last executing test programs: 15.967147842s ago: executing program 1 (id=2240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) inotify_init1(0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 14.94003078s ago: executing program 1 (id=2248): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x4}, 0x10) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x144) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}]}) 12.436663778s ago: executing program 3 (id=2258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) inotify_init1(0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 11.374660466s ago: executing program 3 (id=2260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x82011, r0, 0x0) 10.936237469s ago: executing program 4 (id=2261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket(0x26, 0x5, 0x1fb458cc) statx(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x100, 0x80, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, 0x0, 0x40812) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x76) unshare(0x22020600) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23) recvmmsg(r7, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 10.87289653s ago: executing program 0 (id=2262): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9.47581194s ago: executing program 3 (id=2263): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = epoll_create(0x9) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3200c00, &(0x7f0000000d00)=ANY=[], 0x3, 0xab3, &(0x7f0000000340)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) mq_unlink(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000f40)={0x0, 'veth0_vlan\x00', {0x1}, 0x77}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 9.255308612s ago: executing program 4 (id=2264): syz_mount_image$fuse(0x0, 0x0, 0x800018, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000010201010000000000000000020000010600074000040000240001800c"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) 9.186131352s ago: executing program 2 (id=2265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000000280)=""/40, 0x28) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x2, "c6c01dcf0000000045102cb9ff074f844a69e900b6f8ffffffffffff00", 0x0, 0xfffffffd}, 0x3c) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) openat$ipvs(0xffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000200)='ns/time\x00') socket$inet6(0xa, 0x6, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0x880) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.174004242s ago: executing program 1 (id=2266): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) open(0x0, 0x64842, 0x86) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) sysfs$2(0x2, 0xf1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2000020, &(0x7f0000000100)={[{@huge_never}, {@huge_advise}, {@usrquota}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x65, 0x23, 0x65, 0x32, 0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x37]}}]}) 9.044938003s ago: executing program 4 (id=2267): r0 = syz_io_uring_setup(0x43d8, &(0x7f0000000000)={0x0, 0x7c87, 0x40, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000002c0)={0x0, 0x0, 0x201}, 0x1) 7.759174313s ago: executing program 0 (id=2268): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@dioread_lock}], [{@smackfsroot}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x7f}}]}, 0x1, 0x4bf, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) fsopen(&(0x7f0000000240)='tmpfs\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 7.753512223s ago: executing program 1 (id=2269): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) close(0xffffffffffffffff) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$inet(0x2, 0x80000, 0x0) r7 = socket$key(0xf, 0x3, 0x2) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1000) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}]}, 0x30}, 0x1, 0x7}, 0x0) unshare(0x22020400) 7.663999944s ago: executing program 4 (id=2270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) inotify_init1(0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 7.254259056s ago: executing program 2 (id=2271): socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0x2710976e35b8bc97, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) lstat(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x7d, 0x2, {{0x0, 0x3b, 0x7ff, 0x975, {0x0, 0x0, 0x5}, 0x32000000, 0xfffffffc, 0x9, 0x10001, 0x5, ',.!:#', 0x3, '-]:'}, 0x0, '', r3, 0xee00, r4}}, 0x50) 7.219484157s ago: executing program 3 (id=2272): socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 6.70982888s ago: executing program 4 (id=2273): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f00000003c0)) 6.539378682s ago: executing program 0 (id=2274): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000014c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000a000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001440)={0x50, r1, 0x25, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$cgroup_int(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) semget$private(0x0, 0x207, 0x480) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) 5.522417979s ago: executing program 2 (id=2275): listen(0xffffffffffffffff, 0xffffffff) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000004b000/0x1000)=nil, 0x400000, 0x3, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.674142253s ago: executing program 4 (id=2276): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000780)=""/4110, 0x100e) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_setup(0x673d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x500000}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 3.673856033s ago: executing program 2 (id=2277): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x4}, 0x10) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x144) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}]}) 3.673563823s ago: executing program 3 (id=2278): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0x2710976e35b8bc97, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = open(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, 0x0) process_mrelease(0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 3.668350683s ago: executing program 0 (id=2279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000b15000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) mmap(&(0x7f0000b15000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 1.560843879s ago: executing program 3 (id=2280): mkdir(0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 1.3289406s ago: executing program 1 (id=2281): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000000280)=""/40, 0x28) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x2, "c6c01dcf0000000045102cb9ff074f844a69e900b6f8ffffffffffff00", 0x0, 0xfffffffd}, 0x3c) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) openat$ipvs(0xffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000200)='ns/time\x00') socket$inet6(0xa, 0x6, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0x880) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.156101801s ago: executing program 0 (id=2282): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = epoll_create(0x9) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3200c00, &(0x7f0000000d00)=ANY=[], 0x3, 0xab3, &(0x7f0000000340)="$eJzs3U2MG1cBAOBn73qTTVPilJQuSWg3/LTlp7vNZgk/ETRVcyFqKm6VKi5RmpaINEWkErSq1CQnTtCqClcoQkIqhwoQUntBUU5cKtFIXCoOhQMHoiAVcaCFxGjt97z2W5vxJrs7Xvv7pLfPb97Y783szHg8M++9AIytavPv4uJMJYSLb7165O/3/m16acpD7Tnqzb+THalaCKES05PZ57030Yqvv//iiV5xJSw0/6Z0eOxa+723hRDOhdlwKdTD7otXXnl74dFj549e2PfO64eurs/SAwDAePnmpUOLd/7lj3t2fvjG3YfDlvb0dH5ej+nt8bz/cDzxT+f/1dCdrnSETlPZfJMxVLP5JnrM11lOLZtvsk/5U9nn1tr5e7rm21JQ/kTHtDh9IsCISPtVPVSqc13panVurvWbPDR/109V5s6cOv3U2ZIqCqy5f90TQpgVVhsajcZLzRU4BHURhjcculx+Hf5faOwo+wgE0JLfL1zhXH5l4da0P21ysPKvPVzt/X5YAxu9/ReV/6M/l1v+CmNe/i/OO+KwdkZ1a0rLlfaj7TGd30fIn19a7f6fPi+/H1EbsJ75/Y+i6cOmXz03y02SfvXPt4tR9bUYp/Xw9Sy/c//J/6eb5X8M9PbvNb/+P9l7+mvTpV/rXAqzQ1CHkQ61IaiDMHBolH0AAobW8nNzLY0o5efP9eX5WwrytxbkTxfkbyvIv60gH8bZb5/7cXi5svw7P/9Nv9rrYek62+0x/sgq65Nfj1xt+flzv6t1q+XnzxPDMHvz+OMnv/zkE1daz/9X2tv/jbi9z8Z0Pe5bl+IM6Xphfl29/ex/vbucap/57sjqc/uK+RutEnd1z1fZtfw5oeM4s6IeM93v29Fvvr3d89Wz+aZj2JrVNz8/2Za9L51/pONqWl+T2fLWsuWYyuqRjis7Y5zXA25G2h77Pf+fts+ZUKs8der0yQdjOm2nf5iobVmavr/zQ3+1MXUHbs2g7X9mQnf7n+3t6bVqx3Ghffqdjhf725/XPX2hlazl8x+I6fQ99+2J6eb0uRPPnn5yrRcextzZ51/4zvHTp09+z4v0Ytpq8WJzvri8Ze0+sOjIMapPDsL4mH/ume/On33+hQdOPXP86ZNPnzxz4ODBAwsLB79yYHG+eV4/3/mrHxgly1/6ZdcEAAAAAAAAAAAAGNT3jx658qfLX3q31f5/uf1fav+fnvxN7f9/mLX/z9vJp1YBqZ39zh75zXH33uyux1Q2Xy2Gj2b13ZWVc2f2vo/FuD2OX/zg1N4+79c11eeubHref2+aL+tOYEV/KVNZHyTtcRJjg/1PxvSFGP88QIkq070nx7iof+u0rTf7A3hpvSrJekv9iaStIfVjktp/9+vXKR3/d25AHVl7G9EssXfJm6WHexhd/yhz/M/QZ3q1M91xJj4E/SWvCNvarxuNMutRW6N1NKzrWViX0GgYxQMoz7O/XH5d9vif6bpnis/8/htbl0Ka7drD3cfLvP9SuBXDPv6k8kdr/M/2VZiBjn89elfv6ud58NEVPvjp1Xc7ig27Bz3+5suf+oHeVVxmpw9j+Wn57wuDld94LSs/vyE0oP9k5W8bsPwVy7/35sr/byw/rbb7PzVo+a0aV6rd9civG6f7f/l14+R6tvypb89VL/9NDtR4I5YP46z/VfhBR7AdTptl/N9+8ucwvhjTSwfCDzq+ZfNv5NXWPz1fkb4H0vMU6TmKSsH322a/izPu4/9+NcZF+0Ma/zdtj/Ue6WpHutZj3W72bQVGzXtl3v+bDa3RfYbgPsiahXNDUAdhSMNwjIHdGRqNRqkdeetFvFxlr/+y7z6XXf7Nrf+N+3WSj/+bn8Pn4/9Ws6rl4//m78/H/83z8/H18vx8/N98febj/+b5d2Wfm1/BninI/3hB/u6C/D3L+dO98vcWvP8TBfn7CvLvLsi/pyD/joL8iYL8Txfkf6Yg/96C/PsL8j9bkD/qmu1ROnaqcVt+GGd5+zz7P4yPdP+n3/6/qyAf2Lx+8sb+R574zbfqrfb/U+3fa+k+3uGYrsXfzj+I6fy+d+hIL+Vdjum/ZvllX28CluX9Z+Tf7/cV5AObV3rOy/4NY6iytffkGKfjQr9+q/qd57O5fC7Gn4/xF2L8QIznYjwf4/0xXtig+rE+Hvn17w69XFn+vb8jyx/0efK8PVDeT9SBAeuTXx9Y7fPseT9+q3Wr5d9kczAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDSVJt/FxdnKiFcfOvVI48fOzW/NOWh9hz15t/JjlSt/b4QHozxRIx/Fl9cf//FE0vxPyda8Y2YroSFUAmVdn547Fq7pNtCCOfCbLgU6mH3xSuvvL3w6LHzRy/se+f1Q1fXbw0AAADA6PtfAAAA//803iXr") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) mq_unlink(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000f40)={0x0, 'veth0_vlan\x00', {0x1}, 0x77}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 974.712093ms ago: executing program 2 (id=2283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) inotify_init1(0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 196.783169ms ago: executing program 1 (id=2284): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@dioread_lock}], [{@smackfsroot}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x7f}}]}, 0x1, 0x4bf, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x40010, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) fsopen(&(0x7f0000000240)='tmpfs\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 1.77041ms ago: executing program 0 (id=2285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x23, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 2 (id=2286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c30014016800"}) kernel console output (not intermixed with test programs): 20.901346][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 120.970782][ T4820] device dummy0 entered promiscuous mode [ 120.992531][ T4820] device macvtap1 entered promiscuous mode [ 121.054011][ T4821] device dummy0 left promiscuous mode [ 121.137941][ T4208] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 121.204386][ T4208] usb 2-1: cp210x converter now attached to ttyUSB0 [ 121.404465][ T4210] usb 2-1: USB disconnect, device number 6 [ 121.481828][ T4210] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.556367][ T4210] cp210x 2-1:0.0: device disconnected [ 121.597902][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.968125][ T21] usb 4-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 122.016414][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.166522][ T4835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 122.208173][ T21] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.239372][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.248393][ T21] usb 4-1: Product: syz [ 122.252688][ T21] usb 4-1: Manufacturer: syz [ 122.257567][ T21] usb 4-1: SerialNumber: syz [ 122.266470][ T21] usb 4-1: config 0 descriptor?? [ 122.600944][ T4825] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 122.667586][ T4825] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 122.784076][ T21] usb 4-1: USB disconnect, device number 3 [ 123.440199][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 123.482174][ C1] vcan0: j1939_session_tx_dat: 0xffff88802546e000: queue data error: -100 [ 123.576356][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.638066][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.675864][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.705513][ T4877] device bridge_slave_0 left promiscuous mode [ 123.715241][ T4877] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.771214][ T4877] device bridge_slave_1 left promiscuous mode [ 123.796527][ T4877] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.855898][ T4877] bond0: (slave bond_slave_0): Releasing backup interface [ 123.911442][ T4877] bond0: (slave bond_slave_1): Releasing backup interface [ 124.043545][ T4877] team0: Port device team_slave_0 removed [ 124.119961][ T4877] team0: Port device team_slave_1 removed [ 124.143857][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.153400][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.200917][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.239063][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.376218][ T4877] syz.2.202 (4877) used greatest stack depth: 19672 bytes left [ 125.928028][ T2287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.398042][ T2287] usb 3-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 126.567132][ T2287] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.778148][ T2287] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 126.992745][ T2287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.023216][ T2287] usb 3-1: Product: syz [ 127.043305][ T2287] usb 3-1: Manufacturer: syz [ 127.067856][ T2287] usb 3-1: SerialNumber: syz [ 127.116372][ T2287] usb 3-1: config 0 descriptor?? [ 127.812691][ T2287] usb 3-1: USB disconnect, device number 2 [ 128.572631][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 128.827612][ T4928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.474777][ T4928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.682385][ T4928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.885589][ T4928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.493115][ T4928] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.515756][ T4928] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.536377][ T4928] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.575275][ T4928] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.668496][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 132.668511][ T26] audit: type=1326 audit(1742393438.783:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4982 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 132.958447][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968874][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.697825][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 135.118370][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.139485][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.388216][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.402966][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.413152][ T7] usb 3-1: Product: syz [ 135.430810][ T7] usb 3-1: Manufacturer: syz [ 135.436716][ T7] usb 3-1: SerialNumber: syz [ 135.788760][ T7] usb 3-1: 0:2 : does not exist [ 135.922114][ T7] usb 3-1: USB disconnect, device number 3 [ 136.275090][ T5037] udevd[5037]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.917580][ T5069] syz.4.264 (5069) used greatest stack depth: 19160 bytes left [ 139.813484][ T5094] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 141.185041][ T4210] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 141.590780][ T4210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 141.743008][ T4210] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 141.958066][ T4210] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 142.127815][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.173349][ T4210] usb 5-1: Product: syz [ 142.196422][ T4210] usb 5-1: Manufacturer: syz [ 142.242356][ T4210] usb 5-1: SerialNumber: syz [ 142.285504][ T4210] usb 5-1: config 0 descriptor?? [ 142.348207][ T5100] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.390370][ T5100] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.434064][ T4210] usb 5-1: ucan: probing device on interface #0 [ 142.452725][ T4210] usb 5-1: ucan: invalid EP count (1) [ 142.459604][ T4210] usb 5-1: ucan: probe failed; try to update the device firmware [ 142.521991][ T5124] capability: warning: `syz.1.283' uses deprecated v2 capabilities in a way that may be insecure [ 142.573746][ T5126] program syz.1.