last executing test programs: 13.474258882s ago: executing program 1 (id=201): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 13.177891574s ago: executing program 1 (id=202): r0 = syz_open_dev$loop(0x0, 0x1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc01070ce, 0x0) 12.840063893s ago: executing program 1 (id=205): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) capset(0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) getpriority(0x0, r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500"], 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 9.404546048s ago: executing program 1 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e22000fff0058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b", 0x4d}], 0x1) 8.990203444s ago: executing program 4 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB='$\x00z'], 0x40}}, 0x4000010) 8.725561314s ago: executing program 4 (id=217): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x2000c5fb, @value=0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x32, 0x8001, 0x3, 0x0, 0x0, 0x7, 0xfa13, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="0e0100000000000000000400df0400000400870004008700040087000800a00013000001dd00080057005f050000eb9db1bc9eb2020000000000000094df44fb6551ee"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc", 0xc, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 8.693454512s ago: executing program 0 (id=218): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x55e002) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000000)={0x4c58, 0x8001, 0x200}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) tkill(r1, 0x7) 8.605923024s ago: executing program 2 (id=219): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079000000000095"], 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf25060000001400020020010000000000000000002e0000040114000300fe88000000000000000000000000010000000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a73685f00"], 0x70}, 0x1, 0x0, 0x0, 0x480d0}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 8.199412392s ago: executing program 0 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x204) 8.052541068s ago: executing program 2 (id=221): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x8, 0x70bd29, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}}, 0x4044) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0xa4af, 0x2, 0x100}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 7.560529412s ago: executing program 2 (id=222): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r4, 0x0, 0x0, 0x122, 0x0) shutdown(r4, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f2", 0x7b, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000000)={r6, 0x1000, &(0x7f0000002a80)=""/4096}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000300000000000000000020000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150004000000"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) socketpair(0x21, 0x7, 0x3ff, &(0x7f0000000200)) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 7.313169563s ago: executing program 0 (id=223): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) capset(0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) getpriority(0x0, r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500"], 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 5.711646135s ago: executing program 3 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x1c, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 5.488156741s ago: executing program 1 (id=225): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x11, 0x3, 0x8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "da880c4f7e37eb8685"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040), 0x0, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000003c0), &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.368616128s ago: executing program 3 (id=226): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240), 0x0, 0x4000800) 4.925531028s ago: executing program 3 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB='$\x00z'], 0x40}}, 0x4000010) 4.500746978s ago: executing program 3 (id=228): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x81}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xa4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x8c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x58, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x2c, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae0488"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xe0}}, 0x20004880) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.098889386s ago: executing program 3 (id=229): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x40, 0xa00) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000180)=0xfffffc00) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000100)={0x0, 0x2}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.833385511s ago: executing program 0 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0xfc, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b53d886c8039b6dc"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e27449ce79eed13f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "39c070ea84808890"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fc030e8822ac56db0bf8f1830c1fc44c1b8c1cfe15ca9c03"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dd68856dc18f411ac6258de95af5af1d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d22e84d677eb33d54db3b3d2310ee507"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5a3eb6d88f182c319b9a49bd3ae4cbecff99a4661dd19d70bd0b27c6e71f19dd"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fc2ea5641216bccc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "70d1a9b2f614255c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "74fdeeb2fd97649d"}, @NL80211_REKEY_DATA_KCK={0x7, 0x2, @kck="a77d1785bc18b62326d1dd25e30da5ba"}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x60000081}, 0x4c840) 3.064121209s ago: executing program 4 (id=231): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079000000000095"], 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf25060000001400020020010000000000000000002e0000040114000300fe88000000000000000000000000010000000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a73685f00"], 0x70}, 0x1, 0x0, 0x0, 0x480d0}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.972201293s ago: executing program 2 (id=232): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.810715143s ago: executing program 4 (id=233): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0x16e3}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.765143375s ago: executing program 3 (id=234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.197001274s ago: executing program 2 (id=235): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000300)=[{0x80f, 0x9210, 0x0, 0x0}, {0x7fff, 0x2a10, 0x0, 0x0}, {0x769, 0x210, 0x0, 0x0}], 0x3}) 1.847876878s ago: executing program 1 (id=236): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0xd2, 0x2a51, 0x0, 0x0}], 0x1}) 1.845477621s ago: executing program 4 (id=237): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_usb_connect(0x5, 0x239, &(0x7f00000020c0)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write$nci(r1, &(0x7f0000000180)=@DATA={0x1, 0x1, 0x0, 0x0, 0x7, "ce31f026780f74dba5e2693aa65dcfb569a44d36e8215ec712fb237df45e180dcfbb13fed9be8c852d3f897292de8f7953436d399a9401300399008abbc2fe0cb98f596c49af96dd4fe8d168c4060f681b8b7a4c7634eadd4f88947d77c125f29aee81c6022a2b9d39c0efbf07a81cdb4eb141f37c6113f84ccb77"}, 0x7e) 846.982629ms ago: executing program 0 (id=238): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [], {0x14, 0x10}}, 0x28}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"eb9d8988e81b395b45bd0cba3a8483077474dd3dd0c47bc253e5f8e8b4292aac2796001366e4c71f9f35008b53e42578e610c78571ad7fd714bbf1d6fd513c82063c7b62f80247dae47c5c719fcb141465938af815fb5f2695978afaf02bc89e649ba154d25cd9128fa00c4655085aaa52d42552f2b09df1d9bb0e372396aa8bcb1358797975d0f0609075102a2744764709002ff83c2341d3365f98a022a3adb2984c475f59af4129dbfd9a93d73ebd4e3cb4f1e4ab97495820ac3a2091f1a472e09074da690ef8a1271c19fa97898e3be7b5000d91bbc78a0e2415b557a6ac425159469271188e5adbb631ee32f1c01b8aab308dad8548079f00eb770e058ec6480cb78a47d832ff6f7d23348118d2a8a317c1d0cb05299e4541dd566ca584cbe7508ab24fa6fdd1e5fd301a57f7b01f55543d5289911b1040011acfa9247e9f2b08635fc066b8725bc114c59fdb3e3f29ce4457a59c64567f1fea4a17185e7edde0ccc64cf9d0086ef292c318c8a56b28406cdcfd091245a8e0fa721e11aa064b642d9afbcf3dd23c79c466e634e84e0ccf866e8bcc03a6e6ac823fe6056a7aa6aa8622969e263eff3fb74ea46e0bd6a1ce08244e39f59df03e6cdd7fdc2811c4c1719099a56f1c5e07ab0e7d6a07192dcc0d03f6bcbc2323f4606b52950e3ebf54b379a97bb4c0c27db1e0824068a353aa025258f16eec23148997eb0f14ade49c1216cfd2ce324f289ddcf0ff8247984c4589692e9b64c2fbbc1272a3e532122e65f97cec13564ece0b7029c2c34ca9c7a9557d487336d849513afaaaa6c1a0388e72dba891750cebb09747cdadd4228b66ce5972f9c67bc4bd795753bc83fd36897edb29a4d9ca5c5cbb0e92dab163d6c980ef76a5f79f6f05f9a7e0e745a129cbbfc12281f9566f656b1f9de9bec23d3a2bec3852430fb7dcbc692e0fcccb69402639a0e1693a70a5983a462b001131a4774e5e3d8bd9a19389ab7e819a77ae145d2ca8e4477215905e8e1dce02ccd3f8942744313a30b68025844e5a68a9a2dd382a3a32042c232459a776d6e1741eec549b4d2867580fc511393281917f5145952997aebd29d8056d4282586ccd91d633a7c1764012e09d7746fef7246eb56640fef2bdd74b78fbcaa32e6b6f4136431a51229956a8a8149de241511e2760f997886e098fc1847adee880f3ae61a1240581e13758be18a33bde20ffad43a0ae9a4f7144a16993858e445c7c5bc83e13dfeb81ae6fc11be70e0ab490ab976106e3d8e627c44df3ac588239fbf885a2439b69e5a121245fd3c42c86555b198452ffcac7168d789ff3f61da76d389b0fc1e6c39df6608824babcb098c509e0def7f1701e67ab7d6c64ab5150eaaadbe38a11673fee8d286d88ae6f39241966fa6df46464166db4f41d67596d9d67382f1069042ee118b0af630a5e12f07d8cfa4183f2c28b27a6105d69804508235f877693cf1f359ffb95b585496b941c2e3f2170d916ded547beee1ae24e1724f17cb85cfcba15e1cbabe44e60b16c2ac4f4afed9506e25bd35a8897de4ae4a4c929b25289f75b2da34a1b65edfc2dd74b74b8f3d74f1387805cf5933a616798fa890718c9ebd6079c26a5f732298f8e8a2e378fccffd7fc3ecc8b10d1cd013a7340b7842c4b1dff0e9f2ea70329fb9c3013151f43fa5bad0dd5f61a92da5a78e68052ab72c38d915136184a49da2a6b6e248e9d106777c1bde4dfc94f8a4a29dfa95fe7681516061a83650c8b39968bd3a7a34b34e93844fc8ed8a84b59f7e657a025592db7a7252491b18695693a68d178564909e5971b8956479e518a1202af31718fe22f4e65c93a9a08e802e07fd274e5a23cb466a7b48cf344a2176d61ef27d348b40a510e8cc8e372693cb6c1c7cfb4e3972fbe4204f0048bc53793e049b0484b3bbe6d3b6a986bc2c95fdb63f60ebfdbea38b48405a8b85ee84568fb6921a75fb54e9026671ed43b923286d64d60c9060a86c2217f98f049259d99d0c5ce4889b165557fa4536a6d5222eb289a6dd83ff235dbde83897d1627f6d85c3e551997007b5219c5b010d53b92879e19951ba21db665f724d7c45da7c635f3a982047a1ebed638dca4f3e97ee036e18ae68d37cd8fda64fac7dce84587311b2e17420c31d50a5da4d052052ea1b4116aa9a0ef20434420c51887cf2d03a1d578925f19e700451f404413f7371693f2e0a622e1ae49daccd12de5ec59d2acbb635d854ce22a418f143c3a637dc731d45c5d1c38adcb770602a92f3de006a4eef1d838b91178476ff168fa639eb5b420da8a343a0ec6e6144cc802eb08d1833beb6ca18ffa1fd7b019bb2d02c97d62963a8a9180769323d8e45639