last executing test programs: 2m49.850840569s ago: executing program 1 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fbff2abd7000f8dbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) 2m49.762095117s ago: executing program 1 (id=771): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1, &(0x7f0000001740)=ANY=[@ANYBLOB="300000000000000084000000010000000200000041"], 0x30, 0x4008000}, 0x0) 2m48.847216457s ago: executing program 1 (id=772): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffc}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0xc, 0x7, 0x7, 0x1, 0x4, 0x100000000, 0xfffffffffffffff1, 0xa, 0xd, 0x3, 0x10, 0x4, 0x7, 0x7, 0x9], 0x80a0000, 0xc8000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=@ipv6_getnetconf={0x3c, 0x52, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x26c}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xa}, @NETCONFA_FORWARDING={0x8, 0x2, 0x10}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffff8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x872d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000002) r5 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x80000) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x40, 0x611, 0x0, 0x0}], 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000980000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf25600000000c0099000f6d000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x80080}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa000000008404d0f29aa4cf2a95d991680701e461690840cf71cd142da0b2ba31237f6a28fe1d9d0308d17698107fc08414892629d0f09f532fb10bc5e5e4f8eb26c435b751d61d9009676e48c247047d4e71ebee5af42e38c90000da9e5ee29405b53be92c5b4991f9615e38e728b038a1bb2bed80824b2c38bf93d57d62e28636f93850000000005721837aac668f626c6f5cc870b984be3996e0876b6f3e2cf6f5497d5718fc10a54cc2c57f80730cc34112d0088c3f8903ded06892474accf61b3700eb401c000000000000000000008000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff07000000000002d58838000391000000"], 0xfd6c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 2m48.032637087s ago: executing program 1 (id=774): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400706"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001080)={0x34, &(0x7f0000000e40)={0x40, 0x3, 0x2, "83e7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m45.548280701s ago: executing program 1 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0xa, 0x0, 0x81, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x34, 0x10, 0x0, @void, @value, @void, @void, r5}, 0x20) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 2m44.489494045s ago: executing program 1 (id=785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='udf\x00', 0x0, 0x0) 2m29.450807413s ago: executing program 32 (id=785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='udf\x00', 0x0, 0x0) 2m24.848039275s ago: executing program 0 (id=835): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d40)="896b", 0x2}, {0x0}], 0x2}, 0x20008000) 2m23.827766446s ago: executing program 0 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @mcast2, 0x6}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r4, &(0x7f0000000240)="d33dd4edc9ee576541234edcd9c29e0ee1279915", 0x14, 0x8004881, 0x0, 0x0) 2m21.447838699s ago: executing program 0 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) memfd_create(0x0, 0x7) futex(&(0x7f00000001c0), 0xb, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x1) 2m21.379942727s ago: executing program 0 (id=843): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a"], 0x44}}, 0x2404000c) 2m21.307498433s ago: executing program 0 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 2m20.314394291s ago: executing program 0 (id=847): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x180380) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) 2m5.025523843s ago: executing program 33 (id=847): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x180380) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) 10.303413798s ago: executing program 4 (id=1132): ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x200040c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x41, 0x24c, &(0x7f00000007c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x400000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x4861c0, 0x129) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffcb) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fefffffffcffffff010000000c0002000940000000000000340007800c00018008000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYRESOCT=r6, @ANYRES32=r5, @ANYBLOB="0c0001800800", @ANYRES32=r5, @ANYBLOB], 0x54}}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 8.03982168s ago: executing program 3 (id=1134): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007001000df7f00006e45000041010000", @ANYRES32], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="06300000d041400008002e0002"], 0x28}}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b7", @ANYBLOB=',rootmo']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.021641532s ago: executing program 5 (id=1135): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r3 = open(0x0, 0x40, 0x170) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) eventfd2(0x1, 0x1) 7.159786466s ago: executing program 4 (id=1136): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 7.02228001s ago: executing program 3 (id=1137): pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x0, 0xf00) 6.8177184s ago: executing program 4 (id=1138): ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x2, 0x102000, 0x8}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.774592324s ago: executing program 3 (id=1139): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={0x0, 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.458508995s ago: executing program 4 (id=1141): r0 = socket(0x29, 0x2, 0x6) connect$rxrpc(r0, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, 0x0, 0x40040) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x208400, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) clock_nanosleep(0x2, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)='K', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040), 0x44) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) 6.060030035s ago: executing program 5 (id=1142): ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000800)={'vlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 5.724320188s ago: executing program 3 (id=1143): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400706"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001080)={0x34, &(0x7f0000000e40)={0x40, 0x3, 0x2, "83e7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.576327853s ago: executing program 2 (id=1144): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}]}, 0x1c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) connect$rose(r5, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 5.451168115s ago: executing program 4 (id=1145): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400000002"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 4.148032753s ago: executing program 2 (id=1146): open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.988595109s ago: executing program 2 (id=1147): pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x0, 0xf00) 3.772031789s ago: executing program 2 (id=1148): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 3.514700895s ago: executing program 2 (id=1149): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffc}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0xc, 0x7, 0x7, 0x1, 0x4, 0x100000000, 0xfffffffffffffff1, 0xa, 0xd, 0x3, 0x10, 0x4, 0x7, 0x7, 0x9], 0x80a0000, 0xc8000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=@ipv6_getnetconf={0x3c, 0x52, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x26c}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xa}, @NETCONFA_FORWARDING={0x8, 0x2, 0x10}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffff8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x872d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) lseek(0xffffffffffffffff, 0x5f11, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000002) r5 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x80000) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x40, 0x611, 0x0, 0x0}], 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000980000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf25600000000c0099000f6d000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x80080}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa000000008404d0f29aa4cf2a95d991680701e461690840cf71cd142da0b2ba31237f6a28fe1d9d0308d17698107fc08414892629d0f09f532fb10bc5e5e4f8eb26c435b751d61d9009676e48c247047d4e71ebee5af42e38c90000da9e5ee29405b53be92c5b4991f9615e38e728b038a1bb2bed80824b2c38bf93d57d62e28636f93850000000005721837aac668f626c6f5cc870b984be3996e0876b6f3e2cf6f5497d5718fc10a54cc2c57f80730cc34112d0088c3f8903ded06892474accf61b3700eb401c000000000000000000008000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff07000000000002d58838000391000000"], 0xfd6c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 3.195911986s ago: executing program 2 (id=1150): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r3 = open(0x0, 0x40, 0x170) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) eventfd2(0x1, 0x1) 3.115989424s ago: executing program 5 (id=1151): ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x2, 0x102000, 0x8}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.871694798s ago: executing program 5 (id=1152): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000030000000400", @ANYRES32=r0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 2.705649724s ago: executing program 5 (id=1153): mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae1", @ANYBLOB=',rootmo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.500837425s ago: executing program 4 (id=1154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="400f1100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.433082141s ago: executing program 3 (id=1155): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}]}, 0x1c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) connect$rose(r5, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 1.458992997s ago: executing program 5 (id=1156): open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 3 (id=1157): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) kernel console output (not intermixed with test programs): face 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.963506][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.980054][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.003092][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.012252][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.136051][ T8] usb 1-1: 0:2 : does not exist [ 177.148776][ T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 177.192447][ T8] usb 1-1: USB disconnect, device number 15 [ 177.250916][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.317305][ T23] usb 3-1: usb_control_msg returned -32 [ 177.323046][ T23] usbtmc 3-1:16.0: can't read capabilities [ 178.525612][ T787] gspca_sonixj: reg_r err -32 [ 178.530490][ T787] sonixj: probe of 4-1:0.0 failed with error -32 [ 180.241527][ T787] usb 4-1: USB disconnect, device number 12 [ 180.271424][ T23] usb 3-1: USB disconnect, device number 12 [ 181.066229][ T7018] Zero length message leads to an empty skb [ 181.253520][ T7010] syz.1.317 (7010) used greatest stack depth: 17960 bytes left [ 181.845133][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 181.874916][ T5847] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 182.091529][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 182.106552][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.116879][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 182.123066][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.137674][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.148654][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.160279][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.169738][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.181076][ T23] usb 2-1: Product: syz [ 182.186083][ T23] usb 2-1: Manufacturer: syz [ 182.191333][ T5847] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.200727][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.209882][ T23] usb 2-1: SerialNumber: syz [ 182.214728][ T5847] usb 3-1: Product: syz [ 182.226656][ T5847] usb 3-1: Manufacturer: syz [ 182.243363][ T5847] usb 3-1: SerialNumber: syz [ 182.452179][ T23] usb 2-1: 0:2 : does not exist [ 182.472726][ T23] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 182.527792][ T23] usb 2-1: USB disconnect, device number 12 [ 182.545211][ T5847] usb 3-1: 0:2 : does not exist [ 182.550170][ T5847] usb 3-1: unit 6 not found! [ 182.583071][ T5847] usb 3-1: USB disconnect, device number 13 [ 182.589446][ T28] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.658674][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.675430][ T7036] udevd[7036]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 182.775409][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 182.782569][ T28] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 182.792534][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.804574][ T28] usb 4-1: config 0 descriptor?? [ 182.819558][ T28] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 183.780281][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 184.325042][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 184.518105][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 184.525007][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.535786][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.547628][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.556777][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.565401][ T8] usb 2-1: Product: syz [ 184.569615][ T8] usb 2-1: Manufacturer: syz [ 184.574217][ T8] usb 2-1: SerialNumber: syz [ 184.605097][ T5783] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 184.791469][ T8] usb 2-1: 0:2 : does not exist [ 184.796659][ T5783] usb 3-1: Using ep0 maxpacket: 16 [ 184.804342][ T5783] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.814611][ T5783] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.825319][ T8] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 184.834241][ T5783] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.843370][ T28] gspca_sonixj: reg_r err -32 [ 184.843440][ T28] sonixj: probe of 4-1:0.0 failed with error -32 [ 184.855518][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.863712][ T5783] usb 3-1: Product: syz [ 184.868809][ T5783] usb 3-1: Manufacturer: syz [ 184.873594][ T5783] usb 3-1: SerialNumber: syz [ 184.886311][ T8] usb 2-1: USB disconnect, device number 13 [ 184.923326][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.106799][ T5783] usb 3-1: 0:2 : does not exist [ 185.111884][ T5783] usb 3-1: unit 6 not found! [ 185.124496][ T5783] usb 3-1: USB disconnect, device number 14 [ 185.148720][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.767895][ T7073] netlink: 'syz.2.340': attribute type 10 has an invalid length. [ 185.777801][ T7073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.340'. [ 185.791475][ T7073] batadv0: entered promiscuous mode [ 185.797962][ T7073] batadv0: entered allmulticast mode [ 185.828567][ T7073] bridge0: port 3(batadv0) entered blocking state [ 185.837121][ T7073] bridge0: port 3(batadv0) entered disabled state [ 186.246491][ T8] usb 4-1: USB disconnect, device number 13 [ 186.262080][ T7073] bridge0: port 3(batadv0) entered blocking state [ 186.267516][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 186.268882][ T7073] bridge0: port 3(batadv0) entered