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.679562][ T4210] usb 5-1: USB disconnect, device number 5 [ 142.746853][ T5129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 142.937314][ T5134] netlink: 56 bytes leftover after parsing attributes in process `syz.0.287'. [ 143.537839][ T4282] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.578741][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 143.617863][ T4264] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 143.706062][ T5141] bond2: (slave geneve2): Opening slave failed [ 143.777822][ T4282] usb 2-1: Using ep0 maxpacket: 32 [ 143.898172][ T4282] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 143.910296][ T4282] usb 2-1: config 0 has no interface number 0 [ 143.918861][ T4282] usb 2-1: config 0 interface 89 has no altsetting 0 [ 144.038093][ T4264] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.078573][ T4282] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 144.088147][ T4264] usb 1-1: not running at top speed; connect to a high speed hub [ 144.101164][ T4282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.131413][ T4282] usb 2-1: Product: syz [ 144.136212][ T4282] usb 2-1: Manufacturer: syz [ 144.152748][ T4282] usb 2-1: SerialNumber: syz [ 144.168049][ T4264] usb 1-1: config 8 has an invalid interface number: 166 but max is 1 [ 144.206281][ T4282] usb 2-1: config 0 descriptor?? [ 144.214530][ T4264] usb 1-1: config 8 has no interface number 1 [ 144.237627][ T4264] usb 1-1: config 8 interface 166 has no altsetting 0 [ 144.246138][ T4264] usb 1-1: config 8 interface 0 has no altsetting 0 [ 144.270343][ T4282] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 144.282577][ T4282] em28xx 2-1:0.89: Video interface 89 found: bulk [ 144.417924][ T4264] usb 1-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e [ 144.431774][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.466790][ T4264] usb 1-1: Product: syz [ 144.487373][ T4264] usb 1-1: Manufacturer: syz [ 144.499999][ T4264] usb 1-1: SerialNumber: syz [ 144.896157][ T4264] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 144.917867][ T4282] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 144.947148][ T4264] gspca_sonixj: reg_w1 err -71 [ 144.965427][ T4264] sonixj: probe of 1-1:8.0 failed with error -71 [ 144.975529][ T4264] usb 1-1: USB disconnect, device number 3 [ 145.677792][ T4210] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.758001][ T4282] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 145.774185][ T4282] em28xx 2-1:0.89: board has no eeprom [ 145.887910][ T4282] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 145.901437][ T4282] em28xx 2-1:0.89: analog set to bulk mode. [ 145.947222][ T4282] usb 2-1: USB disconnect, device number 7 [ 145.969907][ T4262] em28xx 2-1:0.89: Registering V4L2 extension [ 145.998850][ T4282] em28xx 2-1:0.89: Disconnecting em28xx [ 146.068215][ T4210] usb 5-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 146.096417][ T4262] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 146.111096][ T4262] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 146.111383][ T4210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.130882][ T4262] em28xx 2-1:0.89: No AC97 audio processor [ 146.178479][ T4262] usb 2-1: Decoder not found [ 146.195396][ T4262] em28xx 2-1:0.89: failed to create media graph [ 146.224053][ T4262] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 146.261378][ T4262] em28xx 2-1:0.89: Registering snapshot button... [ 146.282913][ T4262] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input6 [ 146.298024][ T4210] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 146.319137][ T4262] em28xx 2-1:0.89: Remote control support is not available for this card. [ 146.341992][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.372450][ T4210] usb 5-1: Product: syz [ 146.376659][ T4210] usb 5-1: Manufacturer: syz [ 146.392307][ T4282] em28xx 2-1:0.89: Closing input extension [ 146.401648][ T4210] usb 5-1: SerialNumber: syz [ 146.410149][ T4282] em28xx 2-1:0.89: Deregistering snapshot button [ 146.434462][ T4210] usb 5-1: config 0 descriptor?? [ 146.662965][ T4282] em28xx 2-1:0.89: Freeing device [ 146.832311][ T5158] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 146.915075][ T5158] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 147.296548][ T4282] usb 5-1: USB disconnect, device number 6 [ 150.877891][ T2287] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.402897][ T2287] usb 5-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 151.447300][ T2287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.649291][ T2287] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 151.666580][ T2287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.683215][ T2287] usb 5-1: Product: syz [ 151.688021][ T2287] usb 5-1: Manufacturer: syz [ 151.692937][ T2287] usb 5-1: SerialNumber: syz [ 151.711444][ T2287] usb 5-1: config 0 descriptor?? [ 153.316946][ T4210] usb 5-1: USB disconnect, device number 7 [ 155.932408][ T5299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.341'. [ 191.304166][ T4166] Bluetooth: hci0: command 0x0406 tx timeout [ 191.344832][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 191.351205][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 191.352602][ T4166] Bluetooth: hci2: command 0x0406 tx timeout [ 194.286728][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.293325][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.137850][ T4210] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.647904][ T4210] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 205.682918][ T4210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 206.017967][ T4210] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 206.039674][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.053175][ T4210] usb 5-1: Product: syz [ 206.058209][ T4210] usb 5-1: Manufacturer: syz [ 206.064265][ T4210] usb 5-1: SerialNumber: syz [ 206.075509][ T4210] usb 5-1: config 0 descriptor?? [ 206.583816][ T4210] usb 5-1: USB disconnect, device number 8 [ 206.650071][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 206.684849][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 209.587619][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 210.619549][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 213.697739][ T4210] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 215.154799][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 215.179192][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 215.877926][ T4210] usb 3-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 215.910233][ T4210] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.158262][ T4210] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 216.758883][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.798052][ T4210] usb 3-1: Product: syz [ 216.827781][ T4210] usb 3-1: Manufacturer: syz [ 216.992972][ T4210] usb 3-1: SerialNumber: syz [ 217.026613][ T4210] usb 3-1: config 0 descriptor?? [ 217.057878][ T4210] usb 3-1: can't set config #0, error -71 [ 217.574507][ T4210] usb 3-1: USB disconnect, device number 5 [ 219.712481][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 219.794614][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 220.248092][ T4264] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 220.947780][ T4264] usb 4-1: Using ep0 maxpacket: 8 [ 220.987856][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 222.527990][ T13] usb 2-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 222.566221][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.600085][ T4264] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 222.608643][ T4264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.620856][ T4264] usb 4-1: config 0 has no interface number 0 [ 222.750630][ T13] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 222.779623][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.806019][ T13] usb 2-1: Product: syz [ 222.824529][ T13] usb 2-1: Manufacturer: syz [ 222.853763][ T13] usb 2-1: SerialNumber: syz [ 222.896224][ T13] usb 2-1: config 0 descriptor?? [ 224.484932][ T4264] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 224.495494][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.506768][ T4264] usb 4-1: Product: syz [ 224.524901][ T13] usb 2-1: can't set config #0, error -71 [ 224.526934][ T4264] usb 4-1: Manufacturer: syz [ 224.541604][ T4264] usb 4-1: config 0 descriptor?? [ 224.594754][ T4264] usb 4-1: can't set config #0, error -71 [ 224.603804][ T4264] usb 4-1: USB disconnect, device number 4 [ 224.620265][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 224.636414][ T13] usb 2-1: USB disconnect, device number 8 [ 224.684859][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 231.378250][ T4282] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 231.787866][ T4282] usb 1-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 231.812885][ T4282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 231.987929][ T4282] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 232.015929][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.090130][ T4282] usb 1-1: Product: syz [ 232.124104][ T4282] usb 1-1: Manufacturer: syz [ 232.167560][ T4282] usb 1-1: SerialNumber: syz [ 232.231223][ T4282] usb 1-1: config 0 descriptor?? [ 232.588124][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 232.610246][ T6039] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 232.673865][ T6039] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 235.232115][ T4207] usb 1-1: USB disconnect, device number 4 [ 241.321534][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 242.542407][ T4207] Bluetooth: hci4: command 0x0406 tx timeout [ 242.615086][ T6145] netlink: 'syz.3.597': attribute type 6 has an invalid length. [ 244.499994][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 244.562727][ T6167] device bond1 entered promiscuous mode [ 244.658282][ T6167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.787727][ T4208] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 247.010548][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 248.587977][ T4208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.616982][ T4208] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.802496][ T4208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.832433][ T4208] usb 5-1: config 0 descriptor?? [ 248.886279][ T4208] pwc: Askey VC010 type 2 USB webcam detected. [ 249.307914][ T4208] pwc: recv_control_msg error -32 req 02 val 2b00 [ 249.368022][ T4208] pwc: recv_control_msg error -32 req 02 val 2700 [ 249.410066][ T4208] pwc: recv_control_msg error -32 req 02 val 2c00 [ 249.452706][ T4208] pwc: recv_control_msg error -32 req 04 val 1000 [ 249.497980][ T4208] pwc: recv_control_msg error -32 req 04 val 1300 [ 249.597824][ T4208] pwc: recv_control_msg error -32 req 04 val 1400 [ 249.647884][ T4208] pwc: recv_control_msg error -32 req 02 val 2000 [ 249.687896][ T4208] pwc: recv_control_msg error -32 req 02 val 2100 [ 249.727915][ T4208] pwc: recv_control_msg error -32 req 04 val 1500 [ 249.767913][ T4208] pwc: recv_control_msg error -32 req 02 val 2500 [ 249.807938][ T4208] pwc: recv_control_msg error -32 req 02 val 2400 [ 250.067928][ T4208] pwc: recv_control_msg error -71 req 02 val 2900 [ 251.108846][ T4208] pwc: recv_control_msg error -71 req 02 val 2800 [ 251.154749][ T4208] pwc: recv_control_msg error -71 req 04 val 1100 [ 251.246494][ T4208] pwc: recv_control_msg error -71 req 04 val 1200 [ 251.326663][ T4208] pwc: Registered as video103. [ 251.346842][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 251.392106][ T4208] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 251.448125][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 251.470647][ T6222] device bond1 entered promiscuous mode [ 251.501203][ T4208] usb 5-1: USB disconnect, device number 9 [ 251.594534][ T6222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.910845][ T6257] libceph: resolve '0' (ret=-3): failed [ 255.722275][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.728821][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.756599][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.637'. [ 258.047769][ T4207] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 258.286243][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 258.417868][ T4207] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.578207][ T4207] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 259.866307][ T6317] program syz.0.