last executing test programs: 19m41.777742136s ago: executing program 32 (id=69): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000480)) 19m11.267454871s ago: executing program 3 (id=155): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/131, 0x83}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/66, 0x42}, {&(0x7f00000002c0)=""/35, 0x23}], 0x5}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 19m10.25186193s ago: executing program 3 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) 19m7.291650906s ago: executing program 3 (id=162): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x1ff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 19m5.713106583s ago: executing program 3 (id=166): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 19m3.937712661s ago: executing program 3 (id=170): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)={0x9, {{0xa, 0x4e21, 0xd66, @mcast1, 0x401}}, 0x0, 0x200000000000016, [{{0xa, 0x4e22, 0x4, @local, 0x100}}, {{0xa, 0x4e20, 0x1, @empty, 0x56}}]}, 0x190) 19m3.198246167s ago: executing program 3 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) epoll_create1(0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) unshare(0x20000400) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 18m41.860271048s ago: executing program 33 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) epoll_create1(0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) unshare(0x20000400) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 17m40.632966524s ago: executing program 6 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 17m40.274269462s ago: executing program 6 (id=312): ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x1c, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x9]}) 17m39.987000342s ago: executing program 6 (id=314): lsm_set_self_attr(0x64, &(0x7f0000002980)={0x68, 0x8, 0xf1, 0xd1, "188aa3520e079ea4cdce3e233662ad70357d3719ed224489be4f9b43fdf4cf39d9860bc35708efe053479547c4d98b7b94161839c8aef1a33991284fd223d156030b5f2e5d67aa022d3d4dd1bbdca59406a9ad5ffea39998eab21041396595e831b3416463565cc7d70e0512305a5708121cf071c2c1bda5425f59da5e3ce9a7ee14de69497bdef396c0919c02449b11162f6d956e18eeeef523524e770c8a755f0274a1b20aa7a3717bfbdfe5d847d06d1c8733787baf8196f9eeccf7b70c6f7033a489712cc2680386c95ce39d8520bb"}, 0xf1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 17m37.686068957s ago: executing program 6 (id=319): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x28000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17m37.323655059s ago: executing program 6 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 17m36.875309724s ago: executing program 6 (id=326): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfc}, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x15) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r6, 0x5f2ba000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 17m21.460276622s ago: executing program 34 (id=326): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfc}, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x15) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r6, 0x5f2ba000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 12m36.372102511s ago: executing program 1 (id=1619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f0000000440)=0x0, &(0x7f0000000040)) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x2312, 0x0, r1}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, 0x0}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) 12m35.91479427s ago: executing program 1 (id=1623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x4c042) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000840)="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", 0x212, 0x480c1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x5}, 0xffffffec) syz_fuse_handle_req(r1, &(0x7f0000000b00)="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", 0x2000, &(0x7f00000057c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x2, 0xffff1896, 0x3, 0x54, 0xffffffb9, 0x1a}, 0x9c) 12m34.720902144s ago: executing program 1 (id=1632): socket$netlink(0x10, 0x3, 0x4) write$dsp(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x578410ed) flock(0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12m33.470548883s ago: executing program 1 (id=1638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) socket$inet6(0xa, 0x2, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 12m21.864441851s ago: executing program 1 (id=1677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) 12m21.387612963s ago: executing program 1 (id=1682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd000}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) 12m6.090197393s ago: executing program 35 (id=1682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd000}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) 5m0.639880233s ago: executing program 7 (id=3333): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000340)=0x5) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000100)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0x9}) 5m0.35842636s ago: executing program 7 (id=3334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340), 0x0, 0x44008890) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 5m0.191717248s ago: executing program 7 (id=3335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 4m59.756402526s ago: executing program 