191'. [ 544.340117][T14376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.340165][T14376] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 544.340191][T14376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.390666][T14376] usb 4-1: config 0 descriptor?? [ 544.638631][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 544.675534][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.675551][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.687363][T14483] hid-generic 0000:86010001:0006.001C: unknown main item tag 0x0 [ 544.702764][T14483] hid-generic 0000:86010001:0006.001C: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 544.828187][T14376] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 544.911135][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.911152][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.202169][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 545.227829][T14497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.228133][T14497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.241724][T14497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.242112][T14497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.462017][T14544] tipc: Enabling of bearer rejected, failed to enable media [ 545.496891][ T31] usb 4-1: USB disconnect, device number 22 [ 546.255764][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 546.261043][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 546.268119][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 546.269804][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 546.271042][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 546.321548][ T5941] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 546.353593][T14570] ip6_vti0 speed is unknown, defaulting to 1000 [ 546.471420][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 546.477731][ T5941] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 546.477752][ T5941] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.477772][ T5941] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.483026][ T5941] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.483056][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.483076][ T5941] usb 6-1: Product: syz [ 546.483090][ T5941] usb 6-1: Manufacturer: syz [ 546.483103][ T5941] usb 6-1: SerialNumber: syz [ 546.945596][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 546.947104][ T5941] usb 6-1: 0:2 : does not exist [ 546.952478][ T5941] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 546.974715][ T5941] usb 6-1: USB disconnect, device number 8 [ 547.319147][T14583] tipc: Enabling of bearer rejected, failed to enable media [ 547.595847][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3215'. [ 547.629949][ T5941] hid-generic 0000:86010001:0006.001E: unknown main item tag 0x0 [ 547.637774][ T5941] hid-generic 0000:86010001:0006.001E: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 547.804694][T14597] binder: BINDER_SET_CONTEXT_MGR already set [ 547.804707][T14597] binder: 14596:14597 ioctl 4018620d 200000000040 returned -16 [ 547.934963][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 547.934978][ T37] audit: type=1326 audit(1768538464.888:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.935223][ T37] audit: type=1326 audit(1768538464.888:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.935583][ T37] audit: type=1326 audit(1768538464.888:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.936123][ T37] audit: type=1326 audit(1768538464.888:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.936446][ T37] audit: type=1326 audit(1768538464.888:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.940932][ T37] audit: type=1326 audit(1768538464.888:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.941726][ T37] audit: type=1326 audit(1768538464.888:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.941772][ T37] audit: type=1326 audit(1768538464.898:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.942016][ T37] audit: type=1326 audit(1768538464.898:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 547.942282][ T37] audit: type=1326 audit(1768538464.898:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14598 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33f90f749 code=0x7ffc0000 [ 548.352419][ T5814] Bluetooth: hci5: command tx timeout [ 548.715819][T14570] chnl_net:caif_netlink_parms(): no params data found [ 548.782862][ T5941] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 548.860063][T14623] binder: BINDER_SET_CONTEXT_MGR already set [ 548.860076][T14623] binder: 14622:14623 ioctl 4018620d 200000000040 returned -16 [ 548.932516][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 548.939021][ T5941] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 548.939042][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.939062][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.975244][ T5941] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.975273][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.975293][ T5941] usb 4-1: Product: syz [ 548.975308][ T5941] usb 4-1: Manufacturer: syz [ 548.975323][ T5941] usb 4-1: SerialNumber: syz [ 549.390739][T14646] binder: BINDER_SET_CONTEXT_MGR already set [ 549.390753][T14646] binder: 14644:14646 ioctl 4018620d 200000000040 returned -16 [ 549.481675][ T5941] usb 4-1: 0:2 : does not exist [ 549.484944][ T5941] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 549.518340][T14650] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3239'. [ 549.526970][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'. [ 549.542227][ T5941] usb 4-1: USB disconnect, device number 23 [ 549.567257][ T5892] hid-generic 0000:86010001:0006.001F: unknown main item tag 0x0 [ 549.574235][ T5892] hid-generic 0000:86010001:0006.001F: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 