last executing test programs: 6m48.871432765s ago: executing program 3 (id=1101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r6, {0x9, 0xfff2}, {}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x8000) 6m48.538414717s ago: executing program 3 (id=1106): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x14002, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x400a8, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 6m46.158829662s ago: executing program 3 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r6, {0x9, 0xfff2}, {}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x8000) 6m43.895269017s ago: executing program 3 (id=1125): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3168049, 0x0, 0xfe, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/207, 0xcf) 6m42.667450591s ago: executing program 3 (id=1132): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000040)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x5}}, {@nobarrier}, {@umask={'umask', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'iso8859-7'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file2\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) 6m42.126905568s ago: executing program 3 (id=1136): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0xffffffff) 6m40.978168167s ago: executing program 32 (id=1136): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0xffffffff) 5m14.963145445s ago: executing program 0 (id=1575): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x9, "8aeb95a90e2d5f7efe"}, &(0x7f0000000100)=0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="014000000000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000780000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5m14.882397676s ago: executing program 0 (id=1576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @private=0xa010101}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'veth1_to_bridge\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000008, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 5m11.442564807s ago: executing program 0 (id=1583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "77d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m10.851606345s ago: executing program 0 (id=1585): syz_usb_connect(0x5, 0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b75c7f404705010264110102030109021200"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f00000002c0)=[{0x3f, 0x1000, 0x0, 0x0}, {0x5, 0x2001, 0x0, 0x0}, {0x8, 0x4800, 0x0, 0x0}], 0x3}) 5m8.647295576s ago: executing program 0 (id=1595): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0x9) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, 0x0, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) 5m6.871890898s ago: executing program 0 (id=1599): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) timer_create(0x0, 0x0, 0x0) rt_sigpending(0x0, 0x0) 4m51.030777667s ago: executing program 33 (id=1599): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) timer_create(0x0, 0x0, 0x0) rt_sigpending(0x0, 0x0) 10.218298886s ago: executing program 5 (id=2623): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x34325258, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3]}) socket$key(0xf, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r3, 0x7279, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) 8.774178317s ago: executing program 4 (id=2627): syz_open_dev$media(&(0x7f0000000700), 0x10ea, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000340), 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000b80), 0x109800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=[r1], &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 8.555853233s ago: executing program 4 (id=2629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) set_mempolicy(0xc005, 0x0, 0x5) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x1c4}]}) 7.732219025s ago: executing program 5 (id=2630): ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.551412295s ago: executing program 2 (id=2631): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x23, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x8, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7fc, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x1000, 0x1, 0xffffffff, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd7, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x403, 0x4, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0xd, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0xa, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0xffffffff, 0x4, 0x4, 0x10, 0x0, 0x0, 0x8003, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) 7.348316532s ago: executing program 5 (id=2632): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) vmsplice(0xffffffffffffffff, &(0x7f0000001440), 0x0, 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) fallocate(r0, 0x8, 0x4, 0x7) 7.045324334s ago: executing program 2 (id=2633): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1000}], 0x3) 6.503258243s ago: executing program 5 (id=2635): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x9, 0x70bd24, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/51, 0x33}], 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 6.454929524s ago: executing program 2 (id=2636): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) 6.350865401s ago: executing program 6 (id=2637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x14, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}}, 0x14}}, 0x0) 6.348558736s ago: executing program 4 (id=2638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000007000000000000000200000d0000000000000000030000000000000001000000000000000000000d0000000005000000002e00"/87], &(0x7f00000020c0)=""/223, 0x57, 0xdf, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x791db5641e51ecfe, 0x2c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0xd0b2e175b015db11, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 6.155590529s ago: executing program 6 (id=2639): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x0, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3"}) 5.502422171s ago: executing program 5 (id=2640): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x34325258, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3]}) socket$key(0xf, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r3, 0x7279, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) 5.286846042s ago: executing program 6 (id=2641): syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x1000}}}}}}, 0x0) 4.898610713s ago: executing program 4 (id=2642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x705, 0xffffffffffff8) readv(r2, &(0x7f0000000040), 0x32) 4.883769371s ago: executing program 1 (id=2643): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x23, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x8, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7fc, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x1000, 0x1, 0xffffffff, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd7, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x403, 0x4, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0xd, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0xa, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0xffffffff, 0x4, 0x4, 0x10, 0x0, 0x0, 0x8003, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) 4.664354905s ago: executing program 6 (id=2644): r0 = io_uring_setup(0x1b54, &(0x7f0000000240)={0x0, 0xb714, 0x1, 0x1, 0x20000307}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r2, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d486d", 0x6}, {&(0x7f00000033c0)="f5ac467833c129406b9f", 0xa}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124, 0x7c}], 0x1}, 0x102) close_range(r0, 0xffffffffffffffff, 0x0) 4.548670096s ago: executing program 1 (id=2645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200fffe3800048034000180090001007866726d000000002400028008000440000000150800024000000004080001400000000c05000300010000000900010073797a30000000000900020073797a"], 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 4.447214747s ago: executing program 1 (id=2646): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000001480)="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", 0x1001}], 0x2) 4.377897086s ago: executing program 6 (id=2647): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3.294736503s ago: executing program 4 (id=2648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) set_mempolicy(0xc005, 0x0, 0x5) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x1c4}]}) 3.271917001s ago: executing program 1 (id=2649): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.165179105s ago: executing program 5 (id=2650): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000026c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44007}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 2.602041642s ago: executing program 2 (id=2651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400001c) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f0000000300)={0x1f261, 0x1}, 0xd, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x40800, 0x51) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) close(r1) openat$dir(0xffffffffffffff9c, 0x0, 0x2640, 0x187) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c6", 0x39}, {&(0x7f0000000500)="f02ec70a0e8900b151d826894fb9dce1b28f3653650ef141fc0fd3e66b6225584c5dd4039cd13e518057b05f41c8c7b7d5223f12baf5", 0x36}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 1.968281432s ago: executing program 2 (id=2652): bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) open_by_handle_at(r7, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r5, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 1.906608042s ago: executing program 1 (id=2653): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x4, 0xc2e, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0x20, 0xce, 0x0, 0x8, [0xffffffff, 0xb93b, 0x9, 0x6, 0x4, 0x7, 0x0]}, @cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0xe5, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x4}, {@loopback, 0x6}, {@private=0xa010102, 0x2}, {@empty, 0x8}]}, @generic={0x89, 0x8, "e64ba64992f5"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYRES32, @ANYBLOB="04000000000000000100"/28], 0x50) syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) 492.423369ms ago: executing program 4 (id=2654): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 13.696329ms ago: executing program 6 (id=2655): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x23, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x8, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7fc, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x1000, 0x1, 0xffffffff, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd7, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x403, 0x4, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0xd, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0xa, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0xffffffff, 0x4, 0x4, 0x10, 0x0, 0x0, 0x8003, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) 1.992691ms ago: executing program 1 (id=2656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) 0s ago: executing program 2 (id=2657): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000060000000000000025000000100000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000000c0)=""/60, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) kernel console output (not intermixed with test programs): id Stick Solo' [ 378.726823][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.773254][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 378.800695][T11062] i2c i2c-1: Invalid block size returned: 239 [ 378.944272][ T7138] rc_core: IR keymap rc-dib0700-rc5 not found [ 378.960175][ T7138] Registered IR keymap rc-empty [ 378.976157][ T7138] dvb-usb: could not initialize remote control. [ 378.994848][ T7138] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 379.458372][ T7138] usb 5-1: USB disconnect, device number 15 [ 379.699177][ T7138] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 380.090865][T11081] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1557'. [ 380.155959][T11072] loop1: detected capacity change from 0 to 32768 [ 380.202921][T11072] (syz.1.1553,11072,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 380.290960][T11072] (syz.1.1553,11072,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 380.339875][T11085] syzkaller0: entered promiscuous mode [ 380.377607][T11085] syzkaller0: entered allmulticast mode [ 380.414035][T11086] tipc: Enabling of bearer rejected, failed to enable media [ 380.427918][T11072] JBD2: Ignoring recovery information on journal [ 380.503958][T11072] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 381.197625][ T5829] ocfs2: Unmounting device (7,1) on (node local) [ 381.237730][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 381.254474][T11096] netlink: 'syz.2.1562': attribute type 10 has an invalid length. [ 381.266247][T11096] team0: Device veth1_macvtap failed to register rx_handler [ 383.196032][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 383.517419][T11130] syzkaller0: entered promiscuous mode [ 383.950393][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 383.958435][ C1] lec:lec_tx_timeout: lec0 [ 384.369286][T11130] syzkaller0: entered allmulticast mode [ 384.868913][T11136] tipc: Enabling of bearer rejected, failed to enable media [ 388.085703][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 388.252234][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.293645][ T9] usb 1-1: config 0 has no interfaces? [ 388.312663][ T9] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 388.335737][T11183] syzkaller0: entered promiscuous mode [ 388.355127][T11183] syzkaller0: entered allmulticast mode [ 388.371878][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.392531][ T9] usb 1-1: Product: syz [ 388.399684][ T9] usb 1-1: Manufacturer: syz [ 388.405580][ T9] usb 1-1: SerialNumber: syz [ 388.427299][T11184] tipc: Enabling of bearer rejected, failed to enable media [ 388.430477][ T846] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 388.443530][ T9] usb 1-1: config 0 descriptor?? [ 388.703633][ T9] usb 1-1: USB disconnect, device number 8 [ 388.750421][ T846] usb 3-1: Using ep0 maxpacket: 16 [ 388.757454][ T846] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.784312][ T846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.280437][ T846] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 389.320469][ T846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.528098][ T846] usb 3-1: config 0 descriptor?? [ 389.537649][ T846] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 390.096684][ T846] usb 3-1: USB disconnect, device number 17 [ 390.991488][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 391.915446][T11211] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1598'. [ 393.850706][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1606'. [ 394.020973][T11242] comedi comedi3: comedi_config --init_data is deprecated [ 395.520593][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 396.084641][ T10] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.626191][ T10] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 396.639837][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 396.646698][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 396.655926][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.667338][ T10] usb 6-1: config 0 descriptor?? [ 396.673179][T11251] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 396.840666][T11259] batadv_slave_0: entered promiscuous mode [ 397.354497][T11264] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 397.367983][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 397.391082][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 397.421514][ T10] usb 6-1: USB disconnect, device number 5 [ 397.594957][T11264] CPU: 1 UID: 0 PID: 11264 Comm: syz.4.