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.887200][ T6308] device bond2 entered promiscuous mode [ 259.917309][ T6308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.927859][ T4207] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.940055][ T4207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.959967][ T4207] usb 4-1: Product: syz [ 259.968190][ T4207] usb 4-1: Manufacturer: syz [ 259.985029][ T4207] usb 4-1: SerialNumber: syz [ 260.227583][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 260.263360][ T6289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 260.310818][ T6326] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.677507][ T6326] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.814317][ T6326] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.927362][ T6326] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.938235][ T6289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.297903][ T4207] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 261.304702][ T4207] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 261.406060][ T6326] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.517892][ T4207] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 262.079622][ T4207] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 262.089985][ T6326] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.200900][ T6326] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.262008][ T4207] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 262.288881][ T6326] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.317448][ T4207] usb 4-1: USB disconnect, device number 5 [ 262.358431][ T4207] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 262.411357][ T4262] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 262.807837][ T4262] usb 5-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 263.017080][ T4262] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.918048][ T4262] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 264.931935][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.942894][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 264.944170][ T4262] usb 5-1: Product: syz [ 264.956845][ T4262] usb 5-1: Manufacturer: syz [ 264.967425][ T4262] usb 5-1: SerialNumber: syz [ 264.987126][ T6359] device bond3 entered promiscuous mode [ 264.995052][ T6359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.093314][ T4262] usb 5-1: config 0 descriptor?? [ 265.137975][ T4262] usb 5-1: can't set config #0, error -71 [ 265.170348][ T4262] usb 5-1: USB disconnect, device number 10 [ 267.636952][ T6376] can: request_module (can-proto-0) failed. [ 270.336189][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 270.521552][ T6419] device bond1 entered promiscuous mode [ 270.563370][ T6419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.907887][ T4207] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 271.397940][ T4207] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.437730][ T4207] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 271.463561][ T4207] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.494060][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.538153][ T6429] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.707526][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 271.898989][ T4207] usb 1-1: USB disconnect, device number 5 [ 272.780463][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 275.667712][ T4262] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 276.007744][ T4262] usb 4-1: Using ep0 maxpacket: 16 [ 276.127844][ T4262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.167897][ T4262] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 276.204094][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.256678][ T4262] usb 4-1: config 0 descriptor?? [ 276.333600][ T4262] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 276.538300][ T3530] bcm5974 4-1:0.0: could not read from device [ 276.557962][ T4262] bcm5974 4-1:0.0: could not read from device [ 276.627924][ T3530] bcm5974 4-1:0.0: could not read from device [ 276.646034][ T4262] input: failed to attach handler mousedev to device input8, error: -5 [ 276.697984][ T3530] bcm5974 4-1:0.0: could not read from device [ 276.706974][ T4262] usb 4-1: USB disconnect, device number 6 [ 280.667724][ T4207] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 280.674208][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 280.927859][ T4207] usb 1-1: Using ep0 maxpacket: 16 [ 280.957729][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 281.122717][ T4207] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 281.748565][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 281.798333][ T4207] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 281.820511][ T4207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.828023][ T21] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 281.837401][ T21] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 281.853420][ T4207] usb 1-1: Product: syz [ 281.858451][ T4207] usb 1-1: Manufacturer: syz [ 281.867947][ T4207] usb 1-1: SerialNumber: syz [ 281.895893][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.927383][ T4207] usb 1-1: config 0 descriptor?? [ 282.142263][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 282.185546][ T4207] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 282.517970][ T21] usb 5-1: string descriptor 0 read error: -22 [ 282.526346][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.020188][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.131730][ T21] usb 5-1: 0:2 : does not exist [ 283.257809][ T4258] usb 1-1: Failed to submit usb control message: -110 [ 283.270636][ T4258] usb 1-1: unable to send the bmi data to the device: -110 [ 283.307697][ T4258] usb 1-1: unable to get target info from device [ 283.339272][ T21] usb 5-1: USB disconnect, device number 11 [ 283.362810][ T4258] usb 1-1: could not get target info (-110) [ 283.393849][ T4258] usb 1-1: could not probe fw (-110) [ 283.585821][ T4208] usb 1-1: USB disconnect, device number 6 [ 284.077750][ T4208] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 284.558081][ T4208] usb 1-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 284.631064][ T4208] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.989557][ T4208] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 285.042534][ T4208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.517795][ T4208] usb 1-1: Product: syz [ 285.522271][ T4208] usb 1-1: Manufacturer: syz [ 285.767798][ T4208] usb 1-1: SerialNumber: syz [ 285.809827][ T4208] usb 1-1: config 0 descriptor?? [ 286.108195][ T6565] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 286.126899][ T6565] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 288.248960][ T4210] usb 1-1: USB disconnect, device number 7 [ 288.689688][ T6607] netlink: 56 bytes leftover after parsing attributes in process `syz.0.732'. [ 289.219900][ T6613] tmpfs: Unknown parameter 'usrquota' [ 290.589039][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 290.693221][ T6631] device bond4 entered promiscuous mode [ 290.725902][ T6631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.162717][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.169570][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.765457][ T6971] fuse: Unknown parameter 'user_i00000000000000000000' [ 332.782648][ T4208] Process accounting resumed [ 338.746463][ T7013] fuse: Unknown parameter 'user_i00000000000000000000' [ 338.755822][ T13] Process accounting resumed [ 342.995942][ T7055] fuse: Unknown parameter 'user_i00000000000000000000' [ 343.209776][ T4208] Process accounting resumed [ 349.465228][ T7103] fuse: Unknown parameter 'user_id00000000000000000000' [ 349.476521][ T13] Process accounting resumed [ 356.219698][ T7163] fuse: Unknown parameter 'user_id00000000000000000000' [ 356.280195][ T4282] Process accounting resumed [ 361.493343][ T7212] fuse: Unknown parameter 'user_id00000000000000000000' [ 361.546460][ T13] Process accounting resumed [ 366.047993][ T7256] fuse: Bad value for 'fd' [ 366.360889][ T4208] Process accounting resumed [ 373.389618][ T7303] fuse: Bad value for 'fd' [ 373.407130][ T4262] Process accounting resumed [ 378.602675][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610200][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.219152][ T7352] fuse: Bad value for 'fd' [ 380.297810][ T4208] Process accounting resumed [ 386.470712][ T7397] fuse: Unknown parameter '0x0000000000000003' [ 386.499733][ T23] Process accounting resumed [ 395.297938][ T7438] fuse: Unknown parameter '0x0000000000000003' [ 395.365572][ T4208] Process accounting resumed [ 403.235910][ T7480] fuse: Unknown parameter '0x0000000000000003' [ 403.298988][ T2287] Process accounting resumed [ 407.995755][ T7523] fuse: Unknown parameter '0x0000000000000003' [ 408.033745][ T13] Process accounting resumed [ 413.912847][ T7564] fuse: Unknown parameter '0x0000000000000003' [ 414.241781][ T21] Process accounting resumed [ 418.312472][ T7605] fuse: Unknown parameter '0x0000000000000003' [ 418.327096][ T4210] Process accounting resumed [ 422.044541][ T7642] fuse: Unknown parameter 'fd0x0000000000000003' [ 422.091384][ T4210] Process accounting resumed [ 424.329103][ T7677] fuse: Unknown parameter 'fd0x0000000000000003' [ 424.518912][ T4264] Process accounting resumed [ 424.917821][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 425.197700][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 425.518116][ T13] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 425.553345][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.597889][ T13] usb 3-1: Product: syz [ 425.607339][ T13] usb 3-1: Manufacturer: syz [ 425.612646][ T13] usb 3-1: SerialNumber: syz [ 425.640605][ T13] r8152-cfgselector 3-1: config 0 descriptor?? [ 425.918108][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 425.978922][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 425.986847][ T13] r8152-cfgselector 3-1: bad CDC descriptors [ 426.208473][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 426.236862][ T13] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 426.337148][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 426.374464][ T7704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.452250][ T7704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.468228][ T4210] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 426.490561][ T7704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.568070][ T7704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.833997][ T7704] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.858618][ T4210] usb 2-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 426.865420][ T7714] fuse: Unknown parameter 'fd0x0000000000000003' [ 426.906680][ T4210] usb 2-1: config 0 interface 0 has no altsetting 0 [ 426.913092][ T21] Process accounting resumed [ 426.964368][ T7704] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.029065][ T7704] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.073873][ T7704] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.128417][ T4210] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 427.157844][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.186615][ T4210] usb 2-1: Product: syz [ 427.207085][ T4210] usb 2-1: Manufacturer: syz [ 427.223465][ T4210] usb 2-1: SerialNumber: syz [ 427.255074][ T4210] usb 2-1: config 0 descriptor?? [ 427.825818][ T7701] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 427.861153][ T7701] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 428.617768][ T4262] usb 2-1: USB disconnect, device number 9 [ 429.820202][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'. [ 431.726312][ T4210] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 432.108215][ T7773] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1044'. [ 432.447980][ T4210] usb 3-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 432.578911][ T4210] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.807662][ T21] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 432.838480][ T4210] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 432.891893][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.967827][ T4210] usb 3-1: Product: syz [ 432.972419][ T4210] usb 3-1: Manufacturer: syz [ 432.977519][ T4210] usb 3-1: SerialNumber: syz [ 433.237917][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 433.372949][ T4210] usb 3-1: config 0 descriptor?? [ 433.448397][ T21] usb 2-1: not running at top speed; connect to a high speed hub [ 433.567899][ T21] usb 2-1: config 8 has an invalid interface number: 166 but max is 1 [ 433.583175][ T21] usb 2-1: config 8 has no interface number 1 [ 433.598093][ T21] usb 2-1: config 8 interface 166 has no altsetting 0 [ 433.615504][ T21] usb 2-1: config 8 interface 0 has no altsetting 0 [ 433.739245][ T7764] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 433.787954][ T21] usb 2-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e [ 433.797278][ T7793] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 433.816842][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.843400][ T21] usb 2-1: Product: syz [ 433.853422][ T21] usb 2-1: Manufacturer: syz [ 433.893973][ T21] usb 2-1: SerialNumber: syz [ 434.312529][ T4210] usb 3-1: USB disconnect, device number 7 [ 434.320300][ T21] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 434.367798][ T21] gspca_sonixj: reg_w1 err -71 [ 434.399666][ T21] sonixj: probe of 2-1:8.0 failed with error -71 [ 434.447950][ T21] usb 2-1: USB disconnect, device number 10 [ 437.424139][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 439.300942][ T7869] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.043125][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049697][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.373746][ T7924] mmap: syz.0.1093 (7924) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 444.377176][ T7927] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 444.393850][ T7927] overlayfs: failed to set xattr on upper [ 444.417704][ T7927] overlayfs: ...falling back to index=off,metacopy=off. [ 447.317766][ T7593] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 447.737883][ T7593] usb 4-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 447.773229][ T7593] usb 4-1: config 0 interface 0 has no altsetting 0 [ 447.968069][ T7593] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 447.990226][ T7593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.067093][ T7593] usb 4-1: Product: syz [ 448.094066][ T7593] usb 4-1: Manufacturer: syz [ 448.111488][ T7593] usb 4-1: SerialNumber: syz [ 448.148716][ T7593] usb 4-1: config 0 descriptor?? [ 448.472836][ T7965] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 448.772380][ T7593] usb 4-1: USB disconnect, device number 7 [ 450.507741][ T4262] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 450.757650][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 451.005928][ T8026] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 451.025723][ T4282] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 451.197604][ T8028] loop0: detected capacity change from 0 to 32768 [ 451.204698][ T4262] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 451.214423][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.227854][ T4262] usb 3-1: Product: syz [ 451.235220][ T4262] usb 3-1: Manufacturer: syz [ 451.249766][ T4262] usb 3-1: SerialNumber: syz [ 451.264813][ T4262] usb 3-1: config 0 descriptor?? [ 451.319831][ T4262] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 451.329720][ T8028] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1130 (8028) [ 451.443081][ T8028] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 451.443235][ T8028] BTRFS info (device loop0): setting nodatacow, compression disabled [ 451.443295][ T8028] BTRFS info (device loop0): max_inline at 0 [ 451.443310][ T8028] BTRFS info (device loop0): using free space tree [ 451.443321][ T8028] BTRFS info (device loop0): has skinny extents [ 451.540470][ T4262] gp8psk: usb in 128 operation failed. [ 451.578163][ T4282] usb 5-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 451.578205][ T4282] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.578354][ T4262] gp8psk: usb in 137 operation failed. [ 451.578384][ T4262] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 451.598259][ T4262] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 451.598356][ T4262] usb 3-1: media controller created [ 451.646832][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.685719][ T4262] gp8psk_fe: Frontend revision 1 attached [ 451.689060][ T4262] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 451.695237][ T4262] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 451.718738][ T8028] BTRFS info (device loop0): enabling ssd optimizations [ 451.740618][ T4282] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 