forwarding state [ 186.501385][ T570] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 186.511497][ T570] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 186.965077][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 187.005177][ T5783] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 187.088753][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.350'. [ 187.167283][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 187.177689][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.190876][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.202269][ T5783] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 187.211874][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.225917][ T5783] usb 4-1: config 0 descriptor?? [ 187.241826][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.265248][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.273317][ T8] usb 3-1: Product: syz [ 187.278901][ T8] usb 3-1: Manufacturer: syz [ 187.283553][ T8] usb 3-1: SerialNumber: syz [ 187.310633][ T7098] syz.0.352 (7098): attempted to duplicate a private mapping with mremap. This is not supported. [ 187.816328][ T5783] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 187.874149][ T8] usb 3-1: 0:2 : does not exist [ 187.893973][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 187.946601][ T8] usb 3-1: USB disconnect, device number 15 [ 188.003458][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.126279][ T28] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 188.179086][ T5783] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 188.191681][ T5783] asix: probe of 4-1:0.0 failed with error -61 [ 188.315089][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 188.332307][ T28] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 188.341750][ T28] usb 2-1: config 0 has no interface number 0 [ 188.354297][ T28] usb 2-1: config 0 interface 184 has no altsetting 0 [ 188.372075][ T28] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 188.389686][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.435635][ T28] usb 2-1: Product: syz [ 188.440138][ T28] usb 2-1: Manufacturer: syz [ 188.471059][ T28] usb 2-1: SerialNumber: syz [ 188.517272][ T28] usb 2-1: config 0 descriptor?? [ 188.541547][ T28] smsc75xx v1.0.0 [ 188.963966][ T28] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 188.975175][ T28] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 188.984873][ T28] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 188.995324][ T28] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 189.764421][ T28] usb 4-1: USB disconnect, device number 14 [ 191.067552][ T5783] usb 2-1: USB disconnect, device number 14 [ 192.749211][ T7180] tipc: Failed to remove unknown binding: 66,1,1/0:1463320502/1463320504 [ 192.764715][ T7180] tipc: Failed to remove unknown binding: 66,1,1/0:1463320502/1463320504 [ 192.773979][ T7180] tipc: Failed to remove unknown binding: 66,1,1/0:1463320502/1463320504 [ 192.967668][ T28] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 193.021411][ T7187] Bluetooth: MGMT ver 1.22 [ 193.114993][ T787] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 193.178311][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.187755][ T28] usb 2-1: not running at top speed; connect to a high speed hub [ 193.197750][ T28] usb 2-1: config 1 interface 0 has no altsetting 0 [ 193.207206][ T28] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 193.216336][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.224342][ T28] usb 2-1: Product: syz [ 193.229067][ T28] usb 2-1: Manufacturer: syz [ 193.233683][ T28] usb 2-1: SerialNumber: syz [ 193.295189][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 193.306940][ T787] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.318871][ T787] usb 4-1: config 0 has no interface number 0 [ 193.327025][ T787] usb 4-1: config 0 interface 184 has no altsetting 0 [ 193.337833][ T787] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.352433][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.354952][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 193.361274][ T787] usb 4-1: Product: syz [ 193.379116][ T787] usb 4-1: Manufacturer: syz [ 193.384031][ T787] usb 4-1: SerialNumber: syz [ 193.393055][ T787] usb 4-1: config 0 descriptor?? [ 193.410085][ T787] smsc75xx v1.0.0 [ 193.465018][ T28] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8 [ 193.491808][ T28] usb 2-1: USB disconnect, device number 15 [ 193.514743][ T28] usblp0: removed [ 193.571515][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.587459][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.598516][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 193.610836][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.621303][ T8] usb 3-1: config 0 descriptor?? [ 193.822754][ T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 193.833868][ T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 193.845657][ T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 193.857106][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.877875][ T787] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 193.889121][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.142124][ T8] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 194.158625][ T8] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 194.166303][ T8] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 194.173756][ T8] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 194.182553][ T8] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 194.202280][ T8] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 194.319347][ T8] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 9: -71 [ 194.329173][ T8] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -71 [ 194.338539][ T8] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 194.347409][ T8] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 194.358859][ T8] playstation: probe of 0003:054C:0DF2.0004 failed with error -71 [ 194.371851][ T8] usb 3-1: USB disconnect, device number 16 [ 194.393960][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400900][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.888516][ T8] usb 4-1: USB disconnect, device number 15 [ 196.075007][ T7227] input: syz1 as /devices/virtual/input/input5 [ 197.795192][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.985501][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 197.995802][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.006254][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.024384][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.034306][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.049793][ T8] usb 3-1: Product: syz [ 198.054226][ T8] usb 3-1: Manufacturer: syz [ 198.090973][ T8] usb 3-1: SerialNumber: syz [ 198.325225][ T8] usb 3-1: 0:2 : does not exist [ 198.341082][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 198.358311][ T7256] mmap: syz.1.398 (7256) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.389284][ T8] usb 3-1: USB disconnect, device number 17 [ 198.435012][ T5847] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.443713][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.635433][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 198.643578][ T5847] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 198.667841][ T5847] usb 4-1: config 0 has no interface number 0 [ 198.674229][ T5847] usb 4-1: config 0 interface 184 has no altsetting 0 [ 198.684626][ T5847] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 198.697078][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.705566][ T5847] usb 4-1: Product: syz [ 198.709801][ T5847] usb 4-1: Manufacturer: syz [ 198.714537][ T5847] usb 4-1: SerialNumber: syz [ 198.723519][ T5847] usb 4-1: config 0 descriptor?? [ 198.740144][ T5847] smsc75xx v1.0.0 [ 199.154747][ T5847] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 199.183965][ T5847] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 199.195537][ T5847] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 199.209183][ T5847] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 199.439841][ T7269] cgroup: fork rejected by pids controller in /syz2 [ 200.138567][ T1057] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 60 seconds [ 200.969830][ T7317] capability: warning: `syz.2.411' uses 32-bit capabilities (legacy support in use) [ 201.125105][ T787] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 201.349978][ T787] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.425356][ T787] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.475236][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 201.503685][ T787] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 201.539166][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.558029][ T787] usb 1-1: config 0 descriptor?? [ 201.574979][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 201.660649][ T7323] ubi: mtd0 is already attached to ubi31 [ 201.682277][ T8] usb 4-1: USB disconnect, device number 16 [ 202.055856][ T787] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 202.067862][ T787] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 202.370987][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.372981][ T787] hid-steam 0003:28DE:1102.0005: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 202.409659][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.457552][ T787] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' connected [ 202.506770][ T787] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0005/input/input6 [ 202.609912][ T787] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0 [ 202.635863][ T787] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0 [ 202.669697][ T787] hid-steam 0003:28DE:1102.0006: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 202.723050][ T787] usb 1-1: USB disconnect, device number 16 [ 202.805034][ T7341] fido_id[7341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 202.822183][ T787] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' disconnected [ 205.055013][ T1186] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 205.135111][ T787] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 205.265054][ T1186] usb 2-1: Using ep0 maxpacket: 8 [ 205.277112][ T1186] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.295702][ T1186] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.315794][ T1186] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.336097][ T1186] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.350484][ T1186] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.364077][ T787] usb 4-1: config 7 has an invalid interface number: 3 but max is 0 [ 205.364098][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.387181][ T787] usb 4-1: config 7 has no interface number 0 [ 205.393333][ T787] usb 4-1: config 7 interface 3 has no altsetting 0 [ 205.419208][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cd.d4 [ 205.441520][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.467946][ T787] usb 4-1: Product: syz [ 205.472160][ T787] usb 4-1: Manufacturer: syz [ 205.499123][ T787] usb 4-1: SerialNumber: syz [ 205.627150][ T1186] usb 2-1: usb_control_msg returned -32 [ 205.642493][ T1186] usbtmc 2-1:16.0: can't read capabilities [ 205.686529][ T1186] usb 2-1: USB disconnect, device number 16 [ 205.750876][ T787] usbtest 4-1:7.3: couldn't get endpoints, -71 [ 205.776340][ T787] usbtest: probe of 4-1:7.3 failed with error -71 [ 205.792712][ T787] usb 4-1: USB disconnect, device number 17 [ 206.412088][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.433'. [ 207.644951][ T28] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.750375][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 207.826815][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 207.843584][ T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.858459][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.871654][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.883578][ T28] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.900779][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.911850][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.138231][ T28] usb 1-1: GET_CAPABILITIES returned 0 [ 208.156743][ T28] usbtmc 1-1:16.0: can't read capabilities [ 208.366434][ T8] usb 1-1: USB disconnect, device number 17 [ 211.346569][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 211.761840][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.452'. [ 212.027262][ T7448] ubi: mtd0 is already attached to ubi31 [ 212.504040][ T28] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 212.695061][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 212.704109][ T28] usb 1-1: no configurations [ 212.709390][ T28] usb 1-1: can't read configurations, error -22 [ 212.866114][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 212.878307][ T28] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 213.085250][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 213.092393][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.102607][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.112736][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.122974][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.136651][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.145815][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.354935][ T1186] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 213.368817][ T8] usb 4-1: GET_CAPABILITIES returned 0 [ 213.374369][ T8] usbtmc 4-1:16.0: can't read capabilities [ 213.538069][ T1186] usb 2-1: Using ep0 maxpacket: 32 [ 213.549368][ T1186] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 213.560061][ T1186] usb 2-1: config 0 has no interface number 0 [ 213.569147][ T1186] usb 2-1: config 0 interface 184 has no altsetting 0 [ 213.581274][ T5886] usb 4-1: USB disconnect, device number 18 [ 213.582499][ T1186] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 213.603475][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.611855][ T1186] usb 2-1: Product: syz [ 213.620923][ T1186] usb 2-1: Manufacturer: syz [ 213.626048][ T1186] usb 2-1: SerialNumber: syz [ 213.640941][ T1186] usb 2-1: config 0 descriptor?? [ 213.649097][ T1186] smsc75xx v1.0.0 [ 214.688582][ T1186] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 214.720825][ T1186] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 215.536756][ T1186] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 215.553961][ T1186] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 215.572159][ T1186] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 215.583496][ T1186] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 216.635606][ T28] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 216.638517][ T1186] usb 2-1: USB disconnect, device number 17 [ 216.845142][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 216.867977][ T28] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.878234][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.894367][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.905992][ T28] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.920861][ T28] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.947420][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.190719][ T28] usb 4-1: GET_CAPABILITIES returned 0 [ 217.202872][ T28] usbtmc 4-1:16.0: can't read capabilities [ 217.760631][ T1186] usb 4-1: USB disconnect, device number 19 [ 218.370303][ T7536] ubi: mtd0 is already attached to ubi31 [ 218.654909][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 218.865068][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 218.889824][ T8] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 218.914563][ T8] usb 4-1: config 0 has no interface number 0 [ 218.932729][ T8] usb 4-1: config 0 