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.594986][T11264] Tainted: [L]=SOFTLOCKUP [ 397.594994][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.595009][T11264] Call Trace: [ 397.595016][T11264] [ 397.595025][T11264] dump_stack_lvl+0x189/0x250 [ 397.595055][T11264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.595077][T11264] ? __pfx__printk+0x10/0x10 [ 397.595107][T11264] ? kernfs_path_from_node+0x2f/0x290 [ 397.595127][T11264] ? kernfs_path_from_node+0x250/0x290 [ 397.595144][T11264] ? kernfs_path_from_node+0x2f/0x290 [ 397.595174][T11264] sysfs_warn_dup+0x8e/0xa0 [ 397.595194][T11264] sysfs_do_create_link_sd+0xc0/0x110 [ 397.595222][T11264] device_add_class_symlinks+0x1cf/0x240 [ 397.595251][T11264] device_add+0x475/0xb80 [ 397.595280][T11264] wiphy_register+0x1d2e/0x2d20 [ 397.595324][T11264] ? __pfx_wiphy_register+0x10/0x10 [ 397.595349][T11264] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 397.595376][T11264] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 397.595406][T11264] ieee80211_register_hw+0x34a7/0x4110 [ 397.595441][T11264] ? ieee80211_register_hw+0x13f1/0x4110 [ 397.595469][T11264] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 397.595486][T11264] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 397.595515][T11264] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 397.595539][T11264] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.595572][T11264] ? __hrtimer_setup+0x181/0x200 [ 397.595593][T11264] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 397.595614][T11264] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 397.595671][T11264] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 397.595692][T11264] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 397.595713][T11264] ? kstrndup+0xbf/0x160 [ 397.595744][T11264] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 397.595775][T11264] ? __pfx___nla_validate_parse+0x10/0x10 [ 397.595816][T11264] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 397.595846][T11264] ? rcu_is_watching+0x15/0xb0 [ 397.595872][T11264] ? __nla_parse+0x40/0x60 [ 397.595892][T11264] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 397.595926][T11264] genl_family_rcv_msg_doit+0x215/0x300 [ 397.595958][T11264] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 397.595995][T11264] ? bpf_lsm_capable+0x9/0x20 [ 397.596015][T11264] ? security_capable+0x7e/0x2e0 [ 397.596039][T11264] genl_rcv_msg+0x60e/0x790 [ 397.596070][T11264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.596092][T11264] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 397.596132][T11264] netlink_rcv_skb+0x208/0x470 [ 397.596153][T11264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.596178][T11264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.596223][T11264] ? down_read+0x274/0x2e0 [ 397.596240][T11264] ? genl_rcv+0xd/0x40 [ 397.596265][T11264] genl_rcv+0x28/0x40 [ 397.596286][T11264] netlink_unicast+0x82f/0x9e0 [ 397.596315][T11264] ? __pfx_netlink_unicast+0x10/0x10 [ 397.596335][T11264] ? netlink_sendmsg+0x642/0xb30 [ 397.596352][T11264] ? skb_put+0x11b/0x210 [ 397.596374][T11264] netlink_sendmsg+0x805/0xb30 [ 397.596392][T11264] ? aa_sk_perm+0x15f/0x920 [ 397.596418][T11264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.596441][T11264] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 397.596470][T11264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.596488][T11264] sock_sendmsg_nosec+0x18f/0x1d0 [ 397.596514][T11264] ____sys_sendmsg+0x577/0x880 [ 397.596543][T11264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.596572][T11264] ? import_iovec+0x74/0xa0 [ 397.596599][T11264] ___sys_sendmsg+0x21f/0x2a0 [ 397.596621][T11264] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.596649][T11264] ? futex_wake+0x4b2/0x560 [ 397.596701][T11264] ? __fget_files+0x2a/0x420 [ 397.596722][T11264] ? __fget_files+0x3a0/0x420 [ 397.596755][T11264] __x64_sys_sendmsg+0x19b/0x260 [ 397.596777][T11264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.596814][T11264] ? do_syscall_64+0xbe/0xf80 [ 397.596836][T11264] do_syscall_64+0xfa/0xf80 [ 397.596854][T11264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.596871][T11264] ? clear_bhb_loop+0x60/0xb0 [ 397.596892][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.596915][T11264] RIP: 0033:0x7f5873b8f749 [ 397.596935][T11264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.596952][T11264] RSP: 002b:00007f5871db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.596971][T11264] RAX: ffffffffffffffda RBX: 00007f5873de6180 RCX: 00007f5873b8f749 [ 397.596984][T11264] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 397.596995][T11264] RBP: 00007f5873c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.597006][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.597016][T11264] R13: 00007f5873de6218 R14: 00007f5873de6180 R15: 00007fffe1701818 [ 397.597047][T11264] [ 400.950868][T11292] comedi comedi3: comedi_config --init_data is deprecated [ 401.963869][T11302] syzkaller1: entered promiscuous mode [ 401.969356][T11302] syzkaller1: entered allmulticast mode [ 403.062935][T11311] tipc: Enabled bearer , priority 0 [ 403.094945][T11311] syzkaller0: entered promiscuous mode [ 403.220497][T11311] syzkaller0: entered allmulticast mode [ 403.307901][T11310] tipc: Resetting bearer [ 403.867718][T11310] tipc: Disabling bearer [ 404.321259][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 407.092906][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'. [ 408.436878][T11356] syzkaller1: entered promiscuous mode [ 408.473325][T11356] syzkaller1: entered allmulticast mode [ 408.893635][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1640'. [ 408.910153][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.921717][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.942177][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.030756][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.038483][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.330469][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 409.887857][ T6097] lec:lec_start_xmit: lec0:No lecd attached [ 411.162111][ T5830] Bluetooth: hci5: command tx timeout [ 411.558753][ T8390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.751753][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1651'. [ 412.108682][ T8390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.205578][T11361] chnl_net:caif_netlink_parms(): no params data found [ 412.500825][ T8390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.829484][T11431] xt_hashlimit: max too large, truncated to 1048576 [ 413.297730][ T5830] Bluetooth: hci5: command tx timeout [ 413.439192][ T8390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.497920][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.510779][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.532230][T11361] bridge_slave_0: entered allmulticast mode [ 413.557519][T11361] bridge_slave_0: entered promiscuous mode [ 413.587258][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.620527][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.658570][T11361] bridge_slave_1: entered allmulticast mode [ 413.682453][T11361] bridge_slave_1: entered promiscuous mode [ 413.839924][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 414.129035][T11361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.267956][T11361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.341277][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 414.910376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 414.918469][ C1] lec:lec_tx_timeout: lec0 [ 415.046386][ T9] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 415.055800][ T9] usb 2-1: config 0 has no interface number 0 [ 415.062062][ T9] usb 2-1: config 0 interface 29 has no altsetting 0 [ 415.070897][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 415.079943][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.088123][ T9] usb 2-1: Product: syz [ 415.092422][ T9] usb 2-1: Manufacturer: syz [ 415.097021][ T9] usb 2-1: SerialNumber: syz [ 415.120895][ T9] usb 2-1: config 0 descriptor?? [ 415.320441][ T5830] Bluetooth: hci5: command tx timeout [ 415.361963][ T8390] bond1 (unregistering): (slave gretap1): Releasing active interface [ 415.605443][ T8390] $H (unregistering): Released all slaves [ 415.627169][T11463] netlink: 'syz.4.1662': attribute type 2 has an invalid length. [ 415.844537][ T8390] bond0 (unregistering): left allmulticast mode [ 415.851069][ T8390] bond0 (unregistering): left promiscuous mode [ 415.901773][ T8390] team0: Port device macvlan2 removed [ 415.915999][ T8390] bond0 (unregistering): Released all slaves [ 416.087830][ T8390] bond1 (unregistering): Released all slaves [ 416.348537][ T8390] bond2 (unregistering): Released all slaves [ 417.188782][ T8390] bond3 (unregistering): Released all slaves [ 417.320263][ T8390] bond4 (unregistering): Released all slaves [ 417.360984][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1668'. [ 417.391713][ T5830] Bluetooth: hci5: command tx timeout [ 417.440318][ T9] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 418.020605][ T9] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 418.021787][T11462] netlink: 'syz.4.1662': attribute type 29 has an invalid length. [ 418.109564][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 418.520451][ T5926] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 418.981053][ T8390] tipc: Left network mode [ 418.984574][T11361] team0: Port device team_slave_0 added [ 418.997754][T11361] team0: Port device team_slave_1 added [ 419.021656][ T9] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 419.061973][ T9] usb 2-1: USB disconnect, device number 15 [ 419.192412][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.216029][T11361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.216509][ T5926] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 419.241353][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.247719][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.321839][T11361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.365327][T11361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.446983][ T5926] usb 3-1: Product: syz [ 419.451850][ T5926] usb 3-1: Manufacturer: syz [ 419.456508][ T5926] usb 3-1: SerialNumber: syz [ 420.015085][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.022433][T11507] vivid-001: ================= START STATUS ================= [ 420.061553][ T5926] usb 3-1: config 0 descriptor?? [ 420.070534][T11507] vivid-001: Radio HW Seek Mode: Bounded [ 420.076558][T11507] vivid-001: Radio Programmable HW Seek: false [ 420.104996][T11361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.154880][T11507] vivid-001: RDS Rx I/O Mode: Block I/O [ 420.160627][T11507] vivid-001: Generate RBDS Instead of RDS: false [ 420.167537][T11507] vivid-001: RDS Reception: true [ 420.172933][T11507] vivid-001: RDS Program Type: 0 inactive [ 420.178958][T11507] vivid-001: RDS PS Name: inactive [ 420.187912][T11507] vivid-001: RDS Radio Text: inactive [ 420.194224][T11507] vivid-001: RDS Traffic Announcement: false inactive [ 420.201514][T11507] vivid-001: RDS Traffic Program: false inactive [ 420.208269][T11507] vivid-001: RDS Music: false inactive [ 420.214330][T11507] vivid-001: ================== END STATUS ================== [ 420.669509][T11276] usb 3-1: USB disconnect, device number 18 [ 420.713044][T11514] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 420.722435][T11514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 420.732104][T11514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 421.210758][T11361] hsr_slave_0: entered promiscuous mode [ 421.232590][T11361] hsr_slave_1: entered promiscuous mode [ 421.254797][T11361] debugfs: 'hsr0' already exists in 'hsr' [ 421.284623][T11361] Cannot create hsr debugfs directory [ 421.307159][ T8390] hsr_slave_0: left promiscuous mode [ 421.383981][ T8390] veth1_macvtap: left promiscuous mode [ 421.506287][ T8390] veth0_macvtap: left promiscuous mode [ 421.724838][ T5830] Bluetooth: hci1: command 0x0405 tx timeout [ 424.801062][T11562] vivid-004: ================= START STATUS ================= [ 424.808870][T11562] vivid-004: Radio HW Seek Mode: Bounded [ 424.814832][T11562] vivid-004: Radio Programmable HW Seek: false [ 424.821364][T11562] vivid-004: RDS Rx I/O Mode: Block I/O [ 424.828524][T11562] vivid-004: Generate RBDS Instead of RDS: false [ 424.836222][T11562] vivid-004: RDS Reception: true [ 424.842141][T11562] vivid-004: RDS Program Type: 0 inactive [ 424.851183][T11562] vivid-004: RDS PS Name: inactive [ 424.856592][T11562] vivid-004: RDS Radio Text: inactive [ 424.863937][T11562] vivid-004: RDS Traffic Announcement: false inactive [ 424.872148][T11562] vivid-004: RDS Traffic Program: false inactive [ 425.350742][T11562] vivid-004: RDS Music: false inactive [ 425.361258][T11562] vivid-004: ================== END STATUS ================== [ 425.851917][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 426.675282][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 426.692443][T11361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 426.810421][ T24] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 426.819855][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.829461][ T24] usb 2-1: Product: syz [ 426.833954][ T24] usb 2-1: Manufacturer: syz [ 426.838529][ T24] usb 2-1: SerialNumber: syz [ 426.867014][ T24] usb 2-1: config 0 descriptor?? [ 426.956070][T11361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.011530][T11361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 427.084615][ T24] usb 2-1: USB disconnect, device number 16 [ 427.134343][T11361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 427.485428][T11361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.564607][T11361] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.610190][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.617440][ T8390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.982357][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.989488][ T8222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.038308][T11361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.882915][T11658] fuse: Bad value for 'group_id' [ 431.894588][T11658] fuse: Bad value for 'group_id' [ 432.659485][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 432.874367][T11667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 433.823348][T11361] veth0_vlan: entered promiscuous mode [ 434.609165][T11361] veth1_vlan: entered promiscuous mode [ 435.082086][T11361] veth0_macvtap: entered promiscuous mode [ 435.176216][T11361] veth1_macvtap: entered promiscuous mode [ 435.210943][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1711'. [ 435.312470][T11361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.649594][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1716'. [ 436.675812][T11361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.971655][ T1134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.984657][ T1134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.110738][ T8768] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.114443][ T8768] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.547824][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.584395][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.706530][ T9609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.913161][ T9609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.120885][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.127327][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.236461][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 440.280649][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1729'. [ 440.488385][ T7138] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 440.731729][ T7138] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 440.938593][ T7138] usb 2-1: config 0 has no interface number 1 [ 441.092741][ T7138] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 441.125045][ T7138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.241370][ T7138] usb 2-1: config 0 descriptor?? [ 443.146049][ T30] audit: type=1800 audit(1765356445.119:24): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1731" name="bus" dev="ramfs" ino=30022 res=0 errno=0 [ 443.556132][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1737'. [ 443.576804][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1737'. [ 444.320763][ T7138] usb 2-1: USB disconnect, device number 17 [ 444.657331][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1741'. [ 445.782944][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1745'. [ 445.950402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 445.958490][ C1] lec:lec_tx_timeout: lec0 [ 446.392939][T11846] comedi comedi3: comedi_config --init_data is deprecated [ 452.164301][ T5894] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 