7 (id=3340): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x101000) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) 4m55.552508008s ago: executing program 7 (id=3353): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) 4m52.536548606s ago: executing program 7 (id=3363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) 4m37.310045729s ago: executing program 36 (id=3363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) 2m40.241507387s ago: executing program 8 (id=3760): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m39.668555408s ago: executing program 8 (id=3763): openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0x8d}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) setuid(0xee01) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000827bd7000fd5bdf253800000008000300", @ANYRES32=r4, @ANYBLOB="0c00580005000000000000000c00580042000000000000000c00580004000000000000000c0058007b000000000000000c00580002000000000000000c0058001400000000000000"], 0x64}}, 0x4008012) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 2m37.916233785s ago: executing program 8 (id=3769): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m30.494963461s ago: executing program 8 (id=3773): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m29.970971038s ago: executing program 8 (id=3774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 2m29.378841875s ago: executing program 8 (id=3780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000540)=""/149, 0x95}, 0x7ffffffd}, {{&(0x7f0000000bc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f0000000c80)}, 0x5}], 0x2, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r3, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r4 = fsmount(r2, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d") sendmsg$nl_xfrm(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a00100001000010000000000000000000a0101010000000000000000000000000000000000000000000000000a0000806400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000a010101000000000000000000000000000000000000000000010000000000000000000000000000fdffffffffffffff040000000000000000000000000000000000000000000000e300000000000000fdffffffffffffff04000000000000000000000800000000000000000100000000000000000000000200000000000000000000000a000000cd000000000000004800020065737369762863626328616573292c73686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd7000000000002abd700028bd7000000000004c001400636d6163286165732900"/344], 0x1a0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) 2m12.152400938s ago: executing program 37 (id=3780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000540)=""/149, 0x95}, 0x7ffffffd}, {{&(0x7f0000000bc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f0000000c80)}, 0x5}], 0x2, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r3, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r4 = fsmount(r2, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d") sendmsg$nl_xfrm(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a00100001000010000000000000000000a0101010000000000000000000000000000000000000000000000000a0000806400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/344], 0x1a0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) 15.754310925s ago: executing program 4 (id=4250): r0 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 10.465825835s ago: executing program 4 (id=4256): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, 0x0, 0x8010) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x120, 0x880, 0x0, 0x0) 10.325342117s ago: executing program 2 (id=4257): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 8.738823371s ago: executing program 4 (id=4264): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 8.357418915s ago: executing program 2 (id=4265): r0 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 6.967883912s ago: executing program 0 (id=4268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000008010200000000000000000a00000209000100733c7e31000000000600024060050000040004800500030001"], 0x34}, 0x1, 0x0, 0x0, 0xc0000}, 0x8810) 6.763225258s ago: executing program 0 (id=4269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) 6.472027898s ago: executing program 9 (id=4270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 5.661799893s ago: executing program 5 (id=4271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 5.560476927s ago: executing program 0 (id=4272): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) 5.206085889s ago: executing program 2 (id=4273): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8}, 0x28) 5.203407535s ago: executing program 4 (id=4274): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599", @ANYRES8], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x8, 0x6, 0x5, 0x8, 0x1}, 0x8b, &(0x7f00000002c0)={0x5, 0xf, 0x8b, 0x2, [@generic={0x7b, 0x10, 0xb, "fd054f91acde0d2721234a0bca9521aaeeb9e7588558d63a74190d1e838db43b2bc119b42a5dc7f703873cef2475670aacc309ec5405062e11f017f27e17d0718e3e9e4931a717095bef4a34877cf87c37ae52617e054d47345ac639472747cc85fc624acf41bac1cac3301816eaf30c68db9c5cc4a67398"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0x80, 0x8, 0x80}]}, 0x9, [{0x86, &(0x7f0000000380)=@string={0x86, 0x3, "c0b719d42326bebf99930cb4bc1c846fbe9ce64b316ba2c008015a4b72c597d5439a30888e55c7834ecbc26cbb20ab1fcd160fc3234973cf4a67307dc83dc56014ad37bf49028c60b378bdc18bff0bdbec8238fc3d8df388096c5a08dfc3f84865b8b4603d04305785b0d68da88f7d041c1ddc636fc6d4deda300eb149b1511ac5f1625a"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42c}}, {0x3e, &(0x7f0000000540)=@string={0x3e, 