last executing test programs: 35m3.284680441s ago: executing program 1 (id=261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120001", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 34m58.88340879s ago: executing program 1 (id=277): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000080000000c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000087a576"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800de06a70e000000000000000000000000000018a1f382899ad65e5825230b1c41af633a1100002da930e235"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpriority(0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init() r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1, 0x85bad93}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e22, 0xf, @empty, 0x4}}, 0x9, 0x6, 0x0, 0x2, 0xce0206, 0xffffffe, 0x25}, 0x9c) inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) read(r7, &(0x7f0000000080)=""/47, 0x2f) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 34m55.534532345s ago: executing program 1 (id=292): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000d00)="e8700e444d50a969ff67347cff6127", 0xf}], 0x1}], 0x1, 0x44800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3], 0x6f4}}, 0x0) 34m55.244873498s ago: executing program 1 (id=296): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f0000000500)='./bus\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 34m54.039531144s ago: executing program 1 (id=300): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) shutdown(0xffffffffffffffff, 0x1) 34m53.548976191s ago: executing program 1 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r2, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 34m50.59487281s ago: executing program 32 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r2, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 32.332814033s ago: executing program 4 (id=6380): write$dsp(0xffffffffffffffff, &(0x7f0000000280)='e', 0x1) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f000001b600)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c, 0x1400, 0x0, {0x0, r0}}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000000580)=""/102400, 0x19000) pipe2(&(0x7f0000000000), 0x0) gettid() r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000019580)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="736563757269b2574bf500006700000000000000000000000c0000000000000004"], 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0106008b4f000000000009000000240004801300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000006c0)=@v={0x93, 0x7, 0x90, 0x2, @MIDI_NOTEON=@special, 0x0, 0x800}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 29.53944311s ago: executing program 4 (id=6388): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]}) close_range(r1, r2, 0x0) 28.587067233s ago: executing program 4 (id=6391): syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)) syz_pidfd_open(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@my=0x1, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 25.928384789s ago: executing program 4 (id=6397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000300)=""/132, 0x84) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x8, 0xffffffd6, 0x6, 0x80000001, 0xfffffff7, 0x6, 0x4, 0x8000}}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r6, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) syz_io_uring_setup(0x6ae9, &(0x7f0000000340)={0x0, 0x40000002, 0x4000}, &(0x7f0000000400), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 24.638414317s ago: executing program 4 (id=6399): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x5a, &(0x7f0000003140)=ANY=[@ANYBLOB="aaaaaaaaaa0aaaaaaaaaaa1081001000000d04ecaba434ec22917f9166326e544ef700010000000000700c233ac8439d27f33f1407bbe4c4f40563c42302d13019aaebaf51ab42d5a89639763b84ba0f0802c746340331c62bdf8abd0837ceb9a4cd0326b10200200b4eb7c43904e78e8367bc6c4fb2"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7], 0x2c}}, 0x0) 23.027378629s ago: executing program 4 (id=6403): socket$nl_route(0x10, 0x3, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003640)={0xffffffffffffffff, 0x27, 0xb, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$fb(r3, &(0x7f0000000240)=""/47, 0x2f) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x3f7, 0x10, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40408c4}, 0x4004050) read(r4, &(0x7f0000000640)=""/4096, 0x1000) 13.955484221s ago: executing program 2 (id=6423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x9, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x6, 0x1, {0xffff, 0xc}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x800) 13.522556888s ago: executing program 2 (id=6427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000300)=""/132, 0x84) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x8, 0xffffffd6, 0x6, 0x80000001, 0xfffffff7, 0x6, 0x4, 0x8000}}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 12.212828635s ago: executing program 2 (id=6429): write$dsp(0xffffffffffffffff, &(0x7f0000000280)='e', 0x1) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f000001b600)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c, 0x1400, 0x0, {0x0, r0}}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000000580)=""/102400, 0x19000) pipe2(&(0x7f0000000000), 0x0) gettid() r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="736563757269b2574bf500006700000000000000000000000c0000000000000004"], 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0106008b4f000000000009000000240004801300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000006c0)=@v={0x93, 0x7, 0x90, 0x2, @MIDI_NOTEON=@special, 0x0, 0x800}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.676705866s ago: executing program 2 (id=6431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x200000d4) 10.413477089s ago: executing program 0 (id=6432): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185143, 0x151) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000500)="47e881b4290945898b0a6a499c26ed27cce4fdfe381755113e31991782cfd809a25439a9fda8679100966e30cb512190521b942396b38150c34516a95a54612080fd9a3ee1524b8eec6d6669f4aaf6575c1b26231b28135884d32764527f94b6d97315ab8b7248decfd143a374b7c6", 0x6f}], 0x1) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='test_pages_isolated\x00', r1, 0x0, 0x20}, 0x18) clock_getres(0x3, 0x0) r2 = socket(0x26, 0xa, 0xa) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xbe}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000240), 0x800000000, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 10.39542258s ago: executing program 3 (id=6433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000080)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 10.110862893s ago: executing program 2 (id=6434): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x205) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000ff0000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000140000000000000000000000000000000084fbf0f449"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x20040000}, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x100, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r6}}, 0x20) 9.376245664s ago: executing program 0 (id=6435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB='EK'], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="000000000000010185", @ANYRES32=0x1], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.587442344s ago: executing program 0 (id=6436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x9, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x6, 0x1, {0xffff, 0xc}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x800) 8.414609157s ago: executing program 3 (id=6437): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff0000000000"], 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.061731045s ago: executing program 5 (id=6440): write$dsp(0xffffffffffffffff, &(0x7f0000000280)='e', 0x1) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f000001b600)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c, 0x1400, 0x0, {0x0, r0}}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000000580)=""/102400, 0x19000) pipe2(&(0x7f0000000000), 0x0) gettid() r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000019580)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) writev(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="736563757269b2574bf500006700000000000000000000000c0000000000000004"], 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0106008b4f000000000009000000240004801300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000006c0)=@v={0x93, 0x7, 0x90, 0x2, @MIDI_NOTEON=@special, 0x0, 0x800}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.498302692s ago: executing program 5 (id=6441): sync() 6.483406652s ago: executing program 0 (id=6442): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x82042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0x54, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4b38c3", 0x1e, 0x29, 0x1, @local, @mcast2, {[], "59132926ac841b11e80c0220c53c3f58b562ec28bf6593d32e44221b2e45"}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX]) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') syz_open_dev$sg(&(0x7f00000001c0), 0x10000000000003, 0x141102) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='//+%\xda\\[}]]\x00', 0x0) 5.469290787s ago: executing program 0 (id=6443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x200000d4) 5.436804047s ago: executing program 5 (id=6444): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185143, 0x151) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000500)="47e881b4290945898b0a6a499c26ed27cce4fdfe381755113e31991782cfd809a25439a9fda8679100966e30cb512190521b942396b38150c34516a95a54612080fd9a3ee1524b8eec6d6669f4aaf6575c1b26231b28135884d32764527f94b6d97315ab8b7248decfd143a374b7c6", 0x6f}], 0x1) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='test_pages_isolated\x00', r2, 0x0, 0x20}, 0x18) mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x2000004) r3 = socket(0x26, 0xa, 0xa) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xbe}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000240), 0x800000000, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 5.243117929s ago: executing program 0 (id=6445): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB='EK'], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="000000000000010185", @ANYRES32=0x1], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.44692764s ago: executing program 3 (id=6446): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000080)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 4.4463897s ago: executing program 5 (id=6447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) openat$mice(0xffffffffffffff9c, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.391889925s ago: executing program 5 (id=6448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000300)=""/132, 0x84) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x8, 0xffffffd6, 0x6, 0x80000001, 0xfffffff7, 0x6, 0x4, 0x8000}}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 1.613179899s ago: executing program 3 (id=6449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) close_range(r1, r2, 0x0) 1.428496361s ago: executing program 3 (id=6450): write$dsp(0xffffffffffffffff, &(0x7f0000000280)='e', 0x1) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f000001b600)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c, 0x1400, 0x0, {0x0, r0}}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000000580)=""/102400, 0x19000) pipe2(&(0x7f0000000000), 0x0) gettid() r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000019580)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) writev(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0106008b4f000000000009000000240004801300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000006c0)=@v={0x93, 0x7, 0x90, 0x2, @MIDI_NOTEON=@special, 0x0, 0x800}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 595.441042ms ago: executing program 3 (id=6451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x9, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x6, 0x1, {0xffff, 0xc}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x800) 11.98293ms ago: executing program 5 (id=6452): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x82042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0x54, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4b38c3", 0x1e, 0x29, 0x1, @local, @mcast2, {[], "59132926ac841b11e80c0220c53c3f58b562ec28bf6593d32e44221b2e45"}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX]) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') syz_open_dev$sg(&(0x7f00000001c0), 0x10000000000003, 0x141102) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='//+%\xda\\[}]]\x00', 0x0) 0s ago: executing program 2 (id=6453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) kernel console output (not intermixed with test programs): omiscuous mode [ 1961.397677][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.517281][T14878] ubi: mtd0 is already attached to ubi31 [ 1961.806169][T14884] 9pnet_fd: Insufficient options for proto=fd [ 1962.427922][ T8573] device veth1_macvtap left promiscuous mode [ 1962.434093][ T8573] device veth0_macvtap left promiscuous mode [ 1962.442680][ T8573] device veth1_vlan left promiscuous mode [ 1962.450094][ T8573] device veth0_vlan left promiscuous mode [ 1963.264960][ T4658] gspca_stk1135: reg_w 0x300 err -71 [ 1963.550193][ T4658] gspca_stk1135: serial bus timeout: status=0x00 [ 1963.556820][ T4658] gspca_stk1135: Sensor write failed [ 1963.562915][ T4658] gspca_stk1135: serial bus timeout: status=0x00 [ 1963.569491][ T4658] gspca_stk1135: Sensor write failed [ 1963.574933][ T4658] gspca_stk1135: serial bus timeout: status=0x00 [ 1963.581770][ T4658] gspca_stk1135: Sensor read failed [ 1963.591613][ T4658] gspca_stk1135: serial bus timeout: status=0x00 [ 1963.598055][ T4658] gspca_stk1135: Sensor read failed [ 1963.603359][ T4658] gspca_stk1135: Detected sensor type unknown (0x0) [ 1963.610120][ T4658] gspca_stk1135: serial bus timeout: status=0x00 [ 1963.616581][ T4658] gspca_stk1135: Sensor read failed [ 1963.622607][ T4658] gspca_stk1135: serial bus timeout: status=0x00 [ 1963.629136][ T4658] gspca_stk1135: Sensor read failed [ 1963.634393][ T4658] gspca_stk1135: serial bus timeout: status=0x00 [ 1963.640894][ T4658] gspca_stk1135: Sensor write failed [ 1963.646240][ T4658] gspca_stk1135: serial bus timeout: status=0x00 [ 1963.652738][ T4658] gspca_stk1135: Sensor write failed [ 1963.658198][ T4658] stk1135: probe of 4-1:0.0 failed with error -71 [ 1963.666991][ T4658] usb 4-1: USB disconnect, device number 51 [ 1964.795830][T14901] slcan: can't register candev [ 1964.947042][ T8573] team0 (unregistering): Port device team_slave_1 removed [ 1965.091562][ T8573] team0 (unregistering): Port device team_slave_0 removed [ 1965.188149][ T8573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1965.262679][ T8573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1966.264713][T14911] ubi: mtd0 is already attached to ubi31 [ 1967.000779][ T8573] bond0 (unregistering): Released all slaves [ 1967.123941][T14917] 9pnet_fd: Insufficient options for proto=fd [ 1967.263672][T14873] netlink: 'syz.4.5718': attribute type 29 has an invalid length. [ 1967.308377][T14902] netlink: 'syz.3.5724': attribute type 10 has an invalid length. [ 1967.340896][T14902] bridge0: port 3(netdevsim0) entered disabled state [ 1967.348179][T14902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.355768][T14902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.591614][T14902] bridge0: port 3(netdevsim0) entered blocking state [ 1968.598480][T14902] bridge0: port 3(netdevsim0) entered forwarding state [ 1968.605884][T14902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.613097][T14902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1968.620533][T14902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.627709][T14902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.639815][T14902] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1969.667266][T11005] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1969.867217][T11005] usb 5-1: Using ep0 maxpacket: 32 [ 1969.876523][T11005] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1969.951571][T11005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.985105][T11005] usb 5-1: Product: syz [ 1969.997244][T11005] usb 5-1: Manufacturer: syz [ 1970.777306][T11005] usb 5-1: SerialNumber: syz [ 1970.904498][T11005] usb 5-1: config 0 descriptor?? [ 1970.960574][T11005] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1971.565836][T14962] ubi: mtd0 is already attached to ubi31 [ 