452.547224][T11939] netlink: 'syz.5.1774': attribute type 10 has an invalid length. [ 452.571529][T11939] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 453.295670][ T5894] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 453.339542][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.410432][ T5894] usb 7-1: Product: syz [ 453.438905][ T5894] usb 7-1: Manufacturer: syz [ 453.447074][ T5894] usb 7-1: SerialNumber: syz [ 453.472733][ T5894] usb 7-1: config 0 descriptor?? [ 453.494378][ T5894] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 453.522756][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.541336][ T5894] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 453.570435][ T5894] usb 7-1: media controller created [ 453.646405][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.342120][ T5894] DVB: Unable to find symbol mt352_attach() [ 454.562325][ T5894] DVB: Unable to find symbol nxt6000_attach() [ 454.786908][ T5894] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 455.803217][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 455.975271][T11984] xt_hashlimit: max too large, truncated to 1048576 [ 456.161762][ T5894] dvb-usb: schedule remote query interval to 1000 msecs. [ 456.168840][ T5894] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 456.193443][ T5894] dvb-usb: bulk message failed: -22 (7/0) [ 456.291984][ T5894] dvb-usb: bulk message failed: -22 (7/0) [ 456.310644][ T5894] usb 7-1: USB disconnect, device number 2 [ 456.994549][ T5894] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 457.072129][T12008] netlink: 'syz.5.1787': attribute type 29 has an invalid length. [ 457.082130][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1787'. [ 457.095933][T12008] netlink: 'syz.5.1787': attribute type 2 has an invalid length. [ 457.116628][T12008] : entered promiscuous mode [ 458.508104][ T5894] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 458.726096][ T5894] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 458.776410][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.804836][ T5894] usb 2-1: Product: syz [ 458.844927][ T5894] usb 2-1: Manufacturer: syz [ 458.870429][ T5894] usb 2-1: SerialNumber: syz [ 458.881079][ T5894] usb 2-1: config 0 descriptor?? [ 458.954304][ T5894] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 459.060460][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.101320][ T5894] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 459.151223][ T5894] usb 2-1: media controller created [ 459.305196][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.603106][ T5894] DVB: Unable to find symbol mt352_attach() [ 459.629953][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'. [ 459.684057][ T5894] DVB: Unable to find symbol nxt6000_attach() [ 459.709879][ T5894] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 459.759712][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 459.946090][ T5894] dvb-usb: schedule remote query interval to 1000 msecs. [ 459.960602][ T5894] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 459.981576][ T5894] dvb-usb: bulk message failed: -22 (7/0) [ 459.990990][ T5894] dvb-usb: bulk message failed: -22 (7/0) [ 460.038449][ T5894] usb 2-1: USB disconnect, device number 18 [ 460.201403][ T5894] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 460.247501][T12062] netlink: 'syz.1.1801': attribute type 9 has an invalid length. [ 460.284054][T12062] netlink: 'syz.1.1801': attribute type 11 has an invalid length. [ 460.360498][T12062] netlink: 'syz.1.1801': attribute type 12 has an invalid length. [ 460.377784][T12062] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1801'. [ 460.430736][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 460.553692][T12070] loop6: detected capacity change from 0 to 256 [ 460.574480][T12070] vfat: Unknown parameter 'uni_xl1' [ 460.610703][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 460.618269][ T5843] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 460.650484][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.749998][ T5843] pvrusb2: Hardware description: Terratec Grabster AV400 [ 460.801356][ T5843] pvrusb2: ********** [ 460.805371][ T5843] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 461.440439][ T5843] pvrusb2: Important functionality might not be entirely working. [ 461.454445][ T5843] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 461.596979][ T5843] pvrusb2: ********** [ 461.718419][ T2344] pvrusb2: Invalid write control endpoint [ 461.844404][ T2344] pvrusb2: Invalid write control endpoint [ 461.876048][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 461.904593][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 461.942568][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 461.953259][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 461.962704][ T2344] pvrusb2: Device being rendered inoperable [ 461.994502][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1800'. [ 462.003880][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 462.034251][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 462.081985][ T2344] pvrusb2: Attached sub-driver cx25840 [ 462.108708][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 462.139584][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 462.170466][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 462.293462][T12098] overlayfs: failed to resolve './file1': -2 [ 462.310794][ T5843] usb 6-1: USB disconnect, device number 6 [ 462.420218][ T10] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 462.503567][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.587630][ T10] usb 5-1: Product: syz [ 462.627996][ T10] usb 5-1: Manufacturer: syz [ 462.675851][ T10] usb 5-1: SerialNumber: syz [ 462.921048][ T10] usb 5-1: config 0 descriptor?? [ 463.027137][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 463.145258][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.201762][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 463.233326][ T10] usb 5-1: media controller created [ 463.321946][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.371442][T12112] netlink: 'syz.6.1815': attribute type 9 has an invalid length. [ 463.395713][T12112] netlink: 'syz.6.1815': attribute type 11 has an invalid length. [ 463.415189][T12112] netlink: 'syz.6.1815': attribute type 12 has an invalid length. [ 463.483486][T12112] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.1815'. [ 463.637394][ T10] DVB: Unable to find symbol mt352_attach() [ 464.404177][ T10] DVB: Unable to find symbol nxt6000_attach() [ 464.413737][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 464.447495][T12129] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1820'. [ 464.458333][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 464.484619][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1820'. [ 464.502167][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 464.509199][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 464.534180][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 464.539971][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 464.615693][ T10] usb 5-1: USB disconnect, device number 16 [ 464.750998][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'. [ 464.811858][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 465.179899][T12144] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1824'. [ 465.487545][T12147] warning: `syz.4.1825' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 465.602105][T12157] loop2: detected capacity change from 0 to 7 [ 465.667208][T12157] Dev loop2: unable to read RDB block 7 [ 465.673043][T12157] loop2: AHDI p2 p3 [ 465.677132][T12157] loop2: partition table partially beyond EOD, truncated [ 465.685653][T12157] loop2: p2 start 1702059890 is beyond EOD, truncated [ 466.548468][T12172] syzkaller0: entered promiscuous mode [ 466.750780][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 466.774209][T12172] syzkaller0: entered allmulticast mode [ 467.298553][ T24] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 467.318346][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.344961][ T24] usb 6-1: Product: syz [ 467.350629][ T24] usb 6-1: Manufacturer: syz [ 467.367280][ T24] usb 6-1: SerialNumber: syz [ 467.421132][ T24] usb 6-1: config 0 descriptor?? [ 467.439008][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 467.468208][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.482545][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 467.499575][ T24] usb 6-1: media controller created [ 467.539236][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.889144][ T24] DVB: Unable to find symbol mt352_attach() [ 467.986541][ T24] DVB: Unable to find symbol nxt6000_attach() [ 467.996964][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 468.026633][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25 [ 468.054044][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 468.140724][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 468.160835][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 468.167009][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 468.240599][ T24] usb 6-1: USB disconnect, device number 7 [ 468.412399][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 468.535851][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1838'. [ 469.198552][T12226] fuse: Unknown parameter 'grou00000000000000000000' [ 470.402145][T12236] syzkaller0: entered promiscuous mode [ 470.407783][T12236] syzkaller0: entered allmulticast mode [ 470.982210][T12237] syz.2.1846 (12237): drop_caches: 2 [ 471.840496][ T6045] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 472.173809][T12254] block device autoloading is deprecated and will be removed. [ 472.958755][ T6045] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 472.967893][ T6045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.986881][ T6045] usb 3-1: Product: syz [ 473.344899][ T6045] usb 3-1: Manufacturer: syz [ 473.349511][ T6045] usb 3-1: SerialNumber: syz [ 473.369188][ T6045] usb 3-1: config 0 descriptor?? [ 473.385310][ T6045] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 473.467015][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 473.515448][ T6045] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.544570][ T6045] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 473.598089][ T6045] usb 3-1: media controller created [ 473.608602][ T6097] lec:lec_start_xmit: lec0:No lecd attached [ 473.648592][ T6045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.664241][T12260] fuse: Unknown parameter 'grou00000000000000000000' [ 473.691373][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 473.698707][ T24] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 473.702588][ T6045] DVB: Unable to find symbol mt352_attach() [ 473.762046][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.765126][ T6045] DVB: Unable to find symbol nxt6000_attach() [ 473.783480][ T6045] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 474.213681][ T6045] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 474.250683][ T6045] dvb-usb: schedule remote query interval to 1000 msecs. [ 474.269479][ T24] usb 6-1: config 0 has no interfaces? [ 474.283166][ T6045] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 474.290315][ T24] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 474.314105][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.320271][ T6045] dvb-usb: bulk message failed: -22 (7/0) [ 474.368502][ T6045] dvb-usb: bulk message failed: -22 (7/0) [ 474.403246][ T24] usb 6-1: Product: syz [ 474.422054][ T6045] usb 3-1: USB disconnect, device number 19 [ 474.472073][ T24] usb 6-1: Manufacturer: syz [ 474.499317][ T24] usb 6-1: SerialNumber: syz [ 474.510660][ T6045] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 474.588757][ T24] usb 6-1: config 0 descriptor?? [ 474.831915][ T6045] usb 6-1: USB disconnect, device number 8 [ 476.831576][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 476.990865][ T10] usb 3-1: device descriptor read/64, error -71 [ 477.250814][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 477.390497][ T10] usb 3-1: device descriptor read/64, error -71 [ 477.450435][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 477.500739][ T10] usb usb3-port1: attempt power cycle [ 477.594823][T12305] xt_hashlimit: size too large, truncated to 1048576 [ 477.603159][T12305] xt_hashlimit: max too large, truncated to 1048576 [ 477.656708][ T24] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 477.669843][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.705449][ T24] usb 2-1: Product: syz [ 477.716989][T12308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1869'. [ 477.738080][ T24] usb 2-1: Manufacturer: syz [ 477.743069][ T24] usb 2-1: SerialNumber: syz [ 477.850507][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 477.879810][ T24] usb 2-1: config 0 descriptor?? [ 477.881066][ T10] usb 3-1: device descriptor read/8, error -71 [ 477.896312][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 477.929618][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.959989][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 478.055286][ T24] usb 2-1: media controller created [ 478.108507][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.140423][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 478.141493][ T5926] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 478.171602][ T10] usb 3-1: device descriptor read/8, error -71 [ 478.216694][ T24] DVB: Unable to find symbol mt352_attach() [ 478.376243][ T10] usb usb3-port1: unable to enumerate USB device [ 478.390954][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 478.407772][ T5926] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 478.426685][ T24] DVB: Unable to find symbol nxt6000_attach() [ 478.433514][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.459059][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 478.474004][ T5926] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 478.497607][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 478.526978][ T5926] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 478.548508][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 478.556104][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.571646][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 478.583587][ T5926] usb 5-1: Product: syz [ 478.607036][ T5926] usb 5-1: Manufacturer: syz [ 478.619883][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 478.625909][ T5926] usb 5-1: SerialNumber: syz [ 478.640497][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 478.656868][ T5926] usb 5-1: config 0 descriptor?? [ 478.671869][ T24] usb 2-1: USB disconnect, device number 19 [ 478.910398][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 478.918418][ C1] lec:lec_tx_timeout: lec0 [ 478.970230][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 478.975149][ T10] usb 5-1: USB disconnect, device number 17 [ 480.318411][T12348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1880'. [ 481.160489][ T5843] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 481.210586][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 481.332144][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 481.341738][ T5843] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 481.363665][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.395862][ T5843] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 481.396032][ T10] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 481.417483][ T5843] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 481.426787][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.435352][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.443650][ T5843] usb 7-1: Product: syz [ 481.448005][ T10] usb 6-1: Product: syz [ 481.453784][ T5843] usb 7-1: Manufacturer: syz [ 481.458951][ T10] usb 6-1: Manufacturer: syz [ 481.464077][ T5843] usb 7-1: SerialNumber: syz [ 481.469544][ T10] usb 6-1: SerialNumber: syz [ 481.485330][ T5843] usb 7-1: config 0 descriptor?? [ 481.491938][ T10] usb 6-1: config 0 descriptor?? [ 481.516889][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 481.531902][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 481.542376][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 481.559057][ T10] usb 6-1: media controller created [ 481.597935][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.732333][ T5843] usb 7-1: USB disconnect, device