0x3, "d524c681689ac70835125b6af605302d50695667cbe72163f757c602fe776d36416d97721152e753dcba13c5c0b4a8c0c3a05d3deccba4212e8a1692"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x413}}, {0x42, &(0x7f00000005c0)=@string={0x42, 0x3, "6d0f07963b567743c235beff3df07cb36c9b65aaeb601065cb4047059fb2433a89991259d65fd7a41ae7d6b3f24d038f40d9b62a9bb1d2e358f328300dbefaf4"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x424}}]}) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r0, 0x0) 5.185416727s ago: executing program 9 (id=4275): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000001980)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.916674633s ago: executing program 5 (id=4276): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611004000000000063012b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) close_range(r1, 0xffffffffffffffff, 0x0) 4.859327438s ago: executing program 2 (id=4277): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x19, 0x4, 0x0, 0x0, 0x100c, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0xff00, 0xa210, 0x4, &(0x7f0000000300)="a38b9b94"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.789939748s ago: executing program 9 (id=4278): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_settime(0xfffffffb, 0x0) syz_open_procfs(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0x9, 0x1, 0x129, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0x80000000, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x5, 0x7, 0x0, 0x5, 0xfff, 0xfffffffd, 0x7fe, 0x7fff, 0x10003, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcd, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000201, 0x0, 0xfffffffd, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffff966, 0xfb5, 0xffffff4e, 0x4, 0x9550, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x10001, 0x7, 0x1, 0x6, 0x525ba681, 0x8000, 0x7, 0x1, 0x1, 0x10000, 0x100, 0x6, 0x10000, 0x1306, 0x800, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x8, 0xfffffff8, 0x5, 0x0, 0x19, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x8, 0x2, 0xd21e, 0x9, 0x13, 0x1, 0x2, 0x4, 0x6, 0x9, 0x7c83, 0xd, 0x1, 0x2, 0xd, 0x81, 0x47, 0x8000007, 0x0, 0x11, 0x848, 0xb5, 0x7, 0x7, 0x7ffd, 0xffff, 0x10, 0x2, 0xfffe, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x2, 0x40, 0x1, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x7, 0x40, 0x9, 0x4, 0xc41f, 0x3e1e, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1003, 0x10, 0xd, 0x6, 0x8000, 0x53, 0xf, 0x4, 0x2, 0xffffb027, 0xfffffff8, 0x9, 0x5, 0x7, 0x101, 0x7, 0x6, 0x4, 0x0, 0xa, 0x400, 0x8, 0x0, 0x8, 0x100007, 0x9a33247, 0x8, 0x0, 0x1, 0x8005, 0xfffffff7, 0x5]}, 0x45c) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400056b20008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 4.683071522s ago: executing program 5 (id=4279): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=')', 0x1}], 0x1, 0x0, 0x0, 0x40011}, 0x20040000) 4.585907715s ago: executing program 0 (id=4280): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'veth0\x00', 0x0}) 4.418650868s ago: executing program 0 (id=4281): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x5, 0x0, 0xfffffffc}) 4.411785457s ago: executing program 9 (id=4282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) 4.221574247s ago: executing program 4 (id=4283): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000019200)=[@in={0x2, 0x4e24, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000200)=0x8) 4.133797246s ago: executing program 5 (id=4284): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x400, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x0, @win={{0x1000, 0x5, 0x4, 0xabe}, 0x7, 0xdc, 0x0, 0x0, 0x0, 0x5}}) 3.859839491s ago: executing program 2 (id=4285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 3.7785939s ago: executing program 9 (id=4286): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 3.721839473s ago: executing program 5 (id=4287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setuid(0xee01) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) 3.679265907s ago: executing program 4 (id=4288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000", @ANYRES32=r5, @ANYBLOB="08000400ac14143d080002007f00000108000200e000000208000900030100"/42], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xa1ed, 0x4000, 0x8000, 0x40024e}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.584068249s ago: executing program 2 (id=4289): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20010d00"], 0x0}) 118.212579ms ago: executing program 5 (id=4290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) 33.518735ms ago: executing program 9 (id=4291): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 0s ago: executing program 0 (id=4292): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) kernel console output (not intermixed with test programs): ase bring it up to get a fully working HSR network [ 1038.449823][T15038] loop5: detected capacity change from 0 to 7 [ 1038.491940][T15038] loop5: [POWERTEC] p1 p2 p3 [ 1038.497183][T15038] loop5: p1 start 655361 is beyond EOD, truncated [ 1038.503921][T15038] loop5: p2 size 262144 extends beyond EOD, truncated [ 1038.514246][T15038] loop5: p3 size 1048576 extends beyond EOD, truncated [ 