451.740655][ T4282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.740678][ T4282] usb 5-1: Product: syz [ 451.741311][ T4282] usb 5-1: Manufacturer: syz [ 451.741332][ T4282] usb 5-1: SerialNumber: syz [ 451.743717][ T4282] usb 5-1: config 0 descriptor?? [ 451.922795][ T4262] gp8psk: usb in 138 operation failed. [ 451.922821][ T4262] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 451.922838][ T4262] gp8psk: found Genpix USB device pID = 201 (hex) [ 452.106168][ T7] usb 3-1: USB disconnect, device number 8 [ 452.323727][ T7] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 452.740412][ T4262] usb 5-1: USB disconnect, device number 12 [ 454.685567][ T7682] udevd[7682]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 454.764872][ T7682] udevd[7682]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 454.801838][ T7682] udevd[7682]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 454.835955][ T7682] udevd[7682]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 454.895167][ T7682] udevd[7682]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 455.337734][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 455.587631][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 455.747933][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 455.837913][ T21] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 455.881558][ T21] usb 3-1: config 1 interface 0 has no altsetting 0 [ 456.203940][ T21] usb 3-1: string descriptor 0 read error: -22 [ 456.222898][ T21] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.40 [ 456.354515][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.888148][ T21] usbhid 3-1:1.0: can't add hid device: -71 [ 457.247964][ T21] usbhid: probe of 3-1:1.0 failed with error -71 [ 457.309386][ T21] usb 3-1: USB disconnect, device number 9 [ 457.871033][ T8073] Process accounting resumed [ 459.982281][ T26] audit: type=1326 audit(1742393766.093:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 460.034053][ T26] audit: type=1326 audit(1742393766.123:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 460.092860][ T26] audit: type=1326 audit(1742393766.123:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 460.167127][ T8168] 9pnet: Insufficient options for proto=fd [ 460.182937][ T26] audit: type=1326 audit(1742393766.123:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 460.354298][ T26] audit: type=1326 audit(1742393766.123:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 460.377418][ T26] audit: type=1326 audit(1742393766.133:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 461.452625][ T8073] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 462.467783][ T8073] usb 5-1: Using ep0 maxpacket: 32 [ 462.597757][ T8073] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 462.667991][ T8073] usb 5-1: config 0 has no interface number 0 [ 462.683970][ T8073] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 462.766942][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 462.887999][ T8073] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 462.889180][ T8198] device bond5 entered promiscuous mode [ 462.897133][ T8073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.917714][ T8073] usb 5-1: Product: syz [ 462.922075][ T8073] usb 5-1: Manufacturer: syz [ 462.932204][ T8073] usb 5-1: SerialNumber: syz [ 462.964536][ T8073] usb 5-1: config 0 descriptor?? [ 462.978097][ T8198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.020564][ T8073] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 463.051912][ T8073] em28xx 5-1:0.132: Video interface 132 found: [ 463.447852][ T8073] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 463.869027][ T8209] Zero length message leads to an empty skb [ 463.928641][ T8073] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 463.979668][ T8073] em28xx 5-1:0.132: board has no eeprom [ 464.087771][ T8073] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 464.098956][ T8073] em28xx 5-1:0.132: analog set to bulk mode. [ 464.121723][ T13] em28xx 5-1:0.132: Registering V4L2 extension [ 464.147943][ T8073] usb 5-1: USB disconnect, device number 13 [ 464.154645][ T8073] em28xx 5-1:0.132: Disconnecting em28xx [ 464.369113][ T13] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 464.376235][ T13] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 464.394465][ T13] em28xx 5-1:0.132: No AC97 audio processor [ 464.421624][ T13] usb 5-1: Decoder not found [ 464.428598][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 464.448252][ T13] em28xx 5-1:0.132: failed to create media graph [ 464.454650][ T13] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 464.509461][ T13] em28xx 5-1:0.132: Remote control support is not available for this card. [ 464.552265][ T8073] em28xx 5-1:0.132: Closing input extension [ 464.563772][ T8230] device bond2 entered promiscuous mode [ 464.611343][ T8073] em28xx 5-1:0.132: Freeing device [ 464.644502][ T8230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.103316][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1200'. [ 468.269066][ T8268] device bond2 entered promiscuous mode [ 468.275096][ T8268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.618932][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1212'. [ 472.763453][ T8308] device bond3 entered promiscuous mode [ 472.825386][ T8308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.094081][ T4208] Process accounting resumed [ 476.357422][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 476.557903][ T4208] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 476.912579][ T4282] Process accounting resumed [ 476.942869][ T8354] device bond1 entered promiscuous mode [ 476.973898][ T8354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.327835][ T4208] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 478.583332][ T4208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.623447][ T4208] usb 2-1: Product: syz [ 479.832363][ T4208] usb 2-1: Manufacturer: syz [ 479.863336][ T4208] usb 2-1: SerialNumber: syz [ 481.007767][ T4208] usb 2-1: can't set config #1, error -71 [ 481.388562][ T4208] usb 2-1: USB disconnect, device number 11 [ 481.473842][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'. [ 481.515033][ T8402] device bond6 entered promiscuous mode [ 481.521141][ T8402] 8021q: adding VLAN 0 to HW filter on device bond6 [ 481.936445][ T8407] Process accounting resumed [ 482.725065][ T8424] process 'syz.3.1246' launched './file1' with NULL argv: empty string added [ 482.899028][ T4282] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 484.204437][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1250'. [ 484.267634][ T4282] usb 3-1: Using ep0 maxpacket: 16 [ 484.368975][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'. [ 484.399934][ T8440] device bond3 entered promiscuous mode [ 484.406311][ T8440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.547916][ T4282] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 484.559831][ T4282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.568415][ T4282] usb 3-1: Product: syz [ 484.572804][ T4282] usb 3-1: Manufacturer: syz [ 484.577416][ T4282] usb 3-1: SerialNumber: syz [ 484.593467][ T4282] usb 3-1: config 0 descriptor?? [ 484.641633][ T4282] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 484.792016][ T8073] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 485.149344][ T4282] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 485.227086][ T4282] visor: probe of 3-1:0.0 failed with error -71 [ 485.573070][ T4282] usb 3-1: USB disconnect, device number 10 [ 485.862419][ T8073] usb 5-1: Using ep0 maxpacket: 16 [ 486.000979][ T8073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.032085][ T8073] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.068741][ T8073] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 486.130455][ T8073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.217703][ T8073] usb 5-1: config 0 descriptor?? [ 486.357679][ T4282] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 486.719831][ T8073] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 486.732741][ T8073] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 486.744623][ T8073] pyra 0003:1E7D:2CF6.0002: item fetching failed at offset 2/7 [ 486.767801][ T4282] usb 3-1: unable to get BOS descriptor or descriptor too short [ 486.801017][ T8073] pyra 0003:1E7D:2CF6.0002: parse failed [ 486.825255][ T8073] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -22 [ 486.831665][ T4282] usb 3-1: not running at top speed; connect to a high speed hub [ 486.923161][ T8073] usb 5-1: USB disconnect, device number 14 [ 487.078775][ T4282] usb 3-1: config 4 has an invalid interface number: 61 but max is 1 [ 487.088633][ T4282] usb 3-1: config 4 has an invalid interface number: 107 but max is 1 [ 487.097010][ T4282] usb 3-1: config 4 has an invalid descriptor of length 10, skipping remainder of the config [ 487.107863][ T4282] usb 3-1: config 4 has no interface number 0 [ 487.114939][ T4282] usb 3-1: config 4 has no interface number 1 [ 487.121392][ T4282] usb 3-1: config 4 interface 61 has no altsetting 0 [ 487.128282][ T4282] usb 3-1: config 4 interface 107 has no altsetting 0 [ 487.937965][ T4282] usb 3-1: New USB device found, idVendor=1199, idProduct=9001, bcdDevice=e2.41 [ 487.967343][ T4282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.006784][ T4282] usb 3-1: Product: syz [ 488.026601][ T8507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1274'. [ 488.036954][ T4282] usb 3-1: Manufacturer: syz [ 488.051739][ T4282] usb 3-1: SerialNumber: syz [ 488.810902][ T4282] usb 3-1: unknown number of interfaces: 2 [ 489.165439][ T4282] usb 3-1: USB disconnect, device number 11 [ 489.301682][ T8522] kvm [8520]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x23e0 [ 489.438921][ T8522] kvm [8520]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x63e0 [ 490.540975][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1292'. [ 493.308268][ T8590] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 495.472293][ T4262] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 495.884984][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 495.919243][ T8638] device bond3 entered promiscuous mode [ 495.925568][ T8638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.942561][ T4262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.957699][ T8073] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 496.242620][ T8073] usb 5-1: Using ep0 maxpacket: 32 [ 496.283461][ T4262] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.380110][ T8073] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 496.410435][ T8073] usb 5-1: config 0 has no interface number 0 [ 496.416728][ T8073] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.466057][ T8651] device vlan0 entered promiscuous mode [ 496.474304][ T8651] device bond0 entered promiscuous mode [ 496.485634][ T8651] device bond_slave_0 entered promiscuous mode [ 496.492375][ T8651] device bond_slave_1 entered promiscuous mode [ 496.508870][ T8651] device bond0 left promiscuous mode [ 496.514495][ T8651] device bond_slave_0 left promiscuous mode [ 496.527077][ T8651] device bond_slave_1 left promiscuous mode [ 496.598323][ T4262] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.607954][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.616552][ T4262] usb 1-1: Product: syz [ 496.621042][ T4262] usb 1-1: Manufacturer: syz [ 496.625772][ T4262] usb 1-1: SerialNumber: syz [ 496.628101][ T8073] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 496.641513][ T8073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.649795][ T8073] usb 5-1: Product: syz [ 496.654040][ T8073] usb 5-1: Manufacturer: syz [ 497.479368][ T4262] usb 1-1: 0:2 : does not exist [ 497.537774][ T4262] usb 1-1: USB disconnect, device number 8 [ 497.616744][ T8657] udevd[8657]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.620566][ T8073] usb 5-1: SerialNumber: syz [ 497.670130][ T8073] usb 5-1: config 0 descriptor?? [ 497.720339][ T8073] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 497.752450][ T8073] em28xx 5-1:0.132: Video interface 132 found: [ 498.111992][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 498.290594][ T8679] device bond2 entered promiscuous mode [ 498.586391][ T8679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.794033][ T8073] em28xx 5-1:0.132: unknown em28xx chip ID (39) [ 499.297732][ T8073] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 499.307048][ T8073] em28xx 5-1:0.132: board has no eeprom [ 500.010028][ T8073] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 500.018829][ T8073] em28xx 5-1:0.132: analog set to bulk mode. [ 500.028004][ T4210] em28xx 5-1:0.132: Registering V4L2 extension [ 500.039526][ T8073] usb 5-1: USB disconnect, device number 15 [ 500.046205][ T8073] em28xx 5-1:0.132: Disconnecting em28xx [ 500.120521][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 500.192611][ T8715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1343'. [ 500.249793][ T4210] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 500.264717][ T4210] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 500.277489][ T8715] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.286453][ T8715] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.294954][ T8715] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.303209][ T8715] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.324810][ T4210] em28xx 5-1:0.132: No AC97 audio processor [ 500.338548][ T4210] usb 5-1: Decoder not found [ 500.343574][ T4210] em28xx 5-1:0.132: failed to create media graph [ 500.355264][ T4210] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 500.366263][ T4210] em28xx 5-1:0.132: Remote control support is not available for this card. [ 500.380788][ T8073] em28xx 5-1:0.132: Closing input extension [ 500.395935][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'. [ 500.567753][ T8073] em28xx 5-1:0.132: Freeing device [ 500.841920][ T8730] device bond3 entered promiscuous mode [ 500.948757][ T8730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.426740][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 501.467420][ T8749] capability: warning: `syz.4.1354' uses 32-bit capabilities (legacy support in use) [ 501.490776][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.497279][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.787737][ T4208] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 503.787663][ T4208] usb 5-1: device descriptor read/64, error -71 [ 503.862280][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'. [ 503.932148][ T8777] device bond4 entered promiscuous mode [ 503.941375][ T8777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.077633][ T4208] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 504.279777][ T4208] usb 5-1: device descriptor read/64, error -71 [ 504.413193][ T4208] usb usb5-port1: attempt power cycle [ 504.695872][ T4210] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 505.907631][ T4210] usb 2-1: Using ep0 maxpacket: 8 [ 506.809577][ T4210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.827653][ T4210] usb 2-1: config 0 has no interfaces? [ 506.977859][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 507.156593][ T8822] device bond4 entered promiscuous mode [ 507.175778][ T8822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.374394][ T4210] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 