549.621846][T14570] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.632253][T14570] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.632426][T14570] bridge_slave_0: entered allmulticast mode [ 549.639478][T14570] bridge_slave_0: entered promiscuous mode [ 549.693104][T14570] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.693226][T14570] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.693398][T14570] bridge_slave_1: entered allmulticast mode [ 549.700175][T14570] bridge_slave_1: entered promiscuous mode [ 549.813921][ T1121] bridge_slave_1: left allmulticast mode [ 549.813944][ T1121] bridge_slave_1: left promiscuous mode [ 549.814168][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.874569][ T1121] bridge_slave_0: left allmulticast mode [ 549.874592][ T1121] bridge_slave_0: left promiscuous mode [ 549.874822][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.431507][ T5814] Bluetooth: hci5: command tx timeout [ 550.452662][ T68] smc: removing ib device syz2 [ 551.123657][T14483] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 551.288652][T14483] usb 1-1: Using ep0 maxpacket: 32 [ 551.296324][T14483] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 551.296351][T14483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.296371][T14483] usb 1-1: Product: syz [ 551.296385][T14483] usb 1-1: Manufacturer: syz [ 551.296399][T14483] usb 1-1: SerialNumber: syz [ 551.350262][T14483] usb 1-1: config 0 descriptor?? [ 551.362665][T14483] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 551.589320][T14483] gspca_topro: reg_w err -71 [ 551.613440][T14483] gspca_topro: Sensor soi763a [ 551.626167][T14483] usb 1-1: USB disconnect, device number 26 [ 552.520037][ T5814] Bluetooth: hci5: command tx timeout [ 552.612015][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.671810][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.692100][ T1121] bond0 (unregistering): Released all slaves [ 552.817964][T14673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.817990][T14673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.862468][T14673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.862492][T14673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.101623][T14681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3253'. [ 553.108950][T14570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.109048][ T1121] tipc: Left network mode [ 553.147459][T14570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.525178][T14714] tmpfs: Bad value for 'mpol' [ 553.630743][T14570] team0: Port device team_slave_0 added [ 553.645381][T14570] team0: Port device team_slave_1 added [ 553.671434][ T804] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 553.823512][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.823544][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.823582][ T804] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 553.823605][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.825910][T14723] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3269'. [ 553.828445][ T804] usb 4-1: config 0 descriptor?? [ 553.883431][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 554.043512][T14570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.043523][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.043542][T14570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.045434][T14570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.045445][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.045462][T14570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.139056][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 554.147865][ T10] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 554.147890][ T10] usb 6-1: config 0 has no interface number 0 [ 554.147946][ T10] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 554.177500][ T10] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 554.177580][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.177602][ T10] usb 6-1: Product: syz [ 554.177616][ T10] usb 6-1: Manufacturer: syz [ 554.177631][ T10] usb 6-1: SerialNumber: syz [ 554.180244][T14728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3272'. [ 554.238857][ T10] usb 6-1: config 0 descriptor?? [ 554.331449][ T1121] hsr_slave_0: left promiscuous mode [ 554.351975][ T1121] hsr_slave_1: left promiscuous mode [ 554.447946][ T804] usbhid 4-1:0.0: can't add hid device: -71 [ 554.448281][ T804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 554.468451][ T804] usb 4-1: USB disconnect, device number 24 [ 554.591455][ T5814] Bluetooth: hci5: command tx timeout [ 554.843783][ T10] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 554.846745][ T10] usb 6-1: USB disconnect, device number 9 [ 555.821386][ T5941] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 555.973619][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 555.975225][ T5941] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 555.975248][ T5941] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.975267][ T5941] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.977628][ T5941] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.977654][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.977674][ T5941] usb 6-1: Product: syz [ 555.977687][ T5941] usb 6-1: Manufacturer: syz [ 555.977702][ T5941] usb 6-1: SerialNumber: syz [ 556.635598][ T5941] usb 6-1: 0:2 : does not exist [ 556.640252][ T5941] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 556.664194][ T5941] usb 6-1: USB disconnect, device number 10 [ 557.170286][T14756] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3283'. [ 557.859077][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3285'. [ 558.070581][T14570] hsr_slave_0: entered promiscuous mode [ 558.072841][T14570] hsr_slave_1: entered promiscuous mode [ 558.073663][T14570] debugfs: 'hsr0' already