1039.211408][T14952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.228512][ T8748] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1039.401776][ T8748] usb 5-1: Using ep0 maxpacket: 8 [ 1039.442402][ T8748] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 1039.451118][ T8748] usb 5-1: config 0 has no interface number 0 [ 1039.546718][ T8748] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1039.556261][ T8748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.564471][ T8748] usb 5-1: Product: syz [ 1039.569209][ T8748] usb 5-1: Manufacturer: syz [ 1039.573976][ T8748] usb 5-1: SerialNumber: syz [ 1039.620666][ T8748] usb 5-1: config 0 descriptor?? [ 1039.637378][ T8748] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1039.645715][ T8748] pctv452e: pctv452e_power_ctrl: 1 [ 1039.645715][ T8748] [ 1039.653250][ T8748] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1039.653250][ T8748] [ 1039.663860][ T8748] dvb-usb: bulk message failed: -22 (5/0) [ 1039.760959][ T8748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1039.775881][ T8748] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1039.784669][ T8748] usb 5-1: media controller created [ 1039.790306][ T8748] dvb-usb: bulk message failed: -22 (8/0) [ 1039.796365][ T8748] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1039.804570][ T8748] dvb-usb: MAC address reading failed. [ 1039.859302][ T8748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1039.876490][T15047] dvb-usb: bulk message failed: -22 (7/0) [ 1039.882586][T15047] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1040.612582][ T8748] DVB: Unable to find symbol stb0899_attach() [ 1040.623425][ T8748] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1040.625289][T15068] loop6: detected capacity change from 0 to 2640 [ 1040.640136][T15068] buffer_io_error: 22 callbacks suppressed [ 1040.640209][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.654201][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.662354][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.670541][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.678744][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.686883][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.695157][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.703221][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.711335][T15068] ldm_validate_partition_table(): Disk read failed. [ 1040.718257][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.726479][T15068] Buffer I/O error on dev loop6, logical block 0, async page read [ 1040.734596][T15068] Dev loop6: unable to read RDB block 0 [ 1040.740895][T15068] loop6: unable to read partition table [ 1041.023318][T15068] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1041.153773][T15078] syzkaller0: entered promiscuous mode [ 1041.159555][T15078] syzkaller0: entered allmulticast mode [ 1041.255253][ T8748] rc_core: IR keymap rc-tt-1500 not found [ 1041.261241][ T8748] Registered IR keymap rc-empty [ 1041.269615][ T8748] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1041.282835][ T8748] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input26 [ 1041.478455][ T8748] dvb-usb: schedule remote query interval to 100 msecs. [ 1041.485977][ T8748] pctv452e: pctv452e_power_ctrl: 0 [ 1041.485977][ T8748] [ 1041.493400][ T8748] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1041.595416][ T8749] dvb-usb: bulk message failed: -22 (4/0) [ 1041.601376][ T8749] dvb-usb: error -22 while querying for an remote control event. [ 1041.647696][ T8748] usb 5-1: USB disconnect, device number 52 acpid: input device has been disconnected, fd 3 [ 1041.836072][ T8748] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1042.105771][T14952] veth0_vlan: entered promiscuous mode [ 1042.193926][T14952] veth1_vlan: entered promiscuous mode [ 1042.389898][T14952] veth0_macvtap: entered promiscuous mode [ 1042.434367][T14952] veth1_macvtap: entered promiscuous mode [ 1042.537462][T14952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.631612][T14952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.690692][ T3685] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.738578][ T3685] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.790089][ T3685] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.840877][ T3685] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.430484][T15109] loop6: detected capacity change from 0 to 2640 [ 1043.441414][T15109] ldm_validate_partition_table(): Disk read failed. [ 1043.448607][T15109] Dev loop6: unable to read RDB block 0 [ 1043.454735][T15109] loop6: unable to read partition table [ 1043.551971][T15109] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1044.517194][T15121] syzkaller0: entered promiscuous mode [ 1044.522892][T15121] syzkaller0: entered allmulticast mode [ 1046.222099][T15147] syzkaller0: entered promiscuous mode [ 1046.228979][T15147] syzkaller0: entered allmulticast mode [ 1046.358565][T11819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.367018][T11819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.582276][ T7227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.591151][ T7227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.814125][T15154] loop6: detected capacity change from 0 to 2640 [ 1046.822163][T15154] buffer_io_error: 22 callbacks suppressed [ 