1972.625244][T14761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1972.703572][T14761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1973.166556][T14761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1973.233134][T14761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1973.576241][T14761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1973.634505][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1973.668124][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1973.702100][T14761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1973.723804][T11005] gspca_stk1135: reg_w 0x300 err -71 [ 1973.732351][T11005] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.748368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1973.768395][T11005] gspca_stk1135: Sensor write failed [ 1973.773896][T11005] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.786562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1973.804116][T11005] gspca_stk1135: Sensor write failed [ 1973.810578][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.817911][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1973.835516][T11005] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.850198][T11005] gspca_stk1135: Sensor read failed [ 1973.861133][T11005] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.868657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1973.884077][T11005] gspca_stk1135: Sensor read failed [ 1973.898628][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1973.907648][T11005] gspca_stk1135: Detected sensor type unknown (0x0) [ 1973.917729][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1973.923353][T11005] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.943456][T11005] gspca_stk1135: Sensor read failed [ 1973.953591][T11005] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.956177][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.967212][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1973.979044][T11005] gspca_stk1135: Sensor read failed [ 1973.984395][T11005] gspca_stk1135: serial bus timeout: status=0x00 [ 1974.010202][T11005] gspca_stk1135: Sensor write failed [ 1974.019953][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1974.033471][T11005] gspca_stk1135: serial bus timeout: status=0x00 [ 1974.047210][T11005] gspca_stk1135: Sensor write failed [ 1974.048793][ T6094] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1974.062897][T11005] stk1135: probe of 5-1:0.0 failed with error -71 [ 1974.077708][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1974.116406][T11005] usb 5-1: USB disconnect, device number 67 [ 1974.130628][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1974.165109][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1974.199331][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1974.227095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1974.280212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1974.309591][ T6094] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.320481][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1974.349085][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1974.367063][ T6094] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1974.379415][ T6094] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1974.395923][T14761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1974.412977][ T6094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1974.448619][T14761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1974.451950][ T6094] usb 6-1: SerialNumber: syz [ 1974.476243][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1974.495010][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1976.055007][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.075309][ T6094] usb 6-1: 0:2 : does not exist [ 1976.208110][ T6094] usb 6-1: USB disconnect, device number 78 [ 1977.419758][T14929] udevd[14929]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1977.965708][ T52] block nbd4: Attempted send on invalid socket [ 1977.972144][ T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1977.981522][T15029] qnx6: unable to read the first superblock [ 1977.987905][ T52] block nbd4: Attempted send on invalid socket [ 1977.994168][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1978.003717][T15029] qnx6: unable to read the first superblock [ 1978.009828][T15029] qnx6: unable to read the first superblock [ 1978.108360][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1978.125163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1978.199942][T14761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1978.471889][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1978.482081][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1978.945296][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1978.985570][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1979.042493][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1979.076050][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1979.108992][T14761] device veth0_vlan entered promiscuous mode [ 1979.154584][T14761] device veth1_vlan entered promiscuous mode [ 1979.189004][T15024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5748'. [ 1979.267399][ T5424] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 1979.309122][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1979.331458][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1979.369777][T14761] device veth0_macvtap entered promiscuous mode [ 1979.415357][T14761] device veth1_macvtap entered promiscuous mode [ 1979.459762][ T5424] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.497201][ T5424] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1979.546174][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.560311][ T5424] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1979.576573][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.593636][ T5424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.626911][T15048] netlink: 'syz.5.5753': attribute type 29 has an invalid length. [ 1979.638156][ T5424] usb 5-1: config 0 descriptor?? [ 1979.643655][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.658734][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.698128][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.711064][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.721579][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.732452][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.758217][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.874557][T15054] ubi: mtd0 is already attached to ubi31 [ 1979.906046][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.916485][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.934678][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.018247][ T5424] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1980.110699][T14761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1980.430575][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.482106][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.519194][ T5424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1980.547316][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.550824][ T5424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1980.588543][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.606237][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.606331][ T5424] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1980.674880][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.674964][ T5424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.720877][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.743260][ T5424] usb 4-1: config 0 descriptor?? [ 1980.756842][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.779749][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.830933][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.881985][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.922101][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.969551][T14761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1980.999494][T15048] netlink: 'syz.5.5753': attribute type 29 has an invalid length. [ 1981.015049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1981.034471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1981.063833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1981.088881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1981.121815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1981.180196][ T5424] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1981.193045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1981.209236][ T5424] hid-thrustmaster 0003:044F:B65D.001D: Wrong number of endpoints? [ 1981.242850][T14761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.274228][T14761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.312454][T14761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.410310][T14761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.479061][ C0] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -71 [ 1981.497883][T14529] usb 4-1: USB disconnect, device number 52 [ 1981.776980][T15076] can0: slcan on ttyS3. [ 1981.829605][ T7975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.839083][T15076] can0 (unregistered): slcan off ttyS3. [ 1981.891573][ T7975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.978947][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1982.203512][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1982.246085][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.309226][ T4295] usb 5-1: USB disconnect, device number 68 [ 1982.409014][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1982.811647][T15098] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1982.820480][T15098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1982.829353][T15098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1982.846303][T15098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1982.855795][T15098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1982.874049][ T1041] block nbd5: Attempted send on invalid socket [ 1982.880380][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1982.889731][T15100] qnx6: unable to read the first superblock [ 1982.895980][ T1041] block nbd5: Attempted send on invalid socket [ 1982.902294][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1982.912129][T15100] qnx6: unable to read the first superblock [ 1982.918139][T15100] qnx6: unable to read the first superblock [ 1982.972625][T15098] device bridge_slave_0 left promiscuous mode [ 1982.989852][T15098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.249102][ T27] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1983.853901][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.885111][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1983.906207][ T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1983.928235][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1983.946673][ T27] usb 4-1: SerialNumber: syz [ 1984.200081][T15098] device bridge_slave_1 left promiscuous mode [ 1984.210091][T15098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.256400][T15098] bond0: (slave bond_slave_0): Releasing backup interface [ 1984.312816][ T27] usb 4-1: 0:2 : does not exist [ 1984.329996][T15098] bond0: (slave bond_slave_1): Releasing backup interface [ 1984.363773][ T27] usb 4-1: USB disconnect, device number 53 [ 1984.511719][T15098] team0: Port device team_slave_0 removed [ 1984.589079][T15098] team0: Port device team_slave_1 removed [ 1984.602996][T15098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1984.612295][T15098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1984.630558][T15098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1984.638899][T15098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1984.660655][T14929] udevd[14929]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1984.704857][T15098] device netdevsim0 left promiscuous mode [ 1984.762881][T15098] bridge0: port 3(netdevsim0) entered disabled state [ 1984.810851][T15098] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 1985.113421][T15135] netlink: 'syz.5.5765': attribute type 29 has an invalid length. [ 1985.170302][T15135] netlink: 'syz.5.5765': attribute type 29 has an invalid length. [ 1985.337684][T15138] netlink: 'syz.5.5765': attribute type 29 has an invalid length. [ 1986.442109][T15148] can0: slcan on ttyS3. [ 1987.101638][T15138] ubi: mtd0 is already attached to ubi31 [ 1987.148441][T15148] can0 (unregistered): slcan off ttyS3. [ 1988.797446][ T4658] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1989.062001][ T4658] usb 5-1: Using ep0 maxpacket: 8 [ 1989.095921][ T4658] usb 5-1: config 0 has no interfaces? [ 1989.107810][ T4658] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1989.175081][T15183] ubi: mtd0 is already attached to ubi31 [ 1989.207228][ T4658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.228506][ T4658] usb 5-1: config 0 descriptor?? [ 1989.521896][ T1041] block nbd5: Attempted send on invalid socket [ 1989.529079][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1989.538488][T15187] qnx6: unable to read the first superblock [ 1989.545360][ T1041] block nbd5: Attempted send on invalid socket [ 1989.552048][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1989.561406][T15187] qnx6: unable to read the first superblock [ 1989.567437][T15187] qnx6: unable to read the first superblock [ 1991.428868][T15205] can0: slcan on ttyS3. [ 1991.518164][T15205] can0 (unregistered): slcan off ttyS3. [ 1992.895073][T15223] usb usb8: usbfs: process 15223 (syz.2.5782) did not claim interface 2 before use [ 1993.737269][ T4387] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1993.958711][ T4387] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1994.002448][ T4387] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1994.036811][ T4387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.128168][ T4387] usb 3-1: config 0 descriptor?? [ 1994.149096][ T4387] pwc: Askey VC010 type 2 USB webcam detected. [ 1994.421482][T15238] netlink: 'syz.5.5787': attribute type 29 has an invalid length. [ 1994.452588][T15238] netlink: 'syz.5.5787': attribute type 29 has an invalid length. [ 1994.467667][ T27] usb 5-1: USB disconnect, device number 69 [ 1994.484990][T15240] netlink: 'syz.5.5787': attribute type 29 has an invalid length. [ 1994.540436][ T4387] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1994.568388][ T4387] pwc: recv_control_msg error -32 req 02 val 2700 [ 1994.588757][ T4387] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1994.606909][ T4387] pwc: recv_control_msg error -32 req 04 val 1000 [ 1994.614421][T14529] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 1994.814652][T15240] ubi: mtd0 is already attached to ubi31 [ 1994.895144][ T4387] pwc: recv_control_msg error -71 req 04 val 1400 [ 1994.937535][T14529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.111097][ T4387] pwc: recv_control_msg error -71 req 02 val 2000 [ 1995.182139][T14529] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1995.193712][ T4387] pwc: recv_control_msg error -71 req 02 val 2100 [ 1995.199521][T15243] xt_CT: No such helper "pptp" [ 1995.651804][ T4387] pwc: recv_control_msg error -71 req 04 val 1500 [ 1995.765051][T14529] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1995.788336][ T4387] pwc: recv_control_msg error -71 req 02 val 2500 [ 1995.813952][T14529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.833593][ T4387] pwc: recv_control_msg error -71 req 02 val 2400 [ 1995.869859][T14529] usb 4-1: config 0 descriptor?? [ 1995.877284][ T4387] pwc: recv_control_msg error -71 req 02 val 2600 [ 1995.949921][ T4387] pwc: recv_control_msg error -71 req 02 val 2900 [ 1995.983563][ T4387] pwc: recv_control_msg error -71 req 02 val 2800 [ 1996.070893][ T4387] pwc: recv_control_msg error -71 req 04 val 1100 [ 1996.077984][ T4387] pwc: recv_control_msg error -71 req 04 val 1200 [ 1996.262916][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5791'. [ 1996.371007][ T4387] pwc: Registered as video103. [ 1996.753444][ T4387] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input53 [ 1996.826120][ T4387] usb 3-1: USB disconnect, device number 91 [ 1997.177509][ T1041] block nbd5: Attempted send on invalid socket [ 1997.185188][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1997.194881][T15270] qnx6: unable to read the first superblock [ 1997.202004][ T1041] block nbd5: Attempted send on invalid socket [ 1997.208334][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1997.217687][T15270] qnx6: unable to read the first superblock [ 1997.223695][T15270] qnx6: unable to read the first superblock [ 1997.272525][T15272] tmpfs: Unknown parameter 'grpquota' [ 1997.371146][ T6094] usb 4-1: USB disconnect, device number 54 [ 1999.497246][ T6094] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1999.717197][ T6094] usb 4-1: Using ep0 maxpacket: 8 [ 2003.411077][T15313] netlink: 'syz.0.5804': attribute type 29 has an invalid length. [ 2003.479683][T15313] netlink: 'syz.0.5804': attribute type 29 has an invalid length. [ 2003.620215][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5805'. [ 2004.047436][T15315] netlink: 'syz.0.5804': attribute type 29 has an invalid length. [ 2004.207925][T15315] ubi: mtd0 is already attached to ubi31 [ 2005.063818][ T52] block nbd2: Attempted send on invalid socket [ 2005.064067][ T6094] usb 4-1: unable to read config index 0 descriptor/all [ 2005.070367][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2005.077518][ T6094] usb 4-1: can't read configurations, error -110 [ 2005.087599][T15328] qnx6: unable to read the first superblock [ 2005.103919][ T52] block nbd2: Attempted send on invalid socket [ 2005.112245][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2005.161068][T15328] qnx6: unable to read the first superblock [ 2005.167165][T15328] qnx6: unable to read the first superblock [ 2005.337217][ T6094] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2005.537197][ T6094] usb 4-1: device descriptor read/64, error -32 [ 2005.617296][ T4658] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2005.693702][ T6094] usb usb4-port1: attempt power cycle [ 2005.806557][T10607] Bluetooth: hci3: link tx timeout [ 2005.812706][T10607] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2005.826023][T10607] Bluetooth: hci3: link tx timeout [ 2005.831957][T10607] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2006.358762][ T4658] usb 5-1: Using ep0 maxpacket: 8 [ 2006.384717][ T4658] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 2006.427269][ T6094] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2006.495913][ T4658] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2006.511379][ T6094] usb 4-1: device descriptor read/8, error -71 [ 2006.561046][ T4658] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2006.631934][ T4658] usb 5-1: config 0 has no interface number 0 [ 2006.667618][ T4658] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2006.703197][ T4658] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 2006.722606][ T4658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.739972][ T4658] usb 5-1: Product: syz [ 2006.941247][ T4658] usb 5-1: Manufacturer: syz [ 2007.669999][ T4658] usb 5-1: SerialNumber: syz [ 2007.686949][ T4658] usb 5-1: config 0 descriptor?? [ 2007.697652][ T4658] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 2007.764509][T15356] random: crng reseeded on system resumption [ 2007.827252][ T9621] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2007.857279][T10607] Bluetooth: hci3: command 0x0406 tx timeout [ 2007.899080][ T2309] pvrusb2: Invalid write control endpoint [ 2007.901273][ T4658] usb 5-1: USB disconnect, device number 70 [ 2007.915725][ T2309] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 2007.956971][ T2309] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 2008.127846][ T9621] usb 6-1: Using ep0 maxpacket: 32 [ 2008.141757][ T9621] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2008.161749][ T9621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.162547][ T52] block nbd2: Attempted send on invalid socket [ 2008.170450][ T9621] usb 6-1: Product: syz [ 2008.176287][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2008.190428][T15363] qnx6: unable to read the first superblock [ 2008.196909][ T52] block nbd2: Attempted send on invalid socket [ 2008.203535][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2008.212858][T15363] qnx6: unable to read the first superblock [ 2008.218885][T15363] qnx6: unable to read the first superblock [ 2008.255505][ T9621] usb 6-1: Manufacturer: syz [ 2008.275209][ T9621] usb 6-1: SerialNumber: syz [ 2008.318719][ T9621] usb 6-1: config 0 descriptor?? [ 2008.383123][ T9621] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2009.247207][ T9621] gspca_stk1135: reg_w 0x0 err -110 [ 2009.286209][ T9621] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.376337][ T9621] gspca_stk1135: Sensor write failed [ 2009.454639][ T9621] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.634032][ T9621] gspca_stk1135: Sensor write failed [ 2009.640456][ T9621] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.646833][ T9621] gspca_stk1135: Sensor read failed [ 2009.902415][ T9621] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.978333][ T9621] gspca_stk1135: Sensor read failed [ 2009.983702][ T9621] gspca_stk1135: Detected sensor type unknown (0x0) [ 2009.993080][ T9621] gspca_stk1135: serial bus timeout: status=0x00 [ 2010.000513][ T9621] gspca_stk1135: Sensor read failed [ 2010.005775][ T9621] gspca_stk1135: serial bus timeout: status=0x00 [ 2010.012702][ T9621] gspca_stk1135: Sensor read failed [ 2010.027305][ T9621] gspca_stk1135: serial bus timeout: status=0x00 [ 2010.033700][ T9621] gspca_stk1135: Sensor write failed [ 2010.067194][ T9621] gspca_stk1135: serial bus timeout: status=0x00 [ 2010.074657][ T9621] gspca_stk1135: Sensor write failed [ 2010.087248][ T9621] stk1135: probe of 6-1:0.0 failed with error -110 [ 2010.328931][ T52] block nbd4: Attempted send on invalid socket [ 2010.335313][ T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2010.345147][T15385] qnx6: unable to read the first superblock [ 2010.351755][ T52] block nbd4: Attempted send on invalid socket [ 2010.358206][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2010.367546][T15385] qnx6: unable to read the first superblock [ 2010.373563][T15385] qnx6: unable to read the first superblock [ 2010.439890][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5818'. [ 2011.155379][ T4387] usb 6-1: USB disconnect, device number 79 [ 2014.612869][ T1041] block nbd3: Attempted send on invalid socket [ 2014.697628][ T1041] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2014.706897][T15429] qnx6: unable to read the first superblock [ 2014.714099][ T1041] block nbd3: Attempted send on invalid socket [ 2014.720461][ T1041] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2014.729597][T15429] qnx6: unable to read the first superblock [ 2014.735534][T15429] qnx6: unable to read the first superblock [ 2015.217763][ T52] block nbd3: Attempted send on invalid socket [ 2015.224137][ T52] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2015.233581][T15438] qnx6: unable to read the first superblock [ 2015.240020][ T52] block nbd3: Attempted send on invalid socket [ 2015.246331][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2015.255694][T15438] qnx6: unable to read the first superblock [ 2015.262101][T15438] qnx6: unable to read the first superblock [ 2016.387260][ T4387] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2017.027248][ T4387] usb 4-1: Using ep0 maxpacket: 32 [ 2017.038480][ T4387] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2017.074616][ T4387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.111541][ T4387] usb 4-1: Product: syz [ 2017.127228][ T4387] usb 4-1: Manufacturer: syz [ 2017.150571][ T4387] usb 4-1: SerialNumber: syz [ 2017.180011][ T4387] usb 4-1: config 0 descriptor?? [ 2017.210454][ T4387] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2020.170004][ T4387] gspca_stk1135: reg_w 0x300 err -71 [ 2020.181212][ T4387] gspca_stk1135: serial bus timeout: status=0x00 [ 2020.213766][ T4387] gspca_stk1135: Sensor write failed [ 2020.225139][ T4387] gspca_stk1135: serial bus timeout: status=0x00 [ 2020.239640][ T4387] gspca_stk1135: Sensor write failed [ 2020.245197][ T4387] gspca_stk1135: serial bus timeout: status=0x00 [ 2020.253247][ T4387] gspca_stk1135: Sensor read failed [ 2020.261132][ T4387] gspca_stk1135: serial bus timeout: status=0x00 [ 2020.273401][ T4387] gspca_stk1135: Sensor read failed [ 2020.281324][ T4387] gspca_stk1135: Detected sensor type unknown (0x0) [ 2020.293897][ T4387] gspca_stk1135: serial bus timeout: status=0x00 [ 2020.314276][ T4387] gspca_stk1135: Sensor read failed [ 2020.343048][ T4387] gspca_stk1135: serial bus timeout: status=0x00 [ 2020.374783][ T4387] gspca_stk1135: Sensor read failed [ 2021.195122][ T4387] gspca_stk1135: serial bus timeout: status=0x00 [ 2021.202967][ T4387] gspca_stk1135: Sensor write failed [ 2021.208938][ T4387] gspca_stk1135: serial bus timeout: status=0x00 [ 2021.215486][ T4387] gspca_stk1135: Sensor write failed [ 2021.262882][ T4387] stk1135: probe of 4-1:0.0 failed with error -71 [ 2021.313445][ T4387] usb 4-1: USB disconnect, device number 59 [ 2021.444260][ T1041] block nbd2: Attempted send on invalid socket [ 2021.450513][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2021.459756][T15483] qnx6: unable to read the first superblock [ 2021.465986][ T1041] block nbd2: Attempted send on invalid socket [ 2021.472234][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2021.481363][T15483] qnx6: unable to read the first superblock [ 2021.487356][T15483] qnx6: unable to read the first superblock [ 2023.437326][ T9621] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2024.247333][ T9621] usb 3-1: Using ep0 maxpacket: 8 [ 2024.868458][ T9621] usb 3-1: config 0 has no interfaces? [ 2024.873988][ T9621] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2024.916396][ T9621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.952637][ T9621] usb 3-1: config 0 descriptor?? [ 2026.636415][T15541] ubi: mtd0 is already attached to ubi31 [ 2029.740341][ T4295] usb 3-1: USB disconnect, device number 92 [ 2029.948187][T10607] Bluetooth: hci3: link tx timeout [ 2029.953411][T10607] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2029.964518][T10607] Bluetooth: hci3: link tx timeout [ 2029.970256][T10607] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2030.188906][T15565] netlink: 'syz.0.5868': attribute type 29 has an invalid length. [ 2030.209735][T15565] netlink: 'syz.0.5868': attribute type 29 has an invalid length. [ 2030.243246][T15570] netlink: 'syz.0.5868': attribute type 29 has an invalid length. [ 2030.351607][T15570] ubi: mtd0 is already attached to ubi31 [ 2030.558225][T15574] loop2: detected capacity change from 0 to 7 [ 2031.044694][T14923] Dev loop2: unable to read RDB block 7 [ 2031.066974][T14923] loop2: AHDI p1 p2 [ 2031.089250][T14923] loop2: partition table partially beyond EOD, truncated [ 2031.138104][T14923] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 2031.207760][T15574] Dev loop2: unable to read RDB block 7 [ 2031.412184][ T4295] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2031.787484][T15574] loop2: AHDI p1 p2 [ 2031.867771][T15574] loop2: partition table partially beyond EOD, truncated [ 2031.942925][T15574] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 2031.989224][ T4295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.032816][ T4295] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2032.063528][ T4295] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2032.125877][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2032.152455][ T4295] usb 4-1: SerialNumber: syz [ 2032.219022][T14923] udevd[14923]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 2032.431058][ T4295] usb 4-1: 0:2 : does not exist [ 2033.058462][ T4295] usb 4-1: USB disconnect, device number 60 [ 2033.291432][T14926] udevd[14926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2033.507253][ T27] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2033.697224][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 2033.721063][ T27] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 2033.747253][ T27] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2033.767255][ T27] usb 6-1: config 0 has no interface number 1 [ 2033.786926][ T27] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2033.836551][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2033.876860][ T27] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 2033.915792][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.944331][ T27] usb 6-1: Product: syz [ 2033.957941][ T27] usb 6-1: Manufacturer: syz [ 2033.984207][ T27] usb 6-1: SerialNumber: syz [ 2034.041143][ T27] usb 6-1: config 0 descriptor?? [ 2034.222358][ T27] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 2034.425704][ T27] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 2034.461889][ T27] usb 6-1: USB disconnect, device number 80 [ 2034.480942][ T27] pvrusb2: Device being rendered inoperable [ 2034.499800][ T27] pvrusb2: Device being rendered inoperable [ 2034.517224][ T4295] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2034.717211][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 2034.733345][ T4295] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2034.792574][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.826393][ T4295] usb 3-1: Product: syz [ 2034.846097][ T4295] usb 3-1: Manufacturer: syz [ 2034.851901][ T4295] usb 3-1: SerialNumber: syz [ 2034.877545][ T4295] usb 3-1: config 0 descriptor?? [ 2035.090145][ T4295] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2035.980928][T15623] slcan: can't register candev [ 2036.601865][ T4295] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 2036.662907][ T4295] usb 3-1: USB disconnect, device number 93 [ 2037.219735][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.396237][ T52] block nbd3: Attempted send on invalid socket [ 2037.402574][ T52] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2037.412184][T15627] qnx6: unable to read the first superblock [ 2037.427501][ T52] block nbd3: Attempted send on invalid socket [ 2037.433754][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2037.443239][T15627] qnx6: unable to read the first superblock [ 2037.449271][T15627] qnx6: unable to read the first superblock [ 2040.097859][T15635] tmpfs: Unknown parameter 'usrquota' [ 2040.481470][T15636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2040.754676][T15636] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2040.780714][T15636] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 2041.527227][T15636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2041.550800][T15636] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2041.939410][T15666] can0: slcan on ttyS3. [ 2042.497193][T10607] Bluetooth: hci2: command 0x0c1a tx timeout [ 2042.648581][ T52] block nbd0: Attempted send on invalid socket [ 2042.655612][ T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2042.665003][T15662] qnx6: unable to read the first superblock [ 2042.671287][ T52] block nbd0: Attempted send on invalid socket [ 2042.677590][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2042.686773][T15662] qnx6: unable to read the first superblock [ 2042.692799][T15662] qnx6: unable to read the first superblock [ 2042.717430][T15666] can0 (unregistered): slcan off ttyS3. [ 2042.833549][T15636] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 2043.624253][T19077] Bluetooth: hci3: command 0x0c1a tx timeout [ 2043.834558][ T1041] block nbd2: Attempted send on invalid socket [ 2043.840968][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2043.850942][T15681] qnx6: unable to read the first superblock [ 2043.857549][ T1041] block nbd2: Attempted send on invalid socket [ 2043.863773][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2043.873902][T15681] qnx6: unable to read the first superblock [ 2043.879935][T15681] qnx6: unable to read the first superblock [ 2044.057412][T11504] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2044.267386][T11504] usb 4-1: Using ep0 maxpacket: 8 [ 2044.304608][T11504] usb 4-1: config 0 has no interfaces? [ 2044.316442][T11504] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2044.380576][T11504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.442337][T11504] usb 4-1: config 0 descriptor?? [ 2044.577607][T19077] Bluetooth: hci2: command 0x0406 tx timeout [ 2044.872593][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5901'. [ 2045.697290][T19077] Bluetooth: hci3: command 0x0406 tx timeout [ 2045.785098][T19077] Bluetooth: hci3: link tx timeout [ 2045.790323][T19077] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 2045.798278][T19077] Bluetooth: hci3: link tx timeout [ 2045.803422][T19077] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2045.827400][T19077] Bluetooth: hci3: link tx timeout [ 2045.832607][T19077] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 2045.840874][T19077] Bluetooth: hci3: link tx timeout [ 2045.846018][T19077] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2047.319219][ T52] block nbd4: Attempted send on invalid socket [ 2047.325498][ T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2047.334991][T15707] qnx6: unable to read the first superblock [ 2047.341382][ T52] block nbd4: Attempted send on invalid socket [ 2047.348478][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2047.357773][T15707] qnx6: unable to