interface 184 has no altsetting 0 [ 218.952520][ T5790] Bluetooth: hci3: unexpected event for opcode 0x042c [ 218.956676][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 218.969403][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.980038][ T8] usb 4-1: Product: syz [ 218.984304][ T8] usb 4-1: Manufacturer: syz [ 218.989986][ T8] usb 4-1: SerialNumber: syz [ 218.998424][ T8] usb 4-1: config 0 descriptor?? [ 219.006335][ T8] smsc75xx v1.0.0 [ 219.430120][ T4803] syzkaller0: tun_net_xmit 76 [ 219.435230][ T4803] syzkaller0: tun_net_xmit 48 [ 219.440915][ T7561] syzkaller0: create flow: hash 460240254 index 2 [ 219.455181][ T787] syzkaller0: tun_net_xmit 76 [ 219.496393][ T7560] syzkaller0: delete flow: hash 460240254 index 2 [ 219.613850][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 219.637016][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 220.483582][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 220.497814][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 220.510444][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 220.520283][ T8] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 221.577947][ T8] usb 4-1: USB disconnect, device number 20 [ 222.906571][ T7583] ubi: mtd0 is already attached to ubi31 [ 223.009398][ T27] audit: type=1800 audit(1761209443.881:2): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.505" name="file0" dev="overlay" ino=570 res=0 errno=0 [ 223.363336][ T5790] Bluetooth: hci1: unexpected event for opcode 0x042c [ 225.264906][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 225.681460][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 225.715363][ T8] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 225.743243][ T8] usb 1-1: config 0 has no interface number 0 [ 225.780177][ T8] usb 1-1: config 0 interface 184 has no altsetting 0 [ 225.812494][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 225.870760][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.884055][ T8] usb 1-1: Product: syz [ 225.897915][ T8] usb 1-1: Manufacturer: syz [ 226.003315][ T8] usb 1-1: SerialNumber: syz [ 226.084981][ T7632] comedi comedi0: Minor 3 could not be opened [ 226.291681][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 226.325045][ T5783] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 226.355330][ T8] usb 1-1: config 0 descriptor?? [ 226.412849][ T8] smsc75xx v1.0.0 [ 226.489674][ T7637] ubi: mtd0 is already attached to ubi31 [ 226.574952][ T5783] usb 2-1: Using ep0 maxpacket: 32 [ 226.582420][ T5783] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 226.590786][ T5783] usb 2-1: config 0 has no interface number 0 [ 226.598351][ T5783] usb 2-1: config 0 interface 184 has no altsetting 0 [ 226.608305][ T5783] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 226.619034][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.627181][ T5783] usb 2-1: Product: syz [ 226.631585][ T5783] usb 2-1: Manufacturer: syz [ 226.639013][ T5783] usb 2-1: SerialNumber: syz [ 226.675468][ T5783] usb 2-1: config 0 descriptor?? [ 226.688833][ T5783] smsc75xx v1.0.0 [ 226.723628][ T7640] loop2: detected capacity change from 0 to 512 [ 226.741821][ T7640] FAT-fs (loop2): count of clusters too big (2147483660) [ 226.750453][ T7640] FAT-fs (loop2): Can't find a valid FAT filesystem [ 226.896640][ T7641] nbd1: detected capacity change from 0 to 32 [ 227.033473][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 227.554181][ T5790] block nbd1: Receive control failed (result -104) [ 227.677327][ T5783] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 229.579791][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.738062][ T5783] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 229.748418][ T5783] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 229.759400][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.772140][ T5783] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 229.780477][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 229.793632][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 229.804266][ T5783] usb 2-1: USB disconnect, device number 18 [ 229.813025][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 229.825168][ T8] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 229.839237][ T8] usb 1-1: USB disconnect, device number 20 [ 230.224852][ T1057] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 90 seconds [ 230.512070][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 230.729901][ T5783] IPVS: starting estimator thread 0... [ 230.955039][ T7681] IPVS: using max 19 ests per chain, 45600 per kthread [ 231.125211][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 231.304911][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 231.321833][ T8] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 231.376249][ T8] usb 2-1: config 0 has no interface number 0 [ 231.421938][ T8] usb 2-1: config 0 interface 184 has no altsetting 0 [ 231.554984][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 231.570358][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.815748][ T8] usb 2-1: Product: syz [ 231.822938][ T8] usb 2-1: Manufacturer: syz [ 231.861387][ T8] usb 2-1: SerialNumber: syz [ 231.882048][ T8] usb 2-1: config 0 descriptor?? [ 231.954518][ T8] smsc75xx v1.0.0 [ 232.315689][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 232.349990][ T27] audit: type=1326 audit(1761209453.221:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.372987][ T27] audit: type=1326 audit(1761209453.241:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.396103][ T27] audit: type=1326 audit(1761209453.241:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.418748][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 232.433744][ T27] audit: type=1326 audit(1761209453.241:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.440597][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 232.462935][ T27] audit: type=1326 audit(1761209453.241:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.486048][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 232.513858][ T8] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 232.610568][ T27] audit: type=1326 audit(1761209453.241:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.684658][ T27] audit: type=1326 audit(1761209453.241:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.710669][ T27] audit: type=1326 audit(1761209453.241:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.734096][ T27] audit: type=1326 audit(1761209453.241:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 232.757431][ T27] audit: type=1326 audit(1761209453.241:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f38efc9 code=0x7ffc0000 [ 233.284923][ T5783] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 233.896163][ T5783] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.907531][ T5783] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.924884][ T5783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.931637][ T5783] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 233.953205][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.031356][ T8] usb 2-1: USB disconnect, device number 19 [ 234.384556][ T5783] usb 1-1: config 0 descriptor?? [ 234.874062][ T5783] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 234.897078][ T5783] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 234.917350][ T5783] hid-steam 0003:28DE:1102.0007: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 234.949252][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 235.015133][ T5783] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' connected [ 235.062651][ T5783] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0007/input/input7 [ 235.150353][ T5783] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 235.180924][ T5783] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 235.221391][ T5783] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 235.276108][ T5783] usb 1-1: USB disconnect, device number 21 [ 235.323139][ T5783] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' disconnected [ 235.391336][ T7756] fido_id[7756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.525102][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 235.715224][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 235.737931][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.759407][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.798091][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.811557][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.822372][ T8] usb 3-1: Product: syz [ 235.828425][ T8] usb 3-1: Manufacturer: syz [ 235.834312][ T8] usb 3-1: SerialNumber: syz [ 235.956384][ T7767] syzkaller0: create flow: hash 460240254 index 2 [ 236.417340][ T8] usb 3-1: 0:2 : does not exist [ 236.439538][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 236.462624][ T8] usb 3-1: USB disconnect, device number 18 [ 236.534791][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.612785][ T11] syzkaller0: tun_net_xmit 76 [ 236.621992][ T11] syzkaller0: tun_net_xmit 48 [ 236.635274][ T28] syzkaller0: tun_net_xmit 76 [ 236.642806][ T7765] syzkaller0: delete flow: hash 460240254 index 2 [ 237.287777][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 237.458726][ T7779] loop2: detected capacity change from 0 to 512 [ 237.616630][ T7779] FAT-fs (loop2): count of clusters too big (2147483660) [ 237.623752][ T7779] FAT-fs (loop2): Can't find a valid FAT filesystem [ 239.571530][ T7780] nbd2: detected capacity change from 0 to 32 [ 239.579610][ T5790] block nbd2: Receive control failed (result -32) [ 239.605930][ T1057] block nbd2: Dead connection, failed to find a fallback [ 239.616588][ T1057] block nbd2: shutting down sockets [ 239.633503][ T1057] blk_print_req_error: 9 callbacks suppressed [ 239.633516][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.654648][ T1057] buffer_io_error: 9 callbacks suppressed [ 239.654678][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.676585][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.685772][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.695044][ T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.704218][ T54] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.713761][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.724774][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.733189][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.742499][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.751485][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.761513][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.771298][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.780831][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.792016][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.801294][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.809549][ T5774] ldm_validate_partition_table(): Disk read failed. [ 239.818219][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.827555][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.836202][ T1057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.845543][ T1057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.857645][ T5774] Dev nbd2: unable to read RDB block 0 [ 239.881073][ T5774] nbd2: unable to read partition table [ 239.938149][ T5774] ldm_validate_partition_table(): Disk read failed. [ 239.945617][ T5774] Dev nbd2: unable to read RDB block 0 [ 239.951921][ T5774] nbd2: unable to read partition table [ 241.305763][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 241.525956][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 241.703694][ T8] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 241.740450][ T8] usb 2-1: config 0 has no interface number 1 [ 241.805600][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 241.814686][ T8] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 242.029576][ T8] usb 2-1: Product: syz [ 242.074912][ T8] usb 2-1: Manufacturer: syz [ 242.090189][ T8] usb 2-1: SerialNumber: syz [ 242.130908][ T8] usb 2-1: config 0 descriptor?? [ 242.487124][ T8] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 242.634494][ T8] snd-usb-6fire: probe of 2-1:0.111 failed with error -71 [ 242.657901][ T8] usb 2-1: USB disconnect, device number 20 [ 242.844092][ T7811] random: crng reseeded on system resumption [ 243.841509][ T7833] syzkaller0: create flow: hash 460240254 index 2 [ 243.848492][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 243.940051][ T11] syzkaller0: tun_net_xmit 76 [ 243.945758][ T11] syzkaller0: tun_net_xmit 48 [ 243.965653][ T787] syzkaller0: tun_net_xmit 76 [ 244.025612][ T7829] syzkaller0: delete flow: hash 460240254 index 2 [ 244.045163][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 244.094216][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.108593][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.135574][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.156933][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.181605][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 244.233755][ T8] usb 1-1: Product: syz [ 244.238533][ T8] usb 1-1: Manufacturer: syz [ 244.248569][ T8] usb 1-1: SerialNumber: syz [ 244.356577][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 244.509904][ T8] usb 1-1: 0:2 : does not exist [ 244.583937][ T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 244.630966][ T8] usb 1-1: USB disconnect, device number 22 [ 244.731961][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.924950][ T787] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.105207][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 245.138888][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.157502][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.168795][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 245.183103][ T787] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 245.192788][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.199191][ T7843] ntfs3: loop0: try to read out of volume at offset 0x0 [ 245.210014][ T787] usb 3-1: config 0 descriptor?? [ 245.647913][ T787] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 245.660990][ T787] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 245.670938][ T787] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 245.683280][ T787] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 245.690400][ T787] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 245.707469][ T787] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 245.860310][ T7841] netlink: 'syz.2.576': attribute type 2 has an invalid length. [ 245.870169][ T7841] netlink: 244 bytes leftover after parsing attributes in process `syz.2.576'. [ 245.872554][ T787] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 245.907199][ T787] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 246.022305][ T5886] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 246.094595][ T5886] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 246.121877][ T787] usb 3-1: USB disconnect, device number 19 [ 246.293021][ T5886] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 246.471886][ T8] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 246.505710][ T5886] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 246.719047][ T8] usb 4-1: device descriptor read/64, error -71 [ 246.995141][ T8] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 247.175246][ T8] usb 4-1: device descriptor read/64, error -71 [ 247.307519][ T8] usb usb4-port1: attempt power cycle [ 247.765119][ T8] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 247.816849][ T8] usb 4-1: device descriptor read/8, error -71 [ 247.905617][ T1186] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 248.095080][ T8] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 248.124165][ T1186] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 