last executing test programs: 10m45.871436597s ago: executing program 1 (id=8678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x2600c020) 10m45.691424356s ago: executing program 1 (id=8681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a26bd70000000000011000000140009800800020002000000070002"], 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x0) 10m45.537330444s ago: executing program 1 (id=8685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000090000000300002001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 10m45.417554131s ago: executing program 1 (id=8688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 10m45.225252601s ago: executing program 1 (id=8691): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x8, 0x8) 10m45.017786116s ago: executing program 1 (id=8694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000180)) 10m30.423108149s ago: executing program 32 (id=8694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000180)) 6m58.54872608s ago: executing program 3 (id=12328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) 6m58.44072652s ago: executing program 3 (id=12331): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x38}}, 0x0) 6m58.273089067s ago: executing program 3 (id=12332): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="15000000000000002900000008"], 0x18}}], 0x2, 0x0) 6m58.018466637s ago: executing program 3 (id=12337): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 6m57.877078433s ago: executing program 3 (id=12339): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r0, 0x1, 0x0, 0x25dfdbfb, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 6m57.155501519s ago: executing program 3 (id=12348): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) 6m56.844021035s ago: executing program 33 (id=12348): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) 1m11.56934449s ago: executing program 0 (id=19238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1}}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x40, 0x0) 1m11.36007668s ago: executing program 0 (id=19242): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2, 0x2, r2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@private2, r2}, 0x14) 1m11.191273672s ago: executing program 0 (id=19246): syz_open_dev$sg(0x0, 0x5dc, 0x8500) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004"], 0xfdef) 1m10.491291772s ago: executing program 0 (id=19259): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2020d7, 0x0) 1m10.331414829s ago: executing program 0 (id=19264): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c4) r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1a0) fanotify_mark(r0, 0x241, 0x40000000, r1, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x194) preadv2(r2, 0x0, 0x0, 0x401, 0x0, 0xd) 1m9.232717105s ago: executing program 0 (id=19286): r0 = socket$inet(0x2, 0xa, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48000053, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m8.921228945s ago: executing program 34 (id=19286): r0 = socket$inet(0x2, 0xa, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48000053, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.522012261s ago: executing program 2 (id=20439): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000023c0)="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", 0x16e}], 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000100)="58f426479ece6d126768d8a22cd58a4b95a55290f90a627003824492cf69137f4a492f53714d14be58e3772f02d34bf7", 0x30}, {&(0x7f00000021c0)="1b3f8c5ee87c60d60d8f9ede3559a9a381803d6dee0eddd4fdb56eaf8c9fd0865c218d81c178a2cdd321213af88efeaed430a90499579e803367edb9d63ea172714cd251da4f4ca71dc2348f7e5af3d35ab9e79a4d2dfbfbbff54174f9e6154e35735f41c412e8d792e96be3b5383f7a32159e044b4315e99411c8d236b110367a4fae96a7454c2e38a7216c44851719ebc7e78b0bcb34567aef13636b60d77ec50b680b9d8b07549031ab4132bc56640524b21e25c2002c084648564aa60d22c19d4623721690395e767074b0104e1da21ec5634a4fd9a3a6c9f581d5c483d057d8cc37", 0xe4}, {&(0x7f00000022c0)="5b324b2d88ff93762be7e55fe62529adea74fdad266d04b26e548dec105474c89c8977461cc52204", 0x28}, {&(0x7f0000002300)="7cfff42eda22546c119f0a491096dacd785efd913da57751a132a3d992ead629902e28c98944c19bb1b5c61be066e29be3847513ab40d31f853e74bd3c38accaf303b928f99bc06579916b12af8851aac1a0ef9e5446dd43c86769f4b1d0b5477583dca1bfa33e4f358efa8ccb7f2c04b8298fc8568dc38dbce3fb1b1824eafebdc4ca878dbd", 0x86}, {&(0x7f0000003400)="ba36fbcb7af2e5e405965a11623f4bf1194470956fbd021ff7a56801bd14749971d5fcdadd6c56edecf76bd3742e6545a4d18409ce7372987ae7a42254356e0352", 0x41}, {&(0x7f0000000440)="00d11a98112d1eb1c968a77243116a91b172c94e74815d84a2f334f1b1610dd1c0", 0x21}, {&(0x7f0000003500)="e1093869f5243b7e5bb478e6f638c7176a59b44a9a21282ac91048c7d8d01a0f1c12ec4f1c765f87959da50d04d37d144ec38b8133912de94356fdc3fa9ccc4de4632a36cf1883a2395df7b60f63022f2f5548ee6aff394a64e28cbb1d3cb16bdb5aea39558329c776b2da267a8f4026b174bf515b08827d474feb8adb5aa04038468a3875203ff0c60068b6bf2d1ce4aaa9b4f43b79c956fcac1abae62c293a6e2036ebde6b5643e666adfb2e982d6e32529170bf2548ebaa9103c6d944ea", 0xbf}], 0x7}}], 0x3, 0x40) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x989046, 0x0) 7.259539331s ago: executing program 2 (id=20442): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x29}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 6.687680725s ago: executing program 2 (id=20452): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x6) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) write(r1, &(0x7f0000000100)="9e", 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x2, 0x2, 0xffffff82, 0xe, 0x8, "16cfb69012650eabfd955c6d9954beff89d9ef", 0x4, 0x9}) 6.448698662s ago: executing program 2 (id=20458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000001c0)="65660fc736c4e3c1cec69166baf80cb81c33548eef66bafc0cb804000000ef0fcdb0040000890a660f38818f020000000f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e576e04b8200fae77af66bafc0c66b8004066ef66b8296c", 0x71}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.365464882s ago: executing program 2 (id=20489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x41624800ab11328e, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 5.203415018s ago: executing program 2 (id=20494): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) lseek(r2, 0x0, 0x3) 2.198263351s ago: executing program 7 (id=20565): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.116684829s ago: executing program 7 (id=20566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x2, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.953218843s ago: executing program 7 (id=20572): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x312, 0x400, 0x200001, 0x2aa}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.867350031s ago: executing program 5 (id=20574): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003600), 0x100, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmsg(r1, 0x0, 0x40000000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000003640)={0xefa9, 0xe, 0x80000001, 0xfffffe00, 0xc, "4b504301dff4e7d11cca1e9d06abe6ca8ecded", 0xfffffffd, 0x10000fc}) 1.133283105s ago: executing program 7 (id=20589): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003"], 0xd4}}, 0x4000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x4e, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x77, 0x0, 0x8e7}}) 995.902076ms ago: executing program 5 (id=20592): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) execveat(r1, 0x0, &(0x7f0000000540)={[0x0, 0x0, 0x0, 0x0]}, 0x0, 0x400) accept4$unix(r1, &(0x7f00000006c0)=@abs, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8009) recvmmsg(r1, 0x0, 0x0, 0x2021, 0x0) 893.002921ms ago: executing program 5 (id=20596): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 731.942432ms ago: executing program 5 (id=20601): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f00000000c0)={@local, 0xa}) close(0x3) 531.36149ms ago: executing program 5 (id=20607): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x2, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x20000000006, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 515.808221ms ago: executing program 6 (id=20608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1101}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x26, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) 486.653469ms ago: executing program 4 (id=20609): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 403.622545ms ago: executing program 6 (id=20610): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 403.471984ms ago: executing program 4 (id=20611): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x2, 0x0) 392.338808ms ago: executing program 6 (id=20612): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x2, @rand_addr, 0x4}, 0x1c) pipe(0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 326.989334ms ago: executing program 4 (id=20613): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x920) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 275.547352ms ago: executing program 6 (id=20614): sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x3000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d1704ff2fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000080)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa6426660f35c4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5d}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 229.664616ms ago: executing program 7 (id=20615): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 219.619589ms ago: executing program 4 (id=20616): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="68c8e4", 0x3}, {&(0x7f0000000340)="c600d40e9155852155ab0911a5066fde92cb367daa147d0000000080c1eebb30e430b3", 0x23}], 0x2) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 167.610013ms ago: executing program 6 (id=20617): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x8, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)=ANY=[], 0x58}}], 0x1, 0x0) 150.383842ms ago: executing program 5 (id=20618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000280)='C', 0x1}], 0x1) recvfrom$inet6(r0, &(0x7f0000000300)=""/3, 0x3, 0x40000041, 0x0, 0x11) 127.113306ms ago: executing program 4 (id=20619): socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 17.825158ms ago: executing program 4 (id=20620): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 17.370824ms ago: executing program 6 (id=20630): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa0000010}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000004c0)={0x80000010}) 0s ago: executing program 7 (id=20621): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc2989a"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0xd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 975.378889][ T5118] Bluetooth: hci0: link tx timeout [ 975.378900][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.379672][ T5118] Bluetooth: hci0: link tx timeout [ 975.379686][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388234][ T5118] Bluetooth: hci0: link tx timeout [ 975.388252][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388280][ T5118] Bluetooth: hci0: link tx timeout [ 975.388291][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388366][ T5118] Bluetooth: hci0: link tx timeout [ 975.388378][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388443][ T5118] Bluetooth: hci0: link tx timeout [ 975.388454][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388538][ T5118] Bluetooth: hci0: link tx timeout [ 975.388549][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388725][ T5118] Bluetooth: hci0: link tx timeout [ 975.388737][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388804][ T5118] Bluetooth: hci0: link tx timeout [ 975.388816][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388882][ T5118] Bluetooth: hci0: link tx timeout [ 975.388894][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.388954][ T5118] Bluetooth: hci0: link tx timeout [ 975.388966][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.389030][ T5118] Bluetooth: hci0: link tx timeout [ 975.389041][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.395622][ T5118] Bluetooth: hci0: link tx timeout [ 975.395641][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.395712][ T5118] Bluetooth: hci0: link tx timeout [ 975.395724][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.395785][ T5118] Bluetooth: hci0: link tx timeout [ 975.395797][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.395866][ T5118] Bluetooth: hci0: link tx timeout [ 975.395877][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.395942][ T5118] Bluetooth: hci0: link tx timeout [ 975.395954][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.396116][ T5118] Bluetooth: hci0: link tx timeout [ 975.396128][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.396175][ T5118] Bluetooth: hci0: link tx timeout [ 975.396195][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.396250][ T5118] Bluetooth: hci0: link tx timeout [ 975.396262][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.396326][ T5118] Bluetooth: hci0: link tx timeout [ 975.396338][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.396399][ T5118] Bluetooth: hci0: link tx timeout [ 975.396410][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.396475][ T5118] Bluetooth: hci0: link tx timeout [ 975.396486][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.396554][ T5118] Bluetooth: hci0: link tx timeout [ 975.396566][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.396625][ T5118] Bluetooth: hci0: link tx timeout [ 975.396637][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.397267][ T5118] Bluetooth: hci0: link tx timeout [ 975.397282][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.397333][ T5118] Bluetooth: hci0: link tx timeout [ 975.397345][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.397410][ T5118] Bluetooth: hci0: link tx timeout [ 975.397422][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.397490][ T5118] Bluetooth: hci0: link tx timeout [ 975.397501][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.397562][ T5118] Bluetooth: hci0: link tx timeout [ 975.397574][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.398296][ T5118] Bluetooth: hci0: link tx timeout [ 975.398309][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.405628][ T5118] Bluetooth: hci0: link tx timeout [ 975.405643][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.405698][ T5118] Bluetooth: hci0: link tx timeout [ 975.405710][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.405776][ T5118] Bluetooth: hci0: link tx timeout [ 975.405788][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.405856][ T5118] Bluetooth: hci0: link tx timeout [ 975.405867][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.405932][ T5118] Bluetooth: hci0: link tx timeout [ 975.405944][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.406009][ T5118] Bluetooth: hci0: link tx timeout [ 