b68aaa56775306bdc6c020678ecd64e751fb92c85dc474bbde8f94c029d92dea48b837c7b5524dc061374e637e299fef6b1355ce23d0f649f0e61402d375bb444a37a22a812821ade48df3be021ecacff6873654bf21e111d079f5bb140568b5c4b77f1aaa22416ab983eb8fe903286fdf114024622f443686078c8318329aebe5df891a9a91bd5512b3aed59557de62d1a9586e10fa07306f815fc10204200d6282813f729c3f8e8af7c450f55037397125ef5e806306a9ba351a6f3e1dede486bc75ae897581b649ef55f19c97b330c5a61a6f76674722429ea894d1c638074cedb0b863514c19166a5c2baf4ee6d1eaeee85155afd10fdd4361c78b3c0d00d01a37df52be0ed3458bc7a1afa0c8c9a2f3406b1e4607e955f57f626c7ed2efac888e72110e0dc0f79cfdd02bc245f0b3a7939bbdc31229ab99ecd36927e1fdd7b17b5037457856fe3f773b6af24af6d67cbd7978e2f127b86b50153e9b0f13f4942006198d6a6ac335cf7560676fd607e6a3a7b518fa815def5eca1372813f97d6ea9d62b848db37015aa648c8426f26776728332fad5f72c919a6f96d1c3b0a97df4c1892ff814e2e57979da7f7098c42b963ca5929765b1ad2284abd2c1f7ef9570b8c97a513da8f4078130e70f31327708619331571d78d3475b6b41e835dc948f0e809c6610942e4c7d515d9303e6281a3980a742dc85f4528fddc34d22bbd9aa4b4b2351df10884f1dbc877717d984b0b3bafda47801103cda459d006a9a9982f5cf67fc0face3def54d579358e623dae4d9b4248cebd82111cf4c431f8852bcf862a65a124ca709cec2454e4c65514128bc2d6f8cc92624f20c02b008081d334cc7fa0b8e8d9d3dfe2a283600e875c7ecb8e4949f958f6f84f8e52b78e3eae58fa02d85bb8ac52ddf3b262ec52eca50d6d590139c24c042e1c040d8da6c9a2e95055dc91ed65881bc4c43c13c240eb9f6ef9a4cffb44e96c9c055cbbc10b5d63850bc3e2fa46aabb2c732c0c31bf1dba3ad1ce2b1b671259aaaef955d39c420b18d78828248563cacd9417ef2cb63859ebef3936e26803e7ccf5233cb3c0a2f440d898ff258cb03a783415a6f81b1b1a07bb5cef530c78c30ec9adfd2df246d581bc662336d5029f65588995adc3190e97a418c15fa3620eb68cdcc6233f1aa0009ab558b22ae9316003c6af1fe0d7807e583943e48692fcd9fa2525fefe3467d099951c83943312f0e889cef4c1ecf17ad469f5ad683b405eb59230e89df96e8dd94e41e5f62822ba957e065f22d96b1c0c2b83f5a57fbb04d5af399ece3ddd52e5afff783a876e2066fbe30963421acb427c95fd3e7bc6b7d3d731a7e347052cd9636805cab94ad40bdb63a264b3127c7f8d21d25810bd2eadb2c3e31b5c807283ad062d750e5b21ec1e20cc3ac5753ac536faf23e2b5c37e9d021870b0350ecea7187643a00a08ec3ffaf7e6c236c4d694ff41af7b5fbf8a554949f5026a8b2adcf377f94848cd17fbcc0249e796008962d3db16b4bb85483dbe75ef5b301175e052203436b38248fbd1a28a5e2b3ab75c77eb8f853e60e95d5f16cb9858b33b3752b4c69776ec4506ba2bd490a6f17aae1152d8762d86cc0ef32788cf149e8fa9464c3ea588f15d8eb2092254c470acf221cfe680845167fc6778b8af1609681ae4f4e65426ce059b9768eb2e0c89f29de7b91db89a72e4c677c65dd980f9a6bfa656ed01d5e683a33e6b80462139476225cc0fcc309d926c36aa250bdad1454db46cd2536046f909a05b08829cad973bc705231a32a5f2e7ac5e96e2315cb175724607a5af02073fc936272aa724990ba6dcc4ea79da6eb7ec0bbdbd0a878114c493bc4b3e26e24b18553bd0a617981d8ea9e91ed2e3bcbd48f5d67aa913790bf52c31435184d6c73079e964e9ef05194e88b072b372d48cb70dbca99238c4474ed0b6932cc1b233bce0c87d48d478fa3c937c42c8637714e9995041f8b2b7dce17eb2f26c730f5559cf5919b88ee00bbf40726f90e1cf29e0f5fadc64de1bf28d447e8996948dc2fe658620b6fb8cfc592d5e0621b66057eb774c31ab16235456210c5ee7990b71b5b3d51cf13e30361a8cdaa107b13fa6a1c84b172efece3b70753e81e7e9e572d228c7bbcdaba40d8d0eb4de13bda1fca38d3ed667bb0897335aadaa0c3905a1283292c89ef5747ad5462db4011c3f8a4a476aa78d74badf8bf3785997ba9824e21256eed4c2805331fa24c81e28f21e895a0b03e7de52787065faded0f1b59eba1c922dce5576e8ab190ef716c021d8dfa13a1e73b8962d9f9238ba8b9fa2cf84addfe37e78cdb398ee4c0642a716fb8db1e332f873a16c6225ebc51fe05f33273380e64272159bb808336e87b4b0cddb492a992b2e7f423bf37725e1d9dda0dc6b4426172c2a93ee1cc9acea7fe1ece9ba0ddee3e232efb11fc4d4e266cd2a83c017e32315c434b73e9729d5a3a7fe993e72f9bb70d78672493263a2653fe1bfd42d1f97cbf0fffb6705b2e35fe65ceb9ad7ddc525b689027352db9c194939559ebb3b505a58e0404103482ce10f7d67761c13b235b52ad1b25803aa94cf7df5ca8d8bd0d4e6d0ab8bcfb8f72a26cecf071e31c02a1034c0144d850f173292698ff010000f0a197da3703d74d3e951ed510ed38a8fcae93eb2bebdf92e0feb0f06dbe1331cb43cfa548ca294ea479ecb325aea7aff8d924745298a3d34f23f40b992995a908130165b44beb8cc9da8390dae2a09cb7e1ac7e95b84f35e7be147b4be04883047cdcaec662aa8b66694ae8914e65edb63696494bff66eacb3aecdb23746a36cec7f832d628d38698ba6b3d4020095eae2a5b36a21039ce50901cdf2582b88ab8c86c6f4a8c345618f10d7aab081edb3ce8e4479e0ac476112d4b261cb8ed952221fb660898491fc7134b091c0565173bebf014caffae12852b5314c930d41e27bcfa7bc536fc4da3b714630e1ac7aaf006755da1da792dcad08f796c2ebdd6427ad3374e25132a103d62f98584462aa164d742b4d7c668a85119480199dd90f0a903f6c76cfca28b84a2279ae6965fdec403072be146d2d1f39b122113fbcfb52cf8c7c1d47a32f437b895bcd7a67ad08f196112a15b07e5b57b4db2b7c7f70a42923d6d0625515375b9281d331bd1e5dd75ff3a6e1ca5b75eb328e6c935f2c8f0c57b0aaf2ad85983160b0e53fca44d95e956ef2726d97acb2da34ca4482bb86aabde6d8b8b85da2e44ae89b8359f7edb88a3e2a9aad23125b8c2bd0c7be0847ac9b1e16db2c395e0c9eb040af710c31d32f7b356bfb6f1704f4d884f37c15b865eda87685ae8926fbf3a4465e7e2968ee18ea1ff5d4f4cbfb55634089687b9f0bce5b9cf10779299893cf64980193fd3a1096507e7a8be00", 0x1000}}, 0x1006) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) 435.565736ms ago: executing program 0 (id=239): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 199.554924ms ago: executing program 2 (id=240): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x4) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 0s ago: executing program 4 (id=241): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x2000c5fb, @value=0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x32, 0x8001, 0x3, 0x0, 0x0, 0x7, 0xfa13, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="0e0100000000000000000400df0400000400870004008700040087000800a00013000001dd00080057005f050000eb9db1bc9eb2020000000000000094df44fb6551ee"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc", 0xc, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): [ 97.580462][ T1789] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 102.011671][ T5787] cgroup: Unknown subsys name 'net' [ 102.253795][ T5787] cgroup: Unknown subsys name 'cpuset' [ 102.308397][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 104.376203][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.029584][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.031587][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.034183][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.084533][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.085677][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.101099][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.102428][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.104775][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.105176][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.105714][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.106308][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.107690][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.108823][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.119407][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.147010][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.149100][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.158955][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.159428][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.160679][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.175478][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.193035][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.220355][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.230905][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.279951][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.337364][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.399465][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 108.451161][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 108.500709][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 108.561101][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 108.647733][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 108.896722][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.907894][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.908879][ T5800] bridge_slave_0: entered allmulticast mode [ 108.912020][ T5800] bridge_slave_0: entered promiscuous mode [ 108.993635][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.993765][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.994027][ T5800] bridge_slave_1: entered allmulticast mode [ 108.995828][ T5800] bridge_slave_1: entered promiscuous mode [ 109.060522][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.060644][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.060768][ T5802] bridge_slave_0: entered allmulticast mode [ 109.063011][ T5802] bridge_slave_0: entered promiscuous mode [ 109.113070][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.113220][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.113348][ T5803] bridge_slave_0: entered allmulticast mode [ 109.115305][ T5803] bridge_slave_0: entered promiscuous mode [ 109.157356][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.157502][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.157686][ T5802] bridge_slave_1: entered allmulticast mode [ 109.159667][ T5802] bridge_slave_1: entered promiscuous mode [ 109.220538][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.220664][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.221478][ T5803] bridge_slave_1: entered allmulticast mode [ 109.223727][ T5803] bridge_slave_1: entered promiscuous mode [ 109.225257][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.225411][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.225542][ T5801] bridge_slave_0: entered allmulticast mode [ 109.231140][ T5801] bridge_slave_0: entered promiscuous mode [ 109.260538][ T5804] Bluetooth: hci2: command tx timeout [ 109.260544][ T5811] Bluetooth: hci4: command tx timeout [ 109.334057][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.337450][ T5811] Bluetooth: hci0: command tx timeout [ 109.337630][ T5811] Bluetooth: hci1: command tx timeout [ 109.373656][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.373764][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.374086][ T5801] bridge_slave_1: entered allmulticast mode [ 109.376106][ T5801] bridge_slave_1: entered promiscuous mode [ 109.417593][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.417707][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.418044][ T5806] bridge_slave_0: entered allmulticast mode [ 109.419856][ T5806] bridge_slave_0: entered promiscuous mode [ 109.425377][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.427772][ T5804] Bluetooth: hci3: command tx timeout [ 109.505510][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.505852][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.505978][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.506409][ T5806] bridge_slave_1: entered allmulticast mode [ 109.517061][ T5806] bridge_slave_1: entered promiscuous mode [ 109.570810][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.623075][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.672115][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.676221][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.739879][ T5800] team0: Port device team_slave_0 