number 3 [ 481.742505][ T10] DVB: Unable to find symbol mt352_attach() [ 481.790630][ T10] DVB: Unable to find symbol nxt6000_attach() [ 481.796926][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 481.810740][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 481.834227][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 481.854331][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 481.888878][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 481.900631][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 481.929520][ T10] usb 6-1: USB disconnect, device number 9 [ 482.533872][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 483.958229][T12377] xt_CT: You must specify a L4 protocol and not use inversions on it [ 484.807877][T12383] netlink: 'syz.5.1892': attribute type 9 has an invalid length. [ 484.852843][T12383] netlink: 'syz.5.1892': attribute type 11 has an invalid length. [ 484.905899][T12383] netlink: 'syz.5.1892': attribute type 12 has an invalid length. [ 484.933388][T12383] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1892'. [ 485.657781][T12391] syz.1.1893 (12391): drop_caches: 2 [ 485.759143][T12391] syz.1.1893 (12391): drop_caches: 2 [ 487.235118][T12402] loop4: detected capacity change from 0 to 32768 [ 487.260987][T12402] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1899 (12402) [ 487.320627][T12402] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 487.330882][T12402] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 487.701949][T12402] BTRFS info (device loop4): enabling ssd optimizations [ 487.708973][T12402] BTRFS info (device loop4): turning on async discard [ 487.716202][T12402] BTRFS info (device loop4): enabling free space tree [ 487.923928][ T5828] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.184056][T12436] netlink: 'syz.1.1905': attribute type 9 has an invalid length. [ 488.211243][T12436] netlink: 'syz.1.1905': attribute type 11 has an invalid length. [ 488.219150][T12436] netlink: 'syz.1.1905': attribute type 12 has an invalid length. [ 488.286228][T12436] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1905'. [ 488.635787][T12444] xt_hashlimit: max too large, truncated to 1048576 [ 491.449133][T12468] loop5: detected capacity change from 0 to 32768 [ 491.463429][T12468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1914 (12468) [ 491.496667][T12468] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 491.506983][T12468] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 491.610094][T12468] BTRFS info (device loop5): enabling ssd optimizations [ 491.618124][T12468] BTRFS info (device loop5): turning on async discard [ 491.624984][T12468] BTRFS info (device loop5): enabling free space tree [ 491.836881][ T9576] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 492.544628][T12493] netlink: 'syz.2.1918': attribute type 9 has an invalid length. [ 492.588717][T12493] netlink: 'syz.2.1918': attribute type 11 has an invalid length. [ 492.608381][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 492.670727][T12493] netlink: 'syz.2.1918': attribute type 12 has an invalid length. [ 492.713235][T12493] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1918'. [ 492.964818][ T5926] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 493.148700][ T5926] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 493.197437][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.229391][ T5926] usb 7-1: Product: syz [ 493.259061][ T5926] usb 7-1: Manufacturer: syz [ 493.314933][ T5926] usb 7-1: SerialNumber: syz [ 493.389708][ T5926] usb 7-1: config 0 descriptor?? [ 493.442365][ T5926] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 493.685937][T12517] loop1: detected capacity change from 0 to 32768 [ 493.694252][T12517] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1926 (12517) [ 493.781030][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 493.866501][T12517] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 493.876790][T12517] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 494.114411][ T5926] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 494.181211][ T5926] usb 7-1: media controller created [ 494.295209][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.384312][T12517] BTRFS info (device loop1): enabling ssd optimizations [ 494.393128][T12517] BTRFS info (device loop1): turning on async discard [ 494.399918][T12517] BTRFS info (device loop1): enabling free space tree [ 494.485979][ T5926] DVB: Unable to find symbol mt352_attach() [ 494.537978][ T5829] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.550669][ T5926] DVB: Unable to find symbol nxt6000_attach() [ 494.571770][ T5926] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 494.625623][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input29 [ 494.692668][ T5926] dvb-usb: schedule remote query interval to 1000 msecs. [ 494.699777][ T5926] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 494.788948][ T5926] dvb-usb: bulk message failed: -22 (7/0) [ 494.800457][ T5926] dvb-usb: bulk message failed: -22 (7/0) [ 494.839530][ T5926] usb 7-1: USB disconnect, device number 4 [ 495.009119][T12553] netlink: 'syz.5.1931': attribute type 9 has an invalid length. [ 495.027661][T12553] netlink: 'syz.5.1931': attribute type 11 has an invalid length. [ 495.075147][ T5926] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 495.098436][T12553] netlink: 'syz.5.1931': attribute type 12 has an invalid length. [ 495.123708][T12553] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1931'. [ 495.344024][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'. [ 496.616549][T12577] loop5: detected capacity change from 0 to 32768 [ 496.627596][T12577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1939 (12577) [ 496.656393][T12577] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 496.670602][T12577] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 496.749369][T12577] BTRFS info (device loop5): enabling ssd optimizations [ 496.757236][T12577] BTRFS info (device loop5): turning on async discard [ 496.764108][T12577] BTRFS info (device loop5): enabling free space tree [ 496.780415][T11796] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 496.856992][ T9576] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 496.970905][T11796] usb 5-1: Using ep0 maxpacket: 32 [ 496.983279][T11796] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 497.000590][T11796] usb 5-1: config 0 has no interface number 0 [ 497.035885][T11796] usb 5-1: config 0 interface 196 has no altsetting 0 [ 497.094093][T11796] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 497.116093][T11796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.140851][T11796] usb 5-1: Product: syz [ 497.145191][T11796] usb 5-1: Manufacturer: syz [ 497.165887][T11796] usb 5-1: SerialNumber: syz [ 497.189947][T11796] usb 5-1: config 0 descriptor?? [ 497.583712][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.607335][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.759636][T12574] vlan2: entered promiscuous mode [ 497.808345][T12605] vivid-001: ================= START STATUS ================= [ 497.861058][T12605] vivid-001: Radio HW Seek Mode: Bounded [ 497.878571][T12605] vivid-001: Radio Programmable HW Seek: false [ 497.900951][T12605] vivid-001: RDS Rx I/O Mode: Block I/O [ 497.918620][T12605] vivid-001: Generate RBDS Instead of RDS: false [ 497.935568][T12605] vivid-001: RDS Reception: true [ 497.946970][T12605] vivid-001: RDS Program Type: [ 497.950031][T11796] ipheth 5-1:0.196: Unable to find endpoints [ 497.958691][T12605] 0 inactive [ 497.972389][T12605] vivid-001: RDS PS Name: inactive [ 497.978911][T12605] vivid-001: RDS Radio Text: inactive [ 497.994251][T11796] usb 5-1: USB disconnect, device number 18 [ 498.012120][T12605] vivid-001: RDS Traffic Announcement: false inactive [ 498.025963][T12605] vivid-001: RDS Traffic Program: false inactive [ 498.078365][T12605] vivid-001: RDS Music: false inactive [ 498.394109][T12605] vivid-001: ================== END STATUS ================== [ 498.562604][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1946'. [ 498.701933][T12618] comedi comedi3: comedi_config --init_data is deprecated [ 499.420599][T12629] loop1: detected capacity change from 0 to 32768 [ 499.433996][T12629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1951 (12629) [ 499.478571][T12629] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 499.490033][T12629] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 499.911376][T12629] BTRFS info (device loop1): enabling ssd optimizations [ 499.918352][T12629] BTRFS info (device loop1): turning on async discard [ 499.925180][T12629] BTRFS info (device loop1): enabling free space tree [ 500.219504][ T5829] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 501.351301][T12663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1957'. [ 501.383164][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1957'. [ 501.394938][T12663] netlink: 'syz.6.1957': attribute type 20 has an invalid length. [ 501.403052][T12663] netlink: 'syz.6.1957': attribute type 21 has an invalid length. [ 501.570987][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.587540][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.700311][T12672] vivid-003: ================= START STATUS ================= [ 501.729798][T12672] vivid-003: Radio HW Seek Mode: Bounded [ 501.770786][T12669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1958'. [ 501.875176][T12672] vivid-003: Radio Programmable HW Seek: false [ 501.910871][T12672] vivid-003: RDS Rx I/O Mode: Block I/O [ 501.919726][T12672] vivid-003: Generate RBDS Instead of RDS: false [ 502.158142][T12672] vivid-003: RDS Reception: true [ 502.168338][T12672] vivid-003: RDS Program Type: 0 inactive [ 502.180457][T12672] vivid-003: RDS PS Name: inactive [ 502.185930][T12672] vivid-003: RDS Radio Text: inactive [ 502.193064][T12672] vivid-003: RDS Traffic Announcement: false inactive [ 502.200039][T12672] vivid-003: RDS Traffic Program: false inactive [ 502.206710][T12672] vivid-003: RDS Music: false inactive [ 502.212666][T12672] vivid-003: ================== END STATUS ================== [ 503.647567][T12693] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 503.854188][T12696] loop6: detected capacity change from 0 to 32768 [ 503.928345][T12696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1965 (12696) [ 503.953167][T12696] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 503.963431][T12696] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 503.979972][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 504.857738][T12700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.878406][T12696] BTRFS info (device loop6): enabling ssd optimizations [ 504.885403][T12696] BTRFS info (device loop6): turning on async discard [ 504.892169][T12696] BTRFS info (device loop6): enabling free space tree [ 504.961413][T12716] kthread_run failed with err -4 [ 505.090138][T11361] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 506.910403][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5320 ms [ 506.918431][ C1] lec:lec_tx_timeout: lec0 [ 509.300889][T12765] loop1: detected capacity change from 0 to 32768 [ 509.309083][T12765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1979 (12765) [ 509.372855][T12765] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 509.384195][T12765] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 509.407781][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1980'. [ 509.519366][T12765] BTRFS info (device loop1): enabling ssd optimizations [ 509.526475][T12765] BTRFS info (device loop1): turning on async discard [ 509.533298][T12765] BTRFS info (device loop1): enabling free space tree [ 509.647180][ T5829] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 509.692376][T12771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.530060][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1988'. [ 511.476148][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1992'. [ 511.560874][T12819] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 511.645604][T12819] vlan2: entered promiscuous mode [ 511.665356][T12819] vlan2: entered allmulticast mode [ 511.686083][T12819] hsr_slave_1: entered allmulticast mode [ 511.721947][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1992'. [ 512.726298][ T5831] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 512.898081][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 512.909698][T12839] syzkaller0: entered promiscuous mode [ 512.914629][ T5831] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 512.925530][T12839] syzkaller0: entered allmulticast mode [ 512.925546][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.961218][ T5831] usb 2-1: Product: syz [ 512.965485][ T5831] usb 2-1: Manufacturer: syz [ 512.970061][ T5831] usb 2-1: SerialNumber: syz [ 512.995026][ T5831] usb 2-1: config 0 descriptor?? [ 513.004430][ T5831] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 513.024275][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.034340][ T5831] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 513.044099][ T5831] usb 2-1: media controller created [ 513.104426][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.309246][ T5831] DVB: Unable to find symbol mt352_attach() [ 513.425378][ T5831] DVB: Unable to find symbol nxt6000_attach() [ 513.443191][ T5831] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 513.496235][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 513.604250][ T5831] dvb-usb: schedule remote query interval to 1000 msecs. [ 513.612875][ T5831] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 513.669320][ T5831] dvb-usb: bulk message failed: -22 (7/0) [ 513.687108][ T5831] dvb-usb: bulk message failed: -22 (7/0) [ 513.699793][ T5831] usb 2-1: USB disconnect, device number 20 [ 514.016160][ T5831] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 517.294969][ T5967] IPVS: starting estimator thread 0... [ 517.412132][T12887] IPVS: using max 31 ests per chain, 74400 per kthread [ 519.530936][ T5967] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 520.255252][ T5967] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 520.303009][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.320828][ T5967] usb 3-1: Product: syz [ 520.360676][ T5967] usb 3-1: Manufacturer: syz [ 520.365303][ T5967] usb 3-1: SerialNumber: syz [ 520.411583][ T5967] usb 3-1: config 0 descriptor?? [ 520.436911][ T5967] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 520.468979][ T5967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 520.500931][ T5967] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 520.510441][ T5967] usb 3-1: media controller created [ 520.528462][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.584669][ T5967] DVB: Unable to find symbol mt352_attach() [ 520.667002][ T5967] DVB: Unable to find symbol nxt6000_attach() [ 520.750514][ T5967] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 520.805085][ T5967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 520.833554][ T5967] dvb-usb: schedule remote query interval to 1000 msecs. [ 520.841077][ T5967] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 520.851213][ T5967] dvb-usb: bulk message failed: -22 (7/0) [ 520.856969][ T5967] dvb-usb: bulk message failed: -22 (7/0) [ 520.873712][ T5967] usb 3-1: USB disconnect, device number 24 [ 520.974720][T12928] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 520.997079][ T5967] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 521.033957][T12928] 8021q: adding VLAN 0 to HW filter on device bond5 [ 521.053144][T12930] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 521.060761][ T6045] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 521.112666][ T5831] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 521.232287][ T6045] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 521.248224][ T6045] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 521.260750][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 521.270405][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 521.282047][ T6045] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 521.292055][T12928] bond5 (unregistering): (slave dummy0): Releasing backup interface [ 521.292939][ T6045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.309449][ T5831] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 521.311725][T12928] bond5 (unregistering): Released all slaves [ 