975.406020][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.406123][ T5118] Bluetooth: hci0: link tx timeout [ 975.406135][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.406159][ T5118] Bluetooth: hci0: link tx timeout [ 975.406170][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.406240][ T5118] Bluetooth: hci0: link tx timeout [ 975.406251][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.406316][ T5118] Bluetooth: hci0: link tx timeout [ 975.406327][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.406426][ T5118] Bluetooth: hci0: link tx timeout [ 975.406439][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.406525][ T5118] Bluetooth: hci0: link tx timeout [ 975.406537][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.408347][ T5118] Bluetooth: hci0: link tx timeout [ 975.408363][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411349][ T5118] Bluetooth: hci0: link tx timeout [ 975.411363][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411427][ T5118] Bluetooth: hci0: link tx timeout [ 975.411439][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411499][ T5118] Bluetooth: hci0: link tx timeout [ 975.411511][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411574][ T5118] Bluetooth: hci0: link tx timeout [ 975.411593][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411696][ T5118] Bluetooth: hci0: link tx timeout [ 975.411708][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411731][ T5118] Bluetooth: hci0: link tx timeout [ 975.411743][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411816][ T5118] Bluetooth: hci0: link tx timeout [ 975.411828][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411900][ T5118] Bluetooth: hci0: link tx timeout [ 975.411912][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.411972][ T5118] Bluetooth: hci0: link tx timeout [ 975.411983][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.412068][ T5118] Bluetooth: hci0: link tx timeout [ 975.412079][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.413210][ T5118] Bluetooth: hci0: link tx timeout [ 975.413225][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.413291][ T5118] Bluetooth: hci0: link tx timeout [ 975.413303][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.413373][ T5118] Bluetooth: hci0: link tx timeout [ 975.413385][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.413443][ T5118] Bluetooth: hci0: link tx timeout [ 975.413455][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.413526][ T5118] Bluetooth: hci0: link tx timeout [ 975.413538][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.413603][ T5118] Bluetooth: hci0: link tx timeout [ 975.413614][ T5118] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.811537][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 975.811555][ T37] audit: type=1326 audit(2000000827.903:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.2.15154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x0 [ 977.236021][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 979.306623][ T8549] Falling back ldisc for ttyS3. [ 979.665331][ T8569] netlink: 360 bytes leftover after parsing attributes in process `syz.2.15242'. [ 979.998302][ T8591] program syz.2.15252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 980.881498][ T8644] program syz.5.15280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 981.105365][ T37] audit: type=1326 audit(2000000833.467:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8656 comm="syz.2.15285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x0 [ 981.958338][ T8699] ieee802154 phy1 wpan1: encryption failed: -126 [ 982.541335][ T31] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 982.703489][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 982.709280][ T31] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 982.709312][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.709334][ T31] usb 6-1: Product: syz [ 982.709350][ T31] usb 6-1: Manufacturer: syz [ 982.709366][ T31] usb 6-1: SerialNumber: syz [ 982.725150][ T31] usb 6-1: config 0 descriptor?? [ 982.745451][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 982.985283][ T37] audit: type=1326 audit(2000000835.430:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.015209][ T37] audit: type=1326 audit(2000000835.430:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.040721][ T37] audit: type=1326 audit(2000000835.493:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.068057][ T37] audit: type=1326 audit(2000000835.493:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.068390][ T37] audit: type=1326 audit(2000000835.524:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.070881][ T37] audit: type=1326 audit(2000000835.524:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.071166][ T37] audit: type=1326 audit(2000000835.524:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.072303][ T37] audit: type=1326 audit(2000000835.524:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.073213][ T37] audit: type=1326 audit(2000000835.524:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.2.15329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 983.534717][ T31] gspca_ov534_9: reg_w failed -71 [ 983.808356][ T31] gspca_ov534_9: Unknown sensor 0000 [ 983.808456][ T31] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 983.811798][ T31] usb 6-1: USB disconnect, device number 51 [ 984.425612][ T31] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 984.614193][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 984.618192][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.618226][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.618268][ T31] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 984.618300][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.630558][ T31] usb 6-1: config 0 descriptor?? [ 984.947061][ T8832] netlink: 'syz.2.15371': attribute type 33 has an invalid length. [ 984.947086][ T8832] netlink: 160 bytes leftover after parsing attributes in process `syz.2.15371'. [ 985.087269][ T31] playstation 0003:054C:05C4.0066: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 985.261356][ T31] playstation 0003:054C:05C4.0066: Invalid reportID received, expected 18 got 199 [ 985.261385][ T31] playstation 0003:054C:05C4.0066: Failed to retrieve DualShock4 pairing info: -22 [ 985.261435][ T31] playstation 0003:054C:05C4.0066: Failed to get MAC address from DualShock4 [ 985.261450][ T31] playstation 0003:054C:05C4.0066: Failed to create dualshock4. [ 985.266557][ T31] playstation 0003:054C:05C4.0066: probe with driver playstation failed with error -22 [ 985.482016][ T5791] usb 6-1: USB disconnect, device number 52 [ 985.670227][ T8873] kvm: kvm [8871]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 986.056401][ T5791] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 986.201767][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.201816][ T5791] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 986.201840][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.241574][ T5791] usb 3-1: config 0 descriptor?? [ 986.275670][ T5893] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 986.420730][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 986.425414][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.425524][ T5893] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 986.425550][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.483762][ T5893] usb 6-1: config 0 descriptor?? [ 986.676807][ T5791] dragonrise 0003:0079:0006.0067: unknown main item tag 0x0 [ 986.676847][ T5791] dragonrise 0003:0079:0006.0067: unknown main item tag 0x0 [ 986.676929][ T5791] dragonrise 0003:0079:0006.0067: unknown main item tag 0x0 [ 986.676959][ T5791] dragonrise 0003:0079:0006.0067: unknown main item tag 0x0 [ 986.676987][ T5791] dragonrise 0003:0079:0006.0067: unknown main item tag 0x0 [ 986.728091][ T5791] dragonrise 0003:0079:0006.0067: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 986.728126][ T5791] dragonrise 0003:0079:0006.0067: no inputs found [ 986.728148][ T5791] dragonrise 0003:0079:0006.0067: force feedback init failed [ 986.885750][ T5865] usb 3-1: USB disconnect, device number 38 [ 986.902716][ T5893] corsair-psu 0003:1B1C:1C0B.0068: unbalanced delimiter at end of report description [ 986.903639][ T5893] corsair-psu 0003:1B1C:1C0B.0068: probe with driver corsair-psu failed with error -22 [ 987.087601][ T5893] usb 6-1: USB disconnect, device number 53 [ 987.120830][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15427'. [ 987.533124][ T5865] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 987.704343][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 987.706659][ T5865] usb 1-1: config 14 has an invalid interface number: 218 but max is 0 [ 987.706687][ T5865] usb 1-1: config 14 has no interface number 0 [ 987.706721][ T5865] usb 1-1: config 14 interface 218 has no altsetting 0 [ 987.706922][ T8986] trusted_key: encrypted_key: keyword 'uew' not recognized [ 987.710992][ T5865] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 987.711023][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.711046][ T5865] usb 1-1: Product: syz [ 987.711062][ T5865] usb 1-1: Manufacturer: syz [ 987.711078][ T5865] usb 1-1: SerialNumber: syz [ 987.917539][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15431'. [ 987.978477][ T5865] go7007 1-1:14.218: probe with driver go7007 failed with error -12 [ 987.999193][ T5865] usb 1-1: USB disconnect, device number 32 [ 988.066320][ T5893] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 988.221501][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.221546][ T5893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 988.224032][ T5893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 988.224067][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.224088][ T5893] usb 6-1: Product: syz [ 988.224104][ T5893] usb 6-1: Manufacturer: syz [ 988.224119][ T5893] usb 6-1: SerialNumber: syz [ 988.496167][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.505264][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.525285][ T5893] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 988.546077][ T5893] usb 6-1: USB disconnect, device number 54 [ 988.729627][ T9036] ALSA: mixer_oss: invalid OSS volume '' [ 988.952245][ T31] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 989.051839][ T9054] sch_fq: defrate 53322 ignored. [ 989.085598][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.128031][ T31] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 989.128061][ T31] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 989.128113][ T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 989.128138][ T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 989.128166][ T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 989.128209][ T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 989.128234][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.390569][ T31] usb 6-1: usb_control_msg returned -71 [ 989.390619][ T31] usbtmc 6-1:16.0: can't read capabilities [ 989.424201][ T31] usb 6-1: USB disconnect, device number 55 [ 989.697827][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 989.697845][ T37] audit: type=1400 audit(2000000842.485:862): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=9073 comm="syz.2.15489" path="/proc/6298/task/6299/attr/current" dev="proc" ino=128542 [ 991.844250][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15539'. [ 992.067105][ T5893] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 992.209957][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 992.212299][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.212350][ T5893] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 992.212376][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.255125][ T5893] usb 1-1: config 0 descriptor?? [ 992.682447][ T5893] mcp2221 0003:04D8:00DD.0069: unknown main item tag 0x0 [ 992.682485][ T5893] mcp2221 0003:04D8:00DD.0069: unknown main item tag 0x0 [ 992.682515][ T5893] mcp2221 0003:04D8:00DD.0069: unknown main item tag 0x0 [ 992.682543][ T5893] mcp2221 0003:04D8:00DD.0069: unknown main item tag 0x0 [ 992.682568][ T5893] mcp2221 0003:04D8:00DD.0069: unknown main item tag 0x0 [ 992.722290][ T5893] mcp2221 0003:04D8:00DD.0069: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 992.853145][ C0] usb 1-1: input irq status -75 received [ 993.104587][ T5893] usb 1-1: USB disconnect, device number 33 [ 993.306249][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15570'. [ 994.163294][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15597'. [ 994.398490][ T9315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15602'. [ 994.731328][ T9335] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15616'. [ 996.545416][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15658'. [ 996.545477][ T9426] netem: change failed [ 996.620378][ T5469] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 996.770329][ T5469] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 996.770361][ T5469] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.770381][ T5469] usb 6-1: Product: syz [ 996.770396][ T5469] usb 6-1: Manufacturer: syz [ 996.770410][ T5469] usb 6-1: SerialNumber: syz [ 996.831523][ T5469] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 996.877163][ T5893] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 997.366157][ T9464] loop2: detected capacity change from 0 to 7 [ 997.391361][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.391576][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.396020][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.396053][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.396352][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.396379][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.396685][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.396712][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.398343][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.398373][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.398694][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.398722][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.398978][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.399004][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.399079][ T9464] ldm_validate_partition_table(): Disk read failed. [ 997.399281][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.399308][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.399561][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.399587][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.399906][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.399933][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.400308][ T9464] Dev loop2: unable to read RDB block 0 [ 997.412025][ T9464] loop2: unable to read partition table [ 997.412282][ T9464] loop2: partition table beyond EOD, truncated [ 997.412300][ T9464] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 