exists in 'hsr' [ 558.073689][T14570] Cannot create hsr debugfs directory [ 558.188183][T14768] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 558.188282][T14768] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 558.481563][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3293'. [ 558.528205][T14782] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.3294' sets config #0 [ 558.649407][T14787] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3296'. [ 558.745978][T14785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3295'. [ 558.818846][ T1121] IPVS: stop unused estimator thread 0... [ 559.971383][ T5865] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 560.121423][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 560.125527][ T5865] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 560.125550][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.125570][ T5865] usb 4-1: config 0 has no interface number 0 [ 560.125617][ T5865] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.125659][ T5865] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 560.125682][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.129216][ T5865] usb 4-1: config 0 descriptor?? [ 560.137625][ T5865] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 560.440022][T14804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.440040][T14804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.474260][T14804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.474284][T14804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.024261][T14570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 561.059577][T14570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 561.066639][T14814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3306'. [ 561.098017][T14570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 561.135752][T14570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 561.280182][T14570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.306009][T14570] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.317555][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.317746][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.338649][ T806] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.338765][ T806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.640534][T14570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.726119][T14570] veth0_vlan: entered promiscuous mode [ 561.745070][T14570] veth1_vlan: entered promiscuous mode [ 561.914770][T14570] veth0_macvtap: entered promiscuous mode [ 561.932385][ T804] usb 4-1: USB disconnect, device number 25 [ 561.957811][T14570] veth1_macvtap: entered promiscuous mode [ 562.020775][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3312'. [ 562.020797][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3312'. [ 562.039641][T14570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.054554][T14570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.098187][ T4554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.108868][ T4554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.133636][ T4554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.138932][ T4554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.344919][ T804] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 562.375735][T14860] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3319'. [ 562.530045][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.530075][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.531460][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 562.572063][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.572115][ T804] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 562.572140][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.583192][ T804] usb 4-1: config 0 descriptor?? [ 562.592030][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3323'. [ 562.639260][ T804] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 562.742944][T14864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 562.824847][T14871] bond1: (slave ip6tnl1): refused to change device type [ 562.838262][ T5157] bcm5974 4-1:0.0: could not read from device [ 562.847250][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.847319][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.902247][ T804] bcm5974 4-1:0.0: could not read from device [ 562.938732][ T5157] bcm5974 4-1:0.0: could not read from device [ 562.965903][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.965919][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.031459][ T804] input: failed to attach handler mousedev to device input17, error: -5 [ 563.039017][ T804] usb 4-1: USB disconnect, device number 26 [ 563.074183][ T5157] bcm5974 4-1:0.0: could not read from device [ 563.160728][T14884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3332'. [ 565.112787][T14920] rdma_op ffff88803b1a7a70 conn xmit_rdma 0000000000000000 [ 566.817977][T14930] netlink: 664 bytes leftover after parsing attributes in process `syz.1.3347'. [ 567.199233][T14940] netlink: zone id is out of range [ 567.199247][T14940] netlink: zone id is out of range [ 567.199255][T14940] netlink: zone id is out of range [ 567.199263][T14940] netlink: zone id is out of range [ 567.199271][T14940] netlink: zone id is out of range [ 567.199279][T14940] netlink: zone id is out of range [ 567.199286][T14940] netlink: zone id is out of range [ 567.199293][T14940] netlink: zone id is out of range [ 567.199301][T14940] netlink: zone id is out of range [ 567.199309][T14940] netlink: zone id is out of range [ 568.828008][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 568.994850][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.994884][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.994920][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a17, bcdDevice= 0.00 [ 