1046.822235][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.836392][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.844430][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.852668][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.860860][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.870248][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.878792][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.887001][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.895101][T15154] ldm_validate_partition_table(): Disk read failed. [ 1046.901931][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.910424][T15154] Buffer I/O error on dev loop6, logical block 0, async page read [ 1046.918623][T15154] Dev loop6: unable to read RDB block 0 [ 1046.924758][T15154] loop6: unable to read partition table [ 1046.940639][T15154] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1047.451460][T15164] syzkaller0: entered promiscuous mode [ 1047.457243][T15164] syzkaller0: entered allmulticast mode [ 1047.600483][T15169] program syz.8.3091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.721499][T15175] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1048.885891][ T8755] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1048.887287][ T8715] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1048.902184][ T8755] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 1048.920505][ T8715] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1048.975998][ T9] usb 9-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1048.992664][ T9] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 1049.183617][ T9] usb 9-1: USB disconnect, device number 20 [ 1049.346979][ T8715] usb 3-1: USB disconnect, device number 7 [ 1049.434568][ T8755] usb 6-1: USB disconnect, device number 36 [ 1049.503951][T14954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1049.513271][T14954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1049.522894][T14954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1049.538955][T14954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1049.550172][T14954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1050.691556][T15192] syzkaller0: entered promiscuous mode [ 1050.697415][T15192] syzkaller0: entered allmulticast mode [ 1050.874669][T15184] chnl_net:caif_netlink_parms(): no params data found [ 1051.695461][ T5811] Bluetooth: hci5: command tx timeout [ 1052.098334][T15204] block device autoloading is deprecated and will be removed. [ 1053.747063][ T5811] Bluetooth: hci5: command tx timeout [ 1053.850522][T15209] kvm: MWAIT instruction emulated as NOP! [ 1054.354311][T15184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.362680][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.370294][T15184] bridge_slave_0: entered allmulticast mode [ 1054.380028][T15184] bridge_slave_0: entered promiscuous mode [ 1054.474819][T15184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.482571][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.490317][T15184] bridge_slave_1: entered allmulticast mode [ 1054.500011][T15184] bridge_slave_1: entered promiscuous mode [ 1054.799168][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'. [ 1054.929994][T15184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.064661][T15184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.411404][T15184] team0: Port device team_slave_0 added [ 1055.490716][T15184] team0: Port device team_slave_1 added [ 1055.697443][T15184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.704673][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.731136][T15184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.825266][T14954] Bluetooth: hci5: command tx timeout [ 1055.928449][T15184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.935873][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.962180][T15184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.065333][T14954] Bluetooth: hci1: command 0x0406 tx timeout [ 1056.310391][T15184] hsr_slave_0: entered promiscuous mode [ 1056.319051][T15184] hsr_slave_1: entered promiscuous mode [ 1056.326825][T15184] debugfs: 'hsr0' already exists in 'hsr' [ 1056.332627][T15184] Cannot create hsr debugfs directory [ 1057.932243][ T5811] Bluetooth: hci5: command tx timeout [ 1057.997257][T15184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1058.028214][T15184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1058.099879][T15184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1058.167518][T15184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1059.075964][T15184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.149482][T15223] syz.7.3105 (15223): drop_caches: 2 [ 1059.222987][T15184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.311981][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.319671][T11810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.409560][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.417081][T11810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.621896][T15184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.196310][T15184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.007879][T15245] syzkaller0: entered promiscuous mode [ 1062.013574][T15245] syzkaller0: entered allmulticast mode [ 1062.346883][T15184] veth0_vlan: entered promiscuous mode [ 1062.413856][T15184] veth1_vlan: entered promiscuous mode [ 1062.573555][T15184] veth0_macvtap: entered promiscuous mode [ 1062.599863][T15184] veth1_macvtap: entered