997.513983][ T5865] usb 6-1: USB disconnect, device number 56 [ 998.117091][ T5893] usb 6-1: Service connection timeout for: 256 [ 998.117114][ T5893] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 998.117832][ T5893] ath9k_htc: Failed to initialize the device [ 998.123882][ T5865] usb 6-1: ath9k_htc: USB layer deinitialized [ 998.183104][ T9496] ipvlan0: entered promiscuous mode [ 998.185119][ T9496] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 998.567598][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15701'. [ 999.651890][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15735'. [ 999.998716][ T9603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15745'. [ 1000.011810][ T9603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15745'. [ 1000.015208][ T9603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15745'. [ 1000.895799][ T9653] netlink: 312 bytes leftover after parsing attributes in process `syz.5.15768'. [ 1002.156297][ T9712] netlink: 'syz.2.15797': attribute type 2 has an invalid length. [ 1002.397048][ T9719] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 1002.397090][ T9719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.011086][ T9744] tap0: tun_chr_ioctl cmd 1074025675 [ 1003.011110][ T9744] tap0: persist enabled [ 1003.241205][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15821'. [ 1003.477757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.519026][ T9776] block nbd5: NBD_DISCONNECT [ 1003.888749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.997786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.069755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.163969][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.345106][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.478842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.663738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.761177][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.145021][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.212832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.324564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.663772][ T9870] loop9: detected capacity change from 0 to 7 [ 1006.456196][ T9870] Dev loop9: unable to read RDB block 7 [ 1006.456253][ T9870] loop9: unable to read partition table [ 1006.456497][ T9870] loop9: partition table beyond EOD, truncated [ 1006.456516][ T9870] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1006.479657][ T9873] Invalid logical block size (1) [ 1007.164306][ T9934] overlayfs: workdir and upperdir must reside under the same mount [ 1007.613125][ T5893] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1007.756164][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 1007.763392][ T5893] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1007.763420][ T5893] usb 3-1: config 0 has no interface number 0 [ 1007.763468][ T5893] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1007.763498][ T5893] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1007.808908][ T5893] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1007.808941][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.808962][ T5893] usb 3-1: Product: syz [ 1007.808977][ T5893] usb 3-1: Manufacturer: syz [ 1007.808993][ T5893] usb 3-1: SerialNumber: syz [ 1007.849437][ T5893] usb 3-1: config 0 descriptor?? [ 1008.447728][ T5893] appletouch 3-1:0.85: Geyser mode initialized. [ 1008.471068][ T5893] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input109 [ 1008.653727][ T5893] usb 3-1: USB disconnect, device number 39 [ 1008.892628][ T5893] appletouch 3-1:0.85: input: appletouch disconnected [ 1010.092514][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1010.092596][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1010.242109][ T5893] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1010.385115][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 1010.387488][ T5893] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1010.387519][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.392857][ T5893] usb 1-1: config 0 descriptor?? [ 1010.630946][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1010.654157][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1010.655198][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1010.655255][ T5893] usb 1-1: media controller created [ 1010.730069][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1010.824390][ T5893] az6027: usb out operation failed. (-71) [ 1010.824806][ T5893] az6027: usb out operation failed. (-71) [ 1010.824821][ T5893] stb0899_attach: Driver disabled by Kconfig [ 1010.824831][ T5893] az6027: no front-end attached [ 1010.824831][ T5893] [ 1010.825218][ T5893] az6027: usb out operation failed. (-71) [ 1010.825232][ T5893] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1010.870084][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input110 [ 1010.884166][ T5893] dvb-usb: schedule remote query interval to 400 msecs. [ 1010.884193][ T5893] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1010.905521][ T5893] usb 1-1: USB disconnect, device number 34 [ 1011.111302][ T5893] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1012.061702][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 1012.544601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.750312][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.128494][ T37] audit: type=1326 audit(2000000874.126:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10252 comm="syz.0.16055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe8592efc9 code=0x0 [ 1014.445557][T10270] netlink: 'syz.5.16063': attribute type 2 has an invalid length. [ 1014.445580][T10270] netlink: 116 bytes leftover after parsing attributes in process `syz.5.16063'. [ 1014.821927][ C1] sd 0:0:1:0: [sda] tag#8079 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1014.821998][ C1] sd 0:0:1:0: [sda] tag#8079 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 1016.619455][T10388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.731037][ C0] vkms_vblank_simulate: vblank timer overrun [ 1017.741062][ T37] audit: type=1326 audit(2000000877.926:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8592efc9 code=0x7ffc0000 [ 1017.741507][ T37] audit: type=1326 audit(2000000877.926:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7efe8592efc9 code=0x7ffc0000 [ 1017.741663][ T37] audit: type=1326 audit(2000000877.926:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8592efc9 code=0x7ffc0000 [ 1019.313698][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16190'. [ 1019.568167][ T37] audit: type=1326 audit(2000000879.847:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.568222][ T37] audit: type=1326 audit(2000000879.847:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.605295][ T37] audit: type=1326 audit(2000000879.868:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.605880][ T37] audit: type=1326 audit(2000000879.868:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.623376][ T37] audit: type=1326 audit(2000000879.879:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.623431][ T37] audit: type=1326 audit(2000000879.889:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.623475][ T37] audit: type=1326 audit(2000000879.889:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.626119][ T37] audit: type=1326 audit(2000000879.900:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.634518][ T37] audit: type=1326 audit(2000000879.900:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1019.634577][ T37] audit: type=1326 audit(2000000879.900:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f60302eefc9 code=0x7ffc0000 [ 1020.024656][ T5469] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1020.174923][ T5469] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.174976][ T5469] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1020.178301][ T5469] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1020.178331][ T5469] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.178354][ T5469] usb 6-1: Product: syz [ 1020.178369][ T5469] usb 6-1: Manufacturer: syz [ 1020.178386][ T5469] usb 6-1: SerialNumber: syz [ 1020.260925][ T5469] cdc_mbim 6-1:1.0: skipping garbage [ 1020.447966][T10559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.981242][T10606] ªªªªªª: renamed from wg2 (while UP) [ 1021.031897][T10559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1021.032524][ T5469] cdc_mbim 6-1:1.0: setting tx_max = 32 [ 1021.048594][ T5469] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1021.091743][ T5469] wwan wwan0: port wwan0mbim0 attached [ 1021.126683][ T5469] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 6a:a5:9d:9b:2a:0b [ 1021.238151][ T5865] usb 6-1: USB disconnect, device number 57 [ 1021.240554][ T5865] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1021.371721][ T5865] wwan wwan0: port wwan0mbim0 disconnected [ 1021.981871][T10664] input: syz0 as /devices/virtual/input/input111 [ 1022.006011][ T5893] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1022.163755][ T5893] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1022.163787][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.163809][ T5893] usb 3-1: Product: syz [ 1022.163825][ T5893] usb 3-1: Manufacturer: syz [ 1022.163840][ T5893] usb 3-1: SerialNumber: syz [ 1022.208886][ T5893] usb 3-1: config 0 descriptor?? [ 1022.613461][ T5893] usb 3-1: Firmware version (0.0) predates our first public release. [ 1022.613488][ T5893] usb 3-1: Please update to version 0.2 or newer [ 1022.631116][ T5893] usb 3-1: Firmware: build [ 1022.837881][ T5893] usb 3-1: USB disconnect, device number 40 [ 1022.924210][T29487] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1023.042326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.117480][ T5865] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1023.131739][T29487] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1023.131770][T29487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.144299][T29487] usb 6-1: config 0 descriptor?? [ 1023.272903][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 1023.275990][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1023.276089][ T5865] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1023.276115][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.286024][ T5865] usb 1-1: config 0 descriptor?? [ 1023.498844][ T5865] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1023.691474][ T5865] usb 1-1: USB disconnect, device number 35 [ 1024.100909][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.116712][T29487] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 1024.140251][T29487] usb 6-1: USB disconnect, device number 58 [ 1025.082636][T10822] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16328'. [ 1025.872605][T10861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1026.502494][T10904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1027.577559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.768113][T10975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1027.814670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.854905][ T5865] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1029.008836][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 1029.011525][ T5865] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1029.011552][ T5865] usb 1-1: config 0 has no interface number 0 [ 1029.011605][ T5865] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1029.011628][ T5865] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1029.011653][ T5865] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1029.011676][ T5865] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1029.011716][ T5865] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1029.011740][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.029002][ T5865] usb 1-1: config 0 descriptor?? [ 1029.050137][ T5865] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1029.240300][ T5865] usb 1-1: USB disconnect, device number 36 [ 1029.301974][ T5865] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1029.544008][T11080] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16452'. [ 1029.712690][ T5469] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1029.857869][ T5469] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.857904][ T5469] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.857945][ T5469] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1029.857970][ T5469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.910455][ T5469] usb 6-1: config 0 descriptor?? [ 1030.335526][ T5469] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 1030.335565][ T5469] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 1030.335593][ T5469] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 1030.335622][ T5469] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 1030.335656][ T5469] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 1030.335683][ T5469] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 1030.335710][ T5469] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 1030.390613][ T5469] cp2112 0003:10C4:EA90.006A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1030.518573][ T5469] cp2112 0003:10C4:EA90.006A: Part Number: 0x4E Device Version: 0x8F [ 1030.713699][ T5469] cp2112 0003:10C4:EA90.006A: error requesting SMBus config [ 1030.716485][ T5469] cp2112 0003:10C4:EA90.006A: probe with driver cp2112 failed with error -71 [ 1030.747326][ T5469] usb 6-1: USB disconnect, device number 59 [ 1030.888485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.446562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 1031.503368][ T5865] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1031.646373][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 1031.651906][ T5865] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.651962][ T5865] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.654998][ T5865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1031.655028][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.655049][ T5865] usb 1-1: Product: syz [ 1031.655065][ T5865] usb 1-1: Manufacturer: syz [ 1031.655081][ T5865] usb 1-1: SerialNumber: syz [ 1031.722225][ T5118] Bluetooth: hci5: command 0xfc11 tx timeout [ 1031.728815][T31907] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1031.741920][ T5893] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1031.943356][ T5893] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1031.943471][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1031.943487][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1031.943501][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1031.943518][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1031.943559][ T5893] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1031.943590][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.045791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1032.068455][ T5865] usb 