568.994942][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.003091][ T10] usb 6-1: config 0 descriptor?? [ 569.352561][T14967] binder: BINDER_SET_CONTEXT_MGR already set [ 569.352574][T14967] binder: 14966:14967 ioctl 4018620d 200000000040 returned -16 [ 569.442145][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 569.442269][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 569.450441][ T10] usb 6-1: USB disconnect, device number 11 [ 571.486553][T15001] netlink: 664 bytes leftover after parsing attributes in process `syz.1.3376'. [ 572.040747][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3380'. [ 572.151390][ T56] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 572.281480][ T56] usb 4-1: device descriptor read/64, error -71 [ 572.521476][ T56] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 572.671411][ T56] usb 4-1: device descriptor read/64, error -71 [ 572.818001][ T56] usb usb4-port1: attempt power cycle [ 573.830974][ T56] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 573.855411][ T56] usb 4-1: device descriptor read/8, error -71 [ 574.091407][ T56] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 574.161787][ T56] usb 4-1: device descriptor read/8, error -71 [ 574.281439][ T5920] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 574.282975][ T56] usb usb4-port1: unable to enumerate USB device [ 574.932209][ T5920] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 574.932287][ T5920] usb 6-1: config 127 has no interface number 0 [ 574.932336][ T5920] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 574.932359][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.230682][ T5920] peak_usb 6-1:127.124: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 575.331419][T15028] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 575.432007][ T5920] peak_usb 6-1:127.124 can0: sending command failure: -22 [ 575.432022][ T5920] peak_usb 6-1:127.124 can0: sending command failure: -22 [ 575.432036][ T5920] peak_usb 6-1:127.124 can0: sending command failure: -22 [ 575.465171][ T56] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 575.471048][T15054] netlink: 664 bytes leftover after parsing attributes in process `syz.1.3395'. [ 575.491386][T15028] usb 4-1: Using ep0 maxpacket: 16 [ 575.498871][T15028] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 575.498892][T15028] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.498912][T15028] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 575.535599][T15028] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.535626][T15028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.535647][T15028] usb 4-1: Product: syz [ 575.535661][T15028] usb 4-1: Manufacturer: syz [ 575.535675][T15028] usb 4-1: SerialNumber: syz [ 575.633164][ T5920] peak_usb 6-1:127.124: probe with driver peak_usb failed with error -22 [ 575.639580][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.639661][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.640897][ T56] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 575.640923][ T56] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 575.640990][ T56] usb 1-1: Manufacturer: syz [ 575.700906][ T5920] usb 6-1: USB disconnect, device number 12 [ 575.716400][ T56] usb 1-1: config 0 descriptor?? [ 576.153869][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 576.196884][T15028] usb 4-1: 0:2 : does not exist [ 576.211899][T15028] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 576.331855][T15028] usb 4-1: USB disconnect, device number 31 [ 576.532623][ T56] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #200: -71 [ 576.532666][ T56] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71 [ 576.532675][ T56] uclogic 0003:256C:006D.0020: failed probing pen v2 parameters: -71 [ 576.532707][ T56] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 576.532765][ T56] uclogic 0003:256C:006D.0020: probe with driver uclogic failed with error -71 [ 576.539792][ T56] usb 1-1: USB disconnect, device number 27 [ 576.761451][T14376] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 576.855616][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 576.856942][T15082] net_ratelimit: 43 callbacks suppressed [ 576.856956][T15082] netlink: zone id is out of range [ 576.856965][T15082] netlink: zone id is out of range [ 576.856973][T15082] netlink: zone id is out of range [ 576.856980][T15082] netlink: zone id is out of range [ 576.856987][T15082] netlink: zone id is out of range [ 576.856995][T15082] netlink: zone id is out of range [ 576.857009][T15082] netlink: zone id is out of range [ 576.857016][T15082] netlink: zone id is out of range [ 576.857024][T15082] netlink: zone id is out of range [ 576.857031][T15082] netlink: zone id is out of range [ 576.913073][T14376] usb 6-1: Using ep0 maxpacket: 16 [ 576.933056][T14376] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 576.933081][T14376] usb 6-1: config 0 has no interface number 0 [ 576.933124][T14376] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 576.935649][T14376] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 576.935721][T14376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.935741][T14376] usb 6-1: Product: syz [ 576.935756][T14376] usb 6-1: Manufacturer: syz [ 576.935770][T14376] usb 6-1: SerialNumber: syz [ 576.941170][T14376] usb 6-1: config 0 descriptor?? [ 577.220482][T15091] netlink: 664 bytes leftover after parsing attributes in process `syz.0.3410'. [ 577.571082][T14376] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 577.583654][T14376] usb 6-1: USB disconnect, device number 13 [ 578.030275][T15103] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3414'. [ 578.376303][T14376] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 578.521425][T14376] usb 4-1: Using ep0 maxpacket: 8 [ 578.528217][T14376] usb 4-1: unable to get BOS descriptor or descriptor too