521.319354][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.343255][ T6045] usb 7-1: config 0 descriptor?? [ 521.350110][T12924] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 521.402119][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 521.415896][ T5831] pvrusb2: ********** [ 521.425611][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 521.437627][ T5831] pvrusb2: Important functionality might not be entirely working. [ 521.445792][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 521.457869][ T5831] pvrusb2: ********** [ 521.598196][ T2344] pvrusb2: Invalid write control endpoint [ 522.024310][ T2344] pvrusb2: Invalid write control endpoint [ 522.063915][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 522.083506][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 522.098142][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 522.111860][ T2344] pvrusb2: Device being rendered inoperable [ 522.118971][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 522.139892][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 522.173297][ T2344] pvrusb2: Attached sub-driver cx25840 [ 522.193268][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 522.211100][ T6045] usbhid 7-1:0.0: can't add hid device: -71 [ 522.226519][ T6045] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 522.236725][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 522.262158][ T6045] usb 7-1: USB disconnect, device number 5 [ 522.284611][ T846] usb 6-1: USB disconnect, device number 10 [ 523.120598][ T6045] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 523.576077][ T6045] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 523.586458][ T6045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.595570][ T6045] usb 7-1: Product: syz [ 523.599812][ T6045] usb 7-1: Manufacturer: syz [ 523.605063][ T6045] usb 7-1: SerialNumber: syz [ 523.632152][ T6045] usb 7-1: config 0 descriptor?? [ 523.667260][ T6045] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 523.687134][ T6045] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.705998][ T6045] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 523.802560][T12972] netlink: 'syz.1.2038': attribute type 1 has an invalid length. [ 523.848218][ T6045] usb 7-1: media controller created [ 523.928396][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 523.982476][ T6045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.996365][T12972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.018545][T12978] openvswitch: netlink: Message has 8 unknown bytes. [ 524.539622][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 524.549119][ T6045] DVB: Unable to find symbol mt352_attach() [ 524.675319][ T6045] DVB: Unable to find symbol nxt6000_attach() [ 524.691637][ T6045] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 524.742215][ T6045] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 524.794648][ T6045] dvb-usb: schedule remote query interval to 1000 msecs. [ 524.811442][ T6045] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 524.822923][ T6045] dvb-usb: bulk message failed: -22 (7/0) [ 524.830965][ T6045] dvb-usb: bulk message failed: -22 (7/0) [ 524.832313][T12976] bond3 (unregistering): Released all slaves [ 524.858955][ T6045] usb 7-1: USB disconnect, device number 6 [ 524.945434][ T6045] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 525.221345][T12999] syzkaller0: entered promiscuous mode [ 525.244410][T12999] syzkaller0: entered allmulticast mode [ 526.530484][ T5894] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 526.710483][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 526.721912][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 526.877825][ T5894] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 527.444372][ T5894] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 527.452769][ T5894] usb 3-1: Product: syz [ 527.460849][ T5894] usb 3-1: Manufacturer: syz [ 527.473745][ T5894] usb 3-1: SerialNumber: syz [ 527.722787][ T5894] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 527.734303][ T5894] usb 3-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 527.747338][ T5894] usb 3-1: Handspring Visor / Palm OS: port 187, is for Console use [ 527.767865][ T5894] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 527.779088][T13036] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 527.932628][ T5894] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 527.969989][ T5894] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 527.997811][ T5894] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 528.104805][T13044] syzkaller0: entered promiscuous mode [ 528.136990][T13044] syzkaller0: entered allmulticast mode [ 528.214687][ T6045] usb 3-1: USB disconnect, device number 25 [ 528.237564][ T6045] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 528.323906][ T6045] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 528.370863][ T6045] visor 3-1:1.0: device disconnected [ 528.588045][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2059'. [ 530.797918][T13077] netlink: 'syz.6.2068': attribute type 29 has an invalid length. [ 530.849206][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2068'. [ 531.051074][T13077] netlink: 'syz.6.2068': attribute type 2 has an invalid length. [ 531.305861][T13077] : entered promiscuous mode [ 532.561374][T13100] comedi comedi3: comedi_config --init_data is deprecated [ 533.210875][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 534.369246][T13099] Bluetooth: hci5: command 0x0406 tx timeout [ 535.754700][T13145] comedi comedi3: comedi_config --init_data is deprecated [ 537.250780][ T6097] lec:lec_start_xmit: lec0:No lecd attached [ 537.641635][T13162] syzkaller0: entered promiscuous mode [ 537.662851][T13162] syzkaller0: entered allmulticast mode [ 540.012028][T13193] comedi comedi3: comedi_config --init_data is deprecated [ 540.948393][T13205] kvm: pic: non byte write [ 541.033920][T13209] add_ndev_hash(ipvlan0) on ffff8880356b0000 done [ 541.713852][T13224] fuse: Unknown parameter 'user_i00000000000000000000' [ 541.996098][T13209] infiniband syz2: set down [ 542.002914][T13209] infiniband syz2: added ipvlan0 [ 542.026672][T13209] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 542.033764][T13209] infiniband syz2: Couldn't open port 1 [ 542.318549][T13209] RDS/IB: syz2: added [ 542.351822][T13209] smc: adding ib device syz2 with port count 1 [ 542.380535][T13209] smc: ib device syz2 port 1 has no pnetid [ 542.910375][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 542.918437][ C1] lec:lec_tx_timeout: lec0 [ 543.283625][T13250] gre1: entered promiscuous mode [ 543.943096][T13252] kvm: pic: single mode not supported [ 543.943117][T13252] kvm: pic: level sensitive irq not supported [ 543.988521][T13252] kvm: pic: level sensitive irq not supported [ 544.336726][T13255] syzkaller0: entered promiscuous mode [ 544.381030][T13255] syzkaller0: entered allmulticast mode [ 544.656205][ T6722] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 545.316105][ T6722] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 545.489582][T13266] fuse: Unknown parameter 'user_id00000000000000000000' [ 545.633372][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2131'. [ 547.889026][T13302] fuse: Unknown parameter 'user_id00000000000000000000' [ 548.164570][ T5894] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 548.410671][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 548.418548][ T5894] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 548.467223][ T5894] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 549.018973][ T5894] usb 7-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.044019][ T5894] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 549.056125][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.065643][ T5894] usb 7-1: Product: syz [ 549.070200][ T5894] usb 7-1: Manufacturer: syz [ 549.077276][ T5894] usb 7-1: SerialNumber: syz [ 549.113277][ T5894] hso 7-1:6.0: Can't find BULK IN endpoint [ 549.324162][ T5926] usb 7-1: USB disconnect, device number 7 [ 550.447682][T13326] kvm: pic: single mode not supported [ 550.447704][T13326] kvm: pic: level sensitive irq not supported [ 550.466169][T13326] kvm: pic: level sensitive irq not supported [ 551.080637][ T6045] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 551.270429][ T6045] usb 2-1: Using ep0 maxpacket: 8 [ 551.282119][ T6045] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 551.295064][T13354] overlayfs: failed to resolve './file1': -2 [ 551.299715][ T6045] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 551.313945][ T6045] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 551.322676][ T6045] usb 2-1: Product: syz [ 551.327183][ T6045] usb 2-1: Manufacturer: syz [ 551.334642][ T6045] usb 2-1: SerialNumber: syz [ 551.610788][ T6045] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 551.625832][T13361] syz.6.2156 (13361): drop_caches: 2 [ 551.631663][T13361] syz.6.2156 (13361): drop_caches: 2 [ 551.638170][ T6045] usb 2-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 551.671831][ T6045] usb 2-1: Handspring Visor / Palm OS: port 187, is for Console use [ 551.679912][ T6045] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 551.764199][T13365] pimreg: entered allmulticast mode [ 551.842078][ T6045] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 551.866101][ T6045] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 551.965684][ T6045] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 552.678688][ T6045] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 552.738316][ T6045] usb 2-1: USB disconnect, device number 21 [ 552.769296][ T6045] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 552.819783][ T6045] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 552.857753][ T6045] visor 2-1:1.0: device disconnected [ 553.786230][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 553.820276][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 554.317594][T13380] tipc: Started in network mode [ 554.322720][T13380] tipc: Node identity ac1414aa, cluster identity 4711 [ 554.330032][T13380] tipc: New replicast peer: 172.20.20.63 [ 554.340678][T13380] tipc: Enabled bearer , priority 10 [ 554.372020][ T5967] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 554.530465][ T5967] usb 2-1: Using ep0 maxpacket: 32 [ 554.537539][ T5967] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 554.548258][ T5967] usb 2-1: config 0 has no interface number 0 [ 554.558777][ T5967] usb 2-1: config 0 interface 196 has no altsetting 0 [ 554.570767][ T5967] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 554.583759][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.593800][ T5967] usb 2-1: Product: syz [ 554.598174][ T5967] usb 2-1: Manufacturer: syz [ 554.603244][ T5967] usb 2-1: SerialNumber: syz [ 554.612173][ T5967] usb 2-1: config 0 descriptor?? [ 554.710608][ T5894] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 554.826640][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.835958][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.853554][T13378] vlan2: entered promiscuous mode [ 555.058694][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.070109][ T1134] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 555.079972][ T1134] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 555.116666][ T5894] usb 7-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 555.128231][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.137726][ T5894] usb 7-1: Product: syz [ 555.708950][ T5894] usb 7-1: Manufacturer: syz [ 555.719480][ T5894] usb 7-1: SerialNumber: syz [ 555.819221][ T5926] tipc: Node number set to 2886997162 [ 555.842877][ T5894] usb 7-1: config 0 descriptor?? [ 555.885185][ T5967] ipheth 2-1:0.196: Unable to find endpoints [ 555.928092][ T5967] usb 2-1: USB disconnect, device number 22 [ 556.112252][ T5894] powermate 7-1:0.0: probe with driver powermate failed with error -22 [ 556.149927][ T5894] usb 7-1: USB disconnect, device number 8 [ 557.079023][ T1110] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 557.123210][ T1110] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 557.481937][T13420] syz.1.2174 (13420): drop_caches: 2 [ 557.493127][T13420] syz.1.2174 (13420): drop_caches: 2 [ 557.700862][ T5926] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 558.270945][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 558.418284][ T5926] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 558.446379][ T5926] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 558.614415][ T5926] usb 3-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.897579][ T5926] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 558.936207][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.956762][ T5926] usb 3-1: Product: syz [ 558.972036][ T5926] usb 3-1: Manufacturer: syz [ 558.976654][ T5926] usb 3-1: SerialNumber: syz [ 559.103553][ T5926] hso 3-1:6.0: Can't find BULK IN endpoint [ 559.321631][ T6045] usb 3-1: USB disconnect, device number 26 [ 559.515583][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 559.613203][ T5831] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 559.860423][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 559.873845][ T5831] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 559.886169][ T5831] usb 6-1: config 0 has no interface number 0 [ 559.893009][ T5831] usb 6-1: config 0 interface 196 has no altsetting 0 [ 559.908009][ T5831] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 559.917762][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.927287][ T5831] usb 6-1: Product: syz [ 559.932810][ T5831] usb 6-1: Manufacturer: syz [ 559.939685][ T5831] usb 6-1: SerialNumber: syz [ 559.957792][ T5831] usb 6-1: config 0 descriptor?? [ 560.260978][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.322584][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.369169][ T6045] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 560.381064][T13440] team_slave_0: entered promiscuous mode [ 560.387090][T13440] team_slave_1: entered promiscuous mode [ 560.395059][T13440] vlan2: entered promiscuous mode [ 560.404587][T13440] team0: entered promiscuous mode [ 560.440487][ T9609] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 560.463458][ T9609] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 560.989781][ T6045] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 560.999565][ T5831] ipheth 6-1:0.196: Unable to find endpoints [ 561.024159][ T6045] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.042753][ T5831] usb 6-1: USB disconnect, device number 11 [ 561.064563][ T6045] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 561.090394][ T6045] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 561.120040][ T6045] usb 3-1: Manufacturer: syz [ 561.148700][ T6045] usb 3-1: config 0 descriptor?? [ 561.176248][ T6045] igorplugusb 3-1:0.0: incorrect number of endpoints [ 561.583600][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.600563][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.667485][ T5831] usb 3-1: USB disconnect, device number 27 [ 561.986515][T13475] comedi comedi3: comedi_config --init_data is deprecated [ 562.161422][T13480] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2198'. [ 563.026956][T13494] syz.2.2199 (13494): drop_caches: 2 [ 563.032643][T13494] syz.2.2199 (13494): drop_caches: 2 [ 563.042267][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.052055][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 564.531400][ T6045] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 564.700404][ T6045] usb 6-1: Using ep0 maxpacket: 8 [ 564.706922][ T6045] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 564.922511][ T6045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.974105][ T6045] pvrusb2: Hardware description: Terratec Grabster AV400 [ 565.004430][ T6045] pvrusb2: ********** [ 565.016901][ T6045] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 565.290498][ T6045] pvrusb2: Important functionality might not be entirely working. [ 565.308549][ T6045] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 565.370472][ T6045] pvrusb2: ********** [ 565.377073][ T2344] pvrusb2: Invalid write control endpoint [ 565.422621][ T2344] pvrusb2: Invalid write control endpoint [ 565.458114][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 565.487674][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 565.540435][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 