added [ 109.766693][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.784223][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.812697][ T5800] team0: Port device team_slave_1 added [ 109.857667][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.859856][ T5802] team0: Port device team_slave_0 added [ 109.899172][ T5803] team0: Port device team_slave_0 added [ 109.953336][ T5802] team0: Port device team_slave_1 added [ 109.983807][ T5803] team0: Port device team_slave_1 added [ 109.990915][ T5801] team0: Port device team_slave_0 added [ 110.041246][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.041259][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.041279][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.112064][ T5801] team0: Port device team_slave_1 added [ 110.114237][ T5806] team0: Port device team_slave_0 added [ 110.154055][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.154074][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.154103][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.240730][ T5806] team0: Port device team_slave_1 added [ 110.241494][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.241506][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.241525][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.303405][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.303425][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.303453][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.375473][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.375487][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.375507][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.383170][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.383214][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.383291][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.390358][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.390403][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.390480][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.569043][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.569062][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.569091][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.130776][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.130801][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.130821][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.212194][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.212209][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.212229][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.312785][ T5800] hsr_slave_0: entered promiscuous mode [ 111.314627][ T5800] hsr_slave_1: entered promiscuous mode [ 111.337452][ T5804] Bluetooth: hci4: command tx timeout [ 111.337486][ T5804] Bluetooth: hci2: command tx timeout [ 111.405484][ T5802] hsr_slave_0: entered promiscuous mode [ 111.406782][ T5802] hsr_slave_1: entered promiscuous mode [ 111.412431][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 111.412775][ T5802] Cannot create hsr debugfs directory [ 111.418982][ T5811] Bluetooth: hci1: command tx timeout [ 111.418995][ T5804] Bluetooth: hci0: command tx timeout [ 111.445516][ T5803] hsr_slave_0: entered promiscuous mode [ 111.446697][ T5803] hsr_slave_1: entered promiscuous mode [ 111.452112][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 111.452196][ T5803] Cannot create hsr debugfs directory [ 111.497409][ T5804] Bluetooth: hci3: command tx timeout [ 111.530854][ T5801] hsr_slave_0: entered promiscuous mode [ 111.534324][ T5801] hsr_slave_1: entered promiscuous mode [ 111.535212][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 111.535232][ T5801] Cannot create hsr debugfs directory [ 111.591267][ T5806] hsr_slave_0: entered promiscuous mode [ 111.592674][ T5806] hsr_slave_1: entered promiscuous mode [ 111.593378][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 111.593405][ T5806] Cannot create hsr debugfs directory [ 112.571581][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.632739][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.676948][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.741097][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.904112][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.954236][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.998149][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.053533][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.185400][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.220545][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.254325][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.296746][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.417927][ T5804] Bluetooth: hci4: command tx timeout [ 113.427606][ T5804] Bluetooth: hci2: command tx timeout [ 113.474040][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.497930][ T5804] Bluetooth: hci0: command tx timeout [ 113.497964][ T5804] Bluetooth: hci1: command tx timeout [ 113.539989][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.575731][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.589281][ T5811] Bluetooth: hci3: command tx timeout [ 113.644873][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.782955][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.818682][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.860102][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.895813][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.942430][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.019415][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.063634][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.065370][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.098868][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.133719][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.133818][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.213426][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.268582][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.268731][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.273208][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.329830][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.329943][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.405598][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.421803][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.450238][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.450404][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.508326][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.508480][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.581952][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.642529][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.642746][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.675025][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.731214][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.731431][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.857024][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.918499][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.918653][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.984374][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.984594][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.062765][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.360273][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.438204][ T5800] veth0_vlan: entered promiscuous mode [ 115.497664][ T5811] Bluetooth: hci2: command tx timeout [ 115.497698][ T5811] Bluetooth: hci4: command tx timeout [ 115.516531][ T5800] veth1_vlan: entered promiscuous mode [ 115.577649][ T5804] Bluetooth: hci1: command tx timeout [ 115.577682][ T5804] Bluetooth: hci0: command tx timeout [ 115.584469][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.667823][ T5811] Bluetooth: hci3: command tx timeout [ 115.675196][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.744139][ T5800] veth0_macvtap: entered promiscuous mode [ 115.781558][ T5800] veth1_macvtap: entered promiscuous mode [ 115.793612][ T5802] veth0_vlan: entered promiscuous mode [ 115.899616][ T5802] veth1_vlan: entered promiscuous mode [ 115.919174][ T5803] veth0_vlan: entered promiscuous mode [ 115.926867][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.991471][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.028192][ T5803] veth1_vlan: entered promiscuous mode [ 116.051277][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.084216][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.102438][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.103077][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.133174][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.236038][ T5802] veth0_macvtap: entered promiscuous mode [ 116.296405][ T5802] veth1_macvtap: entered promiscuous mode [ 116.416345][ T5803] veth0_macvtap: entered promiscuous mode [ 116.483099][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.483654][ T5803] veth1_macvtap: entered promiscuous mode [ 116.540972][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.541952][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.541970][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.632786][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.654099][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.679682][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.683076][ T5801] veth0_vlan: entered promiscuous mode [ 116.685941][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.695317][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.720747][ T5806] veth0_vlan: entered promiscuous mode [ 116.725484][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.725508][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.820421][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.854686][ T5801] veth1_vlan: entered promiscuous mode [ 116.928636][ T5806] veth1_vlan: entered promiscuous mode [ 116.959333][ T4700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.962650][ T4700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.030748][ T4700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.055344][ T4700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.288673][ T4539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.288695][ T4539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.364048][ T5918] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3'. [ 117.494928][ T5801] veth0_macvtap: entered promiscuous mode [ 117.564977][ T5806] veth0_macvtap: entered promiscuous mode [ 117.686089][ T5801] veth1_macvtap: entered promiscuous mode [ 117.697987][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.698005][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.754987][ T5806] veth1_macvtap: entered promiscuous mode [ 