507.389085][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.397138][ T4210] usb 2-1: Product: syz [ 507.402915][ T4210] usb 2-1: Manufacturer: syz [ 507.412282][ T4210] usb 2-1: SerialNumber: syz [ 507.432876][ T4210] usb 2-1: config 0 descriptor?? [ 507.447788][ T4210] usb 2-1: can't set config #0, error -71 [ 507.498259][ T4210] usb 2-1: USB disconnect, device number 12 [ 508.559944][ T4208] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 509.687612][ T4208] usb 5-1: Using ep0 maxpacket: 16 [ 509.827869][ T4208] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 509.853885][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 509.893483][ T8863] device bond5 entered promiscuous mode [ 509.900125][ T8863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 510.211053][ T4208] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 510.232401][ T4208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.092045][ T4208] usb 5-1: Product: syz [ 511.118809][ T4208] usb 5-1: config 0 descriptor?? [ 511.152318][ T4208] usb 5-1: can't set config #0, error -71 [ 511.203718][ T4208] usb 5-1: USB disconnect, device number 19 [ 511.515957][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1400'. [ 514.041433][ T8073] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 514.238748][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1406'. [ 514.297926][ T8073] usb 2-1: Using ep0 maxpacket: 16 [ 514.427921][ T8073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 514.483434][ T8903] device bond4 entered promiscuous mode [ 514.509437][ T8903] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.607938][ T8073] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 514.642447][ T8073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.667613][ T8073] usb 2-1: Product: syz [ 514.687614][ T8073] usb 2-1: Manufacturer: syz [ 514.701614][ T8073] usb 2-1: SerialNumber: syz [ 514.741972][ T8073] usb 2-1: config 0 descriptor?? [ 515.774829][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 515.856176][ T8073] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 515.905412][ T8073] usb 2-1: USB disconnect, device number 13 [ 515.946655][ T8814] usb 2-1: Failed to submit usb control message: -19 [ 515.986076][ T8814] usb 2-1: unable to send the bmi data to the device: -19 [ 516.035107][ T8814] usb 2-1: unable to get target info from device [ 516.054981][ T8814] usb 2-1: could not get target info (-19) [ 516.085676][ T8814] usb 2-1: could not probe fw (-19) [ 521.697699][ T4262] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 522.669689][ T8073] Bluetooth: hci4: command 0x0405 tx timeout [ 522.887925][ T4262] usb 1-1: config 0 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 522.911468][ T4262] usb 1-1: config 0 interface 0 has no altsetting 0 [ 523.061369][ T4173] Bluetooth: Frame is too long (len 12, expected len 4) [ 523.228144][ T4262] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 523.246483][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.281154][ T4262] usb 1-1: Product: syz [ 524.567904][ T4262] usb 1-1: Manufacturer: syz [ 524.574412][ T4262] usb 1-1: SerialNumber: syz [ 524.601186][ T4262] usb 1-1: config 0 descriptor?? [ 524.869961][ T4262] usb 1-1: can't set config #0, error -71 [ 524.881822][ T4262] usb 1-1: USB disconnect, device number 9 [ 524.948690][ T9039] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1454'. [ 526.317747][ T8073] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 526.717813][ T8073] usb 5-1: unable to get BOS descriptor or descriptor too short [ 526.768011][ T8073] usb 5-1: not running at top speed; connect to a high speed hub [ 526.877851][ T8073] usb 5-1: config 8 has an invalid interface number: 166 but max is 1 [ 526.891342][ T8073] usb 5-1: config 8 has no interface number 1 [ 526.918075][ T8073] usb 5-1: config 8 interface 166 has no altsetting 0 [ 526.925040][ T8073] usb 5-1: config 8 interface 0 has no altsetting 0 [ 527.087919][ T8073] usb 5-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e [ 527.137732][ T8073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.160365][ T8073] usb 5-1: Product: syz [ 527.164581][ T8073] usb 5-1: Manufacturer: syz [ 527.177853][ T8073] usb 5-1: SerialNumber: syz [ 527.551530][ T8073] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 527.597753][ T8073] gspca_sonixj: reg_w1 err -71 [ 527.610089][ T8073] sonixj: probe of 5-1:8.0 failed with error -71 [ 527.665752][ T8073] usb 5-1: USB disconnect, device number 20 [ 527.889203][ T8067] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 528.567908][ T8067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.591183][ T8067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.617671][ T8067] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.646077][ T8067] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.658054][ T8067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.676441][ T8067] usb 1-1: config 0 descriptor?? [ 528.819072][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 528.947834][ T8073] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 529.179999][ T8067] plantronics 0003:047F:FFFF.0003: collection stack underflow [ 529.217649][ T8073] usb 5-1: Using ep0 maxpacket: 16 [ 529.230872][ T8067] plantronics 0003:047F:FFFF.0003: item 0 2 0 12 parsing failed [ 529.258592][ T8067] plantronics 0003:047F:FFFF.0003: parse failed [ 529.276343][ T8067] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 529.337754][ T8073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 529.374189][ T8073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 529.407759][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 529.419456][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.430902][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.447307][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 529.460771][ T23] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 529.469952][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.489026][ T23] usb 2-1: config 0 descriptor?? [ 529.498162][ T4208] usb 1-1: USB disconnect, device number 10 [ 529.647862][ T8073] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 529.669016][ T8073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.706081][ T8073] usb 5-1: Product: syz [ 529.725576][ T8073] usb 5-1: Manufacturer: syz [ 529.747467][ T8073] usb 5-1: SerialNumber: syz [ 529.793589][ T8073] usb 5-1: config 0 descriptor?? [ 529.861755][ T8073] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 529.893659][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 529.945783][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 529.960510][ T23] holtek_kbd 0003:04D9:A055.0004: unbalanced collection at end of report description [ 529.978824][ T23] holtek_kbd: probe of 0003:04D9:A055.0004 failed with error -22 [ 530.028550][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 530.036485][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 530.084113][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 530.098180][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 530.133780][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 530.145566][ T8073] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 530.156353][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 530.180192][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 530.193929][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 530.203003][ T8073] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 530.212109][ T9107] netlink: 'syz.0.1481': attribute type 10 has an invalid length. [ 530.215962][ T8073] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 530.229833][ T9107] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1481'. [ 530.265920][ T9107] device team0 entered promiscuous mode [ 530.272072][ T9107] device team_slave_0 entered promiscuous mode [ 530.289165][ T8073] usb 5-1: USB disconnect, device number 21 [ 530.302528][ T9107] device team_slave_1 entered promiscuous mode [ 530.331715][ T8073] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 530.355053][ T8073] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 530.365447][ T9107] bridge0: port 3(team0) entered blocking state [ 530.376603][ T9107] bridge0: port 3(team0) entered disabled state [ 530.381455][ T8073] keyspan 5-1:0.0: device disconnected [ 530.407838][ T9107] bridge0: port 3(team0) entered blocking state [ 530.414339][ T9107] bridge0: port 3(team0) entered forwarding state [ 530.450184][ T4208] usb 2-1: USB disconnect, device number 14 [ 531.238109][ T8073] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 531.263026][ T9126] netlink: 'syz.3.1489': attribute type 10 has an invalid length. [ 531.489189][ T8073] usb 3-1: Using ep0 maxpacket: 32 [ 531.607784][ T8073] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 531.633434][ T8073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.667071][ T8073] usb 3-1: config 0 descriptor?? [ 531.709425][ T8073] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 532.357794][ T8073] gspca_vc032x: reg_w err -71 [ 532.362885][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.375333][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.389158][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.418346][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.435873][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.450361][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.477602][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.507614][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.525587][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.542028][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.557571][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.573343][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.591301][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.607152][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.796739][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.816178][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.830756][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.847594][ T8073] gspca_vc032x: I2c Bus Busy Wait 00 [ 532.869948][ T8073] gspca_vc032x: Unknown sensor... [ 532.875286][ T8073] vc032x: probe of 3-1:0.0 failed with error -22 [ 532.928939][ T8073] usb 3-1: USB disconnect, device number 12 [ 533.147761][ T13] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 533.537869][ T13] usb 5-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 533.699818][ T13] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 533.739227][ T13] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 533.778675][ T13] usb 5-1: Manufacturer: syz [ 533.848931][ T13] usb 5-1: SerialNumber: syz [ 533.898010][ T9148] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 534.240752][ T13] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 534.315997][ T13] usb 5-1: USB disconnect, device number 22 [ 536.348159][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 536.735567][ T9235] device bond4 entered promiscuous mode [ 536.789910][ T9235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.616256][ T9259] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 537.679273][ T9259] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 539.708139][ T9304] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1551'. [ 540.017642][ T13] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 540.078242][ T8073] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 542.007774][ T8073] usb 3-1: Using ep0 maxpacket: 16 [ 542.907602][ C0] raw-gadget.0 gadget: ignoring, device is not running [ 542.927549][ C0] raw-gadget.0 gadget: ignoring, device is not running [ 542.934894][ T8073] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 542.942986][ T8073] usb 3-1: can't read configurations, error -71 [ 542.958169][ T13] usb 1-1: device descriptor read/all, error -71 [ 543.779529][ T9347] ======================================================= [ 543.779529][ T9347] WARNING: The mand mount option has been deprecated and [ 543.779529][ T9347] and is ignored by this kernel. Remove the mand [ 543.779529][ T9347] option from the mount to silence this warning. [ 543.779529][ T9347] ======================================================= [ 546.220951][ T9368] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1569'. [ 546.330394][ T4282] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 546.607761][ T4282] usb 2-1: Using ep0 maxpacket: 16 [ 547.613962][ T4282] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 547.626828][ T4282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.636502][ T4282] usb 2-1: Product: syz [ 547.641060][ T4282] usb 2-1: Manufacturer: syz [ 547.645798][ T4282] usb 2-1: SerialNumber: syz [ 547.658670][ T4282] usb 2-1: config 0 descriptor?? [ 548.199668][ T4282] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 548.552856][ T4282] usb 2-1: USB disconnect, device number 15 [ 548.883355][ T9408] netlink: 'syz.2.1581': attribute type 10 has an invalid length. [ 548.910392][ T9408] device syz_tun entered promiscuous mode [ 549.007245][ T9408] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 549.064439][ T9410] bridge0: port 3(team0) entered disabled state [ 549.070962][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.078819][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.156323][ T9411] bridge0: port 3(team0) entered disabled state [ 549.322223][ T9411] device bridge_slave_1 left promiscuous mode [ 549.364524][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.423532][ T9411] device bridge_slave_0 left promiscuous mode [ 549.506926][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.882823][ T9442] netlink: 'syz.0.1592': attribute type 4 has an invalid length. [ 554.030438][ T9444] netlink: 'syz.0.1592': attribute type 4 has an invalid length. [ 556.701624][ T8833] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 556.857683][ T4282] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 557.239047][ T8833] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 557.261195][ T8833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.338429][ T4282] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 557.357105][ T4282] usb 5-1: config 0 has no interface number 0 [ 557.419449][ T8833] usb 3-1: config 0 descriptor?? [ 557.537617][ T8833] cp210x 3-1:0.0: cp210x converter detected [ 557.555371][ T4282] usb 5-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 557.685385][ T4282] usb 5-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 557.875509][ T4282] usb 5-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 557.911489][ T4282] usb 5-1: config 0 interface 87 has no altsetting 0 [ 558.087766][ T8833] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 558.095580][ T4282] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 558.283047][ T4282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.292990][ T4282] usb 5-1: Product: syz [ 558.297191][ T4282] usb 5-1: Manufacturer: syz [ 558.302562][ T4282] usb 5-1: SerialNumber: syz [ 558.315145][ T9486] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 558.321549][ T4282] usb 5-1: config 0 descriptor?? [ 558.329418][ T8833] usb 3-1: cp210x converter now attached to ttyUSB0 [ 558.439389][ T4282] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 558.534215][ T4282] usb 3-1: USB disconnect, device number 15 [ 558.569290][ T4282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 558.572952][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 558.622622][ T4282] cp210x 3-1:0.0: device disconnected [ 558.658369][ T8833] usb 5-1: USB disconnect, device number 23 [ 558.661081][ T9497] nbd: socks must be embedded in a SOCK_ITEM attr [ 558.671829][ T144] usb 5-1: Failed to submit usb control message: -71 [ 558.671919][ T144] usb 5-1: unable to send the bmi data to the device: -71 [ 558.705010][ T144] usb 5-1: unable to get target info from device [ 558.712351][ T144] usb 5-1: could not get target info (-71) [ 558.719287][ T144] usb 5-1: could not probe fw (-71) [ 558.860344][ T9454] block nbd64: NBD_DISCONNECT [ 561.494469][ T9525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1617'. [ 561.897799][ T4282] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 562.178043][ T4282] usb 2-1: Using ep0 maxpacket: 16 [ 562.564923][ T4282] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 562.573421][ T4282] usb 2-1: config 0 has no interface number 0 [ 562.580680][ T4282] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 562.592268][ T4282] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 562.603884][ T4282] usb 2-1: config 0 interface 41 has no altsetting 0 [ 562.645681][ T9535] netlink: 'syz.4.1622': attribute type 10 has an invalid length. [ 562.654216][ T9535] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1622'. [ 562.663493][ T9535] device team0 entered promiscuous mode [ 562.669136][ T9535] device team_slave_0 entered promiscuous mode [ 562.675437][ T9535] device team_slave_1 entered promiscuous mode [ 562.682341][ T9535] bridge0: port 3(team0) entered blocking state [ 562.688688][ T9535] bridge0: port 3(team0) entered disabled state [ 562.697842][ T9535] bridge0: port 3(team0) entered blocking state [ 562.704671][ T9535] bridge0: port 3(team0) entered forwarding state [ 562.827897][ T4282] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 562.847047][ T4282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.864131][ T4282] usb 2-1: Product: syz [ 562.869334][ T4282] usb 2-1: Manufacturer: syz [ 562.874362][ T4282] usb 2-1: SerialNumber: syz [ 562.898469][ T4282] usb 2-1: config 0 descriptor?? [ 562.921826][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.927991][ T9528] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 562.935242][ T9528] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 562.979191][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.171493][ T9528] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 563.178825][ T9528] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 564.080931][ T4282] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 564.095625][ T4282] CoreChips: probe of 2-1:0.41 failed with error -71 [ 564.178115][ T13] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 564.269053][ T4282] usb 2-1: USB disconnect, device number 16 [ 564.427601][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 565.805879][ T13] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 565.815710][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.824866][ T13] usb 5-1: Product: syz [ 565.829644][ T13] usb 5-1: Manufacturer: syz [ 565.834390][ T13] usb 5-1: SerialNumber: syz [ 565.869385][ T13] usb 5-1: config 0 descriptor?? [ 565.949979][ T13] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 566.092408][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 566.187844][ T13] gp8psk: usb in 128 operation failed. [ 566.237748][ T13] gp8psk: usb in 137 operation failed. [ 566.243504][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.277940][ T13] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 566.294696][ T13] usb 5-1: media controller created [ 566.327697][ T4282] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 566.340117][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.387551][ T13] gp8psk_fe: Frontend revision 1 attached [ 566.393685][ T13] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 566.404856][ T13] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 566.697693][ T13] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 566.711491][ T13] gp8psk: found Genpix USB device pID = 201 (hex) [ 566.797852][ T4282] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.808636][ T4282] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.907926][ T4282] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 566.931080][ T4282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 566.957195][ T4282] usb 2-1: SerialNumber: syz [ 567.044586][ T13] usb 5-1: USB disconnect, device number 24 [ 567.183011][ T13] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 567.261240][ T4282] usb 2-1: 0:2 : does not exist [ 567.314611][ T4282] usb 2-1: USB disconnect, device number 17 [ 567.680893][ T9485] udevd[9485]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.114998][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1645'. [ 571.104965][ T9635] bridge0: port 4(syz_tun) entered blocking state [ 571.171476][ T9635] bridge0: port 4(syz_tun) entered disabled state [ 571.227742][ T9635] device syz_tun entered promiscuous mode [ 571.245215][ T9635] bridge0: port 4(syz_tun) entered blocking state [ 571.251891][ T9635] bridge0: port 4(syz_tun) entered forwarding state [ 573.692648][ T9659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.418433][ T4282] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 574.797598][ T4282] usb 2-1: Using ep0 maxpacket: 8 [ 575.087845][ T4282] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 575.097208][ T4282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.124147][ T4282] usb 2-1: Product: syz [ 575.447604][ T4282] usb 2-1: Manufacturer: syz [ 575.452557][ T4282] usb 2-1: SerialNumber: syz [ 575.478351][ T4282] usb 2-1: config 0 descriptor?? [ 575.497762][ T4282] usb 2-1: can't set config #0, error -71 [ 575.519534][ T4282] usb 2-1: USB disconnect, device number 18 [ 585.298376][ T9760] bridge0: port 3(vlan2) entered blocking state [ 585.348632][ T9760] bridge0: port 3(vlan2) entered disabled state [ 585.382549][ T9760] device vlan2 entered promiscuous mode [ 585.418521][ T9760] device geneve0 entered promiscuous mode [ 585.425131][ T9760] bridge0: port 3(vlan2) entered blocking state [ 585.431722][ T9760] bridge0: port 3(vlan2) entered forwarding state [ 585.548832][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 585.579658][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.611202][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.655722][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.678850][ T9764] device bridge_slave_0 left promiscuous mode [ 585.705818][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.727719][ T9764] device bridge_slave_1 left promiscuous mode [ 585.734242][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.763805][ T9764] bond0: (slave bond_slave_0): Releasing backup interface [ 585.818272][ T9764] bond0: (slave bond_slave_1): Releasing backup interface [ 586.043218][ T9764] team0: Port device team_slave_0 removed [ 586.153755][ T9764] team0: Port device team_slave_1 removed [ 586.363464][ T9764] device vlan2 left promiscuous mode [ 586.393761][ T9764] device geneve0 left promiscuous mode [ 586.424612][ T9764] bridge0: port 3(vlan2) entered disabled state [ 586.472144][ T9769] device vlan2 entered promiscuous mode [ 586.508163][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 586.777986][ T9771] device hsr_slave_1 left promiscuous mode [ 590.623480][ T9831] bridge0: port 1(syz_tun) entered blocking state [ 590.637403][ T9831] bridge0: port 1(syz_tun) entered disabled state [ 590.673201][ T9831] device syz_tun entered promiscuous mode [ 590.828621][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 590.930196][ T9835] device bond5 entered promiscuous mode [ 590.936189][ T9835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 592.424466][ T9849] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 593.517715][ T4262] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 593.907786][ T4262] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 593.937272][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.984974][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1721'. [ 594.018114][ T9870] device bond5 entered promiscuous mode [ 594.024282][ T9870] 8021q: adding VLAN 0 to HW filter on device bond5 [ 594.055287][ T26] audit: type=1326 audit(1742393900.163:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7fc00000 [ 594.162361][ T4262] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 594.180850][ T4262] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 594.197657][ T4262] usb 3-1: Manufacturer: syz [ 594.218546][ T4262] usb 3-1: config 0 descriptor?? [ 594.774850][ T26] audit: type=1326 audit(1742393900.883:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27fb0b7169 code=0x7fc00000 [ 595.602533][ T4262] rc_core: IR keymap rc-hauppauge not found [ 595.610652][ T4262] Registered IR keymap rc-empty [ 595.646763][ T4262] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 595.686080][ T4262] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 597.663537][ T4262] usb 3-1: USB disconnect, device number 16 [ 598.242859][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 598.446500][ T9912] device bond6 entered promiscuous mode [ 598.478649][ T9912] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.416936][ T9945] 9pnet: Insufficient options for proto=fd [ 602.289278][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 603.985429][ T4210] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 604.005831][ T4210] Bluetooth: hci4: Injecting HCI hardware error event [ 604.024631][ T4173] Bluetooth: hci4: hardware error 0x00 [ 606.267925][ T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 606.647153][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 606.769468][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 606.960207][ T13] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 606.983127][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.007096][ T13] usb 2-1: Product: syz [ 607.050929][ T13] usb 2-1: Manufacturer: syz [ 607.056589][ T13] usb 2-1: SerialNumber: syz [ 607.092502][ T13] usb 2-1: config 0 descriptor?? [ 607.162212][ T13] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 607.351232][ T13] usb 2-1: USB disconnect, device number 19 [ 607.358047][ T5928] usb 2-1: Failed to submit usb control message: -71 [ 607.365250][ T5928] usb 2-1: unable to send the bmi data to the device: -71 [ 607.378418][ T5928] usb 2-1: unable to get target info from device [ 607.384902][ T5928] usb 2-1: could not get target info (-71) [ 607.391346][ T5928] usb 2-1: could not probe fw (-71) [ 609.661566][T10076] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 609.661566][T10076] The task syz.1.1783 (10076) triggered the difference, watch for misbehavior. [ 612.947705][ T8073] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 613.227583][ T8073] usb 2-1: Using ep0 maxpacket: 16 [ 613.357807][ T8073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 613.537826][ T8073] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 613.547005][ T8073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.574985][ T8073] usb 2-1: Product: syz [ 613.587660][ T8073] usb 2-1: Manufacturer: syz [ 613.592400][ T8073] usb 2-1: SerialNumber: syz [ 613.628301][ T8073] usb 2-1: config 0 descriptor?? [ 613.697442][ T8073] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 613.786508][T10034] Set syz1 is full, maxelem 65536 reached [ 613.793272][T10037] Set syz1 is full, maxelem 65536 reached [ 613.880067][ T8073] usb 2-1: USB disconnect, device number 20 [ 613.907922][ T5654] usb 2-1: Failed to submit usb control message: -71 [ 613.950045][ T5654] usb 2-1: unable to send the bmi data to the device: -71 [ 613.984847][ T5654] usb 2-1: unable to get target info from device [ 614.019248][ T5654] usb 2-1: could not get target info (-71) [ 614.052848][ T5654] usb 2-1: could not probe fw (-71) [ 615.127645][ T8073] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 615.557820][ T8073] usb 3-1: unable to get BOS descriptor or descriptor too short [ 615.607824][ T8073] usb 3-1: not running at top speed; connect to a high speed hub [ 615.717857][ T8073] usb 3-1: config 8 has an invalid interface number: 166 but max is 0 [ 615.767912][ T8073] usb 3-1: config 8 has no interface number 0 [ 615.774591][ T8073] usb 3-1: config 8 interface 166 has no altsetting 0 [ 615.987831][ T8073] usb 3-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e [ 616.030291][ T8073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.066066][ T8073] usb 3-1: Product: syz [ 616.086380][ T8073] usb 3-1: Manufacturer: syz [ 616.115751][ T8073] usb 3-1: SerialNumber: syz [ 616.208578][ T4173] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 616.218848][ T4173] CPU: 1 PID: 4173 Comm: kworker/u5:3 Not tainted 5.15.179-syzkaller #0 [ 616.227301][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 616.237392][ T4173] Workqueue: hci0 hci_rx_work [ 616.242144][ T4173] Call Trace: [ 616.245555][ T4173] [ 616.248519][ T4173] dump_stack_lvl+0x1e3/0x2d0 [ 616.253449][ T4173] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 616.259118][ T4173] ? panic+0x860/0x860 [ 616.263310][ T4173] ? sysfs_create_dir_ns+0x282/0x390 [ 616.268743][ T4173] sysfs_create_dir_ns+0x2c6/0x390 [ 616.273987][ T4173] ? sysfs_warn_dup+0xa0/0xa0 [ 616.278699][ T4173] ? do_raw_spin_unlock+0x137/0x8b0 [ 616.284016][ T4173] kobject_add_internal+0x6e0/0xe00 [ 616.289252][ T4173] kobject_add+0x14e/0x210 [ 616.293819][ T4173] ? device_add+0x3c2/0xfd0 [ 616.298344][ T4173] ? kobject_init+0x1d0/0x1d0 [ 616.303046][ T4173] ? __raw_spin_lock_init+0x41/0x100 [ 616.308387][ T4173] ? get_device_parent+0x128/0x400 [ 616.313516][ T4173] device_add+0x476/0xfd0 [ 616.318028][ T4173] hci_conn_add_sysfs+0xe4/0x1f0 [ 616.323109][ T4173] le_conn_complete_evt+0xc15/0x1500 [ 616.328420][ T4173] ? cs_le_create_conn+0x5f0/0x5f0 [ 616.333722][ T4173] hci_le_meta_evt+0x28c/0x3f50 [ 616.338704][ T4173] ? __lock_acquire+0x1ff0/0x1ff0 [ 616.343758][ T4173] ? __mutex_lock_common+0x444/0x25a0 [ 616.349146][ T4173] ? hci_remote_host_features_evt+0x280/0x280 [ 616.355311][ T4173] ? __mutex_unlock_slowpath+0x218/0x750 [ 616.361149][ T4173] ? hci_event_packet+0x3b4/0x1550 [ 616.366302][ T4173] ? mutex_unlock+0x10/0x10 [ 616.370986][ T4173] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 616.376976][ T4173] ? print_irqtrace_events+0x210/0x210 [ 616.382445][ T4173] hci_event_packet+0xc41/0x1550 [ 616.387565][ T4173] ? rcu_lock_release+0x20/0x20 [ 616.392513][ T4173] ? hci_send_to_monitor+0x99/0x4d0 [ 616.397804][ T4173] hci_rx_work+0x237/0xa10 [ 616.402496][ T4173] process_one_work+0x8a1/0x10c0 [ 616.407558][ T4173] ? worker_detach_from_pool+0x260/0x260 [ 616.413501][ T4173] ? _raw_spin_lock_irqsave+0x120/0x120 [ 616.419139][ T4173] ? kthread_data+0x4e/0xc0 [ 616.423655][ T4173] ? wq_worker_running+0x97/0x170 [ 616.428684][ T4173] worker_thread+0xaca/0x1280 [ 616.433475][ T4173] kthread+0x3f6/0x4f0 [ 616.437639][ T4173] ? rcu_lock_release+0x20/0x20 [ 616.442531][ T4173] ? kthread_blkcg+0xd0/0xd0 [ 616.447121][ T4173] ret_from_fork+0x1f/0x30 [ 616.451585][ T4173] [ 616.455755][ T4173] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 616.469115][ T4173] Bluetooth: hci0: failed to register connection device [ 616.549597][ T8073] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 