565.620507][ T2344] pvrusb2: Device being rendered inoperable [ 565.670464][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 565.690622][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 565.752407][ T6045] usb 6-1: USB disconnect, device number 12 [ 565.795756][ T2344] pvrusb2: Attached sub-driver cx25840 [ 565.808270][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 566.667323][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 566.690548][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 567.236703][T13542] comedi comedi3: comedi_config --init_data is deprecated [ 568.060403][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.068521][ C1] lec:lec_tx_timeout: lec0 [ 568.122053][T13556] xt_hashlimit: max too large, truncated to 1048576 [ 570.734979][T13582] pimreg: entered allmulticast mode [ 570.797939][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 571.357866][T13594] netlink: 'syz.5.2228': attribute type 1 has an invalid length. [ 571.515016][T13594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.620226][T13600] bond1: (slave ip6gretap1): making interface the new active one [ 571.663649][T13600] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 573.450627][T13617] comedi comedi3: comedi_config --init_data is deprecated [ 573.948440][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 574.170276][T13629] loop6: detected capacity change from 0 to 256 [ 574.209397][T13629] vfat: Unknown parameter 'uni_xl1' [ 574.462642][ T5843] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 574.617435][ T7928] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 574.850962][ T7928] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 575.246874][ T5843] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 575.272564][ T7928] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 575.282403][ T7928] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 575.309135][ T5843] usb 3-1: config 0 has no interface number 1 [ 575.333167][ T5843] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 575.345211][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.364735][ T5843] usb 3-1: config 0 descriptor?? [ 575.427910][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 575.437719][T13650] openvswitch: netlink: Key type 796 is out of range max 32 [ 575.517299][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 576.678897][ T48] usb 3-1: USB disconnect, device number 28 [ 579.175340][T13673] comedi comedi3: comedi_config --init_data is deprecated [ 580.688028][T13696] add_ndev_hash(ipvlan0) on ffff888077aa4000 done [ 580.695040][T13696] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 581.368133][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 581.402311][T13701] openvswitch: netlink: Key type 796 is out of range max 32 [ 582.155556][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 582.290449][ T48] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 582.332286][T13704] pimreg: entered allmulticast mode [ 582.572221][T13714] Cannot find set identified by id 0 to match [ 583.035026][ T48] usb 7-1: config 0 has an invalid interface number: 182 but max is 1 [ 583.043291][ T48] usb 7-1: config 0 has no interface number 1 [ 583.051031][ T48] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 583.060500][ T8832] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 583.073249][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.082534][ T8832] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 583.098961][ T8832] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 583.123082][ T8832] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 583.145299][ T48] usb 7-1: config 0 descriptor?? [ 583.474267][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 583.497363][ T48] usb 7-1: USB disconnect, device number 9 [ 583.699601][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 584.162277][T13739] fuse: Unknown parameter 'fd0x0000000000000003' [ 584.344907][T13736] comedi comedi3: comedi_config --init_data is deprecated [ 585.585103][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 585.603336][T13748] openvswitch: netlink: Key type 796 is out of range max 32 [ 585.919680][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 586.258801][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'. [ 587.144983][ T8832] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 587.227160][ T8832] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 592.063443][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2293'. [ 592.102905][T13829] openvswitch: netlink: Key type 796 is out of range max 32 [ 592.279685][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2293'. [ 593.722233][ T6722] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 593.775308][ T6722] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 595.113930][T13862] pimreg: entered allmulticast mode [ 600.142934][ T9609] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 600.217520][ T9609] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 600.979398][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'. [ 601.435480][T13904] loop1: detected capacity change from 0 to 32768 [ 601.563374][T13904] (syz.1.2316,13904,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 601.582991][T13904] (syz.1.2316,13904,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 601.609713][T13904] JBD2: Ignoring recovery information on journal [ 601.768592][ T9] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 601.929093][ T6097] lec:lec_start_xmit: lec0:No lecd attached [ 602.647246][T13904] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 602.682368][ T9] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 602.745799][ T9] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 602.972079][ T9] usb 7-1: config 8 has no interface number 0 [ 603.089798][ T9] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 603.158982][ T5829] ocfs2: Unmounting device (7,1) on (node local) [ 603.166011][ T9] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.301205][ T9] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 603.310272][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.342564][ T9] usb 7-1: Product: syz [ 603.362488][ T9] usb 7-1: Manufacturer: syz [ 603.386749][ T9] usb 7-1: SerialNumber: syz [ 603.648724][ T9] usb 7-1: USB disconnect, device number 10 [ 603.787320][T13945] fuse: Unknown parameter '0x0000000000000003' [ 604.436167][ T5928] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 605.187097][ T5928] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 605.207968][ T5928] usb 5-1: config 0 has no interface number 1 [ 605.214712][ T5928] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 605.288538][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.428542][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2338'. [ 605.445891][ T5928] usb 5-1: config 0 descriptor?? [ 606.348864][ T5928] usb 5-1: USB disconnect, device number 19 [ 606.512790][T13978] comedi comedi3: comedi_config --init_data is deprecated [ 606.940391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 606.948503][ C1] lec:lec_tx_timeout: lec0 [ 607.001756][T13982] netlink: 'syz.5.2341': attribute type 1 has an invalid length. [ 607.096955][T13982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.739903][T14006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2349'. [ 607.767973][T14006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2349'. [ 608.875106][T14019] comedi comedi3: comedi_config --init_data is deprecated [ 612.220917][T14050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2363'. [ 612.312380][T14050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2363'. [ 613.661657][T14070] comedi comedi3: comedi_config --init_data is deprecated [ 613.890511][ T6045] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 614.042332][ T6045] usb 3-1: device descriptor read/64, error -71 [ 614.333891][ T6045] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 614.601081][ T5926] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 614.720701][ T6045] usb 3-1: device descriptor read/64, error -71 [ 614.830765][ T5926] usb 6-1: config 0 has an invalid interface number: 182 but max is 1 [ 614.831041][ T6045] usb usb3-port1: attempt power cycle [ 614.838960][ T5926] usb 6-1: config 0 has no interface number 1 [ 614.839017][ T5926] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 614.986711][T14093] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2378'. [ 614.997427][T14093] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2378'. [ 615.008063][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.019238][ T5926] usb 6-1: config 0 descriptor?? [ 615.115266][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2379'. [ 615.124674][T14096] openvswitch: netlink: Key type 796 is out of range max 32 [ 615.183333][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2379'. [ 615.201316][ T6045] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 615.229975][T11276] usb 6-1: USB disconnect, device number 13 [ 615.239603][ T6045] usb 3-1: device descriptor read/8, error -71 [ 615.481251][ T6045] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 615.501884][ T6045] usb 3-1: device descriptor read/8, error -71 [ 615.621732][ T6045] usb usb3-port1: unable to enumerate USB device [ 618.318308][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 618.336453][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 618.600503][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 618.748379][T14136] fuse: Bad value for 'fd' [ 618.962285][T14140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 619.040932][T14140] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 619.104026][T14140] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 619.485283][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 619.630462][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 620.094190][ T24] usb 2-1: device descriptor read/64, error -71 [ 620.670811][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 621.070450][ T24] usb 2-1: device descriptor read/64, error -71 [ 621.194211][ T24] usb usb2-port1: attempt power cycle [ 621.591199][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 622.063059][ T24] usb 2-1: device descriptor read/8, error -71 [ 622.340488][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 622.384287][ T24] usb 2-1: device descriptor read/8, error -71 [ 622.511270][ T24] usb usb2-port1: unable to enumerate USB device [ 622.715696][T14186] syzkaller0: entered promiscuous mode [ 622.734076][T14186] syzkaller0: entered allmulticast mode [ 622.854327][ T8662] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 622.878920][ T8662] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 623.627088][ T12] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 623.660502][ T12] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 623.690870][ T12] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 623.714082][ T12] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 624.000943][T14201] add_ndev_hash(ipvlan0) on ffff888030ff4000 done [ 624.012752][T14201] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 624.445781][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.896035][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 628.021006][ T48] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 628.202695][ T48] usb 7-1: device descriptor read/64, error -71 [ 628.240812][T14230] pimreg: entered allmulticast mode [ 628.385866][T14231] syz.4.2419 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 628.425721][T14231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 629.299333][ T48] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 629.490440][ T48] usb 7-1: device descriptor read/64, error -71 [ 629.817150][ T48] usb usb7-port1: attempt power cycle [ 629.950549][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 629.958610][ C1] lec:lec_tx_timeout: lec0 [ 629.992232][T14247] syz2: rxe_newlink: already configured on ipvlan0 [ 630.292547][ T48] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 631.246000][ T48] usb 7-1: device descriptor read/8, error -71 [ 636.449507][ T8768] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 636.502644][ T8768] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 637.009590][ T8768] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 637.052342][ T8768] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 637.240490][ T48] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 637.970654][ T48] usb 3-1: device descriptor read/64, error -71 [ 638.447647][ T48] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 638.870923][ T48] usb 3-1: device descriptor read/64, error -71 [ 639.159408][ T48] usb usb3-port1: attempt power cycle [ 640.194281][ T8391] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 640.253766][T14324] overlayfs: missing 'lowerdir' [ 640.294649][ T8391] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 641.562666][T14339] netlink: 'syz.1.2451': attribute type 1 has an invalid length. [ 641.629922][T14339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 642.024667][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 642.034483][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 642.049614][T14339] bond3 (unregistering): Released all slaves [ 642.210478][ T48] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 642.372410][ T48] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 642.380978][ T48] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 642.402526][ T48] usb 3-1: config 8 has no interface number 0 [ 642.419239][ T48] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 642.449483][ T48] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.469498][ T48] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 642.489271][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.497396][ T48] usb 3-1: Product: syz [ 642.510423][ T48] usb 3-1: Manufacturer: syz [ 642.515136][ T48] usb 3-1: SerialNumber: syz [ 642.747466][ T48] usb 3-1: USB disconnect, device number 36 [ 642.890479][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 643.050426][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 643.057881][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 643.067174][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.081832][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 643.089548][ T24] pvrusb2: ********** [ 643.093726][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 643.106219][ T24] pvrusb2: Important functionality might not be entirely working. [ 643.114194][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 643.127045][ T24] pvrusb2: ********** [ 643.241546][T14367] overlay: Unknown parameter '/' [ 643.331735][ T2344] pvrusb2: Invalid write control endpoint [ 643.438906][ T5836] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 643.443122][ T2344] pvrusb2: Invalid write control endpoint [ 643.469948][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 643.499202][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 643.525946][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 643.560617][ T2344] pvrusb2: Device being rendered inoperable [ 643.768311][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 643.864246][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 644.631475][ T2344] pvrusb2: Attached sub-driver cx25840 [ 644.643322][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 645.278713][ T30] audit: type=1800 audit(1765356647.089:25): pid=14388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2464" name="SYSV798dd82c" dev="tmpfs" ino=0 res=0 errno=0 [ 645.536356][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 647.024087][T14408] overlay: Unknown parameter '/' [ 647.625215][T14417] loop2: detected capacity change from 0 to 256 [ 647.775467][T14417] vfat: Unknown parameter 'uni_xl1' [ 648.749931][ T2947] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 648.765566][ T2947] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 648.836255][ T3516] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 648.916848][ T3516] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 649.425386][T14446] overlay: Unknown parameter '/' [ 650.063470][T11276] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 650.242044][T11276] usb 2-1: Using ep0 maxpacket: 32 [ 650.253395][T11276] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 650.344896][T11276] usb 2-1: config 0 has no interface number 0 [ 