248.160652][ T1186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.175959][ T8] usb 4-1: device descriptor read/8, error -71 [ 248.265959][ T1186] usb 1-1: config 0 descriptor?? [ 248.326126][ T8] usb usb4-port1: unable to enumerate USB device [ 248.704938][ T1186] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 251.015583][ T1186] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 251.061808][ T1186] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 251.093991][ T1186] asix: probe of 1-1:0.0 failed with error -71 [ 251.120416][ T1186] usb 1-1: USB disconnect, device number 23 [ 252.395364][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 252.765040][ T1186] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 253.985097][ T1186] usb 2-1: device descriptor read/64, error -71 [ 254.265534][ T1186] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 254.491004][ T1186] usb 2-1: device descriptor read/64, error -71 [ 254.515956][ T7910] syzkaller0: create flow: hash 460240254 index 2 [ 255.282384][ T1186] usb usb2-port1: attempt power cycle [ 255.503102][ T58] syzkaller0: tun_net_xmit 76 [ 255.542279][ T28] syzkaller0: tun_net_xmit 76 [ 255.551202][ T58] syzkaller0: tun_net_xmit 48 [ 255.568913][ T7905] syzkaller0: delete flow: hash 460240254 index 2 [ 255.827482][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.834112][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.900361][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 256.101344][ T7924] Bluetooth: hci0: unsupported parameter 255 [ 256.108923][ T7924] Bluetooth: hci0: unsupported parameter 50 [ 256.115483][ T7924] Bluetooth: hci0: unsupported parameter 255 [ 256.121604][ T7924] Bluetooth: hci0: unsupported parameter 50 [ 257.097326][ T1057] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 30 seconds [ 258.185114][ T5783] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 258.385337][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 258.397977][ T5783] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 258.431328][ T5783] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 258.454358][ T5783] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 258.463009][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 258.474941][ T5783] usb 3-1: Product: syz [ 258.479588][ T5783] usb 3-1: Manufacturer: syz [ 258.484737][ T5783] usb 3-1: SerialNumber: syz [ 258.655044][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 258.667061][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.678259][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 258.685502][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 258.694859][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.712209][ T9] usb 1-1: config 0 descriptor?? [ 258.735272][ T5783] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 258.769289][ T5783] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 258.777732][ T5783] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 258.786162][ T5783] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 258.881299][ T7954] ubi: mtd0 is already attached to ubi31 [ 258.932901][ T5783] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 258.941769][ T5783] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 258.963895][ T5783] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 258.976910][ T5783] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 258.989440][ T5783] usb 3-1: USB disconnect, device number 20 [ 259.002296][ T5783] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 259.016199][ T5783] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 259.027672][ T5783] visor 3-1:1.0: device disconnected [ 259.177501][ T9] lg-g15 0003:046D:C225.000A: item fetching failed at offset 3/6 [ 259.193760][ T9] lg-g15: probe of 0003:046D:C225.000A failed with error -22 [ 259.384782][ T9] usb 1-1: USB disconnect, device number 24 [ 259.440978][ T4803] syzkaller0: tun_net_xmit 76 [ 259.446262][ T4803] syzkaller0: tun_net_xmit 48 [ 259.446706][ T7966] syzkaller0: create flow: hash 460240254 index 2 [ 259.465296][ T1186] syzkaller0: tun_net_xmit 76 [ 259.501149][ T7965] syzkaller0: delete flow: hash 460240254 index 2 [ 259.787569][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 260.305204][ T1057] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 120 seconds [ 263.297319][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 266.084923][ T1186] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 266.284946][ T1186] usb 1-1: Using ep0 maxpacket: 32 [ 266.296094][ T1186] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 266.304299][ T1186] usb 1-1: config 0 has no interface number 0 [ 266.313312][ T1186] usb 1-1: config 0 interface 184 has no altsetting 0 [ 266.324164][ T1186] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 266.333613][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.343984][ T1186] usb 1-1: Product: syz [ 266.351272][ T1186] usb 1-1: Manufacturer: syz [ 266.356272][ T1186] usb 1-1: SerialNumber: syz [ 266.367624][ T1186] usb 1-1: config 0 descriptor?? [ 266.375698][ T1186] smsc75xx v1.0.0 [ 266.390920][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 266.555339][ T564] syzkaller0: tun_net_xmit 76 [ 266.561126][ T564] syzkaller0: tun_net_xmit 48 [ 266.564107][ T8044] syzkaller0: create flow: hash 460240254 index 2 [ 266.575099][ T8] syzkaller0: tun_net_xmit 76 [ 266.656824][ T8042] syzkaller0: delete flow: hash 460240254 index 2 [ 266.667073][ T28] syzkaller0: tun_net_xmit 76 [ 266.989386][ T1186] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 267.012224][ T1186] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 267.887899][ T1186] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 267.911555][ T1186] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 267.929242][ T1186] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 267.954693][ T1186] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 269.186994][ T8] usb 1-1: USB disconnect, device number 25 [ 269.259680][ T8056] loop0: detected capacity change from 0 to 512 [ 269.279866][ T8056] FAT-fs (loop0): count of clusters too big (2147483660) [ 269.325054][ T8056] FAT-fs (loop0): Can't find a valid FAT filesystem [ 273.416102][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 274.964940][ T8100] loop1: detected capacity change from 0 to 512 [ 274.990126][ T8100] FAT-fs (loop1): count of clusters too big (2147483660) [ 275.002012][ T8100] FAT-fs (loop1): Can't find a valid FAT filesystem [ 278.439984][ T8125] syzkaller0: create flow: hash 460240254 index 2 [ 278.669604][ T3462] syzkaller0: tun_net_xmit 76 [ 278.678655][ T3462] syzkaller0: tun_net_xmit 48 [ 278.690528][ T8123] syzkaller0: delete flow: hash 460240254 index 2 [ 278.697518][ T8] syzkaller0: tun_net_xmit 76 [ 279.715144][ T1186] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 279.895050][ T1186] usb 1-1: Using ep0 maxpacket: 16 [ 279.921121][ T1186] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 279.940636][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.964932][ T1186] usb 1-1: Product: syz [ 279.975311][ T1186] usb 1-1: Manufacturer: syz [ 279.979953][ T1186] usb 1-1: SerialNumber: syz [ 280.018198][ T1186] r8152-cfgselector 1-1: config 0 descriptor?? [ 280.480164][ T1186] r8152-cfgselector 1-1: Unknown version 0x0000 [ 280.498480][ T1186] r8152-cfgselector 1-1: USB disconnect, device number 26 [ 280.927946][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 281.060803][ T8150] loop3: detected capacity change from 0 to 512 [ 281.064727][ T8152] process 'syz.0.672' launched './file0' with NULL argv: empty string added [ 281.131340][ T8150] FAT-fs (loop3): count of clusters too big (2147483660) [ 281.140561][ T8150] FAT-fs (loop3): Can't find a valid FAT filesystem [ 285.098020][ T8170] ubi: mtd0 is already attached to ubi31 [ 285.791663][ T5771] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 286.011166][ T5771] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.027220][ T5771] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.064648][ T5771] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 286.099777][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 286.123814][ T5771] usb 1-1: Product: syz [ 286.130457][ T5771] usb 1-1: Manufacturer: syz [ 286.143101][ T5771] usb 1-1: SerialNumber: syz [ 286.157260][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 286.202621][ T5771] usb 1-1: config 0 descriptor?? [ 286.469427][ T5847] usb 1-1: USB disconnect, device number 27 [ 287.492991][ T5868] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 60 seconds [ 287.515108][ T8185] loop2: detected capacity change from 0 to 512 [ 287.544902][ T8185] FAT-fs (loop2): count of clusters too big (2147483660) [ 287.577197][ T8185] FAT-fs (loop2): Can't find a valid FAT filesystem [ 290.420221][ T5868] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 150 seconds [ 291.041313][ T8207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.056899][ T8207] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.105061][ T8207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.125051][ T8207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.144372][ T8207] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 294.151867][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 294.158156][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 294.164332][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 295.472515][ T8245] loop2: detected capacity change from 0 to 512 [ 295.494028][ T8245] FAT-fs (loop2): count of clusters too big (2147483660) [ 295.504723][ T8245] FAT-fs (loop2): Can't find a valid FAT filesystem [ 296.215275][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 296.221520][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 298.639848][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 300.046295][ T8266] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.028562][ T8273] loop1: detected capacity change from 0 to 512 [ 302.046448][ T8273] FAT-fs (loop1): count of clusters too big (2147483660) [ 302.082302][ T8273] FAT-fs (loop1): Can't find a valid FAT filesystem [ 302.314907][ T1186] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 303.793961][ T1186] usb 4-1: Using ep0 maxpacket: 16 [ 304.086177][ T1186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.105011][ T1186] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.139360][ T1186] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.165004][ T1186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.173038][ T1186] usb 4-1: Product: syz [ 304.177550][ T1186] usb 4-1: Manufacturer: syz [ 304.182233][ T1186] usb 4-1: SerialNumber: syz [ 305.210211][ T1186] usb 4-1: 0:2 : does not exist [ 305.288862][ T1186] usb 4-1: USB disconnect, device number 25 [ 305.348496][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.692689][ T8299] syzkaller0: create flow: hash 460240254 index 2 [ 305.747486][ T4803] syzkaller0: tun_net_xmit 76 [ 305.773173][ T4803] syzkaller0: tun_net_xmit 48 [ 305.778323][ T787] syzkaller0: tun_net_xmit 76 [ 305.845156][ T787] syzkaller0: tun_net_xmit 76 [ 305.953263][ T8296] syzkaller0: delete flow: hash 460240254 index 2 [ 305.966108][ T787] syzkaller0: tun_net_xmit 76 [ 308.364861][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 308.608676][ T8] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 308.624905][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.655795][ T8] usb 1-1: config 0 descriptor?? [ 308.782905][ T8319] loop2: detected capacity change from 0 to 512 [ 308.797380][ T8319] FAT-fs (loop2): count of clusters too big (2147483660) [ 308.835298][ T8319] FAT-fs (loop2): Can't find a valid FAT filesystem [ 309.003136][ T8320] netlink: 52 bytes leftover after parsing attributes in process `syz.2.721'. [ 309.012335][ T8320] nbd: must specify at least one socket [ 310.503675][ T8] usb 1-1: Cannot set autoneg [ 311.599349][ T8] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 311.782837][ T8] usb 1-1: USB disconnect, device number 28 [ 317.262948][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.278082][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.896256][ T5868] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 90 seconds [ 318.051382][ T8359] ubi: mtd0 is already attached to ubi31 [ 318.642642][ T8371] syzkaller0: create flow: hash 460240254 index 2 [ 319.004471][ T8368] syzkaller0: delete flow: hash 460240254 index 2 [ 320.905489][ T5868] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 180 seconds [ 322.947787][ T8379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.953826][ T8379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.962940][ T8379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.695286][ T5783] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 325.011848][ T5783] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 325.021557][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 325.021601][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 325.024881][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 325.093398][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.161280][ T5783] usb 4-1: Product: syz [ 325.193538][ T5783] usb 4-1: Manufacturer: syz [ 325.227889][ T5783] usb 4-1: SerialNumber: syz [ 325.354977][ T5783] usb 4-1: config 0 descriptor?? [ 325.881542][ T5783] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 326.673602][ T8401] ubi: mtd0 is already attached to ubi31 [ 327.108753][ T8411] input: syz0 as /devices/virtual/input/input9 [ 328.013792][ T5783] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 328.058531][ T5783] usb 4-1: USB disconnect, device number 26 [ 328.296469][ T8423] syzkaller0: create flow: hash 460240254 index 2 [ 328.961971][ T8415] syzkaller0: delete flow: hash 460240254 index 2 [ 332.958129][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 333.192859][ T23] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 333.213195][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.233639][ T23] usb 3-1: config 0 descriptor?? [ 334.260266][ T23] usb 3-1: Cannot set autoneg [ 334.265401][ T23] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 334.278121][ T23] usb 3-1: USB disconnect, device number 21 [ 334.595486][ T8439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.601999][ T8439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.608279][ T8439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 335.779649][ T8471] ubi: mtd0 is already attached to ubi31 [ 335.801077][ T11] syzkaller0: tun_net_xmit 76 [ 335.807600][ T8469] syzkaller0: create flow: hash 460240254 index 2 [ 335.807647][ T11] syzkaller0: tun_net_xmit 48 [ 335.825157][ T5771] syzkaller0: tun_net_xmit 76 [ 335.870965][ T8468] syzkaller0: delete flow: hash 460240254 index 2 [ 335.934880][ T1186] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 336.149361][ T1186] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 336.173238][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.189758][ T1186] usb 3-1: Product: syz [ 336.194180][ T1186] usb 3-1: Manufacturer: syz [ 336.214516][ T1186] usb 3-1: SerialNumber: syz [ 336.230205][ T1186] usb 3-1: config 0 descriptor?? [ 336.695078][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 336.701126][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 336.707322][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 336.715335][ T1186] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 338.230680][ T1186] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 338.256273][ T1186] usb 3-1: USB disconnect, device number 22 [ 338.506632][ T8477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.513606][ T8477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.522001][ T8477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.915045][ T1186] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 338.924398][ T8500] Bluetooth: hci0: unsupported parameter 255 [ 338.931668][ T8500] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 339.117703][ T1186] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 339.134807][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.160650][ T1186] usb 2-1: config 0 descriptor?? [ 339.715128][ T6021] syzkaller0: tun_net_xmit 76 [ 339.720289][ T8509] syzkaller0: create flow: hash 460240254 index 2 [ 339.721293][ T6021] syzkaller0: tun_net_xmit 48 [ 339.738814][ T23] syzkaller0: tun_net_xmit 76 [ 339.867881][ T8508] syzkaller0: delete flow: hash 460240254 index 2 [ 339.889180][ T8] syzkaller0: tun_net_xmit 76 [ 340.208697][ T1186] usb 2-1: Cannot set autoneg [ 340.213569][ T1186] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 340.433584][ T1186] usb 2-1: USB disconnect, device number 24 [ 340.535066][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 340.535121][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 340.547786][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 344.196448][ T8518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.232080][ T8518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.236505][ T8531] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 344.252963][ T8518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.415428][ T5847] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 345.736718][ T5847] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 345.765627][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.773666][ T5847] usb 1-1: Product: syz [ 345.794489][ T5847] usb 1-1: Manufacturer: syz [ 345.799714][ T5847] usb 1-1: SerialNumber: syz [ 345.810264][ T5847] usb 1-1: config 0 descriptor?? [ 346.290681][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 346.305150][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 346.311348][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 346.339290][ T5847] hso 1-1:0.0: Can't find BULK IN endpoint [ 346.363678][ T5847] usb-storage 1-1:0.0: USB Mass Storage device detected [ 346.643997][ T1186] usb 1-1: USB disconnect, device number 29 [ 347.175147][ T1186] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 347.332390][ T8557] syzkaller0: create flow: hash 460240254 index 2 [ 347.374885][ T1186] usb 3-1: Using ep0 maxpacket: 16 [ 347.392163][ T1186] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 347.402729][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.411336][ T1186] usb 3-1: Product: syz [ 347.420812][ T1186] usb 3-1: Manufacturer: syz [ 347.426038][ T8556] syzkaller0: delete flow: hash 460240254 index 2 [ 347.432711][ T1186] usb 3-1: SerialNumber: syz [ 347.440035][ T1186] usb 3-1: config 0 descriptor?? [ 347.860685][ T1186] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 347.897366][ T1186] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.913287][ T1186] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 347.923672][ T1186] usb 3-1: media controller created [ 347.997853][ T5868] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 120 seconds [ 348.010698][ T1186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.598843][ T1186] zl10353_read_register: readreg error (reg=127, ret==0) [ 348.599987][ T8555] dtv5100: wlen = 65, aborting. [ 348.607144][ T1186] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 348.643744][ T1186] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 348.684661][ T1186] usb 3-1: USB disconnect, device number 23 [ 348.781439][ T1186] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 350.273857][ T8569] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 350.851780][ T5847] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 351.219739][ T5868] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 210 seconds [ 351.275072][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 351.282428][ T5847] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 351.291393][ T5847] usb 3-1: config 0 has no interface number 0 [ 351.297775][ T5847] usb 3-1: config 0 interface 184 has no altsetting 0 [ 351.307581][ T5847] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 351.316756][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.325000][ T5847] usb 3-1: Product: syz [ 351.329288][ T5847] usb 3-1: Manufacturer: syz [ 351.333961][ T5847] usb 3-1: SerialNumber: syz [ 351.342413][ T5847] usb 3-1: config 0 descriptor?? [ 351.353355][ T5847] smsc75xx v1.0.0 [ 351.815486][ T23] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 351.961214][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 351.972166][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.014913][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 352.025416][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.035839][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.049631][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.059186][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.067664][ T23] usb 4-1: Product: syz [ 352.071955][ T23] usb 4-1: Manufacturer: syz [ 352.077055][ T23] usb 4-1: SerialNumber: syz [ 352.319194][ T23] usb 4-1: 0:2 : does not exist [ 352.328114][ T23] usb 4-1: unit 6 not found! [ 352.368054][ T23] usb 4-1: USB disconnect, device number 27 [ 352.428723][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.236422][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 353.649554][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 353.660032][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 353.670511][ T5847] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 354.410716][ T5102] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 354.492074][ T1186] usb 3-1: USB disconnect, device number 24 [ 354.900788][ T8613] random: crng reseeded on system resumption [ 356.114898][ T5847] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 356.334900][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 356.371467][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.391639][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.423740][ T5847] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.432987][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.448046][ T5847] usb 1-1: Product: syz [ 356.452402][ T5847] usb 1-1: Manufacturer: syz [ 356.504979][ T5847] usb 1-1: SerialNumber: syz [ 356.874058][ T5847] usb 1-1: 0:2 : does not exist [ 356.879234][ T5847] usb 1-1: unit 6 not found! [ 356.947298][ T5847] usb 1-1: USB disconnect, device number 30 [ 357.515003][ T787] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 357.725529][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 357.750375][ T787] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 357.764162][ T787] usb 3-1: config 0 has no interface number 0 [ 357.770947][ T787] usb 3-1: config 0 interface 184 has no altsetting 0 [ 357.813276][ T787] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 357.863907][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.872511][ T787] usb 3-1: Product: syz [ 357.877556][ T787] usb 3-1: Manufacturer: syz [ 357.883445][ T787] usb 3-1: SerialNumber: syz [ 357.905508][ T787] usb 3-1: config 0 descriptor?? [ 357.933392][ T787] smsc75xx v1.0.0 [ 358.151589][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.163385][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.173452][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.189439][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.197755][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.207133][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.343129][ T23] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 358.408531][ T8647] chnl_net:caif_netlink_parms(): no params data found [ 358.494599][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.502261][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.510313][ T8647] bridge_slave_0: entered allmulticast mode [ 358.518490][ T8647] bridge_slave_0: entered promiscuous mode [ 358.529738][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.530332][ T787] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 358.538139][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.555121][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 358.557331][ T8647] bridge_slave_1: entered allmulticast mode [ 358.562264][ T787] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 358.569211][ T8647] bridge_slave_1: entered promiscuous mode [ 358.585478][ T23] usb 1-1: config 0 has no interfaces? [ 358.601345][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 358.614072][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.628199][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.633039][ T23] usb 1-1: Product: syz [ 358.650746][ T23] usb 1-1: Manufacturer: syz [ 358.655857][ T23] usb 1-1: SerialNumber: syz [ 358.663819][ T23] usb 1-1: config 0 descriptor?? [ 358.668825][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.726911][ T8647] team0: Port device team_slave_0 added [ 358.737575][ T8647] team0: Port device team_slave_1 added [ 358.773853][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.781175][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.807809][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.821404][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.828634][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.865272][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.956244][ T5847] usb 1-1: USB disconnect, device number 31 [ 358.973254][ T8647] hsr_slave_0: entered promiscuous mode [ 358.990571][ T8647] hsr_slave_1: entered promiscuous mode [ 359.004276][ T8647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.012507][ T8647] Cannot create hsr debugfs directory [ 359.314691][ T8647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.325843][ T8647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.337133][ T8647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.348310][ T8647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.443572][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.470764][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.483610][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.490827][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.508117][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.515305][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.873194][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.890453][ T787] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 359.999731][ T787] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 360.009642][ T787] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 360.019336][ T787] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 360.049417][ T8676] 9pnet_fd: Insufficient options for proto=fd [ 360.063312][ T8676] 9pnet: Unknown protocol version 9p200 [ 360.295219][ T5102] Bluetooth: hci4: command tx timeout [ 360.327319][ T8647] veth0_vlan: entered promiscuous mode [ 360.340852][ T8647] veth1_vlan: entered promiscuous mode [ 360.371393][ T8647] veth0_macvtap: entered promiscuous mode [ 360.384621][ T8647] veth1_macvtap: entered promiscuous mode [ 360.403376][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.414225][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.424572][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.435692][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.445627][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.456691][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.466963][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.477914][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.490611][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.503907][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.520058][ T787] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 360.529700][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.543376][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.554494][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.564960][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.575871][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.586853][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.606070][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.617587][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.629792][ T8647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.639283][ T8647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.648027][ T8647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.656873][ T8647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.716118][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 360.738436][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.760916][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.767973][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.782878][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.796038][ T787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.827899][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.857772][ T787] usb 4-1: Product: syz [ 360.862494][ T787] usb 4-1: Manufacturer: syz [ 360.874310][ T787] usb 4-1: SerialNumber: syz [ 361.110638][ T564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.118847][ T564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.155706][ T787] usb 4-1: 0:2 : does not exist [ 361.161183][ T787] usb 4-1: unit 6 not found! [ 361.280144][ T787] usb 4-1: USB disconnect, device number 28 [ 361.397940][ T5847] usb 3-1: USB disconnect, device number 25 [ 361.471295][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.677526][ T8698] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 361.708360][ T5102] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 361.720572][ T5102] Bluetooth: Wrong link type (-22) [ 361.826973][ T8701] loop4: detected capacity change from 0 to 512 [ 361.843881][ T8701] FAT-fs (loop4): count of clusters too big (2147483660) [ 361.852960][ T8701] FAT-fs (loop4): Can't find a valid FAT filesystem [ 362.375063][ T5102] Bluetooth: hci4: command tx timeout [ 364.554938][ T5102] Bluetooth: hci4: command tx timeout [ 366.298585][ T8735] ubi: mtd0 is already attached to ubi31 [ 366.626357][ T5102] Bluetooth: hci4: command tx timeout [ 367.115105][ T8748] loop3: detected capacity change from 0 to 512 [ 367.141569][ T8748] FAT-fs (loop3): count of clusters too big (2147483660) [ 367.157168][ T8748] FAT-fs (loop3): Can't find a valid FAT filesystem [ 371.454905][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 371.644946][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 371.670593][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 371.703763][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 371.722024][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.730904][ T9] usb 3-1: Product: syz [ 371.736195][ T9] usb 3-1: Manufacturer: syz [ 371.742842][ T9] usb 3-1: SerialNumber: syz [ 371.753264][ T9] usb 3-1: config 0 descriptor?? [ 371.967009][ T8782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.973532][ T8782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.983220][ T8782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.989693][ T8782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.996087][ T8782] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 372.010343][ T8782] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 372.186620][ T9] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 372.281361][ T8795] loop4: detected capacity change from 0 to 512 [ 372.298761][ T8795] FAT-fs (loop4): count of clusters too big (2147483660) [ 372.308227][ T8795] FAT-fs (loop4): Can't find a valid FAT filesystem [ 373.345047][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 373.975084][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 374.332788][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 