short [ 578.544603][T14376] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 578.544628][T14376] usb 4-1: config 8 has no interface number 0 [ 578.544661][T14376] usb 4-1: config 8 interface 255 has no altsetting 0 [ 578.547955][T14376] usb 4-1: string descriptor 0 read error: -22 [ 578.548096][T14376] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 578.548118][T14376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.688875][T15123] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3424'. [ 578.821442][ T5865] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 578.885743][T15129] netlink: 664 bytes leftover after parsing attributes in process `syz.5.3427'. [ 578.971592][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 579.003124][ T5865] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 579.003151][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.003244][ T5865] usb 1-1: Product: syz [ 579.003259][ T5865] usb 1-1: Manufacturer: syz [ 579.003274][ T5865] usb 1-1: SerialNumber: syz [ 579.034976][ T5865] usb 1-1: config 0 descriptor?? [ 579.060033][ T5865] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 579.671102][ T5865] gspca_topro: reg_w err -110 [ 579.692017][ T5865] gspca_topro: Sensor soi763a [ 579.892965][ T5865] usb 1-1: USB disconnect, device number 28 [ 580.074292][T14376] catc 4-1:8.255: Couldn't detect memory size, assuming 32k [ 580.287078][T14376] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 580.340865][T14376] usb 4-1: USB disconnect, device number 32 [ 580.932307][ T56] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 581.725927][T15151] tipc: Started in network mode [ 581.725946][T15151] tipc: Node identity 1, cluster identity 4711 [ 581.725959][T15151] tipc: Node number set to 1 [ 582.921755][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 583.053488][T14376] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 583.221351][T14376] usb 1-1: Using ep0 maxpacket: 16 [ 583.224018][T14376] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 583.224043][T14376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.224063][T14376] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.227474][T14376] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.227501][T14376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.227522][T14376] usb 1-1: Product: syz [ 583.227537][T14376] usb 1-1: Manufacturer: syz [ 583.227551][T14376] usb 1-1: SerialNumber: syz [ 583.370301][ T56] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 583.370325][ T56] usb 6-1: config 0 has no interface number 0 [ 583.370390][ T56] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 583.373537][ T56] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 583.373562][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.373581][ T56] usb 6-1: Product: syz [ 583.373596][ T56] usb 6-1: Manufacturer: syz [ 583.373610][ T56] usb 6-1: SerialNumber: syz [ 583.431784][ T56] usb 6-1: config 0 descriptor?? [ 583.519141][T15168] netlink: 664 bytes leftover after parsing attributes in process `syz.3.3440'. [ 583.702564][ T56] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 583.702778][ T56] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 583.713949][ T56] usb 6-1: USB disconnect, device number 14 [ 583.756552][T14376] usb 1-1: 0:2 : does not exist [ 583.767443][T14376] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 583.831779][T14376] usb 1-1: USB disconnect, device number 29 [ 583.832122][T15174] fuse: Bad value for 'fd' [ 584.121417][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 584.271401][ T10] usb 2-1: device descriptor read/64, error -71 [ 584.521422][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 584.748605][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'. [ 584.781387][ T10] usb 2-1: device descriptor read/64, error -71 [ 584.892813][ T10] usb usb2-port1: attempt power cycle [ 585.201540][ T56] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 585.241371][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 585.258959][ T5865] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 585.269584][ T10] usb 2-1: device descriptor read/8, error -71 [ 585.361429][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 585.366323][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.366353][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.366389][ T56] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 585.366403][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.373068][ T56] usb 1-1: config 0 descriptor?? [ 585.386839][ T56] hub 1-1:0.0: USB hub found [ 585.424810][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 585.435228][ T5865] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.435251][ T5865] usb 6-1: config 0 has no interface number 0 [ 585.435295][ T5865] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.435336][ T5865] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 585.435358][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.440990][ T5865] usb 6-1: config 0 descriptor?? [ 585.495741][ T5865] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 585.551429][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 585.572712][ T10] usb 2-1: device descriptor read/8, error -71 [ 585.579037][T15224] netlink: 664 bytes leftover after parsing attributes in process `syz.6.3466'. [ 585.591485][ T56] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 585.788598][ T10] usb usb2-port1: unable to enumerate USB device [ 586.014057][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 586.014221][ T56] usbhid 1-1:0.0: can't add hid device: -32 [ 586.014332][ T56] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 586.047354][ T56] usb 1-1: USB disconnect, device number 30 [ 588.103902][T14483] usb 6-1: USB disconnect, device number 15 [ 588.178183][T15254] netlink: 664 bytes leftover after parsing