650.800472][T11276] usb 2-1: config 0 interface 196 has no altsetting 0 [ 650.823927][T11276] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 650.834618][T11276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.925835][T11276] usb 2-1: Product: syz [ 650.930062][T11276] usb 2-1: Manufacturer: syz [ 650.980418][T11276] usb 2-1: SerialNumber: syz [ 651.014105][T11276] usb 2-1: config 0 descriptor?? [ 651.024486][T14473] loop2: detected capacity change from 0 to 256 [ 651.072185][T14473] vfat: Unknown parameter 'uni_xl1' [ 651.351565][T14456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.371918][T14456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.708676][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 651.718937][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 651.739502][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 651.768069][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 651.847822][T14456] vlan2: entered promiscuous mode [ 651.949998][ T7877] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 651.980043][ T7877] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 652.038677][T11276] ipheth 2-1:0.196: Unable to find endpoints [ 652.183186][T11276] usb 2-1: USB disconnect, device number 27 [ 652.282834][T14493] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 653.607506][T11276] usb 6-1: USB disconnect, device number 14 [ 654.645855][T14522] loop2: detected capacity change from 0 to 256 [ 654.663978][T14522] vfat: Unknown parameter 'uni_xl1' [ 655.707488][ T8662] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 655.887385][ T8662] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 656.567721][ T8662] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 656.599574][ T8662] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 656.811646][ T846] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 656.997444][ T846] usb 6-1: Using ep0 maxpacket: 32 [ 657.209452][ T846] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 657.240400][ T846] usb 6-1: config 0 has no interface number 0 [ 657.279230][ T846] usb 6-1: config 0 interface 196 has no altsetting 0 [ 657.339423][ T6045] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 657.352410][ T846] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 657.469566][ T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.505999][ T846] usb 6-1: Product: syz [ 657.511243][ T846] usb 6-1: Manufacturer: syz [ 657.516400][ T846] usb 6-1: SerialNumber: syz [ 657.537238][ T846] usb 6-1: config 0 descriptor?? [ 657.552387][ T6045] usb 5-1: Using ep0 maxpacket: 8 [ 657.558254][ T6045] usb 5-1: no configurations [ 657.579733][ T6045] usb 5-1: can't read configurations, error -22 [ 657.714833][ T6045] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 657.816705][T14538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.818800][T11276] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 657.827849][T14538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.980019][ T6045] usb 5-1: Using ep0 maxpacket: 8 [ 658.171941][ T6045] usb 5-1: no configurations [ 658.180308][T11276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.221146][ T6045] usb 5-1: can't read configurations, error -22 [ 658.361267][ T6045] usb usb5-port1: attempt power cycle [ 658.367888][T11276] usb 3-1: config 0 has no interfaces? [ 658.379050][T11276] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 658.388279][T11276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.396331][T11276] usb 3-1: Product: syz [ 658.446145][T11276] usb 3-1: Manufacturer: syz [ 658.451047][T11276] usb 3-1: SerialNumber: syz [ 658.482191][T11276] usb 3-1: config 0 descriptor?? [ 658.514010][T14538] vlan2: entered promiscuous mode [ 658.592693][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 658.602787][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 658.676433][ T846] ipheth 6-1:0.196: Unable to find endpoints [ 658.700799][ T6045] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 658.700811][ T24] usb 3-1: USB disconnect, device number 37 [ 658.736008][ T846] usb 6-1: USB disconnect, device number 15 [ 658.751573][ T6045] usb 5-1: Using ep0 maxpacket: 8 [ 658.771370][ T6045] usb 5-1: no configurations [ 658.776045][ T6045] usb 5-1: can't read configurations, error -22 [ 658.920482][ T6045] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 658.993570][ T6045] usb 5-1: Using ep0 maxpacket: 8 [ 658.999151][ T6045] usb 5-1: no configurations [ 659.004556][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 659.016454][ T6045] usb 5-1: can't read configurations, error -22 [ 659.520499][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 659.531255][ T6045] usb usb5-port1: unable to enumerate USB device [ 659.554421][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 659.579895][ T8354] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 659.622834][T14578] loop5: detected capacity change from 0 to 256 [ 659.646057][T14578] vfat: Unknown parameter 'uni_xl1' [ 661.525361][T14600] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 661.820571][T14600] CPU: 1 UID: 0 PID: 14600 Comm: syz.5.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.820603][T14600] Tainted: [L]=SOFTLOCKUP [ 661.820609][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 661.820620][T14600] Call Trace: [ 661.820628][T14600] [ 661.820636][T14600] dump_stack_lvl+0x189/0x250 [ 661.820670][T14600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.820692][T14600] ? __pfx__printk+0x10/0x10 [ 661.820722][T14600] ? kernfs_path_from_node+0x2f/0x290 [ 661.820741][T14600] ? kernfs_path_from_node+0x250/0x290 [ 661.820757][T14600] ? kernfs_path_from_node+0x2f/0x290 [ 661.820780][T14600] sysfs_warn_dup+0x8e/0xa0 [ 661.820800][T14600] sysfs_do_create_link_sd+0xc0/0x110 [ 661.820822][T14600] device_add_class_symlinks+0x1cf/0x240 [ 661.820850][T14600] device_add+0x475/0xb80 [ 661.820878][T14600] wiphy_register+0x1d2e/0x2d20 [ 661.820918][T14600] ? __pfx_wiphy_register+0x10/0x10 [ 661.820943][T14600] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 661.820981][T14600] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 661.821013][T14600] ieee80211_register_hw+0x34a7/0x4110 [ 661.821048][T14600] ? ieee80211_register_hw+0x13f1/0x4110 [ 661.821077][T14600] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 661.821093][T14600] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 661.821123][T14600] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 661.821148][T14600] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 661.821180][T14600] ? __hrtimer_setup+0x181/0x200 [ 661.821200][T14600] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 661.821223][T14600] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 661.821279][T14600] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 661.821301][T14600] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 661.821322][T14600] ? kstrndup+0xbf/0x160 [ 661.821353][T14600] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 661.821384][T14600] ? __pfx___nla_validate_parse+0x10/0x10 [ 661.821423][T14600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 661.821454][T14600] ? rcu_is_watching+0x15/0xb0 [ 661.821480][T14600] ? __nla_parse+0x40/0x60 [ 661.821499][T14600] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 661.821532][T14600] genl_family_rcv_msg_doit+0x215/0x300 [ 661.821563][T14600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 661.821601][T14600] ? bpf_lsm_capable+0x9/0x20 [ 661.821622][T14600] ? security_capable+0x7e/0x2e0 [ 661.821645][T14600] genl_rcv_msg+0x60e/0x790 [ 661.821677][T14600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.821700][T14600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 661.821739][T14600] netlink_rcv_skb+0x208/0x470 [ 661.821761][T14600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.821786][T14600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.821825][T14600] ? down_read+0x274/0x2e0 [ 661.821842][T14600] ? genl_rcv+0xd/0x40 [ 661.821866][T14600] genl_rcv+0x28/0x40 [ 661.821887][T14600] netlink_unicast+0x82f/0x9e0 [ 661.821915][T14600] ? __pfx_netlink_unicast+0x10/0x10 [ 661.821935][T14600] ? netlink_sendmsg+0x642/0xb30 [ 661.821960][T14600] ? skb_put+0x11b/0x210 [ 661.821983][T14600] netlink_sendmsg+0x805/0xb30 [ 661.822002][T14600] ? aa_sk_perm+0x15f/0x920 [ 661.822029][T14600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.822052][T14600] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 661.822082][T14600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.822101][T14600] sock_sendmsg_nosec+0x18f/0x1d0 [ 661.822126][T14600] ____sys_sendmsg+0x577/0x880 [ 661.822155][T14600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.822183][T14600] ? import_iovec+0x74/0xa0 [ 661.822204][T14600] ___sys_sendmsg+0x21f/0x2a0 [ 661.822231][T14600] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.822258][T14600] ? futex_wake+0x4b2/0x560 [ 661.822313][T14600] ? __fget_files+0x2a/0x420 [ 661.822334][T14600] ? __fget_files+0x3a0/0x420 [ 661.822368][T14600] __x64_sys_sendmsg+0x19b/0x260 [ 661.822390][T14600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.822427][T14600] ? do_syscall_64+0xbe/0xf80 [ 661.822449][T14600] do_syscall_64+0xfa/0xf80 [ 661.822468][T14600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.822485][T14600] ? clear_bhb_loop+0x60/0xb0 [ 661.822506][T14600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.822523][T14600] RIP: 0033:0x7f4d5898f749 [ 661.822541][T14600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.822556][T14600] RSP: 002b:00007f4d56bb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.822575][T14600] RAX: ffffffffffffffda RBX: 00007f4d58be6180 RCX: 00007f4d5898f749 [ 661.822588][T14600] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 661.822598][T14600] RBP: 00007f4d58a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.822608][T14600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.822618][T14600] R13: 00007f4d58be6218 R14: 00007f4d58be6180 R15: 00007ffed757b648 [ 661.822651][T14600] [ 663.143944][T14616] netlink: 'syz.1.2538': attribute type 29 has an invalid length. [ 663.155912][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 663.280583][T11276] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 663.339175][T14616] netlink: 'syz.1.2538': attribute type 2 has an invalid length. [ 663.920412][T11276] usb 3-1: Using ep0 maxpacket: 32 [ 663.932923][T11276] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 663.942376][T11276] usb 3-1: config 0 has no interface number 0 [ 663.949254][T11276] usb 3-1: config 0 interface 196 has no altsetting 0 [ 663.974368][T11276] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 664.000296][T11276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.111353][T11276] usb 3-1: Product: syz [ 664.156233][T11276] usb 3-1: Manufacturer: syz [ 664.181849][T11276] usb 3-1: SerialNumber: syz [ 664.228087][T11276] usb 3-1: config 0 descriptor?? [ 665.095892][T14615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.105160][T14615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.294726][T14615] team_slave_0: entered promiscuous mode [ 665.300790][T14615] team_slave_1: entered promiscuous mode [ 665.341474][T14615] vlan2: entered promiscuous mode [ 665.430603][T14615] team0: entered promiscuous mode [ 665.587928][ T8832] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 665.605242][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2548'. [ 665.605842][ T8832] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 666.483719][T11276] ipheth 3-1:0.196: Unable to find endpoints [ 667.471874][ T6097] lec:lec_start_xmit: lec0:No lecd attached [ 667.489767][T11276] usb 3-1: USB disconnect, device number 38 [ 670.263329][T14680] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 670.841506][T11276] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 671.410562][T11276] usb 3-1: Using ep0 maxpacket: 8 [ 671.422447][T11276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.447428][T11276] usb 3-1: config 0 has no interfaces? [ 671.635524][T11276] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 671.680491][T11276] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 672.215168][T11276] usb 3-1: Product: syz [ 672.219383][T11276] usb 3-1: Manufacturer: syz [ 672.224322][T11276] usb 3-1: SerialNumber: syz [ 672.284785][T11276] usb 3-1: config 0 descriptor?? [ 672.910441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms [ 672.918572][ C1] lec:lec_tx_timeout: lec0 [ 673.212311][T14713] wg1: entered promiscuous mode [ 673.225907][T14713] wg1: entered allmulticast mode [ 674.280661][ T5831] usb 3-1: USB disconnect, device number 39 [ 674.531652][T14718] comedi comedi3: comedi_config --init_data is deprecated [ 674.871773][ T5836] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 674.884294][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.884321][ T5836] Tainted: [L]=SOFTLOCKUP [ 674.884328][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.884339][ T5836] Workqueue: hci5 hci_rx_work [ 674.884360][ T5836] Call Trace: [ 674.884367][ T5836] [ 674.884375][ T5836] dump_stack_lvl+0x189/0x250 [ 674.884402][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.884423][ T5836] ? __pfx__printk+0x10/0x10 [ 674.884453][ T5836] ? kernfs_path_from_node+0x250/0x290 [ 674.884471][ T5836] ? kernfs_path_from_node+0x2f/0x290 [ 674.884493][ T5836] sysfs_create_dir_ns+0x259/0x280 [ 674.884514][ T5836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 674.884534][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 674.884562][ T5836] kobject_add_internal+0x6ab/0xcc0 [ 674.884590][ T5836] kobject_add+0x155/0x220 [ 674.884614][ T5836] ? __pfx_kobject_add+0x10/0x10 [ 674.884635][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 674.884661][ T5836] ? get_device_parent+0x366/0x3a0 [ 674.884695][ T5836] device_add+0x408/0xb80 [ 674.884727][ T5836] hci_conn_add_sysfs+0xd5/0x210 [ 674.884757][ T5836] le_conn_complete_evt+0xf1d/0x1420 [ 674.884789][ T5836] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 674.884808][ T5836] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 674.884824][ T5836] ? __asan_memcpy+0x40/0x70 [ 674.884846][ T5836] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 674.884863][ T5836] ? skb_pull_data+0xfb/0x200 [ 674.884889][ T5836] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 674.884911][ T5836] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 674.884936][ T5836] hci_event_packet+0x78f/0x1260 [ 674.884957][ T5836] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 674.884981][ T5836] ? __pfx_hci_event_packet+0x10/0x10 [ 674.885001][ T5836] ? kcov_remote_start+0x4d3/0x7f0 [ 674.885024][ T5836] ? lockdep_hardirqs_on+0x98/0x140 [ 674.885043][ T5836] ? hci_send_to_monitor+0xe2/0x590 [ 674.885069][ T5836] hci_rx_work+0x3ee/0x1060 [ 674.885097][ T5836] ? process_one_work+0x868/0x15a0 [ 674.885115][ T5836] process_one_work+0x93a/0x15a0 [ 674.885154][ T5836] ? __pfx_process_one_work+0x10/0x10 [ 674.885182][ T5836] ? assign_work+0x3c7/0x5b0 [ 674.885205][ T5836] worker_thread+0x9b0/0xee0 [ 674.885249][ T5836] kthread+0x711/0x8a0 [ 674.885275][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 674.885292][ T5836] ? __pfx_kthread+0x10/0x10 [ 674.885312][ T5836] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.885333][ T5836] ? lockdep_hardirqs_on+0x98/0x140 [ 674.885346][ T5836] ? __pfx_kthread+0x10/0x10 [ 674.885365][ T5836] ret_from_fork+0x599/0xb30 [ 674.885384][ T5836] ? __pfx_ret_from_fork+0x10/0x10 [ 674.885408][ T5836] ? __switch_to_asm+0x39/0x70 [ 674.885425][ T5836] ? __switch_to_asm+0x33/0x70 [ 674.885444][ T5836] ? __pfx_kthread+0x10/0x10 [ 674.885467][ T5836] ret_from_fork_asm+0x1a/0x30 [ 674.885504][ T5836] [ 674.885529][ T5836] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 675.183611][ T5836] Bluetooth: hci5: failed to register connection device [ 676.510582][ T5831] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 676.750468][ T5831] usb 7-1: device descriptor read/64, error -71 [ 677.039632][T11276] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 677.047290][ T5831] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 677.200430][ T5831] usb 7-1: device descriptor read/64, error -71 [ 677.221977][T11276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.237463][T11276] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 677.254590][T11276] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 