374.339062][ T5102] Bluetooth: hci4: command 0x0c1a tx timeout [ 375.253054][ T9] usb 3-1: USB disconnect, device number 26 [ 376.377076][ T5102] Bluetooth: hci4: command 0x0c1a tx timeout [ 377.294334][ T8836] 9pnet_fd: Insufficient options for proto=fd [ 377.318883][ T8836] 9pnet: Unknown protocol version 9p200 [ 378.055194][ T5868] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 150 seconds [ 378.465003][ T5102] Bluetooth: hci4: command 0x0c1a tx timeout [ 378.700861][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.711079][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.109243][ T8858] loop3: detected capacity change from 0 to 512 [ 379.135987][ T8858] FAT-fs (loop3): count of clusters too big (2147483660) [ 379.148540][ T8858] FAT-fs (loop3): Can't find a valid FAT filesystem [ 381.265264][ T5868] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 240 seconds [ 381.954880][ T28] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 382.144705][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.168055][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.177190][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.191917][ T28] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 382.201370][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.211171][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.220205][ T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 382.227702][ T28] usb 3-1: Product: syz [ 382.232050][ T28] usb 3-1: Manufacturer: syz [ 382.236861][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.244087][ T28] usb 3-1: SerialNumber: syz [ 382.252292][ T28] usb 3-1: config 0 descriptor?? [ 382.501579][ T28] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 382.641784][ T8875] chnl_net:caif_netlink_parms(): no params data found [ 382.834000][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.842479][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.851690][ T8875] bridge_slave_0: entered allmulticast mode [ 382.860658][ T8875] bridge_slave_0: entered promiscuous mode [ 382.880281][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.888230][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.896355][ T8875] bridge_slave_1: entered allmulticast mode [ 382.911382][ T8875] bridge_slave_1: entered promiscuous mode [ 383.002172][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.030172][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.169765][ T8875] team0: Port device team_slave_0 added [ 383.180657][ T8875] team0: Port device team_slave_1 added [ 383.251626][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.274254][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.309501][ T8875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.330474][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.348612][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.374523][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.442191][ T8875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.494078][ T8875] hsr_slave_0: entered promiscuous mode [ 383.501480][ T8875] hsr_slave_1: entered promiscuous mode [ 383.508500][ T8875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.520674][ T8875] Cannot create hsr debugfs directory [ 384.295742][ T5102] Bluetooth: hci5: command tx timeout [ 384.381111][ T28] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 384.398908][ T28] usb 3-1: USB disconnect, device number 27 [ 384.625796][ T8875] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.636234][ T8875] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.646684][ T8875] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.859315][ T8875] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.514192][ T8912] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 385.543431][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.615645][ T8875] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.688345][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.695539][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.739336][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.746557][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.749669][ T8916] loop3: detected capacity change from 0 to 512 [ 385.770576][ T8916] FAT-fs (loop3): count of clusters too big (2147483660) [ 385.793147][ T8916] FAT-fs (loop3): Can't find a valid FAT filesystem [ 386.375884][ T5102] Bluetooth: hci5: command tx timeout [ 388.455145][ T5102] Bluetooth: hci5: command tx timeout [ 389.515603][ T8875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.543284][ T5102] Bluetooth: hci5: command tx timeout [ 390.576964][ T5783] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 390.885536][ T5783] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 391.034894][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.085470][ T5783] usb 5-1: Product: syz [ 391.101341][ T5783] usb 5-1: Manufacturer: syz [ 391.118647][ T5783] usb 5-1: SerialNumber: syz [ 391.146799][ T5783] usb 5-1: config 0 descriptor?? [ 391.230587][ T8875] veth0_vlan: entered promiscuous mode [ 391.248691][ T8875] veth1_vlan: entered promiscuous mode [ 391.298227][ T8875] veth0_macvtap: entered promiscuous mode [ 391.324064][ T8875] veth1_macvtap: entered promiscuous mode [ 391.347847][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.358656][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.371329][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.378407][ T5783] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 391.390952][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.401368][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.414421][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.426676][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.437666][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.447888][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.458661][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.475486][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.719325][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.736538][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.751193][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.764889][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.779633][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.794254][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.806082][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.939120][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.979529][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.991594][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.040943][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.058707][ T8875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.067913][ T8875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.076965][ T8875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.085794][ T8875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.231842][ T8959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.239067][ T8959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.245726][ T8959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.253636][ T8959] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 392.260446][ T8959] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 392.270176][ T8959] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 392.283183][ T8959] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 392.383364][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.396402][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.427047][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.436381][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.205150][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 393.386194][ T5783] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 393.403028][ T5783] usb 5-1: USB disconnect, device number 2 [ 393.415006][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 393.434200][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 393.450170][ T9] usb 4-1: config 0 has no interface number 0 [ 393.458637][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 393.472630][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 393.483814][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.491967][ T9] usb 4-1: Product: syz [ 393.496437][ T9] usb 4-1: Manufacturer: syz [ 393.501116][ T9] usb 4-1: SerialNumber: syz [ 393.513809][ T9] usb 4-1: config 0 descriptor?? [ 393.526827][ T9] smsc75xx v1.0.0 [ 394.155245][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 394.174874][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 394.234788][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 394.295261][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 394.301634][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 394.308201][ T5102] Bluetooth: hci5: command 0x0c1a tx timeout [ 394.314271][ T5102] Bluetooth: hci4: command 0x0c1a tx timeout [ 395.499462][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 395.683067][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 395.833089][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 395.940260][ T9] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 396.375101][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 396.839493][ T23] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 396.916212][ T9] usb 4-1: USB disconnect, device number 29 [ 397.053612][ T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 397.069409][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.081056][ T23] usb 6-1: Product: syz [ 397.085765][ T23] usb 6-1: Manufacturer: syz [ 397.090764][ T23] usb 6-1: SerialNumber: syz [ 397.109871][ T23] usb 6-1: config 0 descriptor?? [ 397.351484][ T23] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 398.455064][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 398.525005][ T1186] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 398.675596][ T1186] usb 3-1: device descriptor read/64, error -71 [ 398.735088][ T787] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 398.945089][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 399.011664][ T787] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 399.051734][ T23] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 399.073523][ T787] usb 4-1: config 0 has no interface number 0 [ 399.166612][ T787] usb 4-1: config 0 interface 184 has no altsetting 0 [ 399.181792][ T23] usb 6-1: USB disconnect, device number 2 [ 399.302111][ T787] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 399.371323][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.382189][ T787] usb 4-1: Product: syz [ 399.387685][ T787] usb 4-1: Manufacturer: syz [ 399.392932][ T787] usb 4-1: SerialNumber: syz [ 399.406776][ T787] usb 4-1: config 0 descriptor?? [ 399.413741][ T787] smsc75xx v1.0.0 [ 399.514867][ T1186] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 399.665006][ T1186] usb 3-1: device descriptor read/64, error -71 [ 399.793078][ T1186] usb usb3-port1: attempt power cycle [ 400.351585][ T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 400.364518][ T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 400.732342][ T1186] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 400.888438][ T1186] usb 3-1: device descriptor read/8, error -71 [ 401.173412][ T9050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.181710][ T9050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.189770][ T9050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.200918][ T9050] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.215152][ T1186] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 401.227260][ T9050] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 401.555864][ T1186] usb 3-1: device not accepting address 31, error -71 [ 403.202705][ T1186] usb usb3-port1: unable to enumerate USB device [ 403.213400][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 403.255267][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 403.255723][ T5102] Bluetooth: hci4: command 0x0c1a tx timeout [ 403.261510][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 403.261576][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 403.795278][ T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 403.892926][ T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 403.929851][ T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 403.951837][ T787] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 404.024348][ T787] usb 4-1: USB disconnect, device number 30 [ 406.724851][ T1186] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 406.884947][ T1186] usb 4-1: device descriptor read/64, error -71 [ 406.983754][ T9104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.155296][ T1186] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 408.374574][ T9104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.397153][ T5868] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 180 seconds [ 408.422370][ T9104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.446579][ T9104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 408.455566][ T9104] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 408.524967][ T1186] usb 4-1: device descriptor read/64, error -71 [ 408.684832][ T1186] usb usb4-port1: attempt power cycle [ 408.694892][ T9070] Bluetooth: hci1: command 0x0406 tx timeout [ 408.784981][ T5864] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 409.084853][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 409.105391][ T5864] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 409.121958][ T5864] usb 6-1: config 0 has no interface number 0 [ 409.128385][ T5864] usb 6-1: config 0 interface 184 has no altsetting 0 [ 409.143359][ T5864] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 409.153726][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.162334][ T5864] usb 6-1: Product: syz [ 409.187928][ T5864] usb 6-1: Manufacturer: syz [ 409.204863][ T5864] usb 6-1: SerialNumber: syz [ 409.237870][ T5864] usb 6-1: config 0 descriptor?? [ 409.272415][ T5864] smsc75xx v1.0.0 [ 410.523206][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 410.529482][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 410.535023][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 410.535825][ T9070] Bluetooth: hci4: command 0x0c1a tx timeout [ 410.776202][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 410.801980][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 411.614821][ T5868] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 270 seconds [ 412.999315][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 413.012232][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 413.066325][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 413.096878][ T5864] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 413.119738][ T5864] usb 6-1: USB disconnect, device number 3 [ 414.545379][ T5864] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 415.584844][ T5864] usb 5-1: device descriptor read/64, error -71 [ 416.276050][ T5864] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 416.456610][ T5864] usb 5-1: device descriptor read/64, error -71 [ 416.585082][ T5864] usb usb5-port1: attempt power cycle [ 416.754952][ T5783] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 416.785147][ T5771] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 416.951164][ T5783] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 416.963947][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.975005][ T5771] usb 4-1: Using ep0 maxpacket: 32 [ 416.982879][ T5783] usb 6-1: Product: syz [ 416.991699][ T5771] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 417.002454][ T5783] usb 6-1: Manufacturer: syz [ 417.004887][ T5864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 