attributes in process `syz.0.3477'. [ 588.561400][ T5865] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 588.691427][ T5865] usb 2-1: device descriptor read/64, error -71 [ 588.960478][ T5865] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 589.218429][ T5865] usb 2-1: device descriptor read/64, error -71 [ 589.412021][ T5865] usb usb2-port1: attempt power cycle [ 589.758567][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3489'. [ 589.833051][T15290] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3490'. [ 589.901372][ T5865] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 589.922161][ T5865] usb 2-1: device descriptor read/8, error -71 [ 590.138920][T15297] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3488'. [ 590.861373][ T5865] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 590.881877][ T5865] usb 2-1: device descriptor read/8, error -71 [ 590.994250][ T5865] usb usb2-port1: unable to enumerate USB device [ 592.351145][T15317] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 593.192204][T15299] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 593.301626][T15324] netlink: 664 bytes leftover after parsing attributes in process `syz.1.3501'. [ 593.463649][T15299] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.463705][T15299] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.463727][T15299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.467176][T15299] usb 1-1: config 0 descriptor?? [ 593.522419][T15299] pwc: Askey VC010 type 2 USB webcam detected. [ 593.934698][T15299] pwc: recv_control_msg error -32 req 02 val 2b00 [ 593.937614][T15299] pwc: recv_control_msg error -32 req 02 val 2700 [ 593.954719][T15299] pwc: recv_control_msg error -32 req 02 val 2c00 [ 593.955854][T15299] pwc: recv_control_msg error -32 req 04 val 1000 [ 593.957157][T15299] pwc: recv_control_msg error -32 req 04 val 1300 [ 593.958289][T15299] pwc: recv_control_msg error -32 req 04 val 1400 [ 594.103381][T15337] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3506'. [ 594.161009][T15299] pwc: recv_control_msg error -71 req 02 val 2100 [ 594.161516][T15299] pwc: recv_control_msg error -71 req 04 val 1500 [ 594.161960][T15299] pwc: recv_control_msg error -71 req 02 val 2500 [ 594.162391][T15299] pwc: recv_control_msg error -71 req 02 val 2400 [ 594.162825][T15299] pwc: recv_control_msg error -71 req 02 val 2600 [ 594.163262][T15299] pwc: recv_control_msg error -71 req 02 val 2900 [ 594.163693][T15299] pwc: recv_control_msg error -71 req 02 val 2800 [ 594.173927][T15299] pwc: recv_control_msg error -71 req 04 val 1100 [ 594.174417][T15299] pwc: recv_control_msg error -71 req 04 val 1200 [ 594.176714][T15299] pwc: Registered as video103. [ 594.179530][T15299] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 594.195440][T15299] usb 1-1: USB disconnect, device number 31 [ 594.491373][T14076] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 595.689462][T14076] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 595.689497][T14076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 595.689522][T14076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 595.689546][T14076] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.689589][T14076] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.689619][T14076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.705670][T14076] usb 4-1: config 0 descriptor?? [ 597.116587][T14076] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 597.161370][ T5864] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 597.257419][T15365] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3518'. [ 597.318248][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 597.319908][ T5864] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 597.319932][ T5864] usb 1-1: config 0 has no interface number 0 [ 597.319981][ T5864] usb 1-1: config 0 interface 12 has no altsetting 0 [ 597.321544][T14076] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 597.355418][ T5864] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 597.355436][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.355447][ T5864] usb 1-1: Product: syz [ 597.355454][ T5864] usb 1-1: Manufacturer: syz [ 597.355462][ T5864] usb 1-1: SerialNumber: syz [ 597.358342][ T5864] usb 1-1: config 0 descriptor?? [ 597.486076][T14076] usb 2-1: Using ep0 maxpacket: 32 [ 597.500528][T14076] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 597.500556][T14076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.500575][T14076] usb 2-1: Product: syz [ 597.500589][T14076] usb 2-1: Manufacturer: syz [ 597.500602][T14076] usb 2-1: SerialNumber: syz [ 597.510574][T14076] usb 2-1: config 0 descriptor?? [ 597.542589][T14076] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 597.580019][T15367] netlink: 664 bytes leftover after parsing attributes in process `syz.6.3519'. [ 597.894748][T14076] gspca_topro: reg_w err -71 [ 597.921360][T14076] gspca_topro: Sensor soi763a [ 597.928614][T14076] usb 2-1: USB disconnect, device number 38 [ 598.897776][T15377] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input22 [ 599.584279][ T5864] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 599.584343][ T5864] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 599.584361][ T5864] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 599.584447][ T5864] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 599.650810][ C0] [ 599.650816][ C0] ====================================================== [ 599.650821][ C0] WARNING: possible circular locking dependency detected [ 599.650835][ C0] syzkaller #0 Tainted: G L [ 599.650841][ C0] ------------------------------------------------------ [ 599.650845][ C0] syz.5.3522/15377 is trying to acquire lock: [ 599.650851][ C0] ffff8880b8824358 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xb6/0x540 [ 599.650886][ C0] [ 599.650886][ C0] but task is already holding lock: [ 599.650890][ C0] ffff888038aaa270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xa5/0x330 [ 599.650919][ C0] [ 599.650919][ C0] which lock already depends on the new lock. [ 599.650919][ C0] [ 599.650923][ C0] [ 599.650923][ C0] the existing dependency chain (in reverse order) is: [ 599.650927][ C0] [ 599.650927][ C0] -> #1 (&dev->event_lock#2){+.