1-1: bad CDC descriptors [ 1032.082313][ T5865] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1032.082403][ T5865] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1032.083442][ T5893] usb 6-1: config 0 descriptor?? [ 1032.094371][T11183] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1032.150983][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.309845][ T5865] usb 1-1: USB disconnect, device number 37 [ 1032.490976][ T5893] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 1032.491012][ T5893] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 1032.491038][ T5893] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 1032.534977][ T5893] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1032.854039][ T5893] usb 6-1: USB disconnect, device number 60 [ 1033.801460][T11299] loop2: detected capacity change from 0 to 7 [ 1033.803388][T11299] Dev loop2: unable to read RDB block 7 [ 1033.803432][T11299] loop2: AHDI p1 p4 [ 1033.803463][T11299] loop2: partition table partially beyond EOD, truncated [ 1033.803575][T11299] loop2: p1 size 100663296 extends beyond EOD, truncated [ 1033.827642][T29487] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1033.970453][T29487] usb 1-1: Using ep0 maxpacket: 16 [ 1033.974377][T29487] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 1033.974404][T29487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.974425][T29487] usb 1-1: config 0 has no interface number 0 [ 1033.974475][T29487] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1033.974505][T29487] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1033.974535][T29487] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1033.974565][T29487] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1033.974588][T29487] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1033.974638][T29487] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1033.974663][T29487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.987363][T29487] usb 1-1: config 0 descriptor?? [ 1033.988403][T11285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1034.006765][T29487] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1034.330331][T29487] usb 1-1: USB disconnect, device number 38 [ 1035.277000][T11395] loop9: detected capacity change from 0 to 7 [ 1035.280931][T11395] buffer_io_error: 5 callbacks suppressed [ 1035.280952][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.281069][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.282611][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.282742][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.282876][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.283106][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.283225][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.283302][T11395] ldm_validate_partition_table(): Disk read failed. [ 1035.283350][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.283459][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.286353][T11395] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.286530][T11395] Dev loop9: unable to read RDB block 0 [ 1035.286818][T11395] loop9: unable to read partition table [ 1035.287043][T11395] loop9: partition table beyond EOD, truncated [ 1035.287061][T11395] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1035.287061][T11395] ) failed (rc=-5) [ 1035.809008][ T5865] psmouse serio2: Failed to reset mouse on : -5 [ 1036.375208][T11459] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16614'. [ 1036.701395][T31907] Bluetooth: hci0: link tx timeout [ 1038.078654][T11541] overlayfs: failed to clone lowerpath [ 1039.115628][ T5469] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1039.257480][ T5469] usb 3-1: Using ep0 maxpacket: 32 [ 1039.276021][ T5469] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1039.276048][ T5469] usb 3-1: config 0 has no interface number 0 [ 1039.276099][ T5469] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1039.276128][ T5469] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1039.281136][ T5469] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1039.281175][ T5469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.281197][ T5469] usb 3-1: Product: syz [ 1039.281213][ T5469] usb 3-1: Manufacturer: syz [ 1039.281229][ T5469] usb 3-1: SerialNumber: syz [ 1039.359610][ T5469] usb 3-1: config 0 descriptor?? [ 1039.457109][ T5865] misc userio: Buffer overflowed, userio client isn't keeping up [ 1039.962549][ T5469] appletouch 3-1:0.85: Geyser mode initialized. [ 1039.965813][ T5469] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input113 [ 1040.141085][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16710'. [ 1040.180548][ T6949] usb 3-1: USB disconnect, device number 41 [ 1040.291872][ T6949] appletouch 3-1:0.85: input: appletouch disconnected [ 1040.478998][ T5865] input: PS/2 Generic Mouse as /devices/serio2/input/input112 [ 1040.695578][ T5865] psmouse serio2: Failed to enable mouse on [ 1041.459025][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16749'. [ 1041.485192][T11739] gretap0: entered promiscuous mode [ 1041.485405][T11739] macsec2: entered promiscuous mode [ 1041.485550][T11739] macsec2: entered allmulticast mode [ 1041.485563][T11739] gretap0: entered allmulticast mode [ 1041.526344][T11739] gretap0: left allmulticast mode [ 1041.526673][T11739] gretap0: left promiscuous mode [ 1042.557722][T31907] Bluetooth: hci0: command 0x0406 tx timeout [ 1042.825782][T11817] vivid-000: disconnect [ 1042.826978][T11816] vivid-000: reconnect [ 1043.200793][ T6949] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1043.353171][ T6949] usb 3-1: Using ep0 maxpacket: 8 [ 1043.355757][ T6949] usb 3-1: config 0 has no interfaces? [ 1043.359205][ T6949] usb 3-1: config 0 has no interfaces? [ 1043.360529][ T6949] usb 3-1: config 0 has no interfaces? [ 1043.373932][ T6949] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1043.373962][ T6949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.373983][ T6949] usb 3-1: Product: syz [ 1043.373998][ T6949] usb 3-1: Manufacturer: syz [ 1043.374013][ T6949] usb 3-1: SerialNumber: syz [ 1043.383182][ T6949] usb 3-1: config 0 descriptor?? [ 1043.582534][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.586659][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.602247][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.602666][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.611206][ T6949] usb 3-1: USB disconnect, device number 42 [ 1044.058154][ T5893] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1044.205823][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1044.205862][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.205888][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.205926][ T5893] usb 3-1: New USB device found, idVendor=15c2, idProduct=adcf, bcdDevice= 0.11 [ 1044.205948][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.280360][ T5893] usb 3-1: config 0 descriptor?? [ 1044.477655][ T5893] usbhid 3-1:0.0: can't add hid device: -71 [ 1044.477764][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1044.481257][ T5893] usb 3-1: USB disconnect, device number 43 [ 1044.686626][T11907] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1044.884429][T11915] kvm: user requested TSC rate below hardware speed [ 1045.215007][T11933] netlink: 35 bytes leftover after parsing attributes in process `syz.5.16844'. [ 1045.215040][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16844'. [ 1046.059959][ T5469] kernel read not supported for file /dsp (pid: 5469 comm: kworker/0:2) [ 1046.222797][T11982] overlayfs: overlapping lowerdir path [ 1046.271932][T11978] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1046.669226][T11343] wlan1: Trigger new scan to find an IBSS to join [ 1047.953911][ T5469] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1048.106578][ T5469] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.106631][ T5469] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1048.109473][ T5469] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.109504][ T5469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.109526][ T5469] usb 1-1: Product: syz [ 1048.109542][ T5469] usb 1-1: Manufacturer: syz [ 1048.109557][ T5469] usb 1-1: SerialNumber: syz [ 1048.175839][ T5469] cdc_mbim 1-1:1.0: skipping garbage [ 1048.365176][T12080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1048.811140][ T5791] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1048.940839][T12080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1048.943951][ T5469] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 1048.962251][ T5791] usb 6-1: Using ep0 maxpacket: 16 [ 1048.982184][ T5791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1048.982222][ T5791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1048.982267][ T5791] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1048.982291][ T5791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.041773][ T5791] usb 6-1: config 0 descriptor?? [ 1049.061286][ T5469] wwan wwan0: port wwan0mbim0 attached [ 1049.126071][ T5469] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 9a:1d:77:ec:07:1f [ 1049.157353][ T5469] usb 1-1: USB disconnect, device number 39 [ 1049.160985][ T5469] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 1049.396715][ T5469] wwan wwan0: port wwan0mbim0 disconnected [ 1049.462951][ T5791] hid_parser_main: 12 callbacks suppressed [ 1049.462975][ T5791] uclogic 0003:5543:0781.006C: unknown main item tag 0x0 [ 1049.463008][ T5791] uclogic 0003:5543:0781.006C: unknown main item tag 0x0 [ 1049.463036][ T5791] uclogic 0003:5543:0781.006C: unknown main item tag 0x0 [ 1049.463064][ T5791] uclogic 0003:5543:0781.006C: unknown main item tag 0x0 [ 1049.463091][ T5791] uclogic 0003:5543:0781.006C: unknown main item tag 0x0 [ 1049.515584][ T5791] uclogic 0003:5543:0781.006C: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.5-1/input0 [ 1049.554676][T11343] wlan1: Trigger new scan to find an IBSS to join [ 1049.669188][ T6949] usb 6-1: USB disconnect, device number 61 [ 1050.535254][T29487] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1050.680943][T29487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.681005][T29487] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1050.681029][T29487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.742146][T29487] usb 6-1: config 0 descriptor?? [ 1050.781895][T29487] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1050.781938][T29487] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1050.958011][ T5469] usb 6-1: USB disconnect, device number 62 [ 1051.247241][T12241] loop8: detected capacity change from 0 to 8 [ 1051.272730][T12241] Dev loop8: unable to read RDB block 8 [ 1051.272776][T12241] loop8: unable to read partition table [ 1051.273007][T12241] loop8: partition table beyond EOD, truncated [ 1051.273027][T12241] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1051.565823][T12258] netlink: 80 bytes leftover after parsing attributes in process `syz.5.17001'. [ 1051.859830][ T5469] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1051.938037][ T5893] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1052.003631][ T5469] usb 3-1: Using ep0 maxpacket: 8 [ 1052.009015][ T5469] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1052.009046][ T5469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.009068][ T5469] usb 3-1: Product: syz [ 1052.009084][ T5469] usb 3-1: Manufacturer: syz [ 1052.009099][ T5469] usb 3-1: SerialNumber: syz [ 1052.050625][ T5469] usb 3-1: config 0 descriptor?? [ 1052.065631][ T5469] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1052.065690][ T5469] dvb-usb: bulk message failed: -22 (2/0) [ 1052.078665][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 1052.088856][ T5893] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.088890][ T5893] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.110644][ T5893] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1052.110677][ T5893] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1052.110700][ T5893] usb 6-1: Product: syz [ 1052.110716][ T5893] usb 6-1: Manufacturer: syz [ 1052.146765][ T5469] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1052.151383][ T5469] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1052.151581][ T5469] usb 3-1: media controller created [ 1052.157186][ T5893] hub 6-1:4.0: USB hub found [ 1052.240052][ T5469] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1052.293522][ T5469] dvb-usb: bulk message failed: -22 (1/0) [ 1052.335609][ T6949] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1052.359566][ T5893] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 1052.386272][ T5469] DVB: Unable to find symbol mt352_attach() [ 1052.386289][ T5469] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1052.451034][ T88] wlan1: Trigger new scan to find an IBSS to join [ 1052.489873][ T5469] rc_core: IR keymap rc-dvico-portable not found [ 1052.489894][ T5469] Registered IR keymap rc-empty [ 1052.490076][ T6949] usb 1-1: Using ep0 maxpacket: 16 [ 1052.491513][ T5469] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1052.492450][ T6949] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1052.492477][ T6949] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1052.492507][ T6949] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.492535][ T6949] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1052.494547][ T5469] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input114 [ 1052.495634][ T6949] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1052.495661][ T6949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.495682][ T6949] usb 1-1: Product: syz [ 1052.495698][ T6949] usb 1-1: Manufacturer: syz [ 1052.495713][ T6949] usb 1-1: SerialNumber: syz [ 1052.606427][ T5469] dvb-usb: schedule remote query interval to 100 msecs. [ 1052.606449][ T5469] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1052.609744][ T5469] usb 3-1: USB disconnect, device number 44 [ 1052.736301][T29487] usb 6-1: USB disconnect, device number 63 [ 1052.764306][ T6949] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1052.777944][ T5469] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1053.242770][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1053.242789][ T37] audit: type=1326 audit(2000000915.194:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.242836][ T37] audit: type=1326 audit(2000000915.194:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.245556][ T37] audit: type=1326 audit(2000000915.194:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.246030][ T37] audit: type=1326 audit(2000000915.194:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.246802][ T37] audit: type=1326 audit(2000000915.194:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.251899][ T37] audit: type=1326 audit(2000000915.205:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.251947][ T37] audit: type=1326 audit(2000000915.205:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.251987][ T37] audit: type=1326 audit(2000000915.205:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.297835][ T37] audit: type=1326 audit(2000000915.226:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.297891][ T37] audit: type=1326 audit(2000000915.226:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12342 comm="syz.5.17042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a525efc9 code=0x7ffc0000 [ 1053.506133][T11332] wlan1: Creating new IBSS network, BSSID ae:5b:93:d4:56:24 [ 1054.766459][T12415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17077'. [ 1054.766489][T12415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17077'. [ 1055.023870][ T5469] usb 1-1: USB disconnect, device number 40 [ 1055.040246][ T5469] usblp0: removed [ 1055.311239][T12436] overlayfs: failed lookup in lower (newroot/1267, name='bus', err=-40): overlapping layers [ 1056.524378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1056.672925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.299930][ T5469] kernel read not supported for file /audio1 (pid: 5469 comm: kworker/0:2) [ 1057.521242][T12550] vivid-007: disconnect [ 1057.522780][T12547] vivid-007: reconnect [ 1058.565679][T29487] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1058.711355][T29487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1058.711408][T29487] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1058.711435][T29487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.749467][T29487] usb 6-1: config 0 descriptor?? [ 1058.750614][T12602] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1059.152846][T29487] uclogic 0003:5543:0522.006D: unknown main item tag 0x0 [ 1059.152884][T29487] uclogic 0003:5543:0522.006D: item fetching failed at offset 3/5 [ 1059.153712][T29487] uclogic 0003:5543:0522.006D: parse failed [ 1059.153834][T29487] uclogic 0003:5543:0522.006D: probe with driver uclogic failed with error -22 [ 1059.349661][ T5469] usb 6-1: USB disconnect, device number 64 [ 1059.719695][T12680] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.17205'. [ 1060.221806][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.336144][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.097742][T12753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17238'. [ 1061.097768][T12753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17238'. [ 1061.158138][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17241'. [ 1061.947032][ T6949] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1062.089869][ T6949] usb 6-1: Using ep0 maxpacket: 16 [ 1062.093113][ T6949] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1062.093144][ T6949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1062.095557][ T6949] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1062.095586][ T6949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.095608][ T6949] usb 6-1: Product: syz [ 1062.095623][ T6949] usb 6-1: Manufacturer: syz [ 1062.095639][ T6949] usb 6-1: SerialNumber: syz [ 1062.159916][ T6949] usb 6-1: config 0 descriptor?? [ 1062.179524][ T6949] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1062.179613][ T6949] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1062.451993][T12822] netlink: 'syz.2.17270': attribute type 12 has an invalid length. [ 1062.452013][T12822] netlink: 'syz.2.17270': attribute type 29 has an invalid length. [ 1062.452028][T12822] netlink: 148 bytes leftover after parsing attributes in process `syz.2.17270'. [ 1062.452055][T12822] netlink: 'syz.2.17270': attribute type 1 has an invalid length. [ 1062.755945][ T6949] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1062.757351][ T6949] em28xx 6-1:0.0: Config register raw data: 0x9e [ 1062.949651][ T6949] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1062.949674][ T6949] em28xx 6-1:0.0: No AC97 audio processor [ 1062.974456][ T6949] usb 6-1: USB disconnect, device number 65 [ 1062.983232][ T6949] em28xx 6-1:0.0: Disconnecting em28xx [ 1063.027887][ T6949] em28xx 6-1:0.0: Freeing device [ 1063.442846][T29487] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1063.598765][T29487] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.598801][T29487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1063.598841][T29487] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1063.598864][T29487] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1063.600988][T29487] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1063.601017][T29487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1063.601038][T29487] usb 1-1: SerialNumber: syz [ 1063.894543][T29487] usb 1-1: 0:2 : does not exist [ 1063.894636][T29487] usb 1-1: unit 5 not found! [ 1063.931293][T29487] usb 1-1: USB disconnect, device number 41 [ 1064.871279][T29487] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1065.016538][T29487] usb 1-1: Using ep0 maxpacket: 16 [ 1065.019259][T29487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.019291][T29487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.019315][T29487] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1065.019358][T29487] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1065.019382][T29487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.086591][T29487] usb 1-1: config 0 descriptor?? [ 1065.383707][T12974] sctp: [Deprecated]: syz.5.17344 (pid 12974) Use of int in max_burst socket option deprecated. [ 1065.383707][T12974] Use struct sctp_assoc_value instead [ 1065.513294][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513331][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513359][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513387][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513414][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513442][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513470][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513493][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513519][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.513547][T29487] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 1065.601225][T29487] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.006E/input/input115 [ 1065.635407][T29487] microsoft 0003:045E:07DA.006E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1065.732854][ T5469] usb 1-1: USB disconnect, device number 42 [ 1065.945605][T13002] trusted_key: syz.5.17356 sent an empty control message without MSG_MORE. [ 1066.459676][T13031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17370'. [ 1068.619888][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1068.619961][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.374715][ T31] IPVS: starting estimator thread 0... [ 1070.384171][T13233] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1070.463200][T13238] IPVS: using max 7 ests per chain, 16800 per kthread [ 1071.025427][ T31] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1071.178268][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1071.187604][ T31] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1071.187629][ T31] usb 3-1: config 0 has no interface number 0 [ 1071.206483][ T31] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1071.206520][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.206540][ T31] usb 3-1: Product: syz [ 1071.206554][ T31] usb 3-1: Manufacturer: syz [ 1071.206569][ T31] usb 3-1: SerialNumber: syz [ 1071.217942][ T31] usb 3-1: config 0 descriptor?? [ 1071.235793][ T31] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1071.452544][ T31] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1071.469121][ T31] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1071.827106][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1071.828592][ T9] usb 3-1: USB disconnect, device number 45 [ 1071.849969][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1071.866964][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1071.867680][ T9] quatech2 3-1:0.51: device disconnected [ 1072.445211][T13319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17507'. [ 1072.489187][T13319] bond0: entered promiscuous mode [ 1072.489209][T13319] bond_slave_0: entered promiscuous mode [ 1072.489454][T13319] bond_slave_1: entered promiscuous mode [ 1072.489687][T13319] dummy0: entered promiscuous mode [ 1072.490009][T13319] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1072.540633][T13319] bond0: left promiscuous mode [ 1072.540657][T13319] bond_slave_0: left promiscuous mode [ 1072.540925][T13319] bond_slave_1: left promiscuous mode [ 1072.541166][T13319] dummy0: left promiscuous mode [ 1072.547880][T13326] netlink: 75 bytes leftover after parsing attributes in process `syz.5.17508'. [ 1072.567340][T13319] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1072.981866][T13348] program syz.2.17519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1074.073408][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1074.226228][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1074.226258][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.235881][ T9] usb 3-1: config 0 descriptor?? [ 1074.458760][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1074.720487][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1074.720513][ T9] [drm] Initialized udl on minor 2 [ 1074.870128][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1074.870515][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1074.891542][ T5469] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1074.892376][ T9] usb 3-1: USB disconnect, device number 46 [ 1074.893951][ T5469] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1074.894122][ T5469] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1078.713575][T13459] kexec: Could not allocate control_code_buffer [ 1080.093346][T13605] netlink: 'syz.5.17640': attribute type 8 has an invalid length. [ 1080.093369][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17640'. [ 1080.102788][T13605] bond0: entered promiscuous mode [ 1080.102811][T13605] bond_slave_0: entered promiscuous mode [ 1080.164347][T13605] bond_slave_1: entered promiscuous mode [ 1080.168954][T13605] bond0: left promiscuous mode [ 1080.168973][T13605] bond_slave_0: left promiscuous mode [ 1080.169504][T13605] bond_slave_1: left promiscuous mode [ 1081.193623][T13642] netlink: 'syz.0.17661': attribute type 1 has an invalid length. [ 1081.655710][ T5791] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1081.798624][ T5791] usb 6-1: Using ep0 maxpacket: 8 [ 1081.801874][ T5791] usb 6-1: config 0 has no interfaces? [ 1081.826491][ T5791] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1081.826523][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.826544][ T5791] usb 6-1: Product: syz [ 1081.826560][ T5791] usb 6-1: Manufacturer: syz [ 1081.826576][ T5791] usb 6-1: SerialNumber: syz [ 1081.873089][ T5791] usb 6-1: config 0 descriptor?? [ 1082.075847][T11345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1082.126592][ T5469] usb 6-1: USB disconnect, device number 66 [ 1082.557926][T13707] netlink: 'syz.0.17691': attribute type 8 has an invalid length. [ 1082.972674][T13727] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1082.972703][T13727] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1082.977769][T13727] vhci_hcd vhci_hcd.0: Device attached [ 1082.978705][T13731] vhci_hcd: connection closed [ 1082.990001][T11345] vhci_hcd: stop threads [ 1082.990019][T11345] vhci_hcd: release socket [ 1082.995278][T11345] vhci_hcd: disconnect device [ 1084.646985][ T31] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1084.715076][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17751'. [ 1084.791944][ T31] usb 3-1: config 0 has no interfaces? [ 1084.794997][ T31] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1084.795028][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.795050][ T31] usb 3-1: Product: syz [ 1084.795067][ T31] usb 3-1: Manufacturer: syz [ 1084.795082][ T31] usb 3-1: SerialNumber: syz [ 1084.810062][ T31] usb 3-1: config 0 descriptor?? [ 1085.035315][ T5791] usb 3-1: USB disconnect, device number 47 [ 1085.827278][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 1085.827296][ T37] audit: type=1326 audit(2000000949.397:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.0.17759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8592efc9 code=0x7fc00000 [ 1087.267658][T13967] tipc: Started in network mode [ 1087.267691][T13967] tipc: Node identity ac14140f, cluster identity 4711 [ 1087.267990][T13967] tipc: New replicast peer: 255.255.255.255 [ 1087.273444][T13967] tipc: Enabled bearer , priority 10 [ 1087.789576][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17829'. [ 1088.342559][ T5791] tipc: Node number set to 2886997007 [ 1089.845533][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17881'. [ 1091.019783][ T5791] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1091.225595][ T5791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1091.226758][ T5791] usb 3-1: no configurations [ 1091.226775][ T5791] usb 3-1: can't read configurations, error -22 [ 1092.831667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.220715][ T37] audit: type=1400 audit(2000000957.144:906): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=14286 comm="syz.5.17971" saddr=63.255.255.255 src=17475 daddr=172.20.20.170 dest=16961 netif=wlan2 [ 1093.432675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1094.118444][T14331] netlink: 'syz.0.17992': attribute type 27 has an invalid length. [ 1094.118468][T14331] netlink: 164 bytes leftover after parsing attributes in process `syz.0.17992'. [ 1094.435568][ T37] audit: type=1326 audit(2000000958.435:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14348 comm="syz.0.18000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe8592efc9 code=0x0 [ 1094.982902][T31907] Bluetooth: hci0: command 0x0406 tx timeout [ 1095.306254][T14395] bridge: RTM_NEWNEIGH with invalid ether address [ 1095.306633][T14395] bridge: RTM_NEWNEIGH with invalid ether address [ 1095.714661][T14424] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1096.230649][ T31] kernel write not supported for file bpf-prog (pid: 31 comm: kworker/1:0) [ 1099.068674][ T31] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1099.154118][ T5791] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1099.213990][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.214026][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.214051][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1099.214093][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1099.214117][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.223299][ T31] usb 3-1: config 0 descriptor?? [ 1099.345165][ T5791] usb 6-1: Using ep0 maxpacket: 8 [ 1099.360031][ T5791] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1099.362717][ T5791] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1099.367843][ T5791] usb 6-1: string descriptor 0 read error: -22 [ 1099.367998][ T5791] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1099.368024][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.443434][ T5791] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1099.458148][ T5791] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1099.458546][ T5791] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1099.458598][ T5791] usb 6-1: media controller created [ 1099.525156][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1099.666241][ T31] plantronics 0003:047F:FFFF.006F: reserved main item tag 0xd [ 1099.725474][ T31] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1099.882269][ T5791] usb 6-1: USB disconnect, device number 67 [ 1099.955812][T12215] usb 3-1: USB disconnect, device number 50 [ 1100.926281][T14666] netlink: 272 bytes leftover after parsing attributes in process `syz.2.18155'. [ 1101.174085][T14678] io-wq is not configured for unbound workers [ 1102.008024][ T37] audit: type=1326 audit(2000000966.382:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.0.18177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe8592efc9 code=0x0 [ 1102.625611][ T37] audit: type=1326 audit(2000000967.033:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.2.18189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60302eefc9 code=0x0 [ 1105.345918][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1105.498027][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1105.498059][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.498080][ T9] usb 1-1: Product: syz [ 1105.498096][ T9] usb 1-1: Manufacturer: syz [ 1105.498120][ T9] usb 1-1: SerialNumber: syz [ 1105.503932][ T9] usb 1-1: config 0 descriptor?? [ 1106.660505][ T9] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 1106.690914][ T9] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 1106.693706][ T9] usb 1-1: USB disconnect, device number 43 [ 1106.741447][ T9] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1106.880899][ T9] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1109.435058][T15015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.536531][T15015] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1111.630237][T11345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1111.721154][T15121] netlink: 'syz.5.18369': attribute type 1 has an invalid length. [ 1111.768894][T15121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1111.809150][T15119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1111.894873][T15121] netlink: 'syz.5.18369': attribute type 30 has an invalid length. [ 1111.894906][T15121] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1114.215197][T15261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1114.272053][T15261] bond1: option mode: unable to set because the bond device is up [ 1114.824010][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18449'. [ 1114.829835][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.831501][T15293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.909134][T15352] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18477'. [ 1117.957909][ T31] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1118.119847][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1118.123844][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1118.126817][ T31] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1118.126848][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.126870][ T31] usb 1-1: Product: syz [ 1118.126884][ T31] usb 1-1: Manufacturer: syz [ 1118.126899][ T31] usb 1-1: SerialNumber: syz [ 1118.132603][ T31] usb 1-1: config 0 descriptor?? [ 1118.192343][ T31] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1118.194171][ T31] usb 1-1: Detected FT232B [ 1118.301528][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1118.329041][T12215] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1118.446533][ T9] usb 3-1: config 1 has an invalid interface number: 113 but max is 0 [ 1118.446562][ T9] usb 3-1: config 1 has no interface number 0 [ 1118.446621][ T9] usb 3-1: config 1 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1118.446647][ T9] usb 3-1: config 1 interface 113 has no altsetting 0 [ 1118.463229][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=662e, bcdDevice=9d.cb [ 1118.463259][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.463280][ T9] usb 3-1: Product: syz [ 1118.463295][ T9] usb 3-1: Manufacturer: syz [ 1118.463309][ T9] usb 3-1: SerialNumber: syz [ 1118.469505][T15434] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1118.498086][T12215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.498173][T12215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.498214][T12215] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1118.498238][T12215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.572958][T12215] usb 6-1: config 0 descriptor?? [ 1118.581762][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1118.607210][ T31] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1118.611639][ T31] usb 1-1: USB disconnect, device number 44 [ 1118.649101][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1118.649795][ T31] ftdi_sio 1-1:0.0: device disconnected [ 1118.692238][ T9] usb 3-1: USB disconnect, device number 51 [ 1118.979195][T12215] cp2112 0003:10C4:EA90.0070: unknown main item tag 0x0 [ 1118.979233][T12215] cp2112 0003:10C4:EA90.0070: unknown main item tag 0x0 [ 1118.979261][T12215] cp2112 0003:10C4:EA90.0070: unknown main item tag 0x0 [ 1118.979287][T12215] cp2112 0003:10C4:EA90.0070: unknown main item tag 0x0 [ 1118.979314][T12215] cp2112 0003:10C4:EA90.0070: unknown main item tag 0x0 [ 1118.979348][T12215] cp2112 0003:10C4:EA90.0070: unknown main item tag 0x0 [ 1118.979375][T12215] cp2112 0003:10C4:EA90.0070: unknown main item tag 0x0 [ 1119.039737][T12215] cp2112 0003:10C4:EA90.0070: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1119.161612][T12215] cp2112 0003:10C4:EA90.0070: Part Number: 0x82 Device Version: 0xFE [ 1119.738158][T12215] cp2112 0003:10C4:EA90.0070: error reading lock byte: -71 [ 1119.760214][T12215] usb 6-1: USB disconnect, device number 68 [ 1120.603181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1123.101400][ C0] vkms_vblank_simulate: vblank timer overrun [ 1126.161678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1126.358744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1126.456775][T11248] syz_tun (unregistering): left allmulticast mode [ 1126.556805][T15819] input: syz1 as /devices/virtual/input/input117 [ 1127.139434][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.139505][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.847058][T31907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1127.874313][T31907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1127.875964][T31907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1127.898946][T31907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1127.900584][T31907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1128.624785][T15863] lo speed is unknown, defaulting to 1000 [ 1129.290932][T15863] chnl_net:caif_netlink_parms(): no params data found [ 1129.823861][T15863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.834332][T15863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.834591][T15863] bridge_slave_0: entered allmulticast mode [ 1129.850654][T15863] bridge_slave_0: entered promiscuous mode [ 1129.867854][T15863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.868072][T15863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.868295][T15863] bridge_slave_1: entered allmulticast mode [ 1129.871119][T15863] bridge_slave_1: entered promiscuous mode [ 1129.874733][T31907] Bluetooth: hci2: command tx timeout [ 1130.191203][T15863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.195871][T15863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.365619][T15979] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1130.479588][T15863] team0: Port device team_slave_0 added [ 1130.499691][T15863] team0: Port device team_slave_1 added [ 1130.834781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.885662][T15863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.885677][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.885702][T15863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.888984][T15863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.888999][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.889026][T15863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.490039][T15863] hsr_slave_0: entered promiscuous mode [ 1131.491466][T15863] hsr_slave_1: entered promiscuous mode [ 1131.492532][T15863] debugfs: 'hsr0' already exists in 'hsr' [ 1131.492554][T15863] Cannot create hsr debugfs directory [ 1131.856927][T31907] Bluetooth: hci2: command tx timeout [ 1132.429692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.833436][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.358132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.837828][T31907] Bluetooth: hci2: command tx timeout [ 1133.934430][T15863] bond0: (slave netdevsim0): Releasing backup interface [ 1134.593679][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18863'. [ 1134.787214][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.893084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.972266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.078895][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.160819][T16172] hsr_slave_0 (unregistering): left promiscuous mode [ 1135.602738][T15863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1135.714447][T15863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1135.786118][T15863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1135.819549][T31907] Bluetooth: hci2: command tx timeout [ 1135.858131][T15863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1136.340855][T15863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.378667][T15863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.402050][T11332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.402268][T11332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.432504][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.432821][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.200085][T15863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.645757][T15863] veth0_vlan: entered promiscuous mode [ 1137.698320][T15863] veth1_vlan: entered promiscuous mode [ 1137.795603][T16311] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1137.795814][T16311] syzkaller1: linktype set to 774 [ 1138.049201][T15863] veth0_macvtap: entered promiscuous mode [ 1138.074773][T15863] veth1_macvtap: entered promiscuous mode [ 1138.184213][T15863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.213800][T15863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.273331][T11332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.278542][T11332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.290287][T11332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.297575][T11332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.805278][T11332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.805298][T11332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.973515][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.973537][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.259525][T16365] netlink: 'syz.0.18952': attribute type 1 has an invalid length. [ 1139.339845][T16365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1139.472188][T16372] bond2: (slave ip6erspan0): making interface the new active one [ 1139.474548][T16372] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1141.182004][T11332] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1141.352743][ T37] audit: type=1326 audit(2000001007.682:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.352797][ T37] audit: type=1326 audit(2000001007.682:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.352844][ T37] audit: type=1326 audit(2000001007.682:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.352887][ T37] audit: type=1326 audit(2000001007.682:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.352928][ T37] audit: type=1326 audit(2000001007.682:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.352971][ T37] audit: type=1326 audit(2000001007.682:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.353012][ T37] audit: type=1326 audit(2000001007.682:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.353080][ T37] audit: type=1326 audit(2000001007.682:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.353123][ T37] audit: type=1326 audit(2000001007.682:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1141.353164][ T37] audit: type=1326 audit(2000001007.682:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.2.18992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x50000 [ 1143.356018][T16529] syzkaller1: entered promiscuous mode [ 1143.356066][T16529] syzkaller1: entered allmulticast mode [ 1143.663863][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.633626][T16592] input: syz1 as /devices/virtual/input/input118 [ 1145.057941][ T5791] Process accounting resumed [ 1145.744046][T29487] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1145.892306][T29487] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.892336][T29487] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.894989][T29487] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1145.895027][T29487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1145.895048][T29487] usb 6-1: SerialNumber: syz [ 1146.077064][T12215] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1146.175880][T29487] usb 6-1: 0:2 : does not exist [ 1146.227543][T29487] usb 6-1: USB disconnect, device number 69 [ 1146.229741][T12215] usb 3-1: Using ep0 maxpacket: 32 [ 1146.242716][T12215] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1146.242744][T12215] usb 3-1: config 0 has no interface number 0 [ 1146.242793][T12215] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1146.245807][T12215] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1146.245833][T12215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.245855][T12215] usb 3-1: Product: syz [ 1146.245870][T12215] usb 3-1: Manufacturer: syz [ 1146.245884][T12215] usb 3-1: SerialNumber: syz [ 1146.310423][T12215] usb 3-1: config 0 descriptor?? [ 1146.326840][T12215] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1146.326879][T12215] em28xx 3-1:0.132: Video interface 132 found: [ 1146.700339][T12215] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1147.278930][T12215] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1147.278972][T12215] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 1147.279031][T12215] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1147.335093][T12215] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1147.335134][T12215] em28xx 3-1:0.132: analog set to bulk mode. [ 1147.359820][T29487] em28xx 3-1:0.132: Registering V4L2 extension [ 1147.373531][T12215] usb 3-1: USB disconnect, device number 52 [ 1147.380288][T12215] em28xx 