417.012527][ T5771] usb 4-1: config 0 has no interface number 0 [ 417.024978][ T5783] usb 6-1: SerialNumber: syz [ 417.030858][ T5771] usb 4-1: config 0 interface 184 has no altsetting 0 [ 417.055263][ T5783] usb 6-1: config 0 descriptor?? [ 417.071040][ T5771] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 417.231747][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.240446][ T5771] usb 4-1: Product: syz [ 417.244625][ T5771] usb 4-1: Manufacturer: syz [ 417.252137][ T5771] usb 4-1: SerialNumber: syz [ 417.307160][ T5771] usb 4-1: config 0 descriptor?? [ 417.330819][ T5864] usb 5-1: device not accepting address 5, error -71 [ 418.054657][ T5783] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 418.102593][ T5771] smsc75xx v1.0.0 [ 418.728502][ T5771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 418.780459][ T5771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 419.635914][ T5783] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 419.649734][ T5783] usb 6-1: USB disconnect, device number 4 [ 420.264561][ T5771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 420.292559][ T5771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 420.312188][ T5771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 420.322572][ T5771] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 422.084031][ T5864] usb 4-1: USB disconnect, device number 34 [ 422.201967][ T9220] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 426.064889][ T5771] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 426.911557][ T5771] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 426.934795][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.943601][ T5771] usb 4-1: Product: syz [ 426.964705][ T5771] usb 4-1: Manufacturer: syz [ 426.982671][ T5771] usb 4-1: SerialNumber: syz [ 426.997188][ T5771] usb 4-1: config 0 descriptor?? [ 427.004603][ T9276] loop4: detected capacity change from 0 to 512 [ 427.064487][ T9276] FAT-fs (loop4): count of clusters too big (2147483660) [ 427.082182][ T9276] FAT-fs (loop4): Can't find a valid FAT filesystem [ 427.474269][ T5771] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 430.290132][ T5771] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 430.334947][ T5771] usb 4-1: USB disconnect, device number 35 [ 431.217011][ T9303] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 435.025353][ T9] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 435.234934][ T787] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 435.255627][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.274789][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.299836][ T9] usb 4-1: Product: syz [ 435.313732][ T9] usb 4-1: Manufacturer: syz [ 435.323007][ T9] usb 4-1: SerialNumber: syz [ 435.355933][ T9] usb 4-1: config 0 descriptor?? [ 435.436117][ T787] usb 6-1: Using ep0 maxpacket: 32 [ 435.459464][ T787] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 435.477270][ T787] usb 6-1: config 0 has no interface number 0 [ 435.498357][ T787] usb 6-1: config 0 interface 184 has no altsetting 0 [ 435.524076][ T787] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 435.553158][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.571816][ T787] usb 6-1: Product: syz [ 435.586651][ T787] usb 6-1: Manufacturer: syz [ 435.586684][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.602252][ T787] usb 6-1: SerialNumber: syz [ 435.640280][ T787] usb 6-1: config 0 descriptor?? [ 435.691787][ T787] smsc75xx v1.0.0 [ 436.869219][ T787] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 436.976679][ T787] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 437.034898][ T787] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 437.046193][ T787] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 437.055914][ T787] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 437.095231][ T787] smsc75xx: probe of 6-1:0.184 failed with error -61 [ 437.147263][ T9] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 437.757677][ T9] usb 4-1: USB disconnect, device number 36 [ 438.859729][ T1057] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 210 seconds [ 439.552924][ T5864] usb 6-1: USB disconnect, device number 5 [ 439.706168][ T9372] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 440.074919][ T9382] 9pnet_fd: Insufficient options for proto=fd [ 440.097320][ T9382] 9pnet: Unknown protocol version 9p200 [ 440.214307][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.246576][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.423381][ T5868] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 300 seconds [ 442.751512][ T9388] (null): rxe_set_mtu: Set mtu to 1024 [ 443.307768][ T9388] infiniband syz2: set active [ 443.312615][ T9388] infiniband syz2: added veth1_to_team [ 443.320372][ T9388] syz2: rxe_create_cq: returned err = -12 [ 443.327350][ T9388] infiniband syz2: Couldn't create ib_mad CQ [ 443.334391][ T9388] infiniband syz2: Couldn't open port 1 [ 443.416559][ T9388] RDS/IB: syz2: added [ 443.420933][ T9388] smc: adding ib device syz2 with port count 1 [ 443.428159][ T9388] smc: ib device syz2 port 1 has pnetid [ 448.735721][ T9070] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 450.015035][ T9429] 9pnet: Unknown protocol version 9p200 [ 451.238871][ T9443] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 451.585932][ T9070] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 453.314568][ T9461] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1035'. [ 454.585256][ T9461] team_slave_0: entered promiscuous mode [ 454.591454][ T9461] team_slave_1: entered promiscuous mode [ 454.745380][ T9463] loop5: detected capacity change from 0 to 512 [ 454.862349][ T9463] FAT-fs (loop5): count of clusters too big (2147483660) [ 454.907822][ T9463] FAT-fs (loop5): Can't find a valid FAT filesystem [ 456.733068][ T9482] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 457.617956][ T9070] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 457.830054][ T9496] loop3: detected capacity change from 0 to 512 [ 457.994795][ T5847] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 459.159073][ T9496] FAT-fs (loop3): count of clusters too big (2147483660) [ 459.257357][ T9496] FAT-fs (loop3): Can't find a valid FAT filesystem [ 459.794881][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 461.275064][ T5847] usb 5-1: device descriptor read/all, error -71 [ 462.407075][ T5847] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 463.076663][ T5847] usb 5-1: no configurations [ 464.219898][ T5847] usb 5-1: can't read configurations, error -22 [ 465.235046][ T5783] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 465.608477][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 465.701915][ T5783] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 465.827213][ T5783] usb 6-1: config 0 has no interface number 0 [ 465.951539][ T5783] usb 6-1: config 0 interface 184 has no altsetting 0 [ 466.337648][ T5783] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 466.338199][ T5847] usb usb5-port1: attempt power cycle [ 466.651593][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.778116][ T5783] usb 6-1: Product: syz [ 466.778149][ T9538] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 466.788382][ T5783] usb 6-1: Manufacturer: syz [ 466.793253][ T5783] usb 6-1: SerialNumber: syz [ 466.803564][ T9538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 466.826069][ T5783] usb 6-1: config 0 descriptor?? [ 466.833407][ T5783] smsc75xx v1.0.0 [ 466.842516][ T9538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 466.855385][ T9538] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 466.868522][ T9538] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 467.481083][ T5783] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 467.647546][ T5783] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 468.386198][ T5783] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 468.554040][ T5783] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 468.677110][ T5783] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 468.733896][ T9555] loop4: detected capacity change from 0 to 512 [ 468.777369][ T5783] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 468.785152][ T9070] Bluetooth: hci1: command 0x0406 tx timeout [ 468.855225][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 468.861471][ T9070] Bluetooth: hci3: command 0x0406 tx timeout [ 468.905900][ T9555] FAT-fs (loop4): count of clusters too big (2147483660) [ 468.935273][ T5790] Bluetooth: hci4: command 0x0c1a tx timeout [ 468.941546][ T9070] Bluetooth: hci5: command 0x0c1a tx timeout [ 468.950422][ T5868] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 240 seconds [ 469.053013][ T9555] FAT-fs (loop4): Can't find a valid FAT filesystem [ 472.230925][ T23] usb 6-1: USB disconnect, device number 6 [ 472.410404][ T9567] ubi: mtd0 is already attached to ubi31 [ 472.785064][ T1057] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 330 seconds [ 474.129885][ T9577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 474.161475][ T9577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 474.191824][ T9577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 474.204568][ T9577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 474.219318][ T9577] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 474.865150][ T5847] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 475.074954][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 475.105329][ T5847] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 475.113549][ T5847] usb 3-1: config 0 has no interface number 0 [ 475.134209][ T5847] usb 3-1: config 0 interface 184 has no altsetting 0 [ 475.144441][ T5847] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 475.156664][ T9604] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 475.163187][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.172457][ T5847] usb 3-1: Product: syz [ 475.177026][ T5847] usb 3-1: Manufacturer: syz [ 475.181703][ T5847] usb 3-1: SerialNumber: syz [ 475.191890][ T5847] usb 3-1: config 0 descriptor?? [ 475.203046][ T5847] smsc75xx v1.0.0 [ 475.425588][ T9610] loop5: detected capacity change from 0 to 512 [ 475.449150][ T9610] FAT-fs (loop5): count of clusters too big (2147483660) [ 475.534329][ T9610] FAT-fs (loop5): Can't find a valid FAT filesystem [ 475.768198][ T5792] blk_print_req_error: 27 callbacks suppressed [ 475.768216][ T5792] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 475.824561][ T9070] Bluetooth: hci1: command 0x0406 tx timeout [ 475.872926][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 475.894935][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 476.217683][ T9070] Bluetooth: hci4: command 0x0c1a tx timeout [ 476.223780][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 476.231031][ T9070] Bluetooth: hci2: command 0x0406 tx timeout [ 476.294893][ T9070] Bluetooth: hci5: command 0x0c1a tx timeout [ 478.715947][ T5156] udevd[5156]: worker [6092] /devices/virtual/block/nbd0 timeout; kill it [ 478.771448][ T5156] udevd[5156]: seq 11369 '/devices/virtual/block/nbd0' killed [ 478.828840][ T5156] udevd[5156]: worker [7036] /devices/virtual/block/nbd1 timeout; kill it [ 478.988071][ T5156] udevd[5156]: seq 12417 '/devices/virtual/block/nbd1' killed [ 479.952940][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 479.969831][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 479.979724][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 479.990042][ T5847] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 480.000264][ T5847] usb 3-1: USB disconnect, device number 32 [ 480.443904][ T9637] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 480.990039][ T9633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 481.002674][ T9633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 481.013365][ T9633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 481.023780][ T9633] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 481.039412][ T9633] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 482.084202][ T9651] ubi: mtd0 is already attached to ubi31 [ 482.384860][ T9070] Bluetooth: hci1: command 0x0406 tx timeout [ 482.554943][ T5783] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 482.755163][ T5783] usb 5-1: Using ep0 maxpacket: 32 [ 482.791584][ T5783] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 482.843428][ T5783] usb 5-1: config 0 has no interface number 0 [ 482.888839][ T5783] usb 5-1: config 0 interface 184 has no altsetting 0 [ 482.945195][ T5783] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 482.998624][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.066810][ T5783] usb 5-1: Product: syz [ 483.073413][ T9070] Bluetooth: hci3: command 0x0406 tx timeout [ 483.079513][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 483.083771][ T5783] usb 5-1: Manufacturer: syz [ 483.092629][ T5783] usb 5-1: SerialNumber: syz [ 483.105073][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 483.122296][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 483.131769][ T5783] usb 5-1: config 0 descriptor?? [ 483.150832][ T5783] smsc75xx v1.0.0 [ 483.757673][ T5783] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 483.779093][ T5783] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.040997][ T9677] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 484.401746][ T5783] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 484.425003][ T5783] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 484.453605][ T5783] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 484.478781][ T5783] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 484.634993][ T9071] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 484.739484][ T9687] ubi: mtd0 is already attached to ubi31 [ 484.824845][ T9071] usb 3-1: Using ep0 maxpacket: 16 [ 484.850008][ T9071] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 484.870914][ T9071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.883314][ T9071] usb 3-1: Product: syz [ 484.889738][ T9071] usb 3-1: Manufacturer: syz [ 484.896201][ T9071] usb 3-1: SerialNumber: syz [ 484.904246][ T9071] r8152-cfgselector 3-1: config 0 descriptor?? [ 485.123531][ T9071] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 485.329280][ T5783] usb 3-1: USB disconnect, device number 33 [ 485.460407][ T9071] usb 5-1: USB disconnect, device number 10 [ 486.904430][ T9712] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 487.054867][ T5783] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 487.261569][ T5783] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 487.293236][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.303594][ T5783] usb 3-1: Product: syz [ 487.312188][ T5783] usb 3-1: Manufacturer: syz [ 487.317771][ T5783] usb 3-1: SerialNumber: syz [ 487.331278][ T5783] usb 3-1: config 0 descriptor?? [ 487.542188][ T5783] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.150482][ T9729] ubi: mtd0 is already attached to ubi31 [ 488.404913][ T9071] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 488.594824][ T9071] usb 6-1: Using ep0 maxpacket: 32 [ 488.610905][ T9071] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 488.631750][ T9071] usb 6-1: config 0 has no interface number 0 [ 488.643719][ T9071] usb 6-1: config 0 interface 184 has no altsetting 0 [ 488.658978][ T9071] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 488.673301][ T9071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.687451][ T9071] usb 6-1: Product: syz [ 488.693875][ T9071] usb 6-1: Manufacturer: syz [ 488.703859][ T9071] usb 6-1: SerialNumber: syz [ 488.723399][ T9071] usb 6-1: config 0 descriptor?? [ 488.749512][ T9071] smsc75xx v1.0.0 [ 488.985372][ T5783] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 489.018772][ T5783] usb 3-1: USB disconnect, device number 34 [ 