+.}-{3:3}: [ 599.650943][ C0] rt_spin_lock+0x88/0x3e0 [ 599.650958][ C0] input_inject_event+0xa5/0x330 [ 599.650971][ C0] led_trigger_event+0x13b/0x220 [ 599.650981][ C0] kbd_bh+0x1ec/0x300 [ 599.650991][ C0] tasklet_action_common+0x2bf/0x540 [ 599.651002][ C0] handle_softirqs+0x1df/0x650 [ 599.651012][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 599.651022][ C0] l2cap_sock_connect+0xfe/0x7d0 [ 599.651037][ C0] __sys_connect+0x323/0x450 [ 599.651047][ C0] __x64_sys_connect+0x7a/0x90 [ 599.651057][ C0] do_syscall_64+0xec/0xf80 [ 599.651067][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.651076][ C0] [ 599.651076][ C0] -> #0 (tasklet_sync_callback.cb_lock){+...}-{3:3}: [ 599.651089][ C0] __lock_acquire+0x15a6/0x2cf0 [ 599.651102][ C0] lock_acquire+0x107/0x340 [ 599.651113][ C0] rt_spin_lock+0x88/0x3e0 [ 599.651125][ C0] tasklet_action_common+0xb6/0x540 [ 599.651136][ C0] handle_softirqs+0x1df/0x650 [ 599.651146][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 599.651156][ C0] __alloc_skb+0x1bc/0x3a0 [ 599.651167][ C0] hidp_send_message+0xb5/0x230 [ 599.651178][ C0] hidp_input_event+0x290/0x370 [ 599.651190][ C0] input_event_dispose+0x80/0x6b0 [ 599.651203][ C0] input_inject_event+0x1d8/0x330 [ 599.651216][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 599.651226][ C0] led_trigger_set+0x533/0x950 [ 599.651234][ C0] led_trigger_set_default+0x266/0x2a0 [ 599.651247][ C0] led_classdev_register_ext+0x73d/0x960 [ 599.651271][ C0] input_leds_connect+0x517/0x790 [ 599.651288][ C0] input_register_device+0xd00/0x1170 [ 599.651306][ C0] hidp_session_probe+0x1a8/0x8a0 [ 599.651326][ C0] l2cap_register_user+0xf4/0x200 [ 599.651335][ C0] hidp_connection_add+0x158b/0x1a20 [ 599.651346][ C0] hidp_sock_ioctl+0x3a8/0x5c0 [ 599.651357][ C0] sock_do_ioctl+0xdc/0x300 [ 599.651364][ C0] sock_ioctl+0x579/0x790 [ 599.651378][ C0] __se_sys_ioctl+0xff/0x170 [ 599.651390][ C0] do_syscall_64+0xec/0xf80 [ 599.651399][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.651408][ C0] [ 599.651408][ C0] other info that might help us debug this: [ 599.651408][ C0] [ 599.651412][ C0] Possible unsafe locking scenario: [ 599.651412][ C0] [ 599.651415][ C0] CPU0 CPU1 [ 599.651418][ C0] ---- ---- [ 599.651421][ C0] lock(&dev->event_lock#2); [ 599.651431][ C0] lock(tasklet_sync_callback.cb_lock); [ 599.651438][ C0] lock(&dev->event_lock#2); [ 599.651448][ C0] lock(tasklet_sync_callback.cb_lock); [ 599.651455][ C0] [ 599.651455][ C0] *** DEADLOCK *** [ 599.651455][ C0] [ 599.651458][ C0] 10 locks held by syz.5.3522/15377: [ 599.651464][ C0] #0: ffff88805e1140b0 (&hdev->lock){+.+.}-{4:4}, at: l2cap_register_user+0x67/0x200 [ 599.651488][ C0] #1: ffffffff8ea40100 (hidp_session_sem){++++}-{4:4}, at: hidp_session_probe+0x99/0x8a0 [ 599.651512][ C0] #2: ffffffff8e326af8 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa76/0x1170 [ 599.651535][ C0] #3: ffff8880383885a0 (&led_cdev->led_access){+.+.}-{4:4}, at: led_classdev_register_ext+0x43d/0x960 [ 599.651563][ C0] #4: ffffffff8dd126c0 (triggers_list_lock){++++}-{4:4}, at: led_trigger_set_default+0x77/0x2a0 [ 599.651586][ C0] #5: ffff8880383884c8 (&led_cdev->trigger_lock){+.+.}-{4:4}, at: led_trigger_set_default+0x87/0x2a0 [ 599.651609][ C0] #6: ffff888038aaa270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xa5/0x330 [ 599.651638][ C0] #7: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 599.651664][ C0] #8: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb1/0x330 [ 599.651691][ C0] #9: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 599.651715][ C0] [ 599.651715][ C0] stack backtrace: [ 599.651732][ C0] CPU: 0 UID: 0 PID: 15377 Comm: syz.5.3522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 599.651747][ C0] Tainted: [L]=SOFTLOCKUP [ 599.651751][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.651760][ C0] Call Trace: [ 599.651767][ C0] [ 599.651771][ C0] dump_stack_lvl+0xe8/0x150 [ 599.651786][ C0] print_circular_bug+0x2e2/0x300 [ 599.651802][ C0] check_noncircular+0x12e/0x150 [ 599.651818][ C0] __lock_acquire+0x15a6/0x2cf0 [ 599.651835][ C0] ? tasklet_action_common+0xb6/0x540 [ 599.651847][ C0] lock_acquire+0x107/0x340 [ 599.651860][ C0] ? tasklet_action_common+0xb6/0x540 [ 599.651874][ C0] rt_spin_lock+0x88/0x3e0 [ 599.651887][ C0] ? tasklet_action_common+0xb6/0x540 [ 599.651899][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.651911][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 599.651924][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 599.651939][ C0] tasklet_action_common+0xb6/0x540 [ 599.651951][ C0] ? rt_spin_unlock+0x161/0x200 [ 599.651965][ C0] handle_softirqs+0x1df/0x650 [ 599.651978][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 599.651989][ C0] ? __alloc_skb+0x198/0x3a0 [ 599.652000][ C0] __alloc_skb+0x1bc/0x3a0 [ 599.652011][ C0] hidp_send_message+0xb5/0x230 [ 599.652025][ C0] hidp_input_event+0x290/0x370 [ 599.652037][ C0] ? __pfx_hidp_input_event+0x10/0x10 [ 599.652051][ C0] ? input_handle_event+0xc35/0xf30 [ 599.652065][ C0] ? __pfx_hidp_input_event+0x10/0x10 [ 599.652077][ C0] input_event_dispose+0x80/0x6b0 [ 599.652091][ C0] ? add_input_randomness+0x32/0x70 [ 599.652101][ C0] input_inject_event+0x1d8/0x330 [ 599.652116][ C0] ? input_inject_event+0xb1/0x330 [ 599.652130][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 599.652142][ C0] led_trigger_set+0x533/0x950 [ 599.652152][ C0] ? __pfx_led_trigger_set+0x10/0x10 [ 599.652164][ C0] led_trigger_set_default+0x266/0x2a0 [ 