677.265199][T11276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.278094][T11276] usb 2-1: Product: syz [ 677.282870][T11276] usb 2-1: Manufacturer: syz [ 677.288204][T11276] usb 2-1: SerialNumber: syz [ 677.316567][T11276] usb 2-1: config 0 descriptor?? [ 677.322053][ T5831] usb usb7-port1: attempt power cycle [ 677.549482][T11276] usb 2-1: USB disconnect, device number 28 [ 677.670461][ T5831] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 677.692954][ T5831] usb 7-1: device descriptor read/8, error -71 [ 677.860427][ T846] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 677.940921][ T5831] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 677.981960][ T5831] usb 7-1: device descriptor read/8, error -71 [ 678.020441][ T846] usb 5-1: Using ep0 maxpacket: 8 [ 678.032000][ T846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.060469][ T846] usb 5-1: config 0 has no interfaces? [ 678.068295][ T846] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 678.090416][ T846] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 678.098515][ T846] usb 5-1: Product: syz [ 678.110400][ T846] usb 5-1: Manufacturer: syz [ 678.111029][ T5831] usb usb7-port1: unable to enumerate USB device [ 678.115009][ T846] usb 5-1: SerialNumber: syz [ 678.139640][ T846] usb 5-1: config 0 descriptor?? [ 678.224556][T14759] futex_wake_op: syz.1.2585 tries to shift op by -1; fix this program [ 680.784694][T11276] usb 5-1: USB disconnect, device number 24 [ 682.380828][T11276] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 682.550253][T11276] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 682.898577][T11276] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 682.911212][ T846] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 682.925013][T11276] usb 3-1: config 8 has no interface number 0 [ 682.937893][T11276] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 682.957838][T11276] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.989174][T11276] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 683.012250][T11276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.021127][T11276] usb 3-1: Product: syz [ 683.030483][T11276] usb 3-1: Manufacturer: syz [ 683.040406][T11276] usb 3-1: SerialNumber: syz [ 683.064139][ T846] usb 5-1: device descriptor read/64, error -71 [ 683.910944][T11276] usb 3-1: USB disconnect, device number 40 [ 683.950884][ T846] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 684.172282][ T846] usb 5-1: device descriptor read/64, error -71 [ 684.181209][T14816] tipc: Started in network mode [ 684.192961][T14816] tipc: Node identity cebc2fe91ad3, cluster identity 4711 [ 684.206988][T14816] tipc: Enabled bearer , priority 0 [ 684.221660][T14821] 9p: Bad value for 'source' [ 684.390699][ T846] usb usb5-port1: attempt power cycle [ 684.405615][T14816] tipc: Resetting bearer [ 684.606374][ T9609] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 start [ 684.606527][T14815] tipc: Disabling bearer [ 684.699862][ T9609] netdevice_event(NETDEV_UNREGISTER) for ffff888068750000 on ffff8880356b0000 end [ 684.762616][T14831] smc: removing ib device syz2 [ 684.780469][ T846] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 684.812195][ T846] usb 5-1: device descriptor read/8, error -71 [ 685.120730][ T846] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 685.141081][ T846] usb 5-1: device descriptor read/8, error -71 [ 685.250905][ T846] usb usb5-port1: unable to enumerate USB device [ 685.879300][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.889072][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 688.880592][ T846] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 689.361415][ T846] usb 7-1: device descriptor read/64, error -71 [ 689.610471][ T846] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 690.366630][ T846] usb 7-1: device descriptor read/64, error -71 [ 690.569570][ T846] usb usb7-port1: attempt power cycle [ 690.657244][T14900] input: syz1 as /devices/virtual/input/input33 [ 690.920382][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 690.928400][ C1] lec:lec_tx_timeout: lec0 [ 691.090596][ T846] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 691.161638][ T846] usb 7-1: device descriptor read/8, error -71 [ 691.478070][ T846] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 691.528205][ T846] usb 7-1: device descriptor read/8, error -71 [ 691.679344][ T846] usb usb7-port1: unable to enumerate USB device [ 692.146648][T11276] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 692.841158][T11276] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 693.218821][T11276] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 693.269729][T11276] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 693.446030][T11276] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 693.461152][T11276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.485593][T11276] usb 3-1: Product: syz [ 693.494922][T11276] usb 3-1: Manufacturer: syz [ 693.502470][T14938] input: syz1 as /devices/virtual/input/input34 [ 693.509069][T11276] usb 3-1: SerialNumber: syz [ 693.526252][T11276] usb 3-1: config 0 descriptor?? [ 693.542442][T14915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.570871][T14915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.609334][T11276] usb 3-1: ucan: probing device on interface #0 [ 694.795789][T11276] usb 3-1: ucan: failed to retrieve device info [ 694.811974][T11276] usb 3-1: ucan: probe failed; try to update the device firmware [ 694.847571][T11276] usb 3-1: USB disconnect, device number 41 [ 803.840349][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 803.847316][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11361/1:b..l P11796/1:b..l [ 803.857061][ C0] rcu: (detected by 0, t=10502 jiffies, g=63797, q=108 ncpus=2) [ 803.864767][ C0] task:kworker/0:12 state:R running task stack:24392 pid:11796 tgid:11796 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 803.879412][ C0] Workqueue: events_power_efficient gc_worker [ 803.885485][ C0] Call Trace: [ 803.888749][ C0] [ 803.891669][ C0] __schedule+0x14bc/0x5000 [ 803.896176][ C0] ? __pfx___schedule+0x10/0x10 [ 803.901028][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 803.906304][ C0] preempt_schedule_irq+0xb5/0x150 [ 803.911399][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 803.917115][ C0] ? finish_task_switch+0x23d/0x940 [ 803.922316][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 803.928118][ C0] irqentry_exit+0x5d8/0x660 [ 803.932694][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.938664][ C0] RIP: 0010:lock_acquire+0x16c/0x340 [ 803.943944][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 94 41 e0 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 803.963542][ C0] RSP: 0018:ffffc90003e9f880 EFLAGS: 00000206 [ 803.969598][ C0] RAX: dfcc7982f5d0fc00 RBX: 0000000000000000 RCX: dfcc7982f5d0fc00 [ 803.977551][ C0] RDX: 0000000050b361dd RSI: ffffffff8d97865c RDI: ffffffff8bc07c60 [ 803.985504][ C0] RBP: ffffffff89849514 R08: ffffffff89849514 R09: ffffffff8df41a60 [ 803.993473][ C0] R10: dffffc0000000000 R11: fffffbfff1f040ef R12: 0000000000000002 [ 804.001426][ C0] R13: ffffffff8df41a60 R14: 0000000000000000 R15: 0000000000000246 [ 804.009399][ C0] ? gc_worker+0x264/0x1380 [ 804.013902][ C0] ? gc_worker+0x264/0x1380 [ 804.018398][ C0] ? gc_worker+0x264/0x1380 [ 804.022884][ C0] gc_worker+0x285/0x1380 [ 804.027192][ C0] ? gc_worker+0x264/0x1380 [ 804.031675][ C0] ? gc_worker+0x264/0x1380 [ 804.036157][ C0] ? __pfx_gc_worker+0x10/0x10 [ 804.040911][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 804.046109][ C0] ? process_one_work+0x868/0x15a0 [ 804.051222][ C0] process_one_work+0x93a/0x15a0 [ 804.056154][ C0] ? __pfx_process_one_work+0x10/0x10 [ 804.061515][ C0] ? assign_work+0x3c7/0x5b0 [ 804.066089][ C0] worker_thread+0x9f5/0xee0 [ 804.070674][ C0] kthread+0x711/0x8a0 [ 804.074726][ C0] ? __pfx_worker_thread+0x10/0x10 [ 804.079814][ C0] ? __pfx_kthread+0x10/0x10 [ 804.084386][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 804.089565][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 804.094739][ C0] ? __pfx_kthread+0x10/0x10 [ 804.099325][ C0] ret_from_fork+0x599/0xb30 [ 804.103898][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 804.108992][ C0] ? __switch_to_asm+0x39/0x70 [ 804.113732][ C0] ? __switch_to_asm+0x33/0x70 [ 804.118474][ C0] ? __pfx_kthread+0x10/0x10 [ 804.123047][ C0] ret_from_fork_asm+0x1a/0x30 [ 804.127830][ C0] [ 804.130874][ C0] task:syz-executor state:R running task stack:19496 pid:11361 tgid:11361 ppid:11346 task_flags:0x400140 flags:0x00080000 [ 804.144325][ C0] Call Trace: [ 804.147595][ C0] [ 804.150604][ C0] __schedule+0x14bc/0x5000 [ 804.155100][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 804.160025][ C0] ? __pfx___schedule+0x10/0x10 [ 804.164883][ C0] ? irqentry_exit+0x5dd/0x660 [ 804.169645][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 804.174857][ C0] preempt_schedule_notrace+0xd1/0x110 [ 804.180308][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 804.186394][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 804.192277][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 804.198419][ C0] ? is_module_text_address+0x1d/0x1e0 [ 804.203861][ C0] rcu_is_watching+0x7f/0xb0 [ 804.208454][ C0] ? is_module_text_address+0x1d/0x1e0 [ 804.213889][ C0] is_module_text_address+0x147/0x1e0 [ 804.219243][ C0] kernel_text_address+0x94/0xe0 [ 804.224187][ C0] __kernel_text_address+0xd/0x40 [ 804.229194][ C0] unwind_get_return_address+0x4d/0x90 [ 804.234631][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 804.240775][ C0] arch_stack_walk+0xfc/0x150 [ 804.245438][ C0] stack_trace_save+0x9c/0xe0 [ 804.250089][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 804.255452][ C0] ? do_raw_spin_lock+0x121/0x290 [ 804.260460][ C0] save_stack+0xf5/0x1f0 [ 804.264683][ C0] ? __pfx_save_stack+0x10/0x10 [ 804.269523][ C0] ? free_unref_folios+0xdb3/0x14f0 [ 804.274696][ C0] ? folios_put_refs+0x584/0x670 [ 804.279612][ C0] ? shmem_undo_range+0x49e/0x1490 [ 804.284699][ C0] ? shmem_evict_inode+0x26e/0xa70 [ 804.289789][ C0] ? evict+0x5f4/0xae0 [ 804.293832][ C0] ? do_unlinkat+0x340/0x560 [ 804.298412][ C0] ? __x64_sys_unlink+0x47/0x50 [ 804.303239][ C0] ? do_syscall_64+0xfa/0xf80 [ 804.307892][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.313942][ C0] ? page_ext_put+0x97/0xc0 [ 804.318426][ C0] __reset_page_owner+0x71/0x1f0 [ 804.323345][ C0] free_unref_folios+0xdb3/0x14f0 [ 804.328350][ C0] ? __page_cache_release+0x8a6/0xbb0 [ 804.333701][ C0] ? folio_unqueue_deferred_split+0x93/0x230 [ 804.339660][ C0] folios_put_refs+0x584/0x670 [ 804.344409][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 804.349675][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 804.355980][ C0] shmem_undo_range+0x49e/0x1490 [ 804.360912][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 804.366214][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 804.371405][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 804.376767][ C0] ? stack_depot_save_flags+0x40/0x850 [ 804.382217][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 804.387136][ C0] shmem_evict_inode+0x26e/0xa70 [ 804.392052][ C0] ? inode_wait_for_writeback+0x14d/0x370 [ 804.397755][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 804.403186][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 804.409346][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 804.414521][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 804.419955][ C0] evict+0x5f4/0xae0 [ 804.423851][ C0] ? __pfx_evict+0x10/0x10 [ 804.428245][ C0] ? _raw_spin_unlock+0x28/0x50 [ 804.433073][ C0] ? iput+0xcc6/0x1030 [ 804.437127][ C0] do_unlinkat+0x340/0x560 [ 804.441521][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 804.446436][ C0] ? strncpy_from_user+0x150/0x2c0 [ 804.451527][ C0] ? getname_flags+0x1e5/0x540 [ 804.456270][ C0] __x64_sys_unlink+0x47/0x50 [ 804.460928][ C0] do_syscall_64+0xfa/0xf80 [ 804.465435][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.471487][ C0] ? clear_bhb_loop+0x60/0xb0 [ 804.476151][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.482026][ C0] RIP: 0033:0x7fed2d18ecf7 [ 804.486423][ C0] RSP: 002b:00007fff077c5428 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 804.494853][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed2d18ecf7 [ 804.502835][ C0] RDX: 00007fff077c5450 RSI: 00007fff077c54e0 RDI: 00007fff077c54e0 [ 804.510794][ C0] RBP: 00007fff077c54e0 R08: 0000000000000000 R09: 0000000000000000 [ 804.518745][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff077c6570 [ 804.526733][ C0] R13: 00007fed2d213d7d R14: 00000000000a99e0 R15: 00007fff077c65b0 [ 804.534694][ C0] [ 804.537714][ C0] rcu: rcu_preempt kthread starved for 10567 jiffies! g63797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 804.548887][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 804.558863][ C0] rcu: RCU grace-period kthread stack dump: [ 804.564741][ C0] task:rcu_preempt state:R running task stack:27568 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 804.578192][ C0] Call Trace: [ 804.581453][ C0] [ 804.584367][ C0] __schedule+0x14bc/0x5000 [ 804.588871][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 804.594046][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 804.599919][ C0] ? __pfx___schedule+0x10/0x10 [ 804.604757][ C0] ? schedule+0x91/0x360 [ 804.608986][ C0] schedule+0x165/0x360 [ 804.613123][ C0] schedule_timeout+0x12b/0x270 [ 804.617953][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 804.623304][ C0] ? __pfx_process_timeout+0x10/0x10 [ 804.628626][ C0] ? prepare_to_swait_event+0x341/0x380 [ 804.634155][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 804.638992][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 804.643912][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 804.649100][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 804.654362][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 804.659549][ C0] ? finish_swait+0xcd/0x1f0 [ 804.664124][ C0] rcu_gp_kthread+0x99/0x390 [ 804.668694][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 804.673871][ C0] ? __kthread_parkme+0x7b/0x200 [ 804.678787][ C0] ? __kthread_parkme+0x1a1/0x200 [ 804.683789][ C0] kthread+0x711/0x8a0 [ 804.687837][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 804.693016][ C0] ? __pfx_kthread+0x10/0x10 [ 804.697587][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 804.702763][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 804.707938][ C0] ? __pfx_kthread+0x10/0x10 [ 804.712506][ C0] ret_from_fork+0x599/0xb30 [ 804.717073][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 804.722187][ C0] ? __switch_to_asm+0x39/0x70 [ 804.726939][ C0] ? __switch_to_asm+0x33/0x70 [ 804.731680][ C0] ? __pfx_kthread+0x10/0x10 [ 804.736248][ C0] ret_from_fork_asm+0x1a/0x30 [ 804.741000][ C0] [ 804.743999][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 804.750300][ C0] Sending NMI from CPU 0 to CPUs 1: [ 804.755499][ C1] NMI backtrace for cpu 1 [ 804.755516][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.755537][ C1] Tainted: [L]=SOFTLOCKUP [ 804.755542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.755551][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 804.755570][ C1] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c0 0c 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 804.755583][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 804.755597][ C1] RAX: 099c9a76fb3e7500 RBX: ffffffff8197971a RCX: 099c9a76fb3e7500 [ 804.755609][ C1] RDX: 0000000000000001 RSI: ffffffff8d791c9e RDI: ffffffff8bc07c60 [ 804.755620][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 804.755631][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f820770 [ 804.755643][ C1] R13: 1ffff11003a57b70 R14: 0000000000000001 R15: 0000000000000001 [ 804.755653][ C1] FS: 0000000000000000(0000) GS:ffff888125f34000(0000) knlGS:0000000000000000 [ 804.755666][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.755676][ C1] CR2: 0000000000000002 CR3: 0000000033852000 CR4: 00000000003526f0 [ 804.755689][ C1] Call Trace: [ 804.755697][ C1] [ 804.755703][ C1] default_idle+0x13/0x20 [ 804.755719][ C1] default_idle_call+0x73/0xb0 [ 804.755737][ C1] do_idle+0x1ea/0x520 [ 804.755753][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 804.755770][ C1] ? __pfx_do_idle+0x10/0x10 [ 804.755793][ C1] cpu_startup_entry+0x44/0x60 [ 804.755810][ C1] start_secondary+0x101/0x110 [ 804.755824][ C1] common_startup_64+0x13e/0x147 [ 804.755851][ C1]