489.452659][ T9071] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 489.491458][ T9071] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 489.927009][ T9748] loop2: detected capacity change from 0 to 512 [ 489.941354][ T9748] FAT-fs (loop2): count of clusters too big (2147483660) [ 489.976027][ T9748] FAT-fs (loop2): Can't find a valid FAT filesystem [ 490.125108][ T9071] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 490.243883][ T9071] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 490.360739][ T9071] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 490.500924][ T9071] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 491.619490][ T23] usb 6-1: USB disconnect, device number 7 [ 493.704951][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 493.930301][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.945002][ T23] usb 6-1: config 0 has no interfaces? [ 493.951373][ T9770] ubi: mtd0 is already attached to ubi31 [ 493.976162][ T23] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 493.995761][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.017029][ T23] usb 6-1: config 0 descriptor?? [ 494.975304][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 495.179018][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 495.202861][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.225026][ T9] usb 5-1: Product: syz [ 495.231521][ T9] usb 5-1: Manufacturer: syz [ 495.246030][ T9] usb 5-1: SerialNumber: syz [ 495.261994][ T9] usb 5-1: config 0 descriptor?? [ 495.267254][ T5771] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 495.464808][ T5771] usb 3-1: Using ep0 maxpacket: 32 [ 495.500588][ T5771] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 495.513103][ T9] hso 5-1:0.0: Can't find BULK IN endpoint [ 495.526280][ T5771] usb 3-1: config 0 has no interface number 0 [ 495.543123][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 495.552364][ T5771] usb 3-1: config 0 interface 184 has no altsetting 0 [ 495.568414][ T5771] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 495.584222][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.592457][ T5771] usb 3-1: Product: syz [ 495.597132][ T5771] usb 3-1: Manufacturer: syz [ 495.601855][ T5771] usb 3-1: SerialNumber: syz [ 495.614616][ T5771] usb 3-1: config 0 descriptor?? [ 495.638198][ T5771] smsc75xx v1.0.0 [ 495.701312][ T787] usb 5-1: USB disconnect, device number 11 [ 496.255671][ T5771] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 496.286869][ T5771] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 496.410772][ T9798] loop4: detected capacity change from 0 to 512 [ 496.428402][ T9798] FAT-fs (loop4): count of clusters too big (2147483660) [ 496.448232][ T9798] FAT-fs (loop4): Can't find a valid FAT filesystem [ 496.908712][ T5771] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 498.307586][ T5771] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 498.319229][ T5771] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 498.330310][ T5771] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 498.355670][ T787] usb 6-1: USB disconnect, device number 8 [ 499.025173][ T5868] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 270 seconds [ 499.834427][ T9195] usb 3-1: USB disconnect, device number 35 [ 500.291386][ T9832] ubi: mtd0 is already attached to ubi31 [ 501.935000][ T9842] 9pnet: Unknown protocol version 9p200 [ 502.361052][ T23] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 502.385168][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.391514][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.533866][ T9850] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 502.579695][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.620091][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 502.654393][ T23] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 502.684663][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.701306][ T23] usb 4-1: config 0 descriptor?? [ 502.751768][ T9071] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 502.857196][ T1057] block nbd0: Possible stuck request ffff888021f08000: control (read@0,4096B). Runtime 360 seconds [ 502.965094][ T9071] usb 5-1: Using ep0 maxpacket: 16 [ 502.978973][ T9071] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 503.008130][ T9071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.033277][ T9071] usb 5-1: Product: syz [ 503.056286][ T9071] usb 5-1: Manufacturer: syz [ 503.061006][ T9071] usb 5-1: SerialNumber: syz [ 503.077507][ T9071] r8152-cfgselector 5-1: config 0 descriptor?? [ 503.303058][ T9071] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 503.498329][ T23] usb 5-1: USB disconnect, device number 12 [ 504.139783][ T23] usb 4-1: USB disconnect, device number 37 [ 504.894912][ T9195] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 505.425148][ T9882] 9pnet_fd: Insufficient options for proto=fd [ 505.735111][ T9882] 9pnet: Unknown protocol version 9p200 [ 506.554880][ T9195] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 506.612632][ T9195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.636275][ T9195] usb 5-1: Product: syz [ 506.640482][ T9195] usb 5-1: Manufacturer: syz [ 506.655831][ T9195] usb 5-1: SerialNumber: syz [ 506.669695][ T9195] usb 5-1: config 0 descriptor?? [ 506.675596][ T9885] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 506.712512][ T29] INFO: task syz.1.785:8527 blocked for more than 143 seconds. [ 506.741527][ T29] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 506.765301][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 506.804817][ T29] task:syz.1.785 state:D stack:27112 pid:8527 ppid:5781 flags:0x00004004 [ 506.814543][ T29] Call Trace: [ 506.884824][ T29] [ 506.894945][ T9195] hso 5-1:0.0: Can't find BULK IN endpoint [ 506.895142][ T29] __schedule+0x14d2/0x44d0 [ 506.901293][ T9195] usb-storage 5-1:0.0: USB Mass Storage device detected [ 506.945898][ T29] ? asan.module_dtor+0x20/0x20 [ 506.950808][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 506.992042][ T29] ? __mutex_trylock_common+0x84/0x250 [ 507.005366][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 507.011585][ T29] schedule+0xbd/0x170 [ 507.065106][ T29] schedule_preempt_disabled+0x13/0x20 [ 507.070710][ T29] __mutex_lock+0x6b7/0xcc0 [ 507.107377][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 507.112119][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 507.150408][ T29] ? mutex_lock_nested+0x20/0x20 [ 507.194314][ T29] ? iput+0x347/0x920 [ 507.198682][ T29] ? ilookup+0x1c4/0x200 [ 507.202944][ T29] ? disk_block_events+0xa7/0x120 [ 507.234916][ T29] ? blkdev_get_by_dev+0x101/0x600 [ 507.240098][ T29] blkdev_get_by_dev+0x121/0x600 [ 507.264817][ T29] bdev_open_by_dev+0x77/0x100 [ 507.269650][ T29] setup_bdev_super+0x59/0x660 [ 507.274426][ T29] mount_bdev+0x1dd/0x2d0 [ 507.310933][ T29] ? udf_mount+0x40/0x40 [ 507.342241][ T29] ? get_tree_bdev+0x510/0x510 [ 507.354930][ T29] legacy_get_tree+0xea/0x180 [ 507.359650][ T29] ? lvid_get_unique_id+0x320/0x320 [ 507.384899][ T29] vfs_get_tree+0x8c/0x280 [ 507.389374][ T29] do_new_mount+0x24b/0xa40 [ 507.393905][ T29] __se_sys_mount+0x2da/0x3c0 [ 507.414814][ T29] ? __x64_sys_mount+0xc0/0xc0 [ 507.419639][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 507.440114][ T29] ? __x64_sys_mount+0x20/0xc0 [ 507.454919][ T29] do_syscall_64+0x55/0xb0 [ 507.459387][ T29] ? clear_bhb_loop+0x40/0x90 [ 507.464082][ T29] ? clear_bhb_loop+0x40/0x90 [ 507.474812][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.480740][ T29] RIP: 0033:0x7f3702d8efc9 [ 507.485455][ T29] RSP: 002b:00007f3703bd8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 507.493895][ T29] RAX: ffffffffffffffda RBX: 00007f3702fe6180 RCX: 00007f3702d8efc9 [ 507.510375][ T29] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000180 [ 507.518867][ T29] RBP: 00007f3702e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 507.541145][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.549467][ T29] R13: 00007f3702fe6218 R14: 00007f3702fe6180 R15: 00007ffd6c481a48 [ 507.564395][ T29] [ 507.567794][ T29] [ 507.567794][ T29] Showing all locks held in the system: [ 507.588391][ T29] 1 lock held by khungtaskd/29: [ 507.593334][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 507.624974][ T29] 3 locks held by kworker/1:2/787: [ 507.630120][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 507.655346][ T29] #1: ffffc90003a27d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 507.672721][ T29] #2: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 507.683996][ T29] 2 locks held by getty/5544: [ 507.694738][ T29] #0: ffff88814c3b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 507.704542][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 507.721647][ T29] 2 locks held by kworker/1:3/5847: [ 507.727875][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 507.740326][ T29] #1: ffffc9000495fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 507.752726][ T29] 1 lock held by udevd/6092: [ 507.757688][ T29] #0: ffff888021e2c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 507.768116][ T29] 1 lock held by udevd/7036: [ 507.772722][ T29] #0: ffff8880215874c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 507.783190][ T29] 1 lock held by syz.1.785/8527: [ 507.788366][ T29] #0: ffff8880215874c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 507.798551][ T29] 1 lock held by syz.0.847/8738: [ 507.803487][ T29] #0: ffff888021e2c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 507.813599][ T29] 1 lock held by syz-executor/8875: [ 507.818922][ T29] #0: ffffffff8dfbbac8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 507.827984][ T29] 1 lock held by syz.4.1154/9875: [ 507.833006][ T29] #0: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 507.876842][ T29] [ 507.879215][ T29] ============================================= [ 507.879215][ T29] [ 507.918596][ T29] NMI backtrace for cpu 1 [ 507.922974][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 507.930189][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.940257][ T29] Call Trace: [ 507.943536][ T29] [ 507.946464][ T29] dump_stack_lvl+0x16c/0x230 [ 507.951149][ T29] ? show_regs_print_info+0x20/0x20 [ 507.956342][ T29] ? load_image+0x3b0/0x3b0 [ 507.960847][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 507.965784][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 507.971929][ T29] ? _printk+0xd0/0x110 [ 507.976072][ T29] ? load_image+0x3b0/0x3b0 [ 507.980564][ T29] ? load_image+0x3b0/0x3b0 [ 507.985056][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 507.991116][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 507.997088][ T29] watchdog+0xf41/0xf80 [ 508.001236][ T29] ? watchdog+0x1e1/0xf80 [ 508.005559][ T29] kthread+0x2fa/0x390 [ 508.009613][ T29] ? hungtask_pm_notify+0x90/0x90 [ 508.014627][ T29] ? kthread_blkcg+0xd0/0xd0 [ 508.019207][ T29] ret_from_fork+0x48/0x80 [ 508.023617][ T29] ? kthread_blkcg+0xd0/0xd0 [ 508.028201][ T29] ret_from_fork_asm+0x11/0x20 [ 508.032964][ T29] [ 508.036886][ T29] Sending NMI from CPU 1 to CPUs 0: [ 508.042575][ C0] NMI backtrace for cpu 0 [ 508.042585][ C0] CPU: 0 PID: 9892 Comm: syz.3.1157 Not tainted syzkaller #0 [ 508.042601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.042610][ C0] RIP: 0010:preempt_count_add+0x6a/0x1a0 [ 508.042636][ C0] Code: a8 7e 48 c7 c0 80 e4 ea 96 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e6 00 00 00 83 3d ef 76 8f 15 00 75 11 65 8b 05 2e 4a a8 7e <0f> b6 c0 3d f5 00 00 00 73 58 65 8b 05 1d 4a a8 7e 25 ff ff ff 7f [ 508.042649][ C0] RSP: 0018:ffffc90004f374f8 EFLAGS: 00000246 [ 508.042663][ C0] RAX: 0000000080000001 RBX: 1ffff920009e6ebd RCX: ffffffff96eae403 [ 508.042675][ C0] RDX: ffff88802b3a8000 RSI: 0000000000000001 RDI: 0000000000000001 [ 508.042685][ C0] RBP: 0000000000000001 R08: ffffc90004f376b0 R09: 0000000000000006 [ 508.042694][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90004f375e8 [ 508.042704][ C0] R13: dffffc0000000000 R14: ffffc90004f37620 R15: dffffc0000000000 [ 508.042716][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 508.042729][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.042745][ C0] CR2: 000055c18b189000 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 508.042759][ C0] Call Trace: [ 508.042764][ C0] [ 508.042772][ C0] ? do_exit+0x90b/0x23c0 [ 508.042791][ C0] unwind_next_frame+0xbe/0x2970 [ 508.042818][ C0] ? do_exit+0x90b/0x23c0 [ 508.042837][ C0] ? do_exit+0x90b/0x23c0 [ 508.042855][ C0] ? stack_trace_save+0xe0/0xe0 [ 508.042872][ C0] arch_stack_walk+0x144/0x190 [ 508.042889][ C0] ? do_exit+0x90b/0x23c0 [ 508.042909][ C0] stack_trace_save+0x9c/0xe0 [ 508.042930][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 508.042951][ C0] save_stack+0xf7/0x1f0 [ 508.042972][ C0] ? __reset_page_owner+0x190/0x190 [ 508.042991][ C0] ? free_unref_page_prepare+0x7ce/0x8e0 [ 508.043011][ C0] ? free_unref_page+0x32/0x2e0 [ 508.043029][ C0] ? vfree+0x1a6/0x320 [ 508.043045][ C0] ? kcov_close+0x2b/0x50 [ 508.043060][ C0] ? __fput+0x234/0x970 [ 508.043079][ C0] ? task_work_run+0x1ce/0x250 [ 508.043096][ C0] ? do_exit+0x90b/0x23c0 [ 508.043119][ C0] ? page_ext_get+0x22/0x2b0 [ 508.043135][ C0] ? page_ext_get+0x1e2/0x2b0 [ 508.043152][ C0] __reset_page_owner+0x4e/0x190 [ 508.043171][ C0] ? rcu_is_watching+0x15/0xb0 [ 508.043191][ C0] free_unref_page_prepare+0x7ce/0x8e0 [ 508.043215][ C0] free_unref_page+0x32/0x2e0 [ 508.043236][ C0] vfree+0x1a6/0x320 [ 508.043254][ C0] ? kcov_open+0x90/0x90 [ 508.043270][ C0] kcov_close+0x2b/0x50 [ 508.043286][ C0] __fput+0x234/0x970 [ 508.043311][ C0] task_work_run+0x1ce/0x250 [ 508.043331][ C0] ? task_work_cancel+0x240/0x240 [ 508.043350][ C0] ? do_exit+0x906/0x23c0 [ 508.043368][ C0] ? kmem_cache_free+0xf8/0x280 [ 508.043389][ C0] do_exit+0x90b/0x23c0 [ 508.043412][ C0] ? put_task_struct+0xc0/0xc0 [ 508.043433][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 508.043449][ C0] ? get_signal+0x1068/0x1400 [ 508.043470][ C0] ? lock_chain_count+0x20/0x20 [ 508.043486][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 508.043503][ C0] do_group_exit+0x21b/0x2d0 [ 508.043522][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 508.043544][ C0] get_signal+0x12fc/0x1400 [ 508.043575][ C0] arch_do_signal_or_restart+0x9c/0x7b0 [ 508.043598][ C0] ? get_sigframe_size+0x20/0x20 [ 508.043624][ C0] ? lock_chain_count+0x20/0x20 [ 508.043639][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 508.043660][ C0] exit_to_user_mode_loop+0x70/0x110 [ 508.043679][ C0] exit_to_user_mode_prepare+0xf6/0x180 [ 508.043699][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 508.043712][ C0] ret_from_fork_asm+0x11/0x20 [ 508.043745][ C0] [ 508.558884][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 508.565763][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 508.572962][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.583025][ T29] Call Trace: [ 508.586306][ T29] [ 508.589227][ T29] dump_stack_lvl+0x16c/0x230 [ 508.593908][ T29] ? show_regs_print_info+0x20/0x20 [ 508.599099][ T29] ? load_image+0x3b0/0x3b0 [ 508.603595][ T29] panic+0x2c0/0x710 [ 508.607478][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 508.613108][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 508.617599][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 508.623315][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 508.629468][ T29] watchdog+0xf80/0xf80 [ 508.633616][ T29] ? watchdog+0x1e1/0xf80 [ 508.637947][ T29] kthread+0x2fa/0x390 [ 508.642005][ T29] ? hungtask_pm_notify+0x90/0x90 [ 508.647019][ T29] ? kthread_blkcg+0xd0/0xd0 [ 508.651596][ T29] ret_from_fork+0x48/0x80 [ 508.656004][ T29] ? kthread_blkcg+0xd0/0xd0 [ 508.660584][ T29] ret_from_fork_asm+0x11/0x20 [ 508.665352][ T29] [ 508.668582][ T29] Kernel Offset: disabled [ 508.672893][ T29] Rebooting in 86400 seconds..