118.062739][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.062851][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.196193][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.398661][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.436142][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.472940][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.472956][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.519231][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.595358][ T1229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.625760][ T1229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.626591][ T1229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.627185][ T1229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.741941][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.763393][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.796156][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.812985][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.007301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.157291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.157366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.047958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.048259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.049393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.050753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.051048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.051920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.053134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.395351][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.395377][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.721631][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.721652][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.020482][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.020505][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.188787][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.188805][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.584998][ T5934] syzkaller0: entered promiscuous mode [ 121.585030][ T5934] syzkaller0: entered allmulticast mode [ 123.358021][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.615173][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 123.644805][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.664807][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.664838][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.664858][ T5887] usb 4-1: Product: syz [ 123.664873][ T5887] usb 4-1: Manufacturer: syz [ 123.664887][ T5887] usb 4-1: SerialNumber: syz [ 123.856415][ T5887] usb 4-1: config 0 descriptor?? [ 123.932105][ T5887] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.932137][ T5887] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 124.630393][ T5887] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 125.067558][ T5887] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.067591][ T5887] em28xx 4-1:0.0: board has no eeprom [ 126.188696][ T5964] em28xx 4-1:0.0: reading from i2c device at 0x1a4 failed (error=-5) [ 126.207330][ T5887] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 126.207370][ T5887] em28xx 4-1:0.0: dvb set to bulk mode. [ 126.209595][ T10] em28xx 4-1:0.0: Binding DVB extension [ 126.282563][ T5887] usb 4-1: USB disconnect, device number 2 [ 126.311059][ T5887] em28xx 4-1:0.0: Disconnecting em28xx [ 126.346747][ T10] em28xx 4-1:0.0: Registering input extension [ 126.351497][ T5887] em28xx 4-1:0.0: Closing input extension [ 126.411408][ T5887] em28xx 4-1:0.0: Freeing device [ 134.425932][ T5957] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 134.887321][ T5987] syz_tun: entered allmulticast mode [ 135.244643][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.691160][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 136.957434][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.119388][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.119415][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.119443][ T44] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 137.119459][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.215938][ T44] usb 5-1: config 0 descriptor?? [ 137.963273][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 137.963372][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 137.993590][ T44] usb 5-1: USB disconnect, device number 2 [ 138.386806][ T6034] syz_tun: entered allmulticast mode [ 138.545748][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.545845][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.447772][ T6058] netlink: 64 bytes leftover after parsing attributes in process `syz.3.49'. [ 141.727756][ T6058] syz.3.49 (6058) used greatest stack depth: 18136 bytes left [ 141.940514][ T37] audit: type=1326 audit(1770243018.482:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16130faeb9 code=0x7ffc0000 [ 141.947153][ T37] audit: type=1326 audit(1770243018.482:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16130faeb9 code=0x7ffc0000 [ 142.013182][ T37] audit: type=1326 audit(1770243018.542:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16130faeb9 code=0x7ffc0000 [ 142.013244][ T37] audit: type=1326 audit(1770243018.542:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16130faeb9 code=0x7ffc0000 [ 142.013277][ T37] audit: type=1326 audit(1770243018.542:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16130faeb9 code=0x7ffc0000 [ 142.013308][ T37] audit: type=1326 audit(1770243018.542:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16130faeb9 code=0x7ffc0000 [ 142.013338][ T37] audit: type=1326 audit(1770243018.542:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16130faeb9 code=0x7ffc0000 [ 142.082319][ T37] audit: type=1326 audit(1770243018.582:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16130fc747 code=0x7ffc0000 [ 142.183266][ T37] audit: type=1326 audit(1770243018.672:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f16130bb78e code=0x7ffc0000 [ 142.183307][ T37] audit: type=1326 audit(1770243018.722:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f16130bb78e code=0x7ffc0000 [ 142.452317][ T6088] netlink: 'syz.1.57': attribute type 15 has an invalid length. [ 144.588469][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.795708][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.810901][ T6096] batadv_slave_0: entered promiscuous mode [ 145.002300][ T6102] tipc: Started in network mode [ 145.002336][ T6102] tipc: Node identity 3a63e3ec0409, cluster identity 4711 [ 145.002991][ T6102] tipc: Enabled bearer , priority 0 [ 145.005800][ T6103] syzkaller0: entered promiscuous mode [ 145.005817][ T6103] syzkaller0: entered allmulticast mode [ 145.042316][ T6109] veth1_to_bond: entered allmulticast mode [ 145.070785][ T6113] tipc: Resetting bearer [ 145.140316][ T6098] tipc: Resetting bearer [ 145.394195][ T6098] tipc: Disabling bearer [ 145.671798][ T6109] veth1_to_bond: left allmulticast mode [ 145.813992][ T6134] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.71'. [ 145.931119][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 147.595298][ T6143] netlink: 64 bytes leftover after parsing attributes in process `syz.2.73'. [ 149.743628][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.744382][ T6180] batadv_slave_0: entered promiscuous mode [ 150.120129][ T6171] loop9: detected capacity change from 0 to 7 [ 150.151266][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151317][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151341][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151370][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151409][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151442][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151463][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151476][ T5990] ldm_validate_partition_table(): Disk read failed. [ 150.151494][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151515][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151536][ T5990] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.151559][ T5990] Dev loop9: unable to read RDB block 0 [ 150.151606][ T5990] loop9: unable to read partition table [ 150.151776][ T5990] loop9: partition table beyond EOD, truncated [ 150.244571][ T6171] ldm_validate_partition_table(): Disk read failed. [ 150.244634][ T6171] Dev loop9: unable to read RDB block 0 [ 150.244684][ T6171] loop9: unable to read partition table [ 150.244834][ T6171] loop9: partition table beyond EOD, truncated [ 150.244855][ T6171] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 150.244855][ T6171] ) failed (rc=-5) [ 150.449476][ T6184] ldm_validate_partition_table(): Disk read failed. [ 150.449540][ T6184] Dev loop9: unable to read RDB block 0 [ 150.449589][ T6184] loop9: unable to read partition table [ 150.493521][ T6184] loop9: partition table beyond EOD, truncated [ 150.871238][ T1789] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.097738][ T1789] usb 1-1: Using ep0 maxpacket: 16 [ 151.200059][ T1789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.200100][ T1789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.200137][ T1789] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 151.200159][ T1789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.205887][ T1789] usb 1-1: config 0 descriptor?? [ 154.384456][ T1789] usbhid 1-1:0.0: can't add hid device: -71 [ 154.384587][ T1789] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 154.487676][ T1789] usb 1-1: USB disconnect, device number 2 [ 156.089927][ T6206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'. [ 156.337362][ T5807] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 156.497404][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 156.503025][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 156.523898][ T5807] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.523929][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.523950][ T5807] usb 4-1: Product: syz [ 156.523965][ T5807] usb 4-1: Manufacturer: syz [ 156.523981][ T5807] usb 4-1: SerialNumber: syz [ 156.565244][ T5807] usb 4-1: config 0 descriptor?? [ 156.614240][ T5807] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.614277][ T5807] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 157.210613][ T5807] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 157.630094][ T5807] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 157.630125][ T5807] em28xx 4-1:0.0: board has no eeprom [ 157.828709][ T6242] netlink: 'syz.2.107': attribute type 4 has an invalid length. [ 157.939791][ T5807] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 157.939826][ T5807] em28xx 4-1:0.0: dvb set to bulk mode. [ 157.941601][ T31] em28xx 4-1:0.0: Binding DVB extension [ 158.005260][ T5807] usb 4-1: USB disconnect, device number 3 [ 158.026683][ T5807] em28xx 4-1:0.0: Disconnecting em28xx [ 158.191848][ T31] em28xx 4-1:0.0: Registering input extension [ 158.192226][ T5807] em28xx 4-1:0.0: Closing input extension [ 158.236205][ T5807] em28xx 4-1:0.0: Freeing device [ 159.041429][ T6258] binder: 6247:6258 ioctl 4018620d 0 returned -22 [ 159.796858][ T6268] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 159.796879][ T6268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.844270][ T6268] vhci_hcd vhci_hcd.0: Device attached [ 159.902533][ T6268] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 159.902556][ T6268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 159.902593][ T6268] vhci_hcd vhci_hcd.0: Device attached [ 159.902802][ T6272] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 159.902818][ T6272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.902930][ T6272] vhci_hcd vhci_hcd.0: Device attached [ 159.963815][ T6268] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 159.963843][ T6268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.963901][ T6268] vhci_hcd vhci_hcd.0: Device attached [ 160.009589][ T6268] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 160.009621][ T6268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.009922][ T6268] vhci_hcd vhci_hcd.0: Device attached [ 160.078866][ T6268] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 160.078897][ T6268] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.079458][ T6268] vhci_hcd vhci_hcd.0: Device attached [ 160.089280][ T6272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.148901][ T6272] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(27) [ 160.148931][ T6272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.185310][ T6272] vhci_hcd vhci_hcd.0: Device attached [ 160.201625][ T6268] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.211074][ T6272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.237615][ T5880] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 160.351891][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 160.351910][ T37] audit: type=1326 audit(1770243036.892:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e068baeb9 code=0x7ffc0000 [ 160.352087][ T37] audit: type=1326 audit(1770243036.892:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e068baeb9 code=0x7ffc0000 [ 160.352662][ T37] audit: type=1326 audit(1770243036.892:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e068baeb9 code=0x7ffc0000 [ 160.353017][ T37] audit: type=1326 audit(1770243036.892:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e068baeb9 code=0x7ffc0000 [ 160.353263][ T37] audit: type=1326 audit(1770243036.892:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e068baeb9 code=0x7ffc0000 [ 160.353963][ T37] audit: type=1326 audit(1770243036.892:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e068baeb9 code=0x7ffc0000 [ 160.354265][ T37] audit: type=1326 audit(1770243036.892:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e068baeb9 code=0x7ffc0000 [ 160.354526][ T37] audit: type=1326 audit(1770243036.892:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e068baeb9 code=0x7ffc0000 [ 160.354842][ T37] audit: type=1326 audit(1770243036.892:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e068bc747 code=0x7ffc0000 [ 160.382253][ T37] audit: type=1326 audit(1770243036.902:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3e0687b78e code=0x7ffc0000 [ 160.460173][ T6287] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 160.708793][ T6273] vhci_hcd: connection closed [ 160.710909][ T6275] vhci_hcd: connection closed [ 160.713302][ T6269] vhci_hcd: connection reset by peer [ 160.723605][ T6278] vhci_hcd: connection closed [ 160.725163][ T6285] vhci_hcd: connection closed [ 160.746903][ T6282] vhci_hcd: connection closed [ 160.747132][ T6280] vhci_hcd: connection closed [ 160.749072][ T12] vhci_hcd vhci_hcd.3: stop threads [ 160.753597][ T12] vhci_hcd vhci_hcd.3: release socket [ 160.811182][ T6289] netlink: 'syz.4.119': attribute type 15 has an invalid length. [ 160.907464][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 160.925364][ T12] vhci_hcd vhci_hcd.3: stop threads [ 160.925394][ T12] vhci_hcd vhci_hcd.3: release socket [ 160.925453][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 160.927974][ T12] vhci_hcd vhci_hcd.3: stop threads [ 160.927993][ T12] vhci_hcd vhci_hcd.3: release socket [ 160.928066][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 160.952596][ T12] vhci_hcd vhci_hcd.3: stop threads [ 160.952659][ T12] vhci_hcd vhci_hcd.3: release socket [ 160.959000][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 160.987410][ T12] vhci_hcd vhci_hcd.3: stop threads [ 160.987431][ T12] vhci_hcd vhci_hcd.3: release socket [ 160.987499][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 160.988028][ T12] vhci_hcd vhci_hcd.3: stop threads [ 160.988045][ T12] vhci_hcd vhci_hcd.3: release socket [ 160.988102][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 160.988296][ T12] vhci_hcd vhci_hcd.3: stop threads [ 160.988310][ T12] vhci_hcd vhci_hcd.3: release socket [ 160.988377][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 163.324443][ T6315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 163.324476][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.358603][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 163.400222][ T6315] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 163.400251][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.400304][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 163.443912][ T6315] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 163.443942][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 163.443994][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 163.472093][ T6315] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 163.472121][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.472262][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 163.481282][ T6315] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 163.481357][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.481626][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 163.536368][ T6329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 163.551931][ T6329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 163.556550][ T6329] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(27) [ 163.556577][ T6329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.556996][ T6329] vhci_hcd vhci_hcd.0: Device attached [ 163.587370][ T31] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 163.590733][ T6315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 163.590807][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 163.591080][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 163.599936][ T6329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 163.748105][ T6318] vhci_hcd: connection closed [ 163.748623][ T6316] vhci_hcd: connection reset by peer [ 163.748886][ T6321] vhci_hcd: connection closed [ 163.750528][ T6330] vhci_hcd: connection closed [ 163.750808][ T6324] vhci_hcd: connection closed [ 163.756928][ T6326] vhci_hcd: connection closed [ 163.761165][ T4013] vhci_hcd vhci_hcd.2: stop threads [ 163.761247][ T4013] vhci_hcd vhci_hcd.2: release socket [ 163.761448][ T4013] vhci_hcd vhci_hcd.2: disconnect device [ 163.761750][ T6331] vhci_hcd: connection closed [ 163.770775][ T4013] vhci_hcd vhci_hcd.2: stop threads [ 163.770839][ T4013] vhci_hcd vhci_hcd.2: release socket [ 163.771066][ T4013] vhci_hcd vhci_hcd.2: disconnect device [ 163.776216][ T4013] vhci_hcd vhci_hcd.2: stop threads [ 163.776272][ T4013] vhci_hcd vhci_hcd.2: release socket [ 163.776797][ T4013] vhci_hcd vhci_hcd.2: disconnect device [ 163.787543][ T4013] vhci_hcd vhci_hcd.2: stop threads [ 163.787618][ T4013] vhci_hcd vhci_hcd.2: release socket [ 163.787727][ T4013] vhci_hcd vhci_hcd.2: disconnect device [ 163.826050][ T4013] vhci_hcd vhci_hcd.2: stop threads [ 163.826113][ T4013] vhci_hcd vhci_hcd.2: release socket [ 163.826986][ T4013] vhci_hcd vhci_hcd.2: disconnect device [ 163.839520][ T4013] vhci_hcd vhci_hcd.2: stop threads [ 163.839585][ T4013] vhci_hcd vhci_hcd.2: release socket [ 163.839802][ T4013] vhci_hcd vhci_hcd.2: disconnect device [ 163.861548][ T4013] vhci_hcd vhci_hcd.2: stop threads [ 163.861625][ T4013] vhci_hcd vhci_hcd.2: release socket [ 163.861831][ T4013] vhci_hcd vhci_hcd.2: disconnect device [ 164.258004][ T6339] binder: 6334:6339 ioctl 4018620d 0 returned -22 [ 164.260312][ T6339] binder: 6334:6339 ioctl 4018620d 0 returned -22 [ 164.866572][ T6345] netlink: 'syz.1.134': attribute type 15 has an invalid length. [ 165.415546][ T5880] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 167.567415][ T5887] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.729049][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 167.734128][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.734153][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.734180][ T5887] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 167.734196][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.797461][ T5887] usb 3-1: config 0 descriptor?? [ 168.231277][ T6377] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 168.280891][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.280933][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.280961][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.281157][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.281186][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.281213][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.281240][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.281265][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.281291][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.281316][ T5887] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 168.520555][ T5887] apple 0003:05AC:024B.0001: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.2-1/input0 [ 168.560522][ T5887] usb 3-1: USB disconnect, device number 2 [ 168.597551][ T5807] usb usb40-port1: attempt power cycle [ 168.737793][ T31] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 169.199534][ T6381] fido_id[6381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 169.229231][ T5807] usb usb40-port1: unable to enumerate USB device [ 169.350216][ T6387] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 169.350240][ T6387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.350358][ T6387] vhci_hcd vhci_hcd.0: Device attached [ 169.385548][ T6387] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 169.385577][ T6387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.385639][ T6387] vhci_hcd vhci_hcd.0: Device attached [ 169.426120][ T6387] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 169.426150][ T6387] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 169.426207][ T6387] vhci_hcd vhci_hcd.0: Device attached [ 169.433802][ T6387] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 169.433875][ T6387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.433993][ T6387] vhci_hcd vhci_hcd.0: Device attached [ 169.509068][ T6399] binder: BINDER_SET_CONTEXT_MGR already set [ 169.509875][ T6399] binder: 6385:6399 ioctl 4018620d 200000000040 returned -16 [ 169.561938][ T6387] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 169.561959][ T6387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.562041][ T6387] vhci_hcd vhci_hcd.0: Device attached [ 169.592691][ T6401] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 169.592722][ T6401] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 169.607436][ T5887] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 169.633204][ T6387] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 169.636088][ T6387] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 169.653034][ T6401] vhci_hcd vhci_hcd.0: Device attached [ 169.690232][ T6401] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 169.731519][ T6387] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(20) [ 169.731551][ T6387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.731675][ T6387] vhci_hcd vhci_hcd.0: Device attached [ 169.823263][ T6394] vhci_hcd: connection closed [ 169.824175][ T6391] vhci_hcd: connection closed [ 169.824221][ T4013] vhci_hcd vhci_hcd.3: stop threads [ 169.824248][ T4013] vhci_hcd vhci_hcd.3: release socket [ 169.824926][ T6398] vhci_hcd: connection closed [ 169.825053][ T4013] vhci_hcd vhci_hcd.3: disconnect device [ 169.825253][ T4013] vhci_hcd vhci_hcd.3: stop threads [ 169.825268][ T4013] vhci_hcd vhci_hcd.3: release socket [ 169.825483][ T4013] vhci_hcd vhci_hcd.3: disconnect device [ 169.839548][ T6396] vhci_hcd: connection closed [ 169.840304][ T6389] vhci_hcd: connection reset by peer [ 169.845478][ T6404] vhci_hcd: connection closed [ 169.846242][ T6402] vhci_hcd: connection closed [ 169.850061][ T4013] vhci_hcd vhci_hcd.3: stop threads [ 169.850081][ T4013] vhci_hcd vhci_hcd.3: release socket [ 169.850158][ T4013] vhci_hcd vhci_hcd.3: disconnect device [ 169.858323][ T4013] vhci_hcd vhci_hcd.3: stop threads [ 169.858367][ T4013] vhci_hcd vhci_hcd.3: release socket [ 169.858613][ T4013] vhci_hcd vhci_hcd.3: disconnect device [ 169.880413][ T4013] vhci_hcd vhci_hcd.3: stop threads [ 169.880468][ T4013] vhci_hcd vhci_hcd.3: release socket [ 169.880684][ T4013] vhci_hcd vhci_hcd.3: disconnect device [ 169.881794][ T4013] vhci_hcd vhci_hcd.3: stop threads [ 169.881829][ T4013] vhci_hcd vhci_hcd.3: release socket [ 169.882010][ T4013] vhci_hcd vhci_hcd.3: disconnect device [ 169.903489][ T4013] vhci_hcd vhci_hcd.3: stop threads [ 169.903545][ T4013] vhci_hcd vhci_hcd.3: release socket [ 169.903780][ T4013] vhci_hcd vhci_hcd.3: disconnect device [ 170.814466][ T6399] syz.0.148 (6399): drop_caches: 2 [ 173.571186][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 173.571237][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 173.656213][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 174.041740][ T6442] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 174.767451][ T5887] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 174.976419][ T6449] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 174.976451][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.004035][ T6449] vhci_hcd vhci_hcd.0: Device attached [ 175.049529][ T6449] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 175.049557][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.049622][ T6449] vhci_hcd vhci_hcd.0: Device attached [ 175.109392][ T6449] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 175.109413][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 175.109477][ T6449] vhci_hcd vhci_hcd.0: Device attached [ 175.157612][ T6449] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 175.157633][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.157734][ T6449] vhci_hcd vhci_hcd.0: Device attached [ 176.208568][ T6449] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 176.208598][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.208692][ T6449] vhci_hcd vhci_hcd.0: Device attached [ 176.212721][ T6462] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 176.212748][ T6462] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 176.212853][ T6462] vhci_hcd vhci_hcd.0: Device attached [ 176.213894][ T6449] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 176.214569][ T6449] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 176.217173][ T6449] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(26) [ 176.472466][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.475690][ T6462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 176.522833][ T6449] vhci_hcd vhci_hcd.0: Device attached [ 176.587369][ T963] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 176.616310][ T6464] vhci_hcd: connection closed [ 176.619505][ T41] vhci_hcd vhci_hcd.0: stop threads [ 176.619527][ T41] vhci_hcd vhci_hcd.0: release socket [ 176.619554][ T41] vhci_hcd vhci_hcd.0: disconnect device [ 176.630908][ T6459] vhci_hcd: connection closed [ 176.631452][ T41] vhci_hcd vhci_hcd.0: stop threads [ 176.631506][ T41] vhci_hcd vhci_hcd.0: release socket [ 176.631619][ T41] vhci_hcd vhci_hcd.0: disconnect device [ 176.632009][ T6466] vhci_hcd: connection closed [ 176.633369][ T41] vhci_hcd vhci_hcd.0: stop threads [ 176.633422][ T41] vhci_hcd vhci_hcd.0: release socket [ 176.633610][ T41] vhci_hcd vhci_hcd.0: disconnect device [ 176.637460][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.650039][ T6457] vhci_hcd: connection closed [ 176.650871][ T6455] vhci_hcd: connection closed [ 176.651627][ T6453] vhci_hcd: connection closed [ 176.679018][ T6451] vhci_hcd: connection reset by peer [ 176.686250][ T89] vhci_hcd vhci_hcd.0: stop threads [ 176.686330][ T89] vhci_hcd vhci_hcd.0: release socket [ 176.686937][ T89] vhci_hcd vhci_hcd.0: disconnect device [ 176.690681][ T89] vhci_hcd vhci_hcd.0: stop threads [ 176.690727][ T89] vhci_hcd vhci_hcd.0: release socket [ 176.695295][ T89] vhci_hcd vhci_hcd.0: disconnect device [ 176.700897][ T89] vhci_hcd vhci_hcd.0: stop threads [ 176.700943][ T89] vhci_hcd vhci_hcd.0: release socket [ 176.724815][ T89] vhci_hcd vhci_hcd.0: disconnect device [ 176.792268][ T89] vhci_hcd vhci_hcd.0: stop threads [ 176.792285][ T89] vhci_hcd vhci_hcd.0: release socket [ 176.792336][ T89] vhci_hcd vhci_hcd.0: disconnect device [ 176.837348][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 176.840345][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.840377][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.840423][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 176.840447][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.929539][ T31] usb 4-1: config 0 descriptor?? [ 177.211484][ T5880] usb usb40-port1: attempt power cycle [ 177.299638][ T6472] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 177.344296][ T31] hid_parser_main: 59 callbacks suppressed [ 177.344331][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344362][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344388][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344414][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344491][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344518][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344545][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344571][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344597][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.344624][ T31] apple 0003:05AC:024B.0002: unknown main item tag 0x0 [ 177.451555][ T31] apple 0003:05AC:024B.0002: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.3-1/input0 [ 177.557630][ T1789] usb 4-1: USB disconnect, device number 4 [ 177.840445][ T5880] usb usb40-port1: unable to enumerate USB device [ 178.132884][ T6475] fido_id[6475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 178.709478][ T6481] netlink: 'syz.2.169': attribute type 290 has an invalid length. [ 179.085274][ T6489] binder: BINDER_SET_CONTEXT_MGR already set [ 179.085290][ T6489] binder: 6485:6489 ioctl 4018620d 200000000040 returned -16 [ 180.047400][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 180.367375][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 180.369812][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.371193][ T31] usb 3-1: config 4 interface 0 has no altsetting 0 [ 180.377163][ T31] usb 3-1: string descriptor 0 read error: -22 [ 180.379136][ T31] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 180.379198][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.504856][ T31] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 180.582927][ T6489] syz.1.170 (6489): drop_caches: 2 [ 180.638061][ T6492] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 180.667787][ T31] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 180.668733][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 180.668825][ T31] usb 3-1: media controller created [ 180.906480][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.730156][ T963] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 182.127456][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 182.230473][ T6503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 182.230494][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.230555][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 182.267864][ T6503] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 182.267893][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.267959][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 182.321119][ T6503] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 182.321147][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 182.321207][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 182.368005][ T6512] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 182.368032][ T6512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.368090][ T6512] vhci_hcd vhci_hcd.0: Device attached [ 182.386008][ T6503] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 182.386087][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.386217][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 182.427441][ T6503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 182.427471][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 182.427560][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 182.428708][ T6503] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.469334][ T31] usb 3-1: USB disconnect, device number 3 [ 182.529419][ T6503] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.587346][ T6503] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 182.587376][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.589098][ T6512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.592649][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 182.626610][ T5807] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 182.695864][ T6522] vhci_hcd: connection closed [ 182.708054][ T45] vhci_hcd vhci_hcd.2: stop threads [ 182.708083][ T45] vhci_hcd vhci_hcd.2: release socket [ 182.708163][ T45] vhci_hcd vhci_hcd.2: disconnect device [ 182.715642][ T6516] vhci_hcd: connection closed [ 182.717069][ T6506] vhci_hcd: connection closed [ 182.719145][ T6508] vhci_hcd: connection closed [ 182.719905][ T6504] vhci_hcd: connection reset by peer [ 182.720794][ T6519] vhci_hcd: connection closed [ 182.722000][ T13] vhci_hcd vhci_hcd.2: stop threads [ 182.722052][ T13] vhci_hcd vhci_hcd.2: release socket [ 182.722232][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 182.723274][ T6513] vhci_hcd: connection closed [ 182.723956][ T13] vhci_hcd