3-1:0.132: Disconnecting em28xx [ 1147.783494][T29487] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1147.783519][T29487] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1147.783533][T29487] em28xx 3-1:0.132: No AC97 audio processor [ 1147.883165][T29487] usb 3-1: Decoder not found [ 1147.883185][T29487] em28xx 3-1:0.132: failed to create media graph [ 1147.883265][T29487] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1147.928851][T29487] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1147.947584][T12215] em28xx 3-1:0.132: Closing input extension [ 1148.002501][T12215] em28xx 3-1:0.132: Freeing device [ 1149.763892][ T5118] Bluetooth: hci5: command 0x1003 tx timeout [ 1149.764208][T31907] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1149.964152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1154.679445][T17005] serio: Serial port ttyS3 [ 1154.753475][T16953] lo speed is unknown, defaulting to 1000 [ 1155.435779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1155.518118][ C0] vkms_vblank_simulate: vblank timer overrun [ 1155.627569][ C0] vkms_vblank_simulate: vblank timer overrun [ 1155.677870][ C0] vkms_vblank_simulate: vblank timer overrun [ 1155.789194][ C0] vkms_vblank_simulate: vblank timer overrun [ 1155.889406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1156.289359][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1156.441432][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1156.447653][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1156.447683][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.455195][ T9] usb 3-1: config 0 descriptor?? [ 1156.671423][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1156.681411][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1156.682456][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1156.682512][ T9] usb 3-1: media controller created [ 1156.761421][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1156.822081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1157.018565][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1157.084703][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1157.092203][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1157.115826][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1157.128656][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1157.140070][ T1222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.447807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1157.473838][ T1222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.482506][ T9] az6027: usb out operation failed. (-71) [ 1157.482524][ T9] stb0899_attach: Driver disabled by Kconfig [ 1157.482534][ T9] az6027: no front-end attached [ 1157.482534][ T9] [ 1157.482914][ T9] az6027: usb out operation failed. (-71) [ 1157.482927][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1157.495682][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input119 [ 1157.503105][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1157.503126][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1157.505966][ T9] usb 3-1: USB disconnect, device number 53 [ 1157.797216][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1157.887081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1157.997257][ T1222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.170880][T17129] netlink: 'syz.5.19314': attribute type 4 has an invalid length. [ 1158.170903][T17129] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.19314'. [ 1158.317335][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.432595][ T1222] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.539055][T17082] lo speed is unknown, defaulting to 1000 [ 1159.077160][ T1222] bridge_slave_1: left allmulticast mode [ 1159.077188][ T1222] bridge_slave_1: left promiscuous mode [ 1159.092518][ T1222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.106904][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 1159.106922][ T37] audit: type=1326 audit(2000001026.326:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17136 comm="syz.2.19320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7fc00000 [ 1159.137346][T31907] Bluetooth: hci0: command tx timeout [ 1159.245351][ T1222] bridge_slave_0: left allmulticast mode [ 1159.245379][ T1222] bridge_slave_0: left promiscuous mode [ 1159.245640][ T1222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.787470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.974744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1160.055494][ C0] vkms_vblank_simulate: vblank timer overrun [ 1160.177657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1160.365642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1160.441854][T17195] block nbd2: Dead connection, failed to find a fallback [ 1160.442054][T17195] block nbd2: shutting down sockets [ 1160.442072][T17195] blk_print_req_error: 5 callbacks suppressed [ 1160.446106][T17195] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.450374][T17195] buffer_io_error: 5 callbacks suppressed [ 1160.450412][T17195] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1160.464260][T17195] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.464318][T17195] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1160.468398][T17195] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.468449][T17195] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1160.474010][T17195] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.474063][T17195] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1160.478580][T17195] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.478631][T17195] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1160.482131][T17195] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.482179][T17195] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1160.484675][T17195] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.484698][T17195] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1160.493499][T17195] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.493720][T17195] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1160.500166][T17195] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.500338][T17195] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1160.503546][T17195] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.503595][T17195] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1160.530980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1160.630806][T17195] ldm_validate_partition_table(): Disk read failed. [ 1160.691275][T17195] Dev nbd2: unable to read RDB block 0 [ 1160.831962][T17195] nbd2: unable to read partition table [ 1160.837347][T17195] SQUASHFS error: Failed to read block 0x0: -5 [ 1160.837383][T17195] unable to read squashfs_super_block [ 1160.927935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1161.122415][T31907] Bluetooth: hci0: command tx timeout [ 1161.196326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1161.399260][ T1222] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 1161.524233][ C0] vkms_vblank_simulate: vblank timer overrun [ 1161.701202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1161.898136][ C0] vkms_vblank_simulate: vblank timer overrun [ 1162.452307][T17260] netlink: 'syz.2.19374': attribute type 1 has an invalid length. [ 1163.101273][T31907] Bluetooth: hci0: command tx timeout [ 1163.162991][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.759492][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.873743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.991368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.107868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.230728][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.288076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.357081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.478757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.570674][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.676507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.753260][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.812190][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.908326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.999993][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.082423][ T1222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.098977][T31907] Bluetooth: hci0: command tx timeout [ 1165.186724][ T1222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.251225][ T1222] bond0 (unregistering): Released all slaves [ 1165.315937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.393128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.485725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.560462][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.627025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.705706][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.982723][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.077871][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.143786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.276302][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.349581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.442591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.513929][ T1222] bond1 (unregistering): Released all slaves [ 1166.591717][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.656278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.738726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.823665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.907691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.979264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.042269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.108311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.176386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.240230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.309253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.389962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.478877][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.547867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.622884][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.785694][ T1222] bond2 (unregistering): Released all slaves [ 1167.838108][T17260] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1168.180785][ C0] vkms_vblank_simulate: vblank timer overrun [ 1168.230384][T17306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.230422][T17306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.299558][T17306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.299590][T17306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.340148][T17306] batman_adv: batadv0: Interface deactivated: macsec1 [ 1168.340177][T17306] batman_adv: batadv0: Removing interface: macsec1 [ 1168.672473][ T1222] tipc: Left network mode [ 1168.673917][T17082] chnl_net:caif_netlink_parms(): no params data found [ 1168.803317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1168.962726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1169.229429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1169.325762][T17571] netlink: 'syz.2.19527': attribute type 7 has an invalid length. [ 1169.421182][T17571] netlink: 'syz.2.19527': attribute type 7 has an invalid length. [ 1169.441141][T11336] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.538110][T11336] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.683807][T11336] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.912920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.344247][T11336] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.442771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.461011][T17082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.461152][T17082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.461419][T17082] bridge_slave_0: entered allmulticast mode [ 1170.473292][T17082] bridge_slave_0: entered promiscuous mode [ 1170.491160][T17082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.491288][T17082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.492265][T17082] bridge_slave_1: entered allmulticast mode [ 1170.541335][T17082] bridge_slave_1: entered promiscuous mode [ 1170.937010][T17082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.082034][ T1222] hsr_slave_1: left promiscuous mode [ 1171.082894][ T1222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.082917][ T1222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.151300][ T1222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.151347][ T1222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.354479][ T1222] veth1_macvtap: left promiscuous mode [ 1171.354579][ T1222] veth0_macvtap: left promiscuous mode [ 1171.354829][ T1222] veth1_vlan: left promiscuous mode [ 1171.354906][ T1222] veth0_vlan: left promiscuous mode [ 1172.168771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.428415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.755527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.867781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.076216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.769516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.951398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.105625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.218284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.387411][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.557370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.673025][ T1222] team0 (unregistering): Port device team_slave_1 removed [ 1175.723159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.921306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.108781][ T1222] team0 (unregistering): Port device team_slave_0 removed [ 1176.263853][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.383398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.537559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.611654][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19681'. [ 1176.770382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.029255][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.174566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.290167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.423623][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.510390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.577439][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.645281][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.744358][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.816052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.902544][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.986894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.117064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.200958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.286008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.373860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.468942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.541786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.725998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.787895][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.422271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.508108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.640523][T17082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.815645][T17894] team1: entered promiscuous mode [ 1179.815673][T17894] team1: entered allmulticast mode [ 1179.820703][T17894] 8021q: adding VLAN 0 to HW filter on device team1 [ 1180.082065][T17082] team0: Port device team_slave_0 added [ 1180.110773][T17082] team0: Port device team_slave_1 added [ 1180.175046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.294540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.537734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.582939][T17082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.582956][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.582982][T17082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.589375][T17082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.589390][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.589416][T17082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.763056][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.859077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.206511][T17082] hsr_slave_0: entered promiscuous mode [ 1181.217032][T17082] hsr_slave_1: entered promiscuous mode [ 1181.223879][T17082] debugfs: 'hsr0' already exists in 'hsr' [ 1181.223905][T17082] Cannot create hsr debugfs directory [ 1181.303350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.409069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.560172][T29487] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1181.604893][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.715650][T29487] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1181.715686][T29487] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1181.715730][T29487] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1181.715756][T29487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.771030][T18109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1181.822446][ T1222] IPVS: stop unused estimator thread 0... [ 1182.165566][T29487] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1182.168835][T29487] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input120 [ 1182.253774][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1182.263656][T29487] usb 3-1: USB disconnect, device number 54 [ 1182.864077][T17082] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1182.897048][T17082] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1183.132991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1183.474594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1183.703505][T17082] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1183.758784][T17082] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1183.847717][T18183] evm: overlay not supported [ 1184.018549][T17082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.077510][T17082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.118826][T11351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.120524][T11351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.157376][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.157668][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.857323][T17082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.664053][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.664124][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.684233][T17082] veth0_vlan: entered promiscuous mode [ 1185.710128][T17082] veth1_vlan: entered promiscuous mode [ 1185.823323][T17082] veth0_macvtap: entered promiscuous mode [ 1185.857335][T17082] veth1_macvtap: entered promiscuous mode [ 1185.938629][T17082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.995442][T17082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.055376][T11351] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.055844][T11351] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.056289][T11351] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.084567][T11316] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.699165][T32623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.699186][T32623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.946109][T11351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.946130][T11351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.541155][T18402] all: renamed from lo (while UP) [ 1188.809042][T18418] loop2: detected capacity change from 0 to 7 [ 1188.835091][T18418] Dev loop2: unable to read RDB block 7 [ 1188.835137][T18418] loop2: unable to read partition table [ 1188.835372][T18418] loop2: partition table beyond EOD, truncated [ 1188.835391][T18418] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1189.399912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1189.476026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1190.047357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1190.047384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1196.209550][ T37] audit: type=1326 audit(2000001065.263:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.2.20053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7fc00000 [ 1196.827688][ T37] audit: type=1326 audit(2000001065.924:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.2.20053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb26cdefc9 code=0x7fc00000 [ 1197.373916][T18735] overlayfs: statfs failed on './file0' [ 1198.388938][T18781] kvm: MWAIT instruction emulated as NOP! [ 1199.808608][T18842] block nbd5: shutting down sockets [ 1204.025838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1204.469263][ T31] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1204.631364][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1204.633832][ T31] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1204.633859][ T31] usb 3-1: config 0 has no interface number 0 [ 1204.633908][ T31] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1204.633934][ T31] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1204.633962][ T31] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1204.633990][ T31] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.639566][ T31] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1204.639595][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.639617][ T31] usb 3-1: Product: syz [ 1204.639633][ T31] usb 3-1: Manufacturer: syz [ 1204.639655][ T31] usb 3-1: SerialNumber: syz [ 1204.709892][ T31] usb 3-1: config 0 descriptor?? [ 1204.939740][ T31] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1205.157010][ T31] usb 3-1: USB disconnect, device number 55 [ 1205.727930][ T37] audit: type=1326 audit(2000001075.268:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.727983][ T37] audit: type=1326 audit(2000001075.268:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.756365][ T37] audit: type=1326 audit(2000001075.299:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.756415][ T37] audit: type=1326 audit(2000001075.299:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.756456][ T37] audit: type=1326 audit(2000001075.299:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.756495][ T37] audit: type=1326 audit(2000001075.299:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.756534][ T37] audit: type=1326 audit(2000001075.299:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.758976][ T37] audit: type=1326 audit(2000001075.299:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.759021][ T37] audit: type=1326 audit(2000001075.299:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.759060][ T37] audit: type=1326 audit(2000001075.299:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19059 comm="syz.2.20223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x7ffc0000 [ 1205.900170][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20225'. [ 1206.743744][T19098] netlink: 68 bytes leftover after parsing attributes in process `syz.7.20243'. [ 1206.916459][T18865] Set syz1 is full, maxelem 65536 reached [ 1209.422430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1213.917631][ T5469] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 1213.983945][ T5469] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1214.185005][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1214.185023][ T37] audit: type=1326 audit(2000001084.138:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19368 comm="syz.2.20363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb26cdefc9 code=0x0 [ 1214.223468][ T31] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1214.369416][ T31] usb 6-1: config 0 has no interfaces? [ 1214.370847][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.370875][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1214.370897][ T31] usb 6-1: SerialNumber: syz [ 1214.377432][ T31] usb 6-1: config 0 descriptor?? [ 1214.691956][ T5469] usb 6-1: USB disconnect, device number 70 [ 1215.243406][T19419] loop2: detected capacity change from 0 to 7 [ 1215.245605][T19419] loop2: [ 1215.245638][T19419] loop2: partition table partially beyond EOD, truncated [ 1215.688518][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20395'. [ 1218.662400][T19558] kvm: emulating exchange as write [ 1219.694724][T19615] kvm: pic: non byte read [ 1219.695203][T19615] kvm: pic: level sensitive irq not supported [ 1219.695272][T19615] kvm: pic: non byte read [ 1219.700413][T19615] kvm: pic: level sensitive irq not supported [ 1219.714187][T19615] kvm: pic: non byte read [ 1219.714816][T19615] kvm: pic: level sensitive irq not supported [ 1219.714882][T19615] kvm: pic: non byte read [ 1219.715074][T19615] kvm: pic: level sensitive irq not supported [ 1219.715126][T19615] kvm: pic: non byte read [ 1219.715311][T19615] kvm: pic: level sensitive irq not supported [ 1219.715362][T19615] kvm: pic: non byte read [ 1219.715547][T19615] kvm: pic: level sensitive irq not supported [ 1219.715596][T19615] kvm: pic: non byte read [ 1219.715780][T19615] kvm: pic: level sensitive irq not supported [ 1219.715831][T19615] kvm: pic: non byte read [ 1219.716019][T19615] kvm: pic: level sensitive irq not supported [ 1219.716071][T19615] kvm: pic: non byte read [ 1219.716257][T19615] kvm: pic: level sensitive irq not supported [ 1219.716306][T19615] kvm: pic: non byte read [ 1219.716490][T19615] kvm: pic: level sensitive irq not supported [ 1223.363798][T19813] syz_tun: entered allmulticast mode [ 1223.387752][T19813] syz_tun: left allmulticast mode [ 1224.377137][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20589'. [ 1225.309776][T11343] [ 1225.309790][T11343] ============================================ [ 1225.309798][T11343] WARNING: possible recursive locking detected [ 1225.309814][T11343] syzkaller #0 Not tainted [ 1225.309824][T11343] -------------------------------------------- [ 1225.309833][T11343] kworker/u8:34/11343 is trying to acquire lock: [ 1225.309845][T11343] ffffe8ffffd7f580 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x70a/0xb80 [ 1225.309894][T11343] [ 1225.309894][T11343] but task is already holding lock: [ 1225.309901][T11343] ffffe8ffffc994c0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 1225.309942][T11343] [ 1225.309942][T11343] other info that might help us debug this: [ 1225.309949][T11343] Possible unsafe locking scenario: [ 1225.309949][T11343] [ 1225.309957][T11343] CPU0 [ 1225.309962][T11343] ---- [ 1225.309968][T11343] lock(&pd_list->lock); [ 1225.309982][T11343] lock(&pd_list->lock); [ 1225.309995][T11343] [ 1225.309995][T11343] *** DEADLOCK *** [ 1225.309995][T11343] [ 1225.310001][T11343] May be due to missing lock nesting notation [ 1225.310001][T11343] [ 1225.310008][T11343] 6 locks held by kworker/u8:34/11343: [ 1225.310020][T11343] #0: ffff888020359138 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1225.310069][T11343] #1: ffffc9001fe5fba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1225.310116][T11343] #2: ffffffff8d44ab00 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1225.310163][T11343] #3: ffffffff8d5aa6c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1225.310210][T11343] #4: ffffe8ffffc994c0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 1225.310263][T11343] #5: ffffffff8d5aa6c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1225.310308][T11343] [ 1225.310308][T11343] stack backtrace: [ 1225.310320][T11343] CPU: 0 UID: 0 PID: 11343 Comm: kworker/u8:34 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1225.310343][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1225.310357][T11343] Workqueue: pencrypt_parallel padata_parallel_worker [ 1225.310378][T11343] Call Trace: [ 1225.310386][T11343] [ 1225.310395][T11343] dump_stack_lvl+0x189/0x250 [ 1225.310423][T11343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1225.310449][T11343] ? __pfx__printk+0x10/0x10 [ 1225.310472][T11343] ? print_lock_name+0xde/0x100 [ 1225.310495][T11343] print_deadlock_bug+0x28b/0x2a0 [ 1225.310514][T11343] validate_chain+0x1a3f/0x2140 [ 1225.310547][T11343] ? rcu_is_watching+0x15/0xb0 [ 1225.310564][T11343] ? look_up_lock_class+0x74/0x170 [ 1225.310588][T11343] ? register_lock_class+0x51/0x320 [ 1225.310613][T11343] __lock_acquire+0xab9/0xd20 [ 1225.310638][T11343] ? padata_do_serial+0x70a/0xb80 [ 1225.310658][T11343] lock_acquire+0x120/0x360 [ 1225.310679][T11343] ? padata_do_serial+0x70a/0xb80 [ 1225.310702][T11343] ? queue_work_on+0x1f7/0x270 [ 1225.310727][T11343] rt_spin_lock+0x88/0x3e0 [ 1225.310746][T11343] ? padata_do_serial+0x70a/0xb80 [ 1225.310766][T11343] ? __pfx_queue_work_on+0x10/0x10 [ 1225.310788][T11343] ? __pfx_rt_spin_lock+0x10/0x10 [ 1225.310810][T11343] ? rt_spin_unlock+0x161/0x200 [ 1225.310831][T11343] padata_do_serial+0x70a/0xb80 [ 1225.310857][T11343] ? padata_parallel_worker+0x44/0x1d0 [ 1225.310876][T11343] padata_parallel_worker+0x75/0x1d0 [ 1225.310896][T11343] ? process_scheduled_works+0x9ef/0x17b0 [ 1225.310919][T11343] process_scheduled_works+0xae1/0x17b0 [ 1225.310953][T11343] ? __pfx_process_scheduled_works+0x10/0x10 [ 1225.310982][T11343] worker_thread+0x8a0/0xda0 [ 1225.311016][T11343] kthread+0x711/0x8a0 [ 1225.311042][T11343] ? __pfx_worker_thread+0x10/0x10 [ 1225.311063][T11343] ? __pfx_kthread+0x10/0x10 [ 1225.311088][T11343] ? rt_spin_unlock+0x150/0x200 [ 1225.311109][T11343] ? rt_spin_unlock+0x161/0x200 [ 1225.311127][T11343] ? __pfx_kthread+0x10/0x10 [ 1225.311153][T11343] ret_from_fork+0x4bc/0x870 [ 1225.311176][T11343] ? __pfx_ret_from_fork+0x10/0x10 [ 1225.311200][T11343] ? __switch_to_asm+0x39/0x70 [ 1225.311218][T11343] ? __switch_to_asm+0x33/0x70 [ 1225.311239][T11343] ? __pfx_kthread+0x10/0x10 [ 1225.311261][T11343] ret_from_fork_asm+0x1a/0x30 [ 1225.311286][T11343] [ 1225.828707][T19926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.