616.598198][ T8073] gspca_sonixj: reg_w1 err -71 [ 616.603052][ T8073] sonixj: probe of 3-1:8.166 failed with error -71 [ 616.667735][ T8073] usb 3-1: USB disconnect, device number 17 [ 624.245866][T10207] overlayfs: missing 'lowerdir' [ 624.271518][ T4282] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 624.289434][T10207] netlink: 'syz.4.1821': attribute type 27 has an invalid length. [ 624.360026][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.366649][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.757854][ T4282] usb 3-1: unable to get BOS descriptor or descriptor too short [ 624.827755][ T4282] usb 3-1: not running at top speed; connect to a high speed hub [ 624.927710][ T4282] usb 3-1: config 8 interface 0 has no altsetting 0 [ 625.137725][ T4282] usb 3-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e [ 625.148200][ T4282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.156231][ T4282] usb 3-1: Product: syz [ 625.167593][ T4282] usb 3-1: Manufacturer: syz [ 625.177852][ T4282] usb 3-1: SerialNumber: syz [ 625.469649][T10207] bridge0: port 4(syz_tun) entered disabled state [ 625.529663][ T4282] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 625.557399][ T4282] gspca_sonixj: reg_w1 err -71 [ 625.573918][ T4282] sonixj: probe of 3-1:8.0 failed with error -71 [ 625.592075][ T4282] usb 3-1: USB disconnect, device number 18 [ 625.641975][T10207] bridge0: port 3(team0) entered disabled state [ 625.649639][T10207] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.657538][T10207] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.959044][T10207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.124227][T10207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.042365][T10207] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.063611][T10207] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.083915][T10207] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.098693][T10207] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.453342][T10207] device bond1 left promiscuous mode [ 631.519336][T10207] device bond2 left promiscuous mode [ 631.553220][T10207] device bond3 left promiscuous mode [ 631.634763][T10207] device bond4 left promiscuous mode [ 632.242198][ T26] audit: type=1326 audit(1742393938.353:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 632.322969][ T26] audit: type=1326 audit(1742393938.353:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 632.530963][T10277] 9pnet: Insufficient options for proto=fd [ 632.604183][ T26] audit: type=1326 audit(1742393938.353:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 632.887259][ T26] audit: type=1326 audit(1742393938.353:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 633.283372][ T26] audit: type=1326 audit(1742393938.353:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 638.607584][ T8073] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 639.637725][ T8073] usb 3-1: Using ep0 maxpacket: 16 [ 639.825352][ T8073] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 639.850157][ T8073] usb 3-1: config 0 has no interface number 0 [ 640.726608][ T8073] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 640.737345][ T8073] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 640.908126][ T8073] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 640.931416][ T8073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.996257][ T8073] usb 3-1: Product: syz [ 641.750205][ T8073] usb 3-1: Manufacturer: syz [ 641.754929][ T8073] usb 3-1: SerialNumber: syz [ 641.798982][ T8073] usb 3-1: config 0 descriptor?? [ 641.827936][T10340] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 641.835534][T10340] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 642.247885][ T8073] asix: probe of 3-1:0.251 failed with error -71 [ 642.296247][ T8073] usb 3-1: USB disconnect, device number 19 [ 685.627602][ T8073] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 685.800068][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.806461][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.827592][ T8073] usb 2-1: device descriptor read/64, error -71 [ 686.097636][ T8073] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 686.322439][ T8073] usb 2-1: device descriptor read/64, error -71 [ 686.462840][ T8073] usb usb2-port1: attempt power cycle [ 686.887604][ T8073] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 688.703028][ T8073] usb 2-1: device descriptor read/8, error -71 [ 694.917695][ T4210] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 695.117691][ T4210] usb 3-1: device descriptor read/64, error -71 [ 695.387718][ T4210] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 695.597579][ T4210] usb 3-1: device descriptor read/64, error -71 [ 695.727702][ T4210] usb usb3-port1: attempt power cycle [ 696.259591][ T4210] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 696.357951][ T4210] usb 3-1: device descriptor read/8, error -71 [ 696.657747][ T4210] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 696.788799][ T4210] usb 3-1: device descriptor read/8, error -71 [ 696.991865][ T4210] usb usb3-port1: unable to enumerate USB device [ 705.517829][ T4208] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 705.720118][ T4208] usb 2-1: device descriptor read/64, error -71 [ 705.989932][ T4208] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 706.209899][ T4208] usb 2-1: device descriptor read/64, error -71 [ 706.340185][ T4208] usb usb2-port1: attempt power cycle [ 707.979535][ T4208] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 708.199355][ T4208] usb 2-1: device descriptor read/8, error -71 [ 708.827660][ T4208] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 709.067380][ T4208] usb 2-1: device descriptor read/8, error -71 [ 709.237756][ T4208] usb usb2-port1: unable to enumerate USB device [ 717.796825][ T7593] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 717.987788][ T7593] usb 3-1: device descriptor read/64, error -71 [ 718.597877][ T7593] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 718.827651][ T7593] usb 3-1: device descriptor read/64, error -71 [ 718.968000][ T7593] usb usb3-port1: attempt power cycle [ 719.380016][ T7593] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 719.497772][ T7593] usb 3-1: device descriptor read/8, error -71 [ 719.778348][ T7593] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 719.887828][ T7593] usb 3-1: device descriptor read/8, error -71 [ 720.030286][ T7593] usb usb3-port1: unable to enumerate USB device [ 732.127883][ T7593] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 732.537784][ T7593] usb 3-1: unable to get BOS descriptor or descriptor too short [ 733.493332][ T7593] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 733.501464][ T7593] usb 3-1: can't read configurations, error -71 [ 734.197907][ T7593] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 734.597722][ T7593] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 734.606470][ T7593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.798085][ T7593] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 734.807275][ T7593] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 734.880947][ T7593] usb 3-1: Manufacturer: syz [ 734.916146][ T7593] usb 3-1: config 0 descriptor?? [ 735.966801][ T26] audit: type=1326 audit(1742394042.073:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 736.037098][ T26] audit: type=1326 audit(1742394042.113:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 736.073291][ T7593] rc_core: IR keymap rc-hauppauge not found [ 736.097476][ T7593] Registered IR keymap rc-empty [ 736.117751][ T7593] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 736.135094][ T26] audit: type=1326 audit(1742394042.113:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 736.149709][ T7593] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 736.191966][T11027] 9pnet: Insufficient options for proto=fd [ 736.273087][ T26] audit: type=1326 audit(1742394042.113:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 736.424923][ T26] audit: type=1326 audit(1742394042.113:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 736.542201][ T7593] usb 3-1: USB disconnect, device number 29 [ 737.610052][ T26] audit: type=1326 audit(1742394042.113:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 740.927520][ T26] audit: type=1326 audit(1742394047.013:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.2.2043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0d557e169 code=0x0 [ 744.599080][ T26] audit: type=1326 audit(1742394050.713:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 744.649975][ T26] audit: type=1326 audit(1742394050.713:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 744.735830][ T26] audit: type=1326 audit(1742394050.733:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 744.759733][T11089] 9pnet: Insufficient options for proto=fd [ 744.794685][ T26] audit: type=1326 audit(1742394050.733:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 744.900142][ T26] audit: type=1326 audit(1742394050.733:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 744.978871][ T26] audit: type=1326 audit(1742394050.733:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 747.252111][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.258531][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.507704][ T13] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 751.709812][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2067'. [ 752.092774][ T13] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 752.110387][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.287976][ T13] usb 3-1: string descriptor 0 read error: -71 [ 752.310234][ T13] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 753.729657][ T13] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 755.789584][ T13] usb 3-1: config 0 descriptor?? [ 755.808084][ T13] usb 3-1: can't set config #0, error -71 [ 755.839570][ T13] usb 3-1: USB disconnect, device number 30 [ 756.868144][ T26] audit: type=1326 audit(1742394062.983:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.2079" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ba9abb169 code=0x0 [ 758.047517][ T13] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 759.407732][ T13] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 759.426652][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.542537][ T13] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 759.562313][ T13] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 759.582584][ T13] usb 3-1: Manufacturer: syz [ 759.603246][ T13] usb 3-1: config 0 descriptor?? [ 759.767620][ T13] rc_core: IR keymap rc-hauppauge not found [ 759.773573][ T13] Registered IR keymap rc-empty [ 759.795279][ T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 759.822773][ T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 760.648746][ T4208] usb 3-1: USB disconnect, device number 31 [ 760.957376][ T8073] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 761.317869][ T8073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.336467][ T8073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.353051][ T8073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.366744][ T8073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.382010][ T8073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.408403][ T8073] usb 2-1: config 0 descriptor?? [ 761.797878][ T8073] usb 2-1: string descriptor 0 read error: -71 [ 762.013890][ T8073] usb 2-1: USB disconnect, device number 29 [ 769.459477][ T23] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 771.697591][ T23] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 771.706977][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.307660][ T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 772.316758][ T23] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 772.344220][ T23] usb 2-1: config 0 descriptor?? [ 772.407746][ T23] usb 2-1: can't set config #0, error -71 [ 772.425426][ T23] usb 2-1: USB disconnect, device number 30 [ 776.047780][ T23] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 776.447781][ T23] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 776.463295][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.472036][T11360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2120'. [ 776.499146][ T23] usb 3-1: config 0 descriptor?? [ 776.558952][ T23] cp210x 3-1:0.0: cp210x converter detected [ 777.227673][ T23] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 777.678678][ T23] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 777.830679][ T23] usb 3-1: cp210x converter now attached to ttyUSB0 [ 777.840098][ T23] usb 3-1: USB disconnect, device number 32 [ 778.280314][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 778.289396][ T23] cp210x 3-1:0.0: device disconnected [ 779.537016][ T26] audit: type=1326 audit(1742394085.643:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.2.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d557e169 code=0x7ffc0000 [ 779.642478][ T26] audit: type=1326 audit(1742394085.683:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.2.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd0d557e169 code=0x7ffc0000 [ 779.667574][ T26] audit: type=1326 audit(1742394085.683:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.2.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d557e169 code=0x7ffc0000 [ 780.843893][ T26] audit: type=1326 audit(1742394085.683:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.2.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d557e169 code=0x7ffc0000 [ 781.295096][T11394] 9pnet: Insufficient options for proto=fd [ 781.346983][T11396] fuse: Bad value for 'fd' [ 781.360588][ T26] audit: type=1326 audit(1742394085.683:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.2.