vhci_hcd.2: stop threads [ 182.724002][ T13] vhci_hcd vhci_hcd.2: release socket [ 182.724185][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 182.725108][ T13] vhci_hcd vhci_hcd.2: stop threads [ 182.725157][ T13] vhci_hcd vhci_hcd.2: release socket [ 182.725347][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 182.725985][ T13] vhci_hcd vhci_hcd.2: stop threads [ 182.726024][ T13] vhci_hcd vhci_hcd.2: release socket [ 182.726119][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 182.744044][ T13] vhci_hcd vhci_hcd.2: stop threads [ 182.744121][ T13] vhci_hcd vhci_hcd.2: release socket [ 182.744353][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 182.745650][ T13] vhci_hcd vhci_hcd.2: stop threads [ 182.745692][ T13] vhci_hcd vhci_hcd.2: release socket [ 182.745883][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 183.568724][ T6538] process 'syz.4.184' launched './file1' with NULL argv: empty string added [ 185.499143][ T6557] loop5: detected capacity change from 0 to 7 [ 185.514449][ T6557] loop5: [ 185.514547][ T6557] loop5: partition table partially beyond EOD, truncated [ 185.577451][ T808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 185.767328][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 185.778462][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.778494][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.778533][ T808] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 185.778555][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.846452][ T808] usb 1-1: config 0 descriptor?? [ 186.282503][ T808] hid_parser_main: 59 callbacks suppressed [ 186.282524][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282547][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282565][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282583][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282601][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282619][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282637][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282655][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282673][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.282690][ T808] apple 0003:05AC:024B.0003: unknown main item tag 0x0 [ 186.298977][ T808] apple 0003:05AC:024B.0003: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 186.400973][ T6570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 186.401056][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.401315][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 186.443567][ T6575] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 186.443598][ T6575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.443653][ T6575] vhci_hcd vhci_hcd.0: Device attached [ 186.509490][ T5880] usb 1-1: USB disconnect, device number 3 [ 186.528370][ T6570] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 186.528401][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.528455][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 186.590653][ T6575] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 186.590683][ T6575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.590741][ T6575] vhci_hcd vhci_hcd.0: Device attached [ 186.597038][ T6570] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 186.597070][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.597108][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 186.664296][ T6575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.665483][ T6575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.703941][ T6570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 186.703963][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 186.704034][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 186.726836][ T6575] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(27) [ 186.726912][ T6575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.727154][ T6575] vhci_hcd vhci_hcd.0: Device attached [ 186.763279][ T6570] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.811809][ T6582] fido_id[6582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 187.008044][ T6589] vhci_hcd: connection closed [ 187.008629][ T12] vhci_hcd vhci_hcd.1: stop threads [ 187.008656][ T12] vhci_hcd vhci_hcd.1: release socket [ 187.008749][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 187.009841][ T6579] vhci_hcd: connection closed [ 187.010187][ T6577] vhci_hcd: connection closed [ 187.010314][ T6573] vhci_hcd: connection closed [ 187.010524][ T12] vhci_hcd vhci_hcd.1: stop threads [ 187.010542][ T12] vhci_hcd vhci_hcd.1: release socket [ 187.010606][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 187.012037][ T6584] vhci_hcd: connection closed [ 187.012324][ T12] vhci_hcd vhci_hcd.1: stop threads [ 187.012339][ T12] vhci_hcd vhci_hcd.1: release socket [ 187.012387][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 187.014830][ T6586] vhci_hcd: connection closed [ 187.021349][ T6581] vhci_hcd: connection closed [ 187.038144][ T12] vhci_hcd vhci_hcd.1: stop threads [ 187.038219][ T12] vhci_hcd vhci_hcd.1: release socket [ 187.038399][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 187.139692][ T12] vhci_hcd vhci_hcd.1: stop threads [ 187.139713][ T12] vhci_hcd vhci_hcd.1: release socket [ 187.139786][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 187.144597][ T12] vhci_hcd vhci_hcd.1: stop threads [ 187.144612][ T12] vhci_hcd vhci_hcd.1: release socket [ 187.144674][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 187.145051][ T12] vhci_hcd vhci_hcd.1: stop threads [ 187.145062][ T12] vhci_hcd vhci_hcd.1: release socket [ 187.145254][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 187.727440][ T5807] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 188.041865][ T31] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 188.412974][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 188.412995][ T37] audit: type=1326 audit(1770243064.952:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff669d2aeb9 code=0x7ffc0000 [ 188.413361][ T37] audit: type=1326 audit(1770243064.952:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff669d2aeb9 code=0x7ffc0000 [ 188.477364][ T37] audit: type=1326 audit(1770243064.952:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff669d2aeb9 code=0x7ffc0000 [ 188.478373][ T37] audit: type=1326 audit(1770243065.022:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff669d2aeb9 code=0x7ffc0000 [ 188.479733][ T37] audit: type=1326 audit(1770243065.022:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff669d2aeb9 code=0x7ffc0000 [ 188.480173][ T37] audit: type=1326 audit(1770243065.022:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff669d2aeb9 code=0x7ffc0000 [ 188.481015][ T37] audit: type=1326 audit(1770243065.022:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff669d2aeb9 code=0x7ffc0000 [ 188.484530][ T37] audit: type=1326 audit(1770243065.022:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff669d2c747 code=0x7ffc0000 [ 188.485528][ T37] audit: type=1326 audit(1770243065.022:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff669ceb78e code=0x7ffc0000 [ 188.488645][ T37] audit: type=1326 audit(1770243065.032:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff669ceb78e code=0x7ffc0000 [ 189.269930][ T5893] usb usb38-port1: attempt power cycle [ 189.786161][ T6572] syz.4.192 (6572): drop_caches: 2 [ 189.899035][ T5893] usb usb38-port1: unable to enumerate USB device [ 190.756485][ T6611] netlink: 180 bytes leftover after parsing attributes in process `syz.2.199'. [ 190.876774][ T6611] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.199'. [ 192.987353][ T963] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 193.147390][ T963] usb 2-1: Using ep0 maxpacket: 16 [ 193.152782][ T963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.152815][ T963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.152854][ T963] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 193.152876][ T963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.228250][ T963] usb 2-1: config 0 descriptor?? [ 193.517316][ T5893] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 193.672062][ T963] hid_parser_main: 59 callbacks suppressed [ 193.672088][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672130][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672155][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672181][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672207][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672233][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672258][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672284][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672482][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.672636][ T963] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 193.722433][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 193.775364][ T963] apple 0003:05AC:024B.0004: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.1-1/input0 [ 193.798853][ T5893] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 193.798881][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.798896][ T5893] usb 5-1: Product: syz [ 193.798906][ T5893] usb 5-1: Manufacturer: syz [ 193.798916][ T5893] usb 5-1: SerialNumber: syz [ 193.835322][ T5893] usb 5-1: config 0 descriptor?? [ 193.898046][ T963] usb 2-1: USB disconnect, device number 2 [ 193.986069][ T5893] hub 5-1:0.0: bad descriptor, ignoring hub [ 193.986098][ T5893] hub 5-1:0.0: probe with driver hub failed with error -5 [ 194.039589][ T5893] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 194.082609][ T6642] tipc: Enabled bearer , priority 0 [ 194.112690][ T6642] syzkaller0: entered promiscuous mode [ 194.112709][ T6642] syzkaller0: entered allmulticast mode [ 194.292297][ T5893] usb 5-1: USB disconnect, device number 3 [ 194.338829][ T6645] tipc: Resetting bearer [ 194.385940][ T6644] fido_id[6644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 194.585287][ T6641] tipc: Resetting bearer [ 194.892240][ T6641] tipc: Disabling bearer [ 195.540242][ T6659] binder: BINDER_SET_CONTEXT_MGR already set [ 195.540259][ T6659] binder: 6652:6659 ioctl 4018620d 200000000040 returned -16 [ 198.547380][ T5880] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.699514][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 198.706814][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.706849][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.706887][ T5880] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 198.706910][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.763170][ T5880] usb 1-1: config 0 descriptor?? [ 198.942735][ T6686] capability: warning: `syz.1.225' uses deprecated v2 capabilities in a way that may be insecure [ 199.174335][ T5880] hid_parser_main: 59 callbacks suppressed [ 