599.652175][ C0] led_classdev_register_ext+0x73d/0x960 [ 599.652191][ C0] ? __pfx_led_classdev_register_ext+0x10/0x10 [ 599.652210][ C0] input_leds_connect+0x517/0x790 [ 599.652222][ C0] input_register_device+0xd00/0x1170 [ 599.652234][ C0] hidp_session_probe+0x1a8/0x8a0 [ 599.652245][ C0] ? irqentry_exit+0x5e8/0x670 [ 599.652256][ C0] ? __pfx_hidp_session_probe+0x10/0x10 [ 599.652268][ C0] ? __pfx_hidp_session_probe+0x10/0x10 [ 599.652281][ C0] l2cap_register_user+0xf4/0x200 [ 599.652291][ C0] ? hidp_connection_add+0x1577/0x1a20 [ 599.652303][ C0] hidp_connection_add+0x158b/0x1a20 [ 599.652320][ C0] hidp_sock_ioctl+0x3a8/0x5c0 [ 599.652332][ C0] ? rcu_is_watching+0x15/0xb0 [ 599.652342][ C0] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 599.652359][ C0] ? rcu_is_watching+0x15/0xb0 [ 599.652374][ C0] sock_do_ioctl+0xdc/0x300 [ 599.652383][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 599.652394][ C0] ? irqentry_exit+0x5e8/0x670 [ 599.652405][ C0] sock_ioctl+0x579/0x790 [ 599.652420][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 599.652434][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 599.652447][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 599.652461][ C0] ? __se_sys_ioctl+0xed/0x170 [ 599.652474][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 599.652488][ C0] __se_sys_ioctl+0xff/0x170 [ 599.652501][ C0] do_syscall_64+0xec/0xf80 [ 599.652511][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.652520][ C0] ? clear_bhb_loop+0x60/0xb0 [ 599.652531][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.652541][ C0] RIP: 0033:0x7f76daedf749 [ 599.652553][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.652562][ C0] RSP: 002b:00007f76d9125038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.652573][ C0] RAX: ffffffffffffffda RBX: 00007f76db136090 RCX: 00007f76daedf749 [ 599.652581][ C0] RDX: 00002000000000c0 RSI: 00000000400448c8 RDI: 0000000000000008 [ 599.652587][ C0] RBP: 00007f76daf63f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.652594][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.652600][ C0] R13: 00007f76db136128 R14: 00007f76db136090 R15: 00007ffd7a813ec8 [ 599.652611][ C0] [ 599.653282][ T5864] usb 1-1: USB disconnect, device number 32 [ 599.662477][ C0] BUG: workqueue leaked atomic, lock or RCU: ksoftirqd/0[15] [ 599.662477][ C0] preempt=0x00000000 lock=4->0 RCU=2->2 workfn=usb_giveback_urb_bh [ 599.662516][ C0] INFO: lockdep is turned off. [ 599.662531][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 599.662559][ C0] Tainted: [L]=SOFTLOCKUP [ 599.662565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.662577][ C0] Call Trace: [ 599.662584][ C0] [ 599.662592][ C0] dump_stack_lvl+0xe8/0x150 [ 599.662620][ C0] process_scheduled_works+0x11ab/0x1770 [ 599.662654][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.662675][ C0] ? do_raw_spin_lock+0x121/0x290 [ 599.662703][ C0] bh_worker+0x2ca/0x630 [ 599.662732][ C0] tasklet_hi_action+0xf/0x70 [ 599.662755][ C0] handle_softirqs+0x1df/0x650 [ 599.662780][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 599.662803][ C0] run_ksoftirqd+0x52/0x190 [ 599.662828][ C0] smpboot_thread_fn+0x542/0xa60 [ 599.662852][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 599.662878][ C0] kthread+0x711/0x8a0 [ 599.662904][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 599.662927][ C0] ? __pfx_kthread+0x10/0x10 [ 599.662952][ C0] ? rt_spin_unlock+0x150/0x200 [ 599.662980][ C0] ? rt_spin_unlock+0x161/0x200 [ 599.663006][ C0] ? __pfx_kthread+0x10/0x10 [ 599.663031][ C0] ret_from_fork+0x510/0xa50 [ 599.663053][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 599.663071][ C0] ? __switch_to+0xc9e/0x1480 [ 599.663100][ C0] ? __pfx_kthread+0x10/0x10 [ 599.663126][ C0] ret_from_fork_asm+0x1a/0x30 [ 599.663160][ C0] [ 599.821363][ T5809] usb 4-1: USB disconnect, device number 33 [ 599.952044][ T5956] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 600.161384][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 600.162997][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.163035][ T5956] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 600.163056][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.165181][ T5956] usb 2-1: config 0 descriptor?? [ 600.481324][ T5809] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 600.583239][ T5956] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 600.851300][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 600.851807][ T5809] usb 4-1: no configurations [ 600.851821][ T5809] usb 4-1: can't read configurations, error -22 [ 600.981314][ T5809] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 600.983759][T15386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.983914][T15386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.985732][T15386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.985889][T15386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.131308][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 601.131799][ T5809] usb 4-1: no configurations [ 601.131812][ T5809] usb 4-1: can't read configurations, error -22 [ 601.131975][ T5809] usb usb4-port1: attempt power cycle [ 601.183071][ T56] usb 2-1: USB disconnect, device number 39 [ 601.471311][ T5809] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 601.491718][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 601.492187][ T5809] usb 4-1: no configurations [ 601.492201][ T5809] usb 4-1: can't read configurations, error -22 [ 601.561555][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 601.631528][ T5809] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 601.651999][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 601.652536][ T5809] usb 4-1: no configurations [ 601.652551][ T5809] usb 4-1: can't read configurations, error -22 [ 601.652697][ T5809] usb usb4-port1: unable to enumerate USB device