read the first superblock [ 2047.363803][T15707] qnx6: unable to read the first superblock [ 2047.489179][ T52] block nbd5: Attempted send on invalid socket [ 2047.495439][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2047.504886][T15710] qnx6: unable to read the first superblock [ 2047.511263][ T52] block nbd5: Attempted send on invalid socket [ 2047.517532][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2047.526877][T15710] qnx6: unable to read the first superblock [ 2047.533035][T15710] qnx6: unable to read the first superblock [ 2047.857249][T19077] Bluetooth: hci3: command 0x0406 tx timeout [ 2049.032204][ T9621] usb 4-1: USB disconnect, device number 61 [ 2049.658867][ T1041] block nbd2: Attempted send on invalid socket [ 2049.665389][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2049.675137][T15728] qnx6: unable to read the first superblock [ 2049.682028][ T1041] block nbd2: Attempted send on invalid socket [ 2049.686903][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5913'. [ 2049.688373][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2049.688435][T15728] qnx6: unable to read the first superblock [ 2049.688445][T15728] qnx6: unable to read the first superblock [ 2051.588863][ T1041] block nbd2: Attempted send on invalid socket [ 2051.595380][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2051.605419][T15750] qnx6: unable to read the first superblock [ 2051.612544][ T1041] block nbd2: Attempted send on invalid socket [ 2051.621404][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2051.631896][T15750] qnx6: unable to read the first superblock [ 2051.638193][T15750] qnx6: unable to read the first superblock [ 2051.645728][T11504] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2051.897689][T11504] usb 4-1: Using ep0 maxpacket: 8 [ 2051.923837][T11504] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 2051.933239][T11504] usb 4-1: config 0 has no interface number 1 [ 2051.940928][T11504] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2051.953095][T11504] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2052.012957][T11504] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 2052.025313][T11504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.035036][T11504] usb 4-1: Product: syz [ 2052.052197][T11504] usb 4-1: Manufacturer: syz [ 2052.153842][T11504] usb 4-1: SerialNumber: syz [ 2052.184680][T11504] usb 4-1: config 0 descriptor?? [ 2052.243401][T11504] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 2052.508368][T11504] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 2052.518183][T11504] usb 4-1: USB disconnect, device number 62 [ 2052.524870][T11504] pvrusb2: Device being rendered inoperable [ 2052.531940][T11504] pvrusb2: Device being rendered inoperable [ 2053.964387][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 2054.667460][T10607] Bluetooth: hci2: command 0x0406 tx timeout [ 2055.990515][T15793] netlink: 'syz.4.5934': attribute type 29 has an invalid length. [ 2056.018008][T15793] netlink: 'syz.4.5934': attribute type 29 has an invalid length. [ 2056.212341][T15796] netlink: 'syz.4.5934': attribute type 29 has an invalid length. [ 2056.361284][ T1041] block nbd5: Attempted send on invalid socket [ 2056.368016][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2056.377331][T15798] qnx6: unable to read the first superblock [ 2056.383471][ T1041] block nbd5: Attempted send on invalid socket [ 2056.389857][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2056.399039][T15798] qnx6: unable to read the first superblock [ 2056.404936][T15798] qnx6: unable to read the first superblock [ 2056.507056][T15796] ubi: mtd0 is already attached to ubi31 [ 2057.287236][T11504] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2057.337138][T15810] netlink: 'syz.0.5939': attribute type 4 has an invalid length. [ 2057.404895][T15810] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5939'. [ 2057.487144][T11504] usb 3-1: Using ep0 maxpacket: 32 [ 2057.497717][T11504] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2057.525280][T11504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.537171][T11504] usb 3-1: Product: syz [ 2057.543291][T11504] usb 3-1: Manufacturer: syz [ 2057.554277][T11504] usb 3-1: SerialNumber: syz [ 2057.616512][T11504] usb 3-1: config 0 descriptor?? [ 2057.639408][T11504] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2059.509701][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5943'. [ 2060.306040][T11504] gspca_stk1135: reg_w 0x300 err -71 [ 2060.323183][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2060.385339][T11504] gspca_stk1135: Sensor write failed [ 2060.406024][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2060.425433][T11504] gspca_stk1135: Sensor write failed [ 2060.668613][T15837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5946'. [ 2061.394577][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2061.401095][T11504] gspca_stk1135: Sensor read failed [ 2061.406343][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2061.412783][T11504] gspca_stk1135: Sensor read failed [ 2061.418312][T11504] gspca_stk1135: Detected sensor type unknown (0x0) [ 2061.424925][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2061.431377][T11504] gspca_stk1135: Sensor read failed [ 2061.436633][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2061.443056][T11504] gspca_stk1135: Sensor read failed [ 2061.448380][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2061.454728][T11504] gspca_stk1135: Sensor write failed [ 2061.460222][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2061.467389][T11504] gspca_stk1135: Sensor write failed [ 2061.473137][T11504] stk1135: probe of 3-1:0.0 failed with error -71 [ 2061.488564][T11504] usb 3-1: USB disconnect, device number 94 [ 2061.673228][T15841] can0: slcan on ttyS3. [ 2062.026574][T15845] can0 (unregistered): slcan off ttyS3. [ 2062.363709][T15861] netlink: 'syz.4.5952': attribute type 29 has an invalid length. [ 2062.412484][T15861] netlink: 'syz.4.5952': attribute type 29 has an invalid length. [ 2062.458467][T15864] netlink: 'syz.4.5952': attribute type 29 has an invalid length. [ 2062.615218][T15864] ubi: mtd0 is already attached to ubi31 [ 2062.717164][T11504] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2063.049877][T11504] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2063.643611][T11504] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2063.707257][T11504] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2063.760388][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5956'. [ 2064.192144][T11504] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2064.214835][T11504] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2065.297415][T11504] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2065.380858][T11504] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2065.417627][T11504] usb 3-1: Product: syz [ 2065.431044][T11504] usb 3-1: Manufacturer: syz [ 2065.535881][T11504] usb 3-1: can't set config #1, error -71 [ 2065.554073][T11504] usb 3-1: USB disconnect, device number 95 [ 2065.647170][T15839] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2065.857223][T15839] usb 4-1: Using ep0 maxpacket: 32 [ 2065.875469][T15839] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2065.975086][T15839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.067619][T15839] usb 4-1: Product: syz [ 2066.096288][T15839] usb 4-1: Manufacturer: syz [ 2066.131772][T15839] usb 4-1: SerialNumber: syz [ 2066.166106][T15839] usb 4-1: config 0 descriptor?? [ 2066.202379][T15839] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2068.797275][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5968'. [ 2069.407685][T15839] gspca_stk1135: reg_w 0x300 err -71 [ 2069.414323][T15839] gspca_stk1135: serial bus timeout: status=0x00 [ 2072.026579][T15839] gspca_stk1135: Sensor write failed [ 2072.032687][T15839] gspca_stk1135: serial bus timeout: status=0x00 [ 2072.039472][T15839] gspca_stk1135: Sensor write failed [ 2072.044926][T15839] gspca_stk1135: serial bus timeout: status=0x00 [ 2072.051776][T15839] gspca_stk1135: Sensor read failed [ 2072.057477][T15839] gspca_stk1135: serial bus timeout: status=0x00 [ 2072.063953][T15839] gspca_stk1135: Sensor read failed [ 2072.070445][T15839] gspca_stk1135: Detected sensor type unknown (0x0) [ 2072.077522][T15839] gspca_stk1135: serial bus timeout: status=0x00 [ 2072.084001][T15839] gspca_stk1135: Sensor read failed [ 2072.090999][T15839] gspca_stk1135: serial bus timeout: status=0x00 [ 2072.097768][T15839] gspca_stk1135: Sensor read failed [ 2072.103127][T15839] gspca_stk1135: serial bus timeout: status=0x00 [ 2072.110009][T15839] gspca_stk1135: Sensor write failed [ 2072.115439][T15839] gspca_stk1135: serial bus timeout: status=0x00 [ 2072.122328][T15839] gspca_stk1135: Sensor write failed [ 2072.128995][T15839] stk1135: probe of 4-1:0.0 failed with error -71 [ 2072.139012][T15839] usb 4-1: USB disconnect, device number 63 [ 2072.437205][ T6096] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2072.637286][ T6096] usb 3-1: Using ep0 maxpacket: 8 [ 2072.673930][ T6096] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2072.843692][T15839] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2072.947219][ T6096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.955690][ T6096] usb 3-1: Product: syz [ 2072.960031][ T6096] usb 3-1: Manufacturer: syz [ 2072.964730][ T6096] usb 3-1: SerialNumber: syz [ 2073.018191][ T6096] usb 3-1: config 0 descriptor?? [ 2073.057919][ T2309] pvrusb2: request_firmware fatal error with code=-110 [ 2073.064947][ T2309] pvrusb2: Failure uploading firmware1 [ 2073.113658][ T2309] pvrusb2: Device initialization was not successful. [ 2073.131792][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2073.144044][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2073.154830][ T4658] pvrusb2: Device being rendered inoperable [ 2073.182346][T15959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5974'. [ 2073.228596][ T6096] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2073.237287][T15839] usb 4-1: Using ep0 maxpacket: 16 [ 2073.244264][T15839] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 2073.268465][T15839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.307164][T15839] usb 4-1: config 0 has no interface number 0 [ 2073.339261][T15839] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 2073.396425][T15839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.429223][T15839] usb 4-1: Product: syz [ 2073.435624][T15839] usb 4-1: Manufacturer: syz [ 2073.450008][T15839] usb 4-1: SerialNumber: syz [ 2073.481709][T15839] usb 4-1: config 0 descriptor?? [ 2074.062358][T15839] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 2074.094183][T15839] usb 4-1: No valid video chain found. [ 2074.420280][T15839] usb 4-1: USB disconnect, device number 64 [ 2074.473925][ T52] block nbd4: Attempted send on invalid socket [ 2074.480542][ T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2074.491570][T15969] qnx6: unable to read the first superblock [ 2074.498092][ T52] block nbd4: Attempted send on invalid socket [ 2074.504390][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2074.514466][T15969] qnx6: unable to read the first superblock [ 2074.520521][T15969] qnx6: unable to read the first superblock [ 2074.961324][ T6096] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 2075.210837][ T6096] usb 3-1: USB disconnect, device number 96 [ 2079.097157][ T6434] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2079.286055][ T6434] usb 3-1: device descriptor read/64, error -71 [ 2079.677391][ T6434] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2079.999018][ T6434] usb 3-1: device descriptor read/64, error -71 [ 2080.351355][T14876] tipc: Subscription rejected, illegal request [ 2080.573205][ T6434] usb usb3-port1: attempt power cycle [ 2081.101167][ T6434] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2081.267940][ T6434] usb 3-1: device descriptor read/8, error -71 [ 2081.559441][ T6434] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2081.907151][T11504] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2083.807238][T11504] usb 4-1: Using ep0 maxpacket: 8 [ 2084.582722][ T6434] usb 3-1: device descriptor read/8, error -71 [ 2084.596191][T11504] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2084.647617][T11504] usb 4-1: can't read configurations, error -71 [ 2084.707411][ T6434] usb usb3-port1: unable to enumerate USB device [ 2086.247399][T11504] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2086.447311][T11504] usb 4-1: Using ep0 maxpacket: 32 [ 2086.460505][T11504] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2086.527976][T11504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.576003][T11504] usb 4-1: Product: syz [ 2086.635959][T11504] usb 4-1: Manufacturer: syz [ 2086.663570][ T1041] block nbd5: Attempted send on invalid socket [ 2086.670342][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2086.681141][T16061] qnx6: unable to read the first superblock [ 2086.687691][ T1041] block nbd5: Attempted send on invalid socket [ 2086.694011][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2086.704378][T16061] qnx6: unable to read the first superblock [ 2086.710381][T16061] qnx6: unable to read the first superblock [ 2086.717390][T11504] usb 4-1: SerialNumber: syz [ 2086.735762][T11504] usb 4-1: config 0 descriptor?? [ 2086.772081][T11504] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2089.237404][T11504] gspca_stk1135: reg_w 0x300 err -71 [ 2089.238452][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2089.238469][T11504] gspca_stk1135: Sensor write failed [ 2089.238503][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2089.238514][T11504] gspca_stk1135: Sensor write failed [ 2089.238547][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2089.238559][T11504] gspca_stk1135: Sensor read failed [ 2089.238591][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2089.238610][T11504] gspca_stk1135: Sensor read failed [ 2089.238619][T11504] gspca_stk1135: Detected sensor type unknown (0x0) [ 2089.238656][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2089.238667][T11504] gspca_stk1135: Sensor read failed [ 2089.238702][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2089.238713][T11504] gspca_stk1135: Sensor read failed [ 2089.238748][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2089.238759][T11504] gspca_stk1135: Sensor write failed [ 2089.238793][T11504] gspca_stk1135: serial bus timeout: status=0x00 [ 2089.238805][T11504] gspca_stk1135: Sensor write failed [ 2089.238857][T11504] stk1135: probe of 4-1:0.0 failed with error -71 [ 2089.240547][T11504] usb 4-1: USB disconnect, device number 66 [ 2092.352987][T16102] lo speed is unknown, defaulting to 1000 [ 2092.360629][T16102] lo speed is unknown, defaulting to 1000 [ 2092.368805][T16102] lo speed is unknown, defaulting to 1000 [ 2092.384302][T16102] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2092.410568][T16102] lo speed is unknown, defaulting to 1000 [ 2092.417516][T16102] lo speed is unknown, defaulting to 1000 [ 2092.424363][T16102] lo speed is unknown, defaulting to 1000 [ 2092.431292][T16102] lo speed is unknown, defaulting to 1000 [ 2092.438155][T16102] lo speed is unknown, defaulting to 1000 [ 2092.446678][T16102] lo speed is unknown, defaulting to 1000 [ 2092.453544][T16102] lo speed is unknown, defaulting to 1000 [ 2093.362680][T16106] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2093.449750][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6020'. [ 2093.522040][ T52] block nbd0: Attempted send on invalid socket [ 2093.529307][ T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2093.539496][T16120] qnx6: unable to read the first superblock [ 2093.546506][ T52] block nbd0: Attempted send on invalid socket [ 2093.552910][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2093.564112][T16120] qnx6: unable to read the first superblock [ 2093.570327][T16120] qnx6: unable to read the first superblock [ 2093.727739][T16122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6020'. [ 2093.799933][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6020'. [ 2093.887460][T16122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6020'. [ 2094.037256][ T6434] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2094.040373][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6020'. [ 2094.217260][ T6434] usb 4-1: device descriptor read/64, error -71 [ 2094.472296][T16147] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2094.497520][ T6434] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2094.657281][ T6434] usb 4-1: device descriptor read/64, error -71 [ 2094.847318][ T6434] usb usb4-port1: attempt power cycle [ 2095.471678][ T6434] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2095.523264][ T6434] usb 4-1: device descriptor read/8, error -71 [ 2095.817201][ T6434] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2095.858132][ T6434] usb 4-1: device descriptor read/8, error -71 [ 2095.977384][ T6434] usb usb4-port1: unable to enumerate USB device [ 2097.148089][T16184] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2097.871210][ T52] block nbd5: Attempted send on invalid socket [ 2097.877607][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2097.886993][T16193] qnx6: unable to read the first superblock [ 2097.901578][ T52] block nbd5: Attempted send on invalid socket [ 2097.908575][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2097.918226][T16193] qnx6: unable to read the first superblock [ 2097.924327][T16193] qnx6: unable to read the first superblock [ 2098.698154][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2101.543183][T16224] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 2107.467402][T11504] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2107.689200][T11504] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.745039][T16265] syz.2.6060 (16265): drop_caches: 2 [ 2107.767927][T11504] usb 6-1: config 0 has no interfaces? [ 2107.804590][T11504] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2107.874329][T11504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.944858][T11504] usb 6-1: config 0 descriptor?? [ 2110.341030][ T27] usb 6-1: USB disconnect, device number 81 [ 2110.693697][ T1041] block nbd4: Attempted send on invalid socket [ 2110.700037][ T1041] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2110.710198][T16306] qnx6: unable to read the first superblock [ 2110.716574][ T1041] block nbd4: Attempted send on invalid socket [ 2110.722943][ T1041] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2110.733142][T16306] qnx6: unable to read the first superblock [ 2110.739170][T16306] qnx6: unable to read the first superblock [ 2117.150222][T16329] syz.2.6077 (16329): drop_caches: 2 [ 2119.107610][ T1041] block nbd2: Attempted send on invalid socket [ 2119.113866][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2119.123200][T16384] qnx6: unable to read the first superblock [ 2119.129914][ T1041] block nbd2: Attempted send on invalid socket [ 2119.136089][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2119.145953][T16384] qnx6: unable to read the first superblock [ 2119.151931][T16384] qnx6: unable to read the first superblock [ 2119.254111][ T7593] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2120.087324][ T7593] usb 6-1: Using ep0 maxpacket: 8 [ 2120.106021][ T7593] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2120.129739][ T7593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.154971][ T7593] usb 6-1: Product: syz [ 2120.159646][ T7593] usb 6-1: Manufacturer: syz [ 2120.164436][ T7593] usb 6-1: SerialNumber: syz [ 2120.179444][ T7593] usb 6-1: config 0 descriptor?? [ 2120.494735][ T7593] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2122.388975][ T7593] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 2122.418050][ T7593] usb 6-1: USB disconnect, device number 82 [ 2122.550874][ T52] block nbd4: Attempted send on invalid socket [ 2122.557229][ T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2122.566688][T16405] qnx6: unable to read the first superblock [ 2122.573597][ T52] block nbd4: Attempted send on invalid socket [ 2122.579998][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2122.589762][T16405] qnx6: unable to read the first superblock [ 2122.595821][T16405] qnx6: unable to read the first superblock [ 2122.849949][T16403] can0: slcan on ttyS3. [ 2123.005231][T16406] can0 (unregistered): slcan off ttyS3. [ 2126.905084][ T52] block nbd5: Attempted send on invalid socket [ 2126.912028][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2126.933115][T16473] qnx6: unable to read the first superblock [ 2127.049903][ T1041] block nbd5: Attempted send on invalid socket [ 2127.056343][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2127.125323][T16473] qnx6: unable to read the first superblock [ 2127.164952][T16473] qnx6: unable to read the first superblock [ 2128.405092][ T1041] block nbd3: Attempted send on invalid socket [ 2128.411375][ T1041] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2128.421480][T16487] qnx6: unable to read the first superblock [ 2128.427873][ T1041] block nbd3: Attempted send on invalid socket [ 2128.434071][ T1041] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2128.443185][T16487] qnx6: unable to read the first superblock [ 2128.449604][T16487] qnx6: unable to read the first superblock [ 2132.226897][T16527] fuse: Bad value for 'group_id' [ 2132.551636][ T34] Bluetooth: (null): Invalid header checksum [ 2134.365408][ T34] Bluetooth: (null): Invalid header checksum [ 2137.307122][ T7593] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2137.325515][T16558] netlink: 'syz.2.6133': attribute type 1 has an invalid length. [ 2137.498910][ T7593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2137.543902][ T7593] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2137.634630][ T7593] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2137.699563][ T7593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.796223][ T7593] usb 5-1: config 0 descriptor?? [ 2138.661113][ T52] block nbd2: Attempted send on invalid socket [ 2138.667447][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2138.676702][T16566] qnx6: unable to read the first superblock [ 2138.683426][ T52] block nbd2: Attempted send on invalid socket [ 2138.690741][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2138.700276][T16566] qnx6: unable to read the first superblock [ 2138.706253][T16566] qnx6: unable to read the first superblock [ 2140.259713][ T6094] usb 5-1: USB disconnect, device number 71 [ 2141.212887][T16584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6139'. [ 2145.149520][T16602] can0: slcan on ttyS3. [ 2145.417800][T16602] can0 (unregistered): slcan off ttyS3. [ 2147.907139][ T27] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2148.859192][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.889589][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2149.777228][ T27] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2149.786503][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.804454][ T27] usb 4-1: config 0 descriptor?? [ 2151.265511][ T4392] usb 4-1: USB disconnect, device number 71 [ 2153.318878][ T52] block nbd2: Attempted send on invalid socket [ 2153.325254][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2153.337306][T16670] qnx6: unable to read the first superblock [ 2153.382115][ T52] block nbd2: Attempted send on invalid socket [ 2153.388834][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2153.398277][T16670] qnx6: unable to read the first superblock [ 2153.571338][T16670] qnx6: unable to read the first superblock [ 2153.687573][T16679] input: syz0 as /devices/virtual/input/input61 [ 2160.099425][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2162.380845][T16732] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6179'. [ 2165.595363][ T52] block nbd5: Attempted send on invalid socket [ 2165.601985][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2165.619059][T16762] qnx6: unable to read the first superblock [ 2165.637589][ T1041] block nbd5: Attempted send on invalid socket [ 2165.643846][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2165.653234][T16762] qnx6: unable to read the first superblock [ 2165.690581][T16762] qnx6: unable to read the first superblock [ 2169.957215][T16787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6195'. [ 2169.966757][T16787] unsupported nlmsg_type 40 [ 2171.015260][ T27] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2171.638880][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 2171.855743][ T27] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2171.907124][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.937310][ T27] usb 4-1: Product: syz [ 2171.941531][ T27] usb 4-1: Manufacturer: syz [ 2171.974553][ T27] usb 4-1: SerialNumber: syz [ 2172.134156][ T27] usb 4-1: config 0 descriptor?? [ 2172.159077][ T27] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2172.264151][ T1041] block nbd5: Attempted send on invalid socket [ 2172.272437][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2172.284789][T16809] qnx6: unable to read the first superblock [ 2172.295826][ T1041] block nbd5: Attempted send on invalid socket [ 2172.302237][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2172.312053][T16809] qnx6: unable to read the first superblock [ 2172.318164][T16809] qnx6: unable to read the first superblock [ 2173.501214][T16820] xt_hashlimit: max too large, truncated to 1048576 [ 2174.910264][ T27] gspca_stk1135: reg_w 0x300 err -71 [ 2174.938385][ T27] gspca_stk1135: serial bus timeout: status=0x00 [ 2174.944747][ T27] gspca_stk1135: Sensor write failed [ 2174.987801][ T27] gspca_stk1135: serial bus timeout: status=0x00 [ 2174.994292][ T27] gspca_stk1135: Sensor write failed [ 2175.000560][ T27] gspca_stk1135: serial bus timeout: status=0x00 [ 2175.006929][ T27] gspca_stk1135: Sensor read failed [ 2175.057506][ T27] gspca_stk1135: serial bus timeout: status=0x00 [ 2175.070771][ T27] gspca_stk1135: Sensor read failed [ 2175.076101][ T27] gspca_stk1135: Detected sensor type unknown (0x0) [ 2175.087854][ T27] gspca_stk1135: serial bus timeout: status=0x00 [ 2175.094325][ T27] gspca_stk1135: Sensor read failed [ 2175.100773][ T27] gspca_stk1135: serial bus timeout: status=0x00 [ 2175.109634][ T27] gspca_stk1135: Sensor read failed [ 2175.115000][ T27] gspca_stk1135: serial bus timeout: status=0x00 [ 2175.141257][ T27] gspca_stk1135: Sensor write failed [ 2175.189204][ T27] gspca_stk1135: serial bus timeout: status=0x00 [ 2175.195606][ T27] gspca_stk1135: Sensor write failed [ 2175.257323][ T27] stk1135: probe of 4-1:0.0 failed with error -71 [ 2175.291133][ T27] usb 4-1: USB disconnect, device number 72 [ 2178.347134][ T7593] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 2178.552911][ T7593] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2179.392569][ T7593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.473335][ T7593] usb 4-1: config 0 descriptor?? [ 2179.719795][ T7593] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2180.508724][ T7593] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2180.519629][ T7593] asix: probe of 4-1:0.0 failed with error -61 [ 2180.597712][T16877] xt_hashlimit: max too large, truncated to 1048576 [ 2181.578912][T15419] tipc: Subscription rejected, illegal request [ 2183.055458][ T7593] usb 4-1: USB disconnect, device number 73 [ 2186.881569][T16909] syz.5.6230 (16909): drop_caches: 2 [ 2186.890395][T16935] xt_hashlimit: max too large, truncated to 1048576 [ 2187.176968][T19077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2187.191438][T19077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2187.219096][T14113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2187.229491][T14113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2187.237711][T14113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2187.245145][T14113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2187.278614][T10607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2187.316488][T10607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2187.327669][T10607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2187.339235][T10607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2187.349478][T10607] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2187.356886][T10607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2187.433589][T16943] input: syz1 as /devices/virtual/input/input64 [ 2187.529873][T16940] hsr0 speed is unknown, defaulting to 1000 [ 2187.642149][T16940] lo speed is unknown, defaulting to 1000 [ 2187.787131][ T3921] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2187.977142][ T3921] usb 3-1: Using ep0 maxpacket: 8 [ 2188.038023][ T3921] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2188.095809][ T3921] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2188.120461][ T3921] usb 3-1: Product: syz [ 2188.124877][ T3921] usb 3-1: Manufacturer: syz [ 2188.157129][ T3921] usb 3-1: SerialNumber: syz [ 2188.251797][ T3921] usb 3-1: config 0 descriptor?? [ 2188.284831][ T3921] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2188.383757][ T4408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.467220][ T7593] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 2188.807836][ T3921] gspca_zc3xx: reg_w_i err -110 [ 2188.818486][ T3921] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 2189.093018][ T4408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.125104][ T7593] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2189.151684][ T7593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.176242][ T7593] usb 6-1: config 0 descriptor?? [ 2189.299678][ T4408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.374986][T16940] chnl_net:caif_netlink_parms(): no params data found [ 2189.386615][ T7593] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2189.463419][T10607] Bluetooth: hci4: command 0x0409 tx timeout [ 2189.908712][ T6094] usb 3-1: USB disconnect, device number 101 [ 2189.968174][ T4408] bridge0: port 3(netdevsim0) entered disabled state [ 2190.069697][ T4408] device netdevsim0 left promiscuous mode [ 2190.075654][ T4408] bridge0: port 3(netdevsim0) entered disabled state [ 2190.088815][ T4408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.100370][ T7593] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2190.111088][ T7593] asix: probe of 6-1:0.0 failed with error -61 [ 2190.269810][T16940] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.292666][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.311364][T16940] device bridge_slave_0 entered promiscuous mode [ 2190.351989][T16940] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.390803][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.402715][T16940] device bridge_slave_1 entered promiscuous mode [ 2190.598362][T16940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2190.658398][T16940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2190.795662][T16940] team0: Port device team_slave_0 added [ 2190.945578][T16940] team0: Port device team_slave_1 added [ 2191.052216][T16940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2191.061584][T16940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2191.091499][T16940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2191.177205][ T3915] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2191.188041][T16940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2191.197472][T16940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2191.275203][T16940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2191.398891][ T3915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2191.423098][ T6434] usb 6-1: USB disconnect, device number 83 [ 2191.434885][ T3915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2191.512737][ T3915] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2191.537235][T10607] Bluetooth: hci4: command 0x041b tx timeout [ 2191.594155][ T3915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2191.897318][ T3915] usb 3-1: SerialNumber: syz [ 2192.491929][T16940] device hsr_slave_0 entered promiscuous mode [ 2192.569401][ T3915] usb 3-1: 0:2 : does not exist [ 2192.627367][ T3915] usb 3-1: USB disconnect, device number 102 [ 2192.677305][T16940] device hsr_slave_1 entered promiscuous mode [ 2192.715859][T16940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2192.750901][T16940] Cannot create hsr debugfs directory [ 2192.939261][T16553] udevd[16553]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2193.274492][T17006] xt_hashlimit: max too large, truncated to 1048576 [ 2193.617414][T10607] Bluetooth: hci4: command 0x040f tx timeout [ 2194.737532][ T4408] IPVS: stopping backup sync thread 14612 ... [ 2194.922318][ T3915] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2195.160315][ T3915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2195.192985][ T3915] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2195.261789][ T3915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.310584][ T3915] usb 6-1: config 0 descriptor?? [ 2195.377437][ T3915] pwc: Askey VC010 type 2 USB webcam detected. [ 2195.697393][T10607] Bluetooth: hci4: command 0x0419 tx timeout [ 2195.908485][ T3915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2195.928079][ T3915] pwc: recv_control_msg error -32 req 02 val 2700 [ 2195.967135][ T3915] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2196.098696][ T52] block nbd2: Attempted send on invalid socket [ 