199.174354][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174376][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174394][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174412][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174431][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174451][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174470][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174488][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174506][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.174523][ T5880] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 199.231681][ T5880] apple 0003:05AC:024B.0005: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 199.404270][ T6659] syz.4.217 (6659): drop_caches: 2 [ 199.416645][ T5880] usb 1-1: USB disconnect, device number 4 [ 199.748789][ T6689] fido_id[6689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 199.997841][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.997892][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.268173][ T6693] tipc: Started in network mode [ 200.268197][ T6693] tipc: Node identity 9eeeaf5b9312, cluster identity 4711 [ 200.268353][ T6693] tipc: Enabled bearer , priority 0 [ 200.268995][ T6693] syzkaller0: entered promiscuous mode [ 200.269011][ T6693] syzkaller0: entered allmulticast mode [ 200.458390][ T6694] tipc: Resetting bearer [ 200.540458][ T6692] tipc: Resetting bearer [ 200.790264][ T6692] tipc: Disabling bearer [ 202.457598][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 202.497356][ T5807] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 202.527393][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 202.628225][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 202.642958][ T5893] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 202.642991][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.643011][ T5893] usb 3-1: Product: syz [ 202.643026][ T5893] usb 3-1: Manufacturer: syz [ 202.643040][ T5893] usb 3-1: SerialNumber: syz [ 202.680258][ T5807] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 202.694452][ T5807] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 202.694488][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.694511][ T5807] usb 5-1: Product: syz [ 202.694528][ T5807] usb 5-1: Manufacturer: syz [ 202.694544][ T5807] usb 5-1: SerialNumber: syz [ 202.705217][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 202.749671][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 202.789512][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 202.789540][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.789556][ T31] usb 2-1: Product: syz [ 202.789568][ T31] usb 2-1: Manufacturer: syz [ 202.789580][ T31] usb 2-1: SerialNumber: syz [ 202.925513][ T31] usb 2-1: config 0 descriptor?? [ 202.963810][ T5893] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 202.972508][ T5807] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 203.004461][ T31] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 203.004489][ T31] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 203.058925][ T5893] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.061461][ T5893] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 203.061502][ T5893] usb 3-1: media controller created [ 203.279442][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.439624][ T5807] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.440135][ T5807] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 203.440186][ T5807] usb 5-1: media controller created [ 203.441224][ T5893] zl10353_read_register: readreg error (reg=127, ret==-71) [ 203.470493][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.611046][ T31] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 203.819485][ T5893] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 203.835290][ T5893] usb 3-1: USB disconnect, device number 4 [ 204.038133][ T6713] ------------[ cut here ]------------ [ 204.038149][ T6713] usb 5-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 204.038173][ T6713] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.1.236/6713 [ 204.038230][ T6713] Modules linked in: [ 204.038269][ T6713] CPU: 0 UID: 0 PID: 6713 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.038293][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 204.038311][ T6713] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 204.038355][ T6713] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 204.038375][ T6713] RSP: 0018:ffffc9000f6df8c8 EFLAGS: 00010246 [ 204.038394][ T6713] RAX: 0000000000000000 RBX: ffff888035345b00 RCX: 0000000080000480 [ 204.038410][ T6713] RDX: ffff8880295f8660 RSI: ffffffff8bcd05e0 RDI: ffffffff8f53d7c0 [ 204.038425][ T6713] RBP: 1ffff11003f5dd4c R08: 00000000000000c0 R09: 0000000000000000 [ 204.038440][ T6713] R10: ffffc9000f6df9c0 R11: fffff52001edbf44 R12: ffff88805f4f9100 [ 204.038456][ T6713] R13: ffff88801faeea60 R14: 0000000080000480 R15: ffff8880295f8660 [ 204.038472][ T6713] FS: 00007f16113566c0(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 204.038491][ T6713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.038506][ T6713] CR2: 000000110c3c6bc5 CR3: 000000003f424000 CR4: 00000000003526f0 [ 204.038524][ T6713] Call Trace: [ 204.038532][ T6713] [ 204.038553][ T6713] ? __init_swait_queue_head+0xa9/0x150 [ 204.038596][ T6713] usb_start_wait_urb+0x12b/0x510 [ 204.038638][ T6713] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 204.038695][ T6713] usb_control_msg+0x232/0x3e0 [ 204.038735][ T6713] gl861_ctrl_msg+0x207/0x420 [ 204.038766][ T6713] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 204.038801][ T6713] gl861_i2c_master_xfer+0x439/0x6a0 [ 204.038830][ T6713] __i2c_transfer+0x79a/0x1ee0 [ 204.038858][ T6713] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.038891][ T6713] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.038924][ T6713] ? i2c_transfer+0xc8/0x2d0 [ 204.038953][ T6713] i2c_transfer+0x1cc/0x2d0 [ 204.038984][ T6713] i2cdev_ioctl_rdwr+0x460/0x740 [ 204.039022][ T6713] i2cdev_ioctl+0x6a8/0x890 [ 204.039048][ T6713] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 204.039078][ T6713] ? __fget_files+0x3a6/0x420 [ 204.039097][ T6713] ? __fget_files+0x2a/0x420 [ 204.039121][ T6713] ? bpf_lsm_file_ioctl+0x9/0x20 [ 204.039142][ T6713] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 204.039168][ T6713] __se_sys_ioctl+0xff/0x170 [ 204.039199][ T6713] do_syscall_64+0xe2/0xf80 [ 204.039228][ T6713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.039249][ T6713] ? trace_irq_disable+0x37/0x100 [ 204.039278][ T6713] ? clear_bhb_loop+0x60/0xb0 [ 204.039305][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.039333][ T6713] RIP: 0033:0x7f16130faeb9 [ 204.039360][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.039378][ T6713] RSP: 002b:00007f1611356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.039400][ T6713] RAX: ffffffffffffffda RBX: 00007f1613375fa0 RCX: 00007f16130faeb9 [ 204.039416][ T6713] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 204.039430][ T6713] RBP: 00007f1613168c1f R08: 0000000000000000 R09: 0000000000000000 [ 204.039444][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.039457][ T6713] R13: 00007f1613376038 R14: 00007f1613375fa0 R15: 00007ffc02a74348 [ 204.039492][ T6713] [ 204.039504][ T6713] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.039518][ T6713] CPU: 0 UID: 0 PID: 6713 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.039542][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 204.039554][ T6713] Call Trace: [ 204.039562][ T6713] [ 204.039570][ T6713] vpanic+0x1e0/0x670 [ 204.039605][ T6713] panic+0xc5/0xd0 [ 204.039634][ T6713] ? __pfx_panic+0x10/0x10 [ 204.039683][ T6713] __warn+0x315/0x4a0 [ 204.039711][ T6713] ? usb_submit_urb+0x1052/0x18b0 [ 204.039742][ T6713] ? usb_submit_urb+0x1052/0x18b0 [ 204.039774][ T6713] __report_bug+0x29a/0x540 [ 204.039810][ T6713] ? usb_submit_urb+0x1052/0x18b0 [ 204.039840][ T6713] ? __pfx___report_bug+0x10/0x10 [ 204.039873][ T6713] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.039902][ T6713] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.039931][ T6713] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.039960][ T6713] ? stack_depot_save_flags+0x3f3/0x810 [ 204.039990][ T6713] report_bug_entry+0x19a/0x290 [ 204.040019][ T6713] ? usb_submit_urb+0x1114/0x18b0 [ 204.040047][ T6713] ? usb_submit_urb+0x1119/0x18b0 [ 204.040076][ T6713] handle_bug+0xca/0x200 [ 204.040112][ T6713] exc_invalid_op+0x1a/0x50 [ 204.040144][ T6713] asm_exc_invalid_op+0x1a/0x20 [ 204.040165][ T6713] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 204.040196][ T6713] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 204.040213][ T6713] RSP: 0018:ffffc9000f6df8c8 EFLAGS: 00010246 [ 204.040231][ T6713] RAX: 0000000000000000 RBX: ffff888035345b00 RCX: 0000000080000480 [ 204.040246][ T6713] RDX: ffff8880295f8660 RSI: ffffffff8bcd05e0 RDI: ffffffff8f53d7c0 [ 204.040262][ T6713] RBP: 1ffff11003f5dd4c R08: 00000000000000c0 R09: 0000000000000000 [ 204.040276][ T6713] R10: ffffc9000f6df9c0 R11: fffff52001edbf44 R12: ffff88805f4f9100 [ 204.040292][ T6713] R13: ffff88801faeea60 R14: 0000000080000480 R15: ffff8880295f8660 [ 204.040333][ T6713] ? usb_submit_urb+0x10a3/0x18b0 [ 204.040371][ T6713] ? __init_swait_queue_head+0xa9/0x150 [ 204.040411][ T6713] usb_start_wait_urb+0x12b/0x510 [ 204.040451][ T6713] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 204.040507][ T6713] usb_control_msg+0x232/0x3e0 [ 204.040553][ T6713] gl861_ctrl_msg+0x207/0x420 [ 204.040584][ T6713] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 204.040619][ T6713] gl861_i2c_master_xfer+0x439/0x6a0 [ 204.040647][ T6713] __i2c_transfer+0x79a/0x1ee0 [ 204.040675][ T6713] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.040707][ T6713] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.040739][ T6713] ? i2c_transfer+0xc8/0x2d0 [ 204.040768][ T6713] i2c_transfer+0x1cc/0x2d0 [ 204.040797][ T6713] i2cdev_ioctl_rdwr+0x460/0x740 [ 204.040835][ T6713] i2cdev_ioctl+0x6a8/0x890 [ 204.040860][ T6713] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 204.040889][ T6713] ? __fget_files+0x3a6/0x420 [ 204.040907][ T6713] ? __fget_files+0x2a/0x420 [ 204.040929][ T6713] ? bpf_lsm_file_ioctl+0x9/0x20 [ 204.040949][ T6713] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 204.040976][ T6713] __se_sys_ioctl+0xff/0x170 [ 204.041003][ T6713] do_syscall_64+0xe2/0xf80 [ 204.041031][ T6713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.041052][ T6713] ? trace_irq_disable+0x37/0x100 [ 204.041081][ T6713] ? clear_bhb_loop+0x60/0xb0 [ 204.041108][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.041128][ T6713] RIP: 0033:0x7f16130faeb9 [ 204.041146][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.041164][ T6713] RSP: 002b:00007f1611356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.041185][ T6713] RAX: ffffffffffffffda RBX: 00007f1613375fa0 RCX: 00007f16130faeb9 [ 204.041201][ T6713] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 204.041215][ T6713] RBP: 00007f1613168c1f R08: 0000000000000000 R09: 0000000000000000 [ 204.041228][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.041241][ T6713] R13: 00007f1613376038 R14: 00007f1613375fa0 R15: 00007ffc02a74348 [ 204.041276][ T6713] [ 204.041864][ T6713] Kernel Offset: disabled