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fd0d557e169 code=0x7ffc0000 [ 785.340234][ T26] audit: type=1326 audit(1742394091.453:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 785.442060][ T26] audit: type=1326 audit(1742394091.463:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 785.452798][T11437] 9pnet: Insufficient options for proto=fd [ 786.731868][ T26] audit: type=1326 audit(1742394091.463:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 787.549482][ T26] audit: type=1326 audit(1742394091.463:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f6ba9abb169 code=0x7ffc0000 [ 787.602055][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 787.969864][T11443] device bond6 entered promiscuous mode [ 788.752964][T11443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 788.916021][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2166'. [ 791.049103][ T26] audit: type=1326 audit(1742394097.153:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 791.167654][ T26] audit: type=1326 audit(1742394097.183:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 791.264389][T11484] 9pnet: Insufficient options for proto=fd [ 791.278363][ T26] audit: type=1326 audit(1742394097.183:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 791.392314][ T26] audit: type=1326 audit(1742394097.183:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 791.543697][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2176'. [ 791.603911][T11490] device bond7 entered promiscuous mode [ 791.640178][T11490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 792.762510][ T4262] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 792.869918][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2186'. [ 794.114405][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 794.125157][ T4262] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 794.158584][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.338848][ T4262] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 794.341224][T11529] device bond5 entered promiscuous mode [ 794.357258][T11529] 8021q: adding VLAN 0 to HW filter on device bond5 [ 794.393094][ T4262] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 794.460094][ T4262] usb 3-1: Manufacturer: syz [ 794.538343][ T4262] usb 3-1: config 0 descriptor?? [ 794.677730][ T4262] rc_core: IR keymap rc-hauppauge not found [ 794.683806][ T4262] Registered IR keymap rc-empty [ 794.717845][ T4262] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 794.740787][ T4262] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 794.757069][ T26] audit: type=1326 audit(1742394100.863:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11537 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 794.815680][ T26] audit: type=1326 audit(1742394100.903:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11537 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 794.867659][ T26] audit: type=1326 audit(1742394100.903:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11537 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 794.934522][ T26] audit: type=1326 audit(1742394100.903:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11537 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 794.984389][T11540] 9pnet: Insufficient options for proto=fd [ 795.387534][ C1] igorplugusb 3-1:0.0: receive overflow, at least 28 lost [ 796.280703][ T4262] usb 3-1: USB disconnect, device number 33 [ 799.047095][ T26] audit: type=1326 audit(1742394105.153:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 799.083972][ T26] audit: type=1326 audit(1742394105.183:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 800.033401][ T26] audit: type=1326 audit(1742394105.233:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 800.056715][ T26] audit: type=1326 audit(1742394105.233:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 800.081525][ T26] audit: type=1326 audit(1742394105.243:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 800.108041][ T26] audit: type=1326 audit(1742394105.973:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 805.066936][ T26] audit: type=1326 audit(1742394111.173:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 805.115432][ T26] audit: type=1326 audit(1742394111.173:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 805.222756][ T26] audit: type=1326 audit(1742394111.203:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 805.283093][ T26] audit: type=1326 audit(1742394111.203:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 805.336682][ T26] audit: type=1326 audit(1742394111.203:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 805.407380][ T26] audit: type=1326 audit(1742394111.213:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f27fb0b7169 code=0x7ffc0000 [ 809.764723][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.771467][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.032478][ T26] audit: type=1326 audit(1742394117.143:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 811.035038][T11690] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 811.120153][T11690] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 811.133665][ T26] audit: type=1326 audit(1742394117.173:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 812.799809][ T26] audit: type=1326 audit(1742394118.913:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 812.936861][ T26] audit: type=1326 audit(1742394118.943:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 812.962126][ T26] audit: type=1326 audit(1742394118.943:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 812.985666][ T26] audit: type=1326 audit(1742394118.943:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 813.018274][ T26] audit: type=1326 audit(1742394118.943:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 818.016566][ T26] audit: type=1326 audit(1742394124.123:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 818.040552][T11767] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2264'. [ 818.067342][ T26] audit: type=1326 audit(1742394124.163:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 819.401055][ T26] audit: type=1326 audit(1742394124.163:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 819.438221][ T26] audit: type=1326 audit(1742394124.163:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 819.488584][T11776] 9pnet: Insufficient options for proto=fd [ 819.695201][ T26] audit: type=1326 audit(1742394124.163:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.3.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f408d423169 code=0x7ffc0000 [ 821.744277][T11802] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 826.166262][ T26] audit: type=1326 audit(1742394132.273:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 826.224549][ T26] audit: type=1326 audit(1742394132.273:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 826.413698][ T26] audit: type=1326 audit(1742394132.273:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 826.417873][T11831] 9pnet: Insufficient options for proto=fd [ 826.436779][ T26] audit: type=1326 audit(1742394132.273:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0459723169 code=0x7ffc0000 [ 932.257370][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 932.264549][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11836/1:b..l [ 932.273323][ C1] (detected by 1, t=10503 jiffies, g=66469, q=14) [ 932.279848][ C1] task:syz.2.2286 state:R running task stack:27168 pid:11836 ppid: 4171 flags:0x00004000 [ 932.292477][ C1] Call Trace: [ 932.295832][ C1] [ 932.298798][ C1] __schedule+0x12c4/0x45b0 [ 932.303335][ C1] ? handle_mm_fault+0x2f49/0x5960 [ 932.308741][ C1] ? asm_exc_page_fault+0x22/0x30 [ 932.313958][ C1] ? mark_lock+0x98/0x340 [ 932.318508][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 932.324540][ C1] ? release_firmware_map_entry+0x190/0x190 [ 932.330475][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 932.335888][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 932.341420][ C1] ? __cond_resched+0xf0/0xf0 [ 932.346187][ C1] irqentry_exit+0x53/0x80 [ 932.350635][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 932.356119][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 932.361521][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0c ac 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 932.381563][ C1] RSP: 0000:ffffc9000410f9a0 EFLAGS: 00000206 [ 932.387656][ C1] RAX: 0000000000000001 RBX: 1ffff92000821f40 RCX: 1ffff92000821ee0 [ 932.395643][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 932.403629][ C1] RBP: ffffc9000410fb00 R08: dffffc0000000000 R09: fffffbfff2131e19 [ 932.411621][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000821f3c [ 932.419613][ C1] R13: dffffc0000000000 R14: ffffc9000410fa00 R15: 0000000000000246 [ 932.427644][ C1] ? read_lock_is_recursive+0x10/0x10 [ 932.433063][ C1] ? rcu_lock_acquire+0x30/0x30 [ 932.437939][ C1] rcu_lock_acquire+0x20/0x30 [ 932.442632][ C1] ? __page_memcg+0x160/0x160 [ 932.447327][ C1] percpu_ref_get_many+0x15/0x110 [ 932.452372][ C1] charge_memcg+0x145/0x340 [ 932.456897][ C1] ? __mem_cgroup_charge+0x80/0x80 [ 932.462038][ C1] __mem_cgroup_charge+0x23/0x80 [ 932.466997][ C1] handle_mm_fault+0x2f90/0x5960 [ 932.471982][ C1] ? numa_migrate_prep+0x1a0/0x1a0 [ 932.477146][ C1] ? vmacache_find+0x23c/0x590 [ 932.481963][ C1] exc_page_fault+0x271/0x700 [ 932.486693][ C1] asm_exc_page_fault+0x22/0x30 [ 932.491566][ C1] RIP: 0033:0x7fd0d5535bc6 [ 932.495997][ C1] RSP: 002b:00007fff3ac238f0 EFLAGS: 00010246 [ 932.502095][ C1] RAX: 00007fd0d33c7000 RBX: 00007fd0d33e76c0 RCX: 00007fd0d557e227 [ 932.510094][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fd0d33e76c0 [ 932.518187][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 932.526270][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff3ac23a40 [ 932.534347][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 932.542619][ C1] [ 932.545680][ C1] rcu: rcu_preempt kthread starved for 10479 jiffies! g66469 f0x0 RCU_GP_DOING_FQS(6) ->state=0x0 ->cpu=1 [ 932.557357][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 932.567348][ C1] rcu: RCU grace-period kthread stack dump: [ 932.573508][ C1] task:rcu_preempt state:R running task stack:27192 pid: 15 ppid: 2 flags:0x00004000 [ 932.584321][ C1] Call Trace: [ 932.587627][ C1] [ 932.590587][ C1] __schedule+0x12c4/0x45b0 [ 932.595149][ C1] ? mark_lock+0x98/0x340 [ 932.599513][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 932.605562][ C1] ? release_firmware_map_entry+0x190/0x190 [ 932.611576][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 932.617025][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 932.622183][ C1] ? __cond_resched+0xf0/0xf0 [ 932.626917][ C1] irqentry_exit+0x53/0x80 [ 932.631368][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 932.636980][ C1] RIP: 0010:rcu_gp_fqs_loop+0x10c/0x1080 [ 932.642812][ C1] Code: 28 48 c7 c0 a8 a0 0a 8e 48 c1 e8 03 48 89 44 24 38 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 b7 2d 5e 00 4c 8b 23 01 eb 1b 49 89 dc 4d 29 f4 48 3b 1d 13 90 14 0b b8 01 00 00 00 [ 932.662614][ C1] RSP: 0018:ffffc90000d47ca0 EFLAGS: 00000246 [ 932.668708][ C1] RAX: 1ffffffff1964688 RBX: ffffffff8cb23440 RCX: ffff88813ff23b80 [ 932.676699][ C1] RDX: ffff88813ff23b80 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 932.684780][ C1] RBP: ffffc90000d47df0 R08: ffffffff81871b70 R09: fffffbfff1964691 [ 932.692894][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 932.700988][ C1] R13: ffffc90000d47d60 R14: dffffc0000000000 R15: 0000000000000000 [ 932.709075][ C1] ? trace_hardirqs_on+0x30/0x80 [ 932.714140][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 932.719450][ C1] ? dump_blkd_tasks+0x810/0x810 [ 932.724415][ C1] ? rcu_gp_init+0xdae/0x1140 [ 932.729462][ C1] ? rcu_gp_init+0x1140/0x1140 [ 932.734383][ C1] ? finish_swait+0xc5/0x1d0 [ 932.739021][ C1] rcu_gp_kthread+0xa4/0x360 [ 932.743642][ C1] ? _raw_spin_unlock+0x40/0x40 [ 932.748559][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 932.753691][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 932.759615][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 932.764670][ C1] kthread+0x3f6/0x4f0 [ 932.768856][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 932.774198][ C1] ? kthread_blkcg+0xd0/0xd0 [ 932.778924][ C1] ret_from_fork+0x1f/0x30 [ 932.783481][ C1] [ 932.786523][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 932.792945][ C1] NMI backtrace for cpu 1 [ 932.797457][ C1] CPU: 1 PID: 11835 Comm: syz.1.2284 Not tainted 5.15.179-syzkaller #0 [ 932.805850][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 932.816188][ C1] Call Trace: [ 932.819489][ C1] [ 932.822360][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 932.827069][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 932.832724][ C1] ? panic+0x860/0x860 [ 932.836923][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 932.841986][ C1] ? __wake_up_klogd+0xd5/0x100 [ 932.846877][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 932.853051][ C1] ? _printk+0xd1/0x120 [ 932.857229][ C1] ? cpu_online+0x1f/0x40 [ 932.861575][ C1] ? panic+0x860/0x860 [ 932.865664][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 932.871752][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 932.877772][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 932.883975][ C1] print_other_cpu_stall+0x137a/0x14d0 [ 932.889489][ C1] ? print_cpu_stall+0x600/0x600 [ 932.894667][ C1] ? ktime_get+0x7f/0x270 [ 932.899037][ C1] rcu_sched_clock_irq+0xa38/0x1150 [ 932.904258][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 932.909122][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 932.914344][ C1] ? hrtimer_run_queues+0x163/0x450 [ 932.919559][ C1] ? account_process_tick+0x232/0x3a0 [ 932.924957][ C1] update_process_times+0x196/0x200 [ 932.930173][ C1] tick_sched_timer+0x386/0x550 [ 932.935041][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 932.940614][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 932.945851][ C1] ? hrtimer_interrupt+0x980/0x980 [ 932.950982][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 932.957076][ C1] hrtimer_interrupt+0x392/0x980 [ 932.962057][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 932.968059][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 932.973714][ C1] [ 932.976656][ C1] [ 932.979593][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 932.985596][ C1] RIP: 0010:raw_spin_rq_unlock_irq+0x19/0x80 [ 932.991606][ C1] Code: 38 c1 7c cb 4c 89 f7 e8 15 c2 70 00 eb c1 0f 1f 00 41 57 41 56 53 48 89 fb eb 14 48 89 df e8 9e d0 ef 08 e8 39 4e 2d 00 fb 5b <41> 5e 41 5f c3 49 bf 00 00 00 00 00 fc ff df 4c 8d b3 58 0d 00 00 [ 933.011404][ C1] RSP: 0018:ffffc9000310f708 EFLAGS: 00000286 [ 933.017495][ C1] RAX: 593c5b2b4c9b2400 RBX: ffff8880b8f3a300 RCX: ffffffff96a95f03 [ 933.025575][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab2a60 RDI: ffffffff8af9fa80 [ 933.033569][ C1] RBP: ffffc9000310f900 R08: ffffffff81871b70 R09: ffffed10171c7461 [ 933.041582][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807b7c5940 [ 933.049590][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b058 R15: dffffc0000000000 [ 933.057693][ C1] ? trace_hardirqs_on+0x30/0x80 [ 933.062887][ C1] __schedule+0x1462/0x45b0 [ 933.067893][ C1] ? release_firmware_map_entry+0x190/0x190 [ 933.073844][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 933.079163][ C1] schedule+0x11b/0x1f0 [ 933.083380][ C1] futex_wait_queue_me+0x25b/0x480 [ 933.088531][ C1] futex_wait+0x2f8/0x740 [ 933.092986][ C1] ? do_futex+0x1810/0x1810 [ 933.097619][ C1] ? reacquire_held_locks+0x660/0x660 [ 933.103147][ C1] ? print_irqtrace_events+0x210/0x210 [ 933.108639][ C1] do_futex+0x1414/0x1810 [ 933.113034][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 933.118577][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 933.124086][ C1] ? rcu_lock_release+0x5/0x20 [ 933.128882][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 933.133940][ C1] ? __context_tracking_exit+0x4c/0x80 [ 933.139625][ C1] __se_sys_futex+0x407/0x490 [ 933.144418][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 933.149220][ C1] ? rcu_is_watching+0x11/0xa0 [ 933.154038][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 933.158931][ C1] do_syscall_64+0x3b/0xb0 [ 933.163363][ C1] ? clear_bhb_loop+0x15/0x70 [ 933.168497][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 933.174827][ C1] RIP: 0033:0x7f6ba9abb169 [ 933.179370][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.199207][ C1] RSP: 002b:00007f6ba79030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 933.208093][ C1] RAX: ffffffffffffffda RBX: 00007f6ba9cd4088 RCX: 00007f6ba9abb169 [ 933.216088][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ba9cd4088 [ 933.224162][ C1] RBP: 00007f6ba9cd4080 R08: 0000000000000000 R09: 0000000000000000 [ 933.232154][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ba9cd408c [ 933.240235][ C1] R13: 0000000000000000 R14: 00007fff139a9300 R15: 00007fff139a93e8 [ 933.248239][ C1]