2196.105219][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2196.115352][T17035] qnx6: unable to read the first superblock [ 2196.121980][ T52] block nbd2: Attempted send on invalid socket [ 2196.129850][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2196.143550][T17035] qnx6: unable to read the first superblock [ 2196.149741][T17035] qnx6: unable to read the first superblock [ 2196.172239][ T4408] device hsr_slave_0 left promiscuous mode [ 2196.278932][ T4408] device hsr_slave_1 left promiscuous mode [ 2196.375285][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2196.606017][ T3915] pwc: recv_control_msg error -32 req 04 val 1000 [ 2196.622913][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2196.636722][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2196.653658][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2196.674302][ T4408] device bridge_slave_1 left promiscuous mode [ 2196.684739][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.712559][ T4408] device bridge_slave_0 left promiscuous mode [ 2196.737106][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.852809][ T3915] pwc: recv_control_msg error -71 req 04 val 1400 [ 2196.859878][ T3915] pwc: recv_control_msg error -71 req 02 val 2000 [ 2196.874653][ T3915] pwc: recv_control_msg error -71 req 02 val 2100 [ 2196.889185][ T3915] pwc: recv_control_msg error -71 req 04 val 1500 [ 2196.907650][ T3915] pwc: recv_control_msg error -71 req 02 val 2500 [ 2196.914475][ T3915] pwc: recv_control_msg error -71 req 02 val 2400 [ 2197.372441][ T3915] pwc: recv_control_msg error -71 req 02 val 2600 [ 2197.387153][ T3915] pwc: recv_control_msg error -71 req 02 val 2900 [ 2197.394825][ T3915] pwc: recv_control_msg error -71 req 02 val 2800 [ 2197.410268][ T3915] pwc: recv_control_msg error -71 req 04 val 1100 [ 2197.417791][ T3915] pwc: recv_control_msg error -71 req 04 val 1200 [ 2197.431030][ T3915] pwc: Registered as video103. [ 2197.440442][ T3915] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input66 [ 2197.479005][ T3915] usb 6-1: USB disconnect, device number 84 [ 2197.818700][ T4408] device veth1_macvtap left promiscuous mode [ 2197.824817][ T4408] device veth0_macvtap left promiscuous mode [ 2197.846992][ T4408] device veth1_vlan left promiscuous mode [ 2197.856595][ T4408] device veth0_vlan left promiscuous mode [ 2198.057559][ T3915] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2198.287927][ T3915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.298215][ T3915] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2198.309503][ T3915] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2198.318959][ T3915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2198.327356][ T3915] usb 6-1: SerialNumber: syz [ 2198.560484][ T3915] usb 6-1: 0:2 : does not exist [ 2198.612768][ T3915] usb 6-1: USB disconnect, device number 85 [ 2198.911990][T16553] udevd[16553]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2198.988589][ T4408] team0 (unregistering): Port device team_slave_1 removed [ 2199.083363][ T4408] team0 (unregistering): Port device team_slave_0 removed [ 2199.238898][ T4408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2199.865557][ T4408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.761219][ T4408] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2200.770203][ T4408] bond0 (unregistering): Released all slaves [ 2201.447277][ T6434] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2201.637180][ T6434] usb 3-1: Using ep0 maxpacket: 8 [ 2201.649863][ T6434] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2201.687234][ T6434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.705659][ T6434] usb 3-1: Product: syz [ 2201.715816][ T6434] usb 3-1: Manufacturer: syz [ 2201.728192][ T6434] usb 3-1: SerialNumber: syz [ 2201.748437][ T6434] usb 3-1: config 0 descriptor?? [ 2201.996253][ T6434] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2202.216543][T16940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2202.270871][T16940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2202.291909][T16940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2202.300621][ T3921] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2202.340922][T16940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2202.505090][ T3921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2202.535801][ T3921] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2202.583714][ T3921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.620822][ T3921] usb 6-1: config 0 descriptor?? [ 2202.626593][T16940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2202.653276][ T3921] pwc: Askey VC010 type 2 USB webcam detected. [ 2202.678179][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2202.696721][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2202.731931][T16940] 8021q: adding VLAN 0 to HW filter on device team0 [ 2202.806394][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2202.829554][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2202.869253][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.876469][ T8573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2202.942813][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2203.061418][ T3921] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2203.075445][ T3921] pwc: recv_control_msg error -32 req 02 val 2700 [ 2203.095035][ T3921] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2203.107892][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2203.113197][ T3921] pwc: recv_control_msg error -32 req 04 val 1000 [ 2203.144973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2203.190926][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.198397][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2203.284491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2203.376817][ T3921] pwc: recv_control_msg error -71 req 04 val 1400 [ 2203.377739][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2203.413073][ T3921] pwc: recv_control_msg error -71 req 02 val 2000 [ 2203.430569][ T6434] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 2203.470286][ T6434] usb 3-1: USB disconnect, device number 103 [ 2203.485470][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2203.492062][ T3921] pwc: recv_control_msg error -71 req 02 val 2100 [ 2203.517335][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2203.520911][ T3921] pwc: recv_control_msg error -71 req 04 val 1500 [ 2203.542460][ T3921] pwc: recv_control_msg error -71 req 02 val 2500 [ 2203.548013][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2203.563156][ T3921] pwc: recv_control_msg error -71 req 02 val 2400 [ 2203.574067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2203.588011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2203.596151][ T3921] pwc: recv_control_msg error -71 req 02 val 2600 [ 2203.607491][ T3921] pwc: recv_control_msg error -71 req 02 val 2900 [ 2203.619514][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2203.627481][ T3921] pwc: recv_control_msg error -71 req 02 val 2800 [ 2203.634816][ T3921] pwc: recv_control_msg error -71 req 04 val 1100 [ 2203.636285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2203.651205][ T3921] pwc: recv_control_msg error -71 req 04 val 1200 [ 2203.651426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2203.667666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2203.679994][ T3921] pwc: Registered as video103. [ 2203.680032][T16940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2203.697443][ T3921] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input67 [ 2203.758164][ T3921] usb 6-1: USB disconnect, device number 86 [ 2204.467239][ T1041] block nbd2: Attempted send on invalid socket [ 2204.473540][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2204.787538][ T52] block nbd4: Attempted send on invalid socket [ 2204.796527][ T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2204.811439][T17135] qnx6: unable to read the first superblock [ 2204.818309][ T52] block nbd4: Attempted send on invalid socket [ 2204.827349][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2204.839353][T17135] qnx6: unable to read the first superblock [ 2204.845413][T17135] qnx6: unable to read the first superblock [ 2204.862795][ C0] hrtimer: interrupt took 72173 ns [ 2204.866233][T17133] qnx6: unable to read the first superblock [ 2204.874390][ T1041] block nbd2: Attempted send on invalid socket [ 2204.882646][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2204.892924][T17133] qnx6: unable to read the first superblock [ 2204.898970][T17133] qnx6: unable to read the first superblock [ 2204.913939][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2204.936067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2204.947189][ T4387] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2205.133060][T16940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2205.173636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2205.198937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2205.294877][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2205.318556][ T4387] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.338883][ T4387] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2205.355626][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2205.377636][ T4387] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2205.425063][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2205.456874][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2205.477780][ T4387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2205.493923][T16940] device veth0_vlan entered promiscuous mode [ 2205.500502][ T4387] usb 6-1: SerialNumber: syz [ 2205.531976][T16940] device veth1_vlan entered promiscuous mode [ 2205.708581][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2205.733813][ T4387] usb 6-1: 0:2 : does not exist [ 2205.755058][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2205.792782][ T4387] usb 6-1: USB disconnect, device number 87 [ 2205.807625][T16940] device veth0_macvtap entered promiscuous mode [ 2205.849856][T16940] device veth1_macvtap entered promiscuous mode [ 2205.979876][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.020696][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.341641][ T52] block nbd0: Attempted send on invalid socket [ 2206.348839][ T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2206.359566][T17156] qnx6: unable to read the first superblock [ 2206.366327][ T52] block nbd0: Attempted send on invalid socket [ 2206.373514][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2206.384456][T17156] qnx6: unable to read the first superblock [ 2206.390537][T17156] qnx6: unable to read the first superblock [ 2206.444355][T16553] udevd[16553]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2206.869236][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.906258][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.958294][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.997676][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.028429][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2207.061086][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.097422][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2207.127197][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.168695][T16940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2207.267281][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2207.348981][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2207.392613][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2207.888319][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2208.043323][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2208.100605][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2208.128377][T15419] tipc: Subscription rejected, illegal request [ 2208.157393][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2208.210515][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2208.276170][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2208.337131][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2208.397429][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2208.432830][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2208.472780][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2208.525044][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2208.592661][T16940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2208.623925][T15419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2208.651051][T17162] syz.5.6280 (17162): drop_caches: 2 [ 2208.672975][T15419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2208.718049][T16940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.739518][T16940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.766804][T16940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.776148][T16940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.079143][ T7978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.109213][ T7978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.151070][T15419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2209.172444][ T7978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.193565][ T7978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.213958][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2209.397152][ T6096] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2209.598871][ T6096] usb 3-1: Using ep0 maxpacket: 8 [ 2209.612124][ T6096] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2209.674768][ T6096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.783460][ T6096] usb 3-1: Product: syz [ 2209.862013][ T6096] usb 3-1: Manufacturer: syz [ 2209.940167][ T6096] usb 3-1: SerialNumber: syz [ 2210.132141][ T6096] usb 3-1: config 0 descriptor?? [ 2210.444052][ T6096] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2210.809866][ T1041] block nbd3: Attempted send on invalid socket [ 2210.816200][ T1041] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2210.834910][T17193] qnx6: unable to read the first superblock [ 2210.850723][ T1041] block nbd3: Attempted send on invalid socket [ 2210.859454][ T1041] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2210.871292][T17193] qnx6: unable to read the first superblock [ 2210.877438][T17193] qnx6: unable to read the first superblock [ 2211.946444][ T6096] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 2212.012958][ T6096] usb 3-1: USB disconnect, device number 104 [ 2212.217102][ T7593] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2212.427288][ T7593] usb 4-1: Using ep0 maxpacket: 32 [ 2212.449860][ T7593] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2212.460174][ T7593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.468608][ T7593] usb 4-1: Product: syz [ 2212.473038][ T7593] usb 4-1: Manufacturer: syz [ 2212.478014][ T7593] usb 4-1: SerialNumber: syz [ 2212.575464][ T7593] usb 4-1: config 0 descriptor?? [ 2212.586652][ T7593] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2212.659825][T17195] tmpfs: Unknown parameter 'usrquota' [ 2213.771011][T17200] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2213.786201][T17200] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2213.802694][T17200] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 2214.467552][T10607] Bluetooth: hci4: command 0x0c1a tx timeout [ 2214.720089][ T1041] block nbd2: Attempted send on invalid socket [ 2214.726511][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2214.736241][T17233] qnx6: unable to read the first superblock [ 2214.742995][ T1041] block nbd2: Attempted send on invalid socket [ 2214.750089][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2214.760522][T17233] qnx6: unable to read the first superblock [ 2214.766468][T17233] qnx6: unable to read the first superblock [ 2215.624881][ T52] block nbd5: Attempted send on invalid socket [ 2215.633966][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2215.644296][T17241] qnx6: unable to read the first superblock [ 2215.655279][ T52] block nbd5: Attempted send on invalid socket [ 2215.662268][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2215.673111][T17241] qnx6: unable to read the first superblock [ 2215.679301][T17241] qnx6: unable to read the first superblock [ 2216.219221][ T7593] gspca_stk1135: reg_w 0x300 err -71 [ 2216.225726][ T7593] gspca_stk1135: serial bus timeout: status=0x00 [ 2216.232718][ T7593] gspca_stk1135: Sensor write failed [ 2216.238610][ T7593] gspca_stk1135: serial bus timeout: status=0x00 [ 2216.245171][ T7593] gspca_stk1135: Sensor write failed [ 2216.251022][ T7593] gspca_stk1135: serial bus timeout: status=0x00 [ 2216.261029][ T7593] gspca_stk1135: Sensor read failed [ 2216.267187][ T7593] gspca_stk1135: serial bus timeout: status=0x00 [ 2216.273634][ T7593] gspca_stk1135: Sensor read failed [ 2216.295725][ T7593] gspca_stk1135: Detected sensor type unknown (0x0) [ 2216.315270][ T7593] gspca_stk1135: serial bus timeout: status=0x00 [ 2216.322397][ T7593] gspca_stk1135: Sensor read failed [ 2216.331689][ T7593] gspca_stk1135: serial bus timeout: status=0x00 [ 2216.338556][ T7593] gspca_stk1135: Sensor read failed [ 2216.343941][ T7593] gspca_stk1135: serial bus timeout: status=0x00 [ 2216.350984][ T7593] gspca_stk1135: Sensor write failed [ 2216.356410][ T7593] gspca_stk1135: serial bus timeout: status=0x00 [ 2216.363325][ T7593] gspca_stk1135: Sensor write failed [ 2216.369181][ T7593] stk1135: probe of 4-1:0.0 failed with error -71 [ 2216.396176][ T7593] usb 4-1: USB disconnect, device number 74 [ 2216.498789][T10607] Bluetooth: hci4: command 0x0406 tx timeout [ 2217.223295][ T46] tipc: Subscription rejected, illegal request [ 2218.427155][ T6094] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2218.747352][ T6094] usb 4-1: Using ep0 maxpacket: 8 [ 2218.760961][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6308'. [ 2218.763182][ T6094] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2218.779942][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.788299][ T6094] usb 4-1: Product: syz [ 2218.793047][ T6094] usb 4-1: Manufacturer: syz [ 2218.798137][ T6094] usb 4-1: SerialNumber: syz [ 2218.847625][ T6094] usb 4-1: config 0 descriptor?? [ 2219.110094][ T6094] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2219.457399][ T6434] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2219.651860][ T52] block nbd0: Attempted send on invalid socket [ 2219.658510][ T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2219.669065][T17283] qnx6: unable to read the first superblock [ 2219.676457][ T52] block nbd0: Attempted send on invalid socket [ 2219.683878][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2219.694203][T17283] qnx6: unable to read the first superblock [ 2219.700432][T17283] qnx6: unable to read the first superblock [ 2220.323634][ T6434] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.394285][ T6434] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2220.397166][ T3915] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 2220.432372][ T6434] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2220.453434][ T6434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2220.472059][ T6434] usb 3-1: SerialNumber: syz [ 2220.595260][ T3915] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2220.625075][ T3915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.664197][ T3915] usb 6-1: config 0 descriptor?? [ 2220.698311][ T6434] usb 3-1: 0:2 : does not exist [ 2220.745735][ T6434] usb 3-1: USB disconnect, device number 105 [ 2220.879770][ T3915] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2220.962445][ T6094] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 2220.993762][ T6094] usb 4-1: USB disconnect, device number 75 [ 2221.031255][T16945] udevd[16945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2221.543106][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.550220][ T3915] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2221.572414][ T3915] asix: probe of 6-1:0.0 failed with error -61 [ 2222.530430][ T1041] block nbd4: Attempted send on invalid socket [ 2222.542765][ T1041] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2222.552243][T17306] qnx6: unable to read the first superblock [ 2222.558567][ T1041] block nbd4: Attempted send on invalid socket [ 2222.564760][ T1041] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2222.573942][T17306] qnx6: unable to read the first superblock [ 2222.580324][T17306] qnx6: unable to read the first superblock [ 2223.257634][ T52] block nbd3: Attempted send on invalid socket [ 2223.264055][ T52] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2223.274581][T17321] qnx6: unable to read the first superblock [ 2223.282258][ T52] block nbd3: Attempted send on invalid socket [ 2223.289098][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2223.298443][T17321] qnx6: unable to read the first superblock [ 2223.304562][T17321] qnx6: unable to read the first superblock [ 2223.901836][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6320'. [ 2224.276261][ T4387] usb 6-1: USB disconnect, device number 88 [ 2224.563974][T17315] xt_hashlimit: max too large, truncated to 1048576 [ 2225.024736][ T26] audit: type=1804 audit(1745912188.316:3193): pid=17343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="iou-wrk-17342" name="file0" dev="ramfs" ino=108715 res=1 errno=0 [ 2225.119716][ T8573] tipc: Subscription rejected, illegal request [ 2225.268135][ T1041] block nbd2: Attempted send on invalid socket [ 2225.274558][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2225.285443][T17346] qnx6: unable to read the first superblock [ 2225.294159][ T1041] block nbd2: Attempted send on invalid socket [ 2225.301649][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2225.313299][T17346] qnx6: unable to read the first superblock [ 2225.319458][T17346] qnx6: unable to read the first superblock [ 2226.709992][ T52] block nbd2: Attempted send on invalid socket [ 2226.717580][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2226.728521][T17357] qnx6: unable to read the first superblock [ 2226.738382][ T52] block nbd2: Attempted send on invalid socket [ 2226.746127][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2226.757834][T17357] qnx6: unable to read the first superblock [ 2226.764032][T17357] qnx6: unable to read the first superblock [ 2228.145064][ T1041] block nbd2: Attempted send on invalid socket [ 2228.153031][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2228.164661][T17366] qnx6: unable to read the first superblock [ 2228.172359][ T1041] block nbd2: Attempted send on invalid socket [ 2228.179791][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2228.197969][T17366] qnx6: unable to read the first superblock [ 2228.204009][T17366] qnx6: unable to read the first superblock [ 2228.900325][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6336'. [ 2229.637223][ T3921] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 2229.900068][T17376] xt_hashlimit: max too large, truncated to 1048576 [ 2229.989111][ T3921] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2230.023610][ T3921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.067454][ T3921] usb 5-1: config 0 descriptor?? [ 2230.280253][ T3921] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2230.628532][ T52] block nbd5: Attempted send on invalid socket [ 2230.635066][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2230.645339][T17392] qnx6: unable to read the first superblock [ 2230.652868][ T52] block nbd5: Attempted send on invalid socket [ 2230.659929][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2230.669290][T17392] qnx6: unable to read the first superblock [ 2230.675470][T17392] qnx6: unable to read the first superblock [ 2231.228781][ T3921] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2231.265165][ T3921] asix: probe of 5-1:0.0 failed with error -61 [ 2232.057242][ T52] block nbd3: Attempted send on invalid socket [ 2232.064214][ T52] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2232.075501][T17402] qnx6: unable to read the first superblock [ 2232.082652][ T52] block nbd3: Attempted send on invalid socket [ 2232.089550][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2232.099496][T17402] qnx6: unable to read the first superblock [ 2232.105544][T17402] qnx6: unable to read the first superblock [ 2232.661223][ T7783] tipc: Subscription rejected, illegal request [ 2233.462779][ T1041] block nbd5: Attempted send on invalid socket [ 2233.469535][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2233.480139][T17409] qnx6: unable to read the first superblock [ 2233.486610][ T1041] block nbd5: Attempted send on invalid socket [ 2233.494334][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2233.504683][T17409] qnx6: unable to read the first superblock [ 2233.510676][T17409] qnx6: unable to read the first superblock [ 2233.874363][ T4390] usb 5-1: USB disconnect, device number 72 [ 2234.679827][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6351'. [ 2235.147101][ T4387] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2235.371590][ T4387] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.382111][ T4387] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2235.411062][ T4387] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2235.420544][ T4387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2235.422034][T17421] xt_hashlimit: max too large, truncated to 1048576 [ 2235.436968][ T4387] usb 3-1: SerialNumber: syz [ 2235.478206][T10607] Bluetooth: hci4: link tx timeout [ 2235.483975][T10607] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2235.495152][T10607] Bluetooth: hci4: link tx timeout [ 2235.500471][T10607] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2235.663660][ T4387] usb 3-1: 0:2 : does not exist [ 2235.702241][ T4387] usb 3-1: USB disconnect, device number 106 [ 2236.068258][T16553] udevd[16553]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2236.201322][ T1041] block nbd3: Attempted send on invalid socket [ 2236.207762][ T1041] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2236.217331][T17435] qnx6: unable to read the first superblock [ 2236.226152][ T1041] block nbd3: Attempted send on invalid socket [ 2236.232538][ T1041] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2236.241750][T17435] qnx6: unable to read the first superblock [ 2236.247835][T17435] qnx6: unable to read the first superblock [ 2237.624669][T10607] Bluetooth: hci4: command 0x0406 tx timeout [ 2237.652620][ T52] block nbd3: Attempted send on invalid socket [ 2237.659634][ T52] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2237.669013][T17447] qnx6: unable to read the first superblock [ 2237.676081][ T52] block nbd3: Attempted send on invalid socket [ 2237.682431][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2237.692448][T17447] qnx6: unable to read the first superblock [ 2237.698690][T17447] qnx6: unable to read the first superblock [ 2238.749052][ T7973] tipc: Subscription rejected, illegal request [ 2239.400818][ T1041] block nbd4: Attempted send on invalid socket [ 2239.407281][ T1041] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2239.416618][T17462] qnx6: unable to read the first superblock [ 2239.423520][ T1041] block nbd4: Attempted send on invalid socket [ 2239.429961][ T1041] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2239.439259][T17462] qnx6: unable to read the first superblock [ 2239.445194][T17462] qnx6: unable to read the first superblock [ 2241.241578][T17470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 2241.761340][ T52] block nbd2: Attempted send on invalid socket [ 2241.771587][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2241.784252][T17489] qnx6: unable to read the first superblock [ 2241.796626][ T52] block nbd2: Attempted send on invalid socket [ 2241.803073][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2241.814210][T17489] qnx6: unable to read the first superblock [ 2241.820397][T17489] qnx6: unable to read the first superblock [ 2242.471969][T17490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6370'. [ 2242.483416][ T52] block nbd5: Attempted send on invalid socket [ 2242.490516][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2242.510258][T17494] qnx6: unable to read the first superblock [ 2242.516687][ T52] block nbd5: Attempted send on invalid socket [ 2242.526863][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2242.536756][T17494] qnx6: unable to read the first superblock [ 2242.542834][T17494] qnx6: unable to read the first superblock [ 2242.617430][ T3915] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2242.978673][ T3915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2242.989000][ T3915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2243.098802][ T1041] block nbd2: Attempted send on invalid socket [ 2243.105107][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2243.119310][T17501] qnx6: unable to read the first superblock [ 2243.126933][ T1041] block nbd2: Attempted send on invalid socket [ 2243.133458][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2243.144979][T17501] qnx6: unable to read the first superblock [ 2243.151102][T17501] qnx6: unable to read the first superblock [ 2243.916619][ T3915] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2244.006929][ T3915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2244.019660][ T3915] usb 4-1: SerialNumber: syz [ 2244.734344][T17502] tmpfs: Unknown parameter 'usrquota' [ 2245.052752][T17497] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2245.067953][T17497] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2245.074169][T17497] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 2245.096902][ T3915] usb 4-1: 0:2 : does not exist [ 2245.202250][ T3915] usb 4-1: USB disconnect, device number 76 [ 2246.098213][T10607] Bluetooth: hci4: command 0x0c1a tx timeout [ 2246.238488][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6380'. [ 2247.700696][ T52] block nbd3: Attempted send on invalid socket [ 2247.707559][ T52] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2247.717072][T17538] qnx6: unable to read the first superblock [ 2247.723877][ T52] block nbd5: Attempted send on invalid socket [ 2247.733719][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2247.745528][T17534] qnx6: unable to read the first superblock [ 2247.752872][ T52] block nbd5: Attempted send on invalid socket [ 2247.762427][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2247.773702][T17534] qnx6: unable to read the first superblock [ 2247.780052][T17534] qnx6: unable to read the first superblock [ 2247.788480][ T52] block nbd3: Attempted send on invalid socket [ 2247.795858][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2247.808491][T17538] qnx6: unable to read the first superblock [ 2247.814547][T17538] qnx6: unable to read the first superblock [ 2248.177184][T10607] Bluetooth: hci4: command 0x0406 tx timeout [ 2248.331638][T17549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6385'. [ 2249.457085][ T9160] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2250.488011][ T9160] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2250.565483][ T9160] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2250.577515][ T9160] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2250.586751][ T9160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2250.595718][ T9160] usb 3-1: SerialNumber: syz [ 2250.657733][T17560] tmpfs: Unknown parameter 'usrquota' [ 2250.932947][ T9160] usb 3-1: 0:2 : does not exist [ 2250.945057][ T9160] usb 3-1: USB disconnect, device number 107 [ 2251.148975][T17559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2251.157510][T17559] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2251.177500][T17559] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 2251.629659][T16945] udevd[16945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2252.344574][ T52] block nbd4: Attempted send on invalid socket [ 2252.351048][ T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2252.944903][T10607] Bluetooth: hci4: command 0x0c1a tx timeout [ 2252.953133][T17586] qnx6: unable to read the first superblock [ 2252.959600][ T52] block nbd4: Attempted send on invalid socket [ 2252.966517][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2252.983966][T17586] qnx6: unable to read the first superblock [ 2252.989980][T17586] qnx6: unable to read the first superblock [ 2253.831490][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6398'. [ 2254.081746][T17595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6399'. [ 2254.382254][ T52] block nbd0: Attempted send on invalid socket [ 2254.389008][ T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2254.399987][T17597] qnx6: unable to read the first superblock [ 2254.409124][ T52] block nbd0: Attempted send on invalid socket [ 2254.416163][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2254.426512][T17597] qnx6: unable to read the first superblock [ 2254.432780][T17597] qnx6: unable to read the first superblock [ 2254.977336][T10607] Bluetooth: hci4: command 0x0406 tx timeout [ 2256.556377][ T52] block nbd5: Attempted send on invalid socket [ 2256.562963][ T52] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2256.574232][T17621] qnx6: unable to read the first superblock [ 2256.580992][ T52] block nbd5: Attempted send on invalid socket [ 2256.587950][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2256.597331][T17621] qnx6: unable to read the first superblock [ 2256.603355][T17621] qnx6: unable to read the first superblock [ 2257.397266][ T3921] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2258.018522][ T3921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.035786][ T3921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2258.754143][ T3921] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2258.763704][ T3921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2258.771842][ T3921] usb 4-1: SerialNumber: syz [ 2258.931961][ T52] block nbd0: Attempted send on invalid socket [ 2258.938287][ T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2258.947582][T17632] qnx6: unable to read the first superblock [ 2258.953835][ T52] block nbd0: Attempted send on invalid socket [ 2258.960136][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2258.969529][T17632] qnx6: unable to read the first superblock [ 2258.975563][T17632] qnx6: unable to read the first superblock [ 2259.196706][ T3921] usb 4-1: 0:2 : does not exist [ 2259.317325][ T3921] usb 4-1: USB disconnect, device number 77 [ 2259.528125][T14113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2259.540119][T14113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2259.569656][T16553] udevd[16553]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2259.569811][T14113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2259.629263][T14113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2259.637411][T14113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2259.645330][T14113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2259.979789][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6415'. [ 2260.444583][ T7282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.412698][T17645] hsr0 speed is unknown, defaulting to 1000 [ 2261.421538][T17645] lo speed is unknown, defaulting to 1000 [ 2261.567147][T17654] tmpfs: Unknown parameter 'usrquota' [ 2261.787262][T10607] Bluetooth: hci1: command 0x0409 tx timeout [ 2262.196529][T17656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2262.208849][T17656] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2262.218895][T17656] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 2262.291120][T17656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2262.299374][ T7282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.310135][T17656] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2262.323945][T17656] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 2262.461814][ T7282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.827172][T10607] Bluetooth: hci4: command 0x0c1a tx timeout [ 2263.317281][ T1041] block nbd0: Attempted send on invalid socket [ 2263.323619][ T1041] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2263.334041][T17677] qnx6: unable to read the first superblock [ 2263.340544][ T1041] block nbd0: Attempted send on invalid socket [ 2263.347094][ T1041] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2263.356300][T17677] qnx6: unable to read the first superblock [ 2263.362690][T17677] qnx6: unable to read the first superblock [ 2264.031202][ T7282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.337261][T10607] Bluetooth: hci1: command 0x040f tx timeout [ 2264.412321][T17645] chnl_net:caif_netlink_parms(): no params data found [ 2264.977124][T10607] Bluetooth: hci4: command 0x0406 tx timeout [ 2265.309041][ T1041] block nbd2: Attempted send on invalid socket [ 2265.315282][ T1041] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2265.324581][T17697] qnx6: unable to read the first superblock [ 2265.331469][ T1041] block nbd2: Attempted send on invalid socket [ 2265.337845][ T1041] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2265.346907][T17697] qnx6: unable to read the first superblock [ 2265.352919][T17697] qnx6: unable to read the first superblock [ 2265.486931][ T7282] tipc: Left network mode [ 2265.745769][T17685] syz.5.6425 (17685): drop_caches: 2 [ 2266.246791][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6429'. [ 2266.418759][T19077] Bluetooth: hci1: command 0x0419 tx timeout [ 2266.518027][T17685] syz.5.6425 (17685): drop_caches: 2 [ 2266.524470][T17645] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.558505][T17645] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.673569][T17645] device bridge_slave_0 entered promiscuous mode [ 2266.901422][T17645] bridge0: port 2(bridge_slave_1) entered blocking state [ 2267.030428][T17645] bridge0: port 2(bridge_slave_1) entered disabled state [ 2267.054181][T17645] device bridge_slave_1 entered promiscuous mode [ 2267.341156][T17645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2267.430045][T17645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2268.224520][T17645] team0: Port device team_slave_0 added [ 2268.333397][T17645] team0: Port device team_slave_1 added [ 2268.497396][T19077] Bluetooth: hci1: command 0x0c1a tx timeout [ 2268.517567][T17645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2268.545450][T17645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2268.646811][T17645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2269.045310][T17645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2269.061316][T17645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2269.155457][T17645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2269.549977][T17645] device hsr_slave_0 entered promiscuous mode [ 2269.708880][T17645] device hsr_slave_1 entered promiscuous mode [ 2269.730659][T17645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2269.739261][T17645] Cannot create hsr debugfs directory [ 2269.889940][ T1041] block nbd5: Attempted send on invalid socket [ 2269.896242][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2269.905842][T17766] qnx6: unable to read the first superblock [ 2269.912313][ T1041] block nbd5: Attempted send on invalid socket [ 2269.918890][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2269.929160][T17766] qnx6: unable to read the first superblock [ 2269.935082][T17766] qnx6: unable to read the first superblock [ 2270.584817][T19077] Bluetooth: hci1: command 0x0406 tx timeout [ 2271.314719][ T7282] device hsr_slave_0 left promiscuous mode [ 2271.334606][ T7282] device hsr_slave_1 left promiscuous mode [ 2271.825317][ T7282] device veth1_macvtap left promiscuous mode [ 2271.870205][ T7282] device veth0_macvtap left promiscuous mode [ 2271.925663][ T7282] device veth1_vlan left promiscuous mode [ 2272.012363][ T7282] device veth0_vlan left promiscuous mode [ 2274.822731][ T1041] block nbd5: Attempted send on invalid socket [ 2274.829260][ T1041] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2274.838762][T17804] qnx6: unable to read the first superblock [ 2274.845140][ T1041] block nbd5: Attempted send on invalid socket [ 2274.851663][ T1041] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2274.861568][T17804] qnx6: unable to read the first superblock [ 2274.867552][T17804] qnx6: unable to read the first superblock [ 2277.437235][ T7282] bond0 (unregistering): Released all slaves [ 2277.669705][ T4387] lo speed is unknown, defaulting to 1000 [ 2277.778170][T11005] hsr0 speed is unknown, defaulting to 1000 [ 2277.810888][T11005] ================================================================== [ 2277.819101][T11005] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 2277.826328][T11005] Read of size 4 at addr ffff88801e33a0e0 by task kworker/0:4/11005 [ 2277.834303][T11005] [ 2277.836641][T11005] CPU: 0 PID: 11005 Comm: kworker/0:4 Not tainted 6.1.135-syzkaller #0 [ 2277.844870][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2277.854921][T11005] Workqueue: infiniband ib_cache_event_task [ 2277.860844][T11005] Call Trace: [ 2277.864119][T11005] [ 2277.867053][T11005] dump_stack_lvl+0x168/0x22e [ 2277.871940][T11005] ? __lock_acquire+0x7c50/0x7c50 [ 2277.876963][T11005] ? show_regs_print_info+0x12/0x12 [ 2277.882169][T11005] ? load_image+0x3b0/0x3b0 [ 2277.886665][T11005] ? __virt_addr_valid+0x465/0x540 [ 2277.891776][T11005] ? siw_query_port+0x358/0x450 [ 2277.896618][T11005] print_report+0xa8/0x220 [ 2277.901029][T11005] kasan_report+0x10b/0x140 [ 2277.905532][T11005] ? siw_query_port+0x358/0x450 [ 2277.910381][T11005] siw_query_port+0x358/0x450 [ 2277.915081][T11005] ? ib_query_port+0x372/0x820 [ 2277.919844][T11005] ib_cache_update+0x1bb/0x980 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2277.924628][T11005] ? ib_cache_setup_one+0x5d0/0x5d0 [ 2277.929825][T11005] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 2277.935805][T11005] ? read_lock_is_recursive+0x10/0x10 [ 2277.941174][T11005] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 2277.947068][T11005] ? _raw_spin_unlock+0x40/0x40 [ 2277.951921][T11005] ib_cache_event_task+0xd4/0x1c0 [ 2277.956942][T11005] ? process_one_work+0x7a1/0x1160 [ 2277.962075][T11005] process_one_work+0x898/0x1160 [ 2277.967047][T11005] ? worker_detach_from_pool+0x240/0x240 [ 2277.972713][T11005] ? _raw_spin_lock_irq+0xab/0xe0 [ 2277.977778][T11005] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 2277.983327][T11005] ? kthread_data+0x4b/0xc0 [ 2277.987835][T11005] worker_thread+0xaa2/0x1250 [ 2277.992514][T11005] ? __kthread_parkme+0x162/0x1c0 [ 2277.997563][T11005] kthread+0x29d/0x330 [ 2278.001656][T11005] ? worker_clr_flags+0x1a0/0x1a0 [ 2278.006699][T11005] ? kthread_blkcg+0xd0/0xd0 [ 2278.011378][T11005] ret_from_fork+0x1f/0x30 [ 2278.015821][T11005] [ 2278.018834][T11005] [ 2278.021146][T11005] Allocated by task 5898: [ 2278.025461][T11005] kasan_set_track+0x4b/0x70 [ 2278.030050][T11005] __kasan_kmalloc+0x8e/0xa0 [ 2278.034644][T11005] __kmalloc_node+0xb0/0x240 [ 2278.039226][T11005] kvmalloc_node+0x6c/0x180 [ 2278.043820][T11005] alloc_netdev_mqs+0x84/0xf00 [ 2278.048600][T11005] rtnl_create_link+0x2fb/0xb80 [ 2278.053462][T11005] rtnl_newlink+0x13ca/0x1ff0 [ 2278.058233][T11005] rtnetlink_rcv_msg+0x79b/0xed0 [ 2278.063174][T11005] netlink_rcv_skb+0x1de/0x420 [ 2278.067938][T11005] netlink_unicast+0x74c/0x8c0 [ 2278.072723][T11005] netlink_sendmsg+0x89e/0xbc0 [ 2278.077488][T11005] __sys_sendto+0x44f/0x5c0 [ 2278.081985][T11005] __x64_sys_sendto+0xda/0xf0 [ 2278.086659][T11005] do_syscall_64+0x4c/0xa0 [ 2278.091072][T11005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2278.096967][T11005] [ 2278.099293][T11005] Freed by task 7282: [ 2278.103260][T11005] kasan_set_track+0x4b/0x70 [ 2278.107852][T11005] kasan_save_free_info+0x2d/0x50 [ 2278.112896][T11005] ____kasan_slab_free+0x126/0x1e0 [ 2278.118008][T11005] slab_free_freelist_hook+0x131/0x1a0 [ 2278.123462][T11005] __kmem_cache_free+0xb6/0x1f0 [ 2278.128307][T11005] device_release+0x92/0x1c0 [ 2278.132918][T11005] kobject_put+0x21d/0x460 [ 2278.137335][T11005] netdev_run_todo+0xc8f/0xd80 [ 2278.142097][T11005] default_device_exit_batch+0x9c8/0xa50 [ 2278.147730][T11005] cleanup_net+0x77b/0xb80 [ 2278.152141][T11005] process_one_work+0x898/0x1160 [ 2278.157079][T11005] worker_thread+0xaa2/0x1250 [ 2278.161749][T11005] kthread+0x29d/0x330 [ 2278.165812][T11005] ret_from_fork+0x1f/0x30 [ 2278.170225][T11005] [ 2278.172542][T11005] The buggy address belongs to the object at ffff88801e33a000 [ 2278.172542][T11005] which belongs to the cache kmalloc-cg-4k of size 4096 [ 2278.186846][T11005] The buggy address is located 224 bytes inside of [ 2278.186846][T11005] 4096-byte region [ffff88801e33a000, ffff88801e33b000) [ 2278.200198][T11005] [ 2278.202510][T11005] The buggy address belongs to the physical page: [ 2278.208921][T11005] page:ffffea000078ce00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e338 [ 2278.219063][T11005] head:ffffea000078ce00 order:3 compound_mapcount:0 compound_pincount:0 [ 2278.227409][T11005] memcg:ffff888026b1e381 [ 2278.231639][T11005] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2278.239621][T11005] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801744c280 [ 2278.248197][T11005] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff888026b1e381 [ 2278.256789][T11005] page dumped because: kasan: bad access detected [ 2278.263197][T11005] page_owner tracks the page as allocated [ 2278.268901][T11005] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5898, tgid 5898 (syz-executor), ts 932968373035, free_ts 932950108041 [ 2278.291825][T11005] post_alloc_hook+0x173/0x1a0 [ 2278.296599][T11005] get_page_from_freelist+0x1a26/0x1ac0 [ 2278.302149][T11005] __alloc_pages+0x1df/0x4e0 [ 2278.306740][T11005] alloc_slab_page+0x5d/0x160 [ 2278.311508][T11005] new_slab+0x87/0x2c0 [ 2278.315596][T11005] ___slab_alloc+0xbc6/0x1220 [ 2278.320285][T11005] __kmem_cache_alloc_node+0x1a0/0x260 [ 2278.325752][T11005] __kmalloc_node_track_caller+0x9e/0x230 [ 2278.331508][T11005] kmemdup+0x27/0x60 [ 2278.335412][T11005] __addrconf_sysctl_register+0x99/0x3d0 [ 2278.341055][T11005] addrconf_sysctl_register+0x15c/0x1b0 [ 2278.346611][T11005] ipv6_add_dev+0xbe0/0x1120 [ 2278.351206][T11005] addrconf_notify+0x634/0xf40 [ 2278.355975][T11005] raw_notifier_call_chain+0xcb/0x160 [ 2278.361357][T11005] register_netdevice+0x1600/0x1aa0 [ 2278.366599][T11005] veth_newlink+0x7a0/0xbe0 [ 2278.371109][T11005] page last free stack trace: [ 2278.375864][T11005] free_unref_page_prepare+0x8b4/0x9a0 [ 2278.381339][T11005] free_unref_page+0x2e/0x3f0 [ 2278.386024][T11005] __unfreeze_partials+0x1a5/0x200 [ 2278.391232][T11005] put_cpu_partial+0x17c/0x250 [ 2278.395998][T11005] qlist_free_all+0x76/0xe0 [ 2278.400502][T11005] kasan_quarantine_reduce+0x144/0x160 [ 2278.405986][T11005] __kasan_slab_alloc+0x1e/0x80 [ 2278.410849][T11005] slab_post_alloc_hook+0x4b/0x480 [ 2278.415970][T11005] __kmem_cache_alloc_node+0x140/0x260 [ 2278.421434][T11005] kmalloc_trace+0x26/0xe0 [ 2278.425882][T11005] ref_tracker_alloc+0x129/0x450 [ 2278.430831][T11005] net_rx_queue_update_kobjects+0x15a/0x4a0 [ 2278.436730][T11005] netdev_register_kobject+0x223/0x310 [ 2278.442194][T11005] register_netdevice+0x12b9/0x1aa0 [ 2278.447401][T11005] veth_newlink+0x7a0/0xbe0 [ 2278.451911][T11005] rtnl_newlink+0x14c4/0x1ff0 [ 2278.456598][T11005] [ 2278.458922][T11005] Memory state around the buggy address: [ 2278.464549][T11005] ffff88801e339f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2278.472607][T11005] ffff88801e33a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2278.480670][T11005] >ffff88801e33a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2278.488768][T11005] ^ [ 2278.495971][T11005] ffff88801e33a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2278.504053][T11005] ffff88801e33a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2278.512121][T11005] ================================================================== [ 2279.651316][T11005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2279.658587][T11005] CPU: 0 PID: 11005 Comm: kworker/0:4 Not tainted 6.1.135-syzkaller #0 [ 2279.666867][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2279.676966][T11005] Workqueue: infiniband ib_cache_event_task [ 2279.682902][T11005] Call Trace: [ 2279.686200][T11005] [ 2279.689158][T11005] dump_stack_lvl+0x168/0x22e [ 2279.693896][T11005] ? memcpy+0x3c/0x60 [ 2279.697909][T11005] ? show_regs_print_info+0x12/0x12 [ 2279.703142][T11005] ? load_image+0x3b0/0x3b0 [ 2279.707679][T11005] panic+0x2c9/0x710 [ 2279.711684][T11005] ? bpf_jit_dump+0xd0/0xd0 [ 2279.716223][T11005] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 2279.722168][T11005] ? _raw_spin_unlock+0x40/0x40 [ 2279.727052][T11005] ? print_memory_metadata+0x314/0x400 [ 2279.732552][T11005] check_panic_on_warn+0x80/0xa0 [ 2279.737523][T11005] ? siw_query_port+0x358/0x450 [ 2279.742401][T11005] end_report+0x66/0x110 [ 2279.746679][T11005] kasan_report+0x118/0x140 [ 2279.751223][T11005] ? siw_query_port+0x358/0x450 [ 2279.756107][T11005] siw_query_port+0x358/0x450 [ 2279.760808][T11005] ? ib_query_port+0x372/0x820 [ 2279.765690][T11005] ib_cache_update+0x1bb/0x980 [ 2279.770488][T11005] ? ib_cache_setup_one+0x5d0/0x5d0 [ 2279.775720][T11005] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 2279.781732][T11005] ? read_lock_is_recursive+0x10/0x10 [ 2279.787134][T11005] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 2279.793075][T11005] ? _raw_spin_unlock+0x40/0x40 [ 2279.797963][T11005] ib_cache_event_task+0xd4/0x1c0 [ 2279.803016][T11005] ? process_one_work+0x7a1/0x1160 [ 2279.808154][T11005] process_one_work+0x898/0x1160 [ 2279.813124][T11005] ? worker_detach_from_pool+0x240/0x240 [ 2279.818782][T11005] ? _raw_spin_lock_irq+0xab/0xe0 [ 2279.823838][T11005] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 2279.829257][T11005] ? kthread_data+0x4b/0xc0 [ 2279.833805][T11005] worker_thread+0xaa2/0x1250 [ 2279.838514][T11005] ? __kthread_parkme+0x162/0x1c0 [ 2279.843572][T11005] kthread+0x29d/0x330 [ 2279.847669][T11005] ? worker_clr_flags+0x1a0/0x1a0 [ 2279.852720][T11005] ? kthread_blkcg+0xd0/0xd0 [ 2279.857346][T11005] ret_from_fork+0x1f/0x30 [ 2279.861797][T11005] [ 2279.865143][T11005] Kernel Offset: disabled [ 2279.869469][T11005] Rebooting in 86400 seconds..