promiscuous mode [ 1062.654245][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3111'. [ 1062.725082][T15184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.787366][T15184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.861946][T11812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.885279][T11812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.930326][T11812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.949206][T11814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.353469][T15261] program syz.2.3115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1065.103016][T15283] syzkaller0: entered promiscuous mode [ 1065.108971][T15283] syzkaller0: entered allmulticast mode [ 1065.326053][T15286] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3123'. [ 1065.351511][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3123'. [ 1068.003829][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3132'. [ 1068.071439][T15321] hsr_slave_1 (unregistering): left promiscuous mode [ 1068.359644][T11810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.367938][T11810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.530595][T15318] binder: 15316:15318 ioctl 4018620d 0 returned -22 [ 1071.470794][T11807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.478937][T11807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.084131][T15331] loop2: detected capacity change from 0 to 7 [ 1072.115680][T15331] Dev loop2: unable to read RDB block 7 [ 1072.121742][T15331] loop2: unable to read partition table [ 1072.141066][T15331] loop2: partition table beyond EOD, truncated [ 1072.147719][T15331] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1074.343872][T15353] syzkaller0: entered promiscuous mode [ 1074.349755][T15353] syzkaller0: entered allmulticast mode [ 1074.629559][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3142'. [ 1074.854081][T15354] hsr_slave_1 (unregistering): left promiscuous mode [ 1075.349882][T15362] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 1075.360142][T15362] overlayfs: missing 'lowerdir' [ 1075.389735][T15366] loop2: detected capacity change from 0 to 7 [ 1075.399041][T15366] Dev loop2: unable to read RDB block 7 [ 1075.404877][T15366] loop2: unable to read partition table [ 1075.436329][T15366] loop2: partition table beyond EOD, truncated [ 1075.444662][T15366] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1075.455780][ T8755] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1075.586748][T15369] binder: 15368:15369 ioctl 4018620d 0 returned -22 [ 1075.631423][ T8755] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1075.639985][ T8755] usb 5-1: config 0 has no interface number 0 [ 1075.692377][ T8755] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1075.702088][ T8755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.710564][ T8755] usb 5-1: Product: syz [ 1075.715152][ T8755] usb 5-1: Manufacturer: syz [ 1075.719907][ T8755] usb 5-1: SerialNumber: syz [ 1075.861411][ T8755] usb 5-1: config 0 descriptor?? [ 1076.143334][ T8755] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1076.216745][ T8755] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1076.228323][ T8755] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1076.237194][ T8755] usb 5-1: media controller created [ 1076.318795][ T8755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1076.460811][T15381] syzkaller0: entered promiscuous mode [ 1076.469657][T15381] syzkaller0: entered allmulticast mode [ 1076.586346][ T8755] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1078.108103][T15390] fuse: Unknown parameter 'fd0x0000000000000003' [ 1079.152645][T15403] loop2: detected capacity change from 0 to 7 [ 1079.215132][T15403] Dev loop2: unable to read RDB block 7 [ 1079.221393][T15403] loop2: AHDI p1 p2 p3 [ 1079.225911][T15403] loop2: partition table partially beyond EOD, truncated [ 1079.235980][T15403] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1079.242963][T15403] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1080.146840][ T8755] usb 5-1: USB disconnect, device number 53 [ 1080.655563][T15413] binder: 15412:15413 ioctl 4018620d 0 returned -22 [ 1081.092799][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3167'. [ 1082.818764][T15425] syzkaller0: entered promiscuous mode [ 1082.824425][T15425] syzkaller0: entered allmulticast mode [ 1083.570079][T15430] syzkaller0: entered promiscuous mode [ 1083.577565][T15430] syzkaller0: entered allmulticast mode [ 1083.649446][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1083.825932][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1083.834169][ T9] usb 3-1: config 0 has no interface number 0 [ 1083.866363][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1083.876167][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.884372][ T9] usb 3-1: Product: syz [ 1083.889740][ T9] usb 3-1: Manufacturer: syz [ 1083.894496][ T9] usb 3-1: SerialNumber: syz [ 1083.935793][ T9] usb 3-1: config 0 descriptor?? [ 1084.158278][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1084.201481][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1084.216053][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1084.224290][ T9] usb 3-1: media controller created [ 1084.364815][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1084.440729][T15442] loop2: detected capacity change from 0 to 7 [ 1084.506806][T15442] Dev loop2: unable to read RDB block 7 [ 1084.512621][T15442] loop2: unable to read partition table [ 1084.516596][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1084.564278][T15442] loop2: partition table beyond EOD, truncated [ 1084.570942][T15442] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1084.684810][ T9] usb 3-1: USB disconnect, device number 8 [ 1085.013841][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3179'. [ 1085.136770][T15452] binder: 15450:15452 ioctl 4018620d 0 returned -22 [ 1085.421028][T15456] syzkaller0: entered promiscuous mode [ 1085.427124][T15456] syzkaller0: entered allmulticast mode [ 1089.217447][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 1089.384153][T15483] loop2: detected capacity change from 0 to 7 [ 1089.441835][T15483] Dev loop2: unable to read RDB block 7 [ 1089.448304][T15483] loop2: AHDI p1 p2 p3 [ 1089.452641][T15483] loop2: partition table partially beyond EOD, truncated [ 1089.460330][T15483] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1089.469654][T15483] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1089.848702][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.855401][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.409553][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3195'. [ 1090.537491][ T8755] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1090.709581][ T8755] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1090.718466][ T8755] usb 9-1: config 0 has no interface number 0 [ 1090.733162][ T8748] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1090.765994][ T8755] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1090.775770][ T8755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.784785][ T8755] usb 9-1: Product: syz [ 1090.789243][ T8755] usb 9-1: Manufacturer: syz [ 1090.794003][ T8755] usb 9-1: SerialNumber: syz [ 1090.806404][ T8755] usb 9-1: config 0 descriptor?? [ 1090.895619][ T8748] usb 6-1: device descriptor read/64, error -71 [ 1091.024356][ T8755] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1091.049091][ T8755] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1091.060200][ T8755] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1091.068382][ T8755] usb 9-1: media controller created [ 1091.124386][ T8755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1091.187002][ T8748] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1091.229183][ T8755] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1091.336498][ T8748] usb 6-1: device descriptor read/64, error -71 [ 1091.383871][ T8755] usb 9-1: USB disconnect, device number 21 [ 1091.452597][ T8748] usb usb6-port1: attempt power cycle [ 1091.815701][ T8748] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1091.902683][ T8748] usb 6-1: device descriptor read/8, error -71 [ 1092.174045][ T8748] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1092.211424][ T8748] usb 6-1: device descriptor read/8, error -71 [ 1092.315336][ T8755] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1092.357342][ T8748] usb usb6-port1: unable to enumerate USB device [ 1093.115224][ T8755] usb 5-1: Using ep0 maxpacket: 32 [ 1093.133344][ T8755] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1093.142940][ T8755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.158089][ T8755] usb 5-1: config 0 descriptor?? [ 1093.173440][ T8755] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1093.447723][T15523] loop2: detected capacity change from 0 to 7 [ 1093.649604][T15523] Dev loop2: unable to read RDB block 7 [ 1093.655867][T15523] loop2: unable to read partition table [ 1093.700807][T15523] loop2: partition table beyond EOD, truncated [ 1093.708316][T15523] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1093.963878][ T8755] gspca_vc032x: reg_w err -71 [ 1093.971013][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.978671][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.984093][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.990360][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.995919][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.001335][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.007311][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.012731][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.018479][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.023913][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.029505][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.035022][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.040456][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.046038][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.051447][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.057021][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.062446][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.068492][ T8755] gspca_vc032x: I2c Bus Busy Wait 00 [ 1094.073900][ T8755] gspca_vc032x: Unknown sensor... [ 1094.081314][ T8755] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1095.242174][ T8755] usb 5-1: USB disconnect, device number 54 [ 1095.784303][T15543] netlink: 'syz.7.3214': attribute type 66 has an invalid length. [ 1096.115274][ T8755] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1096.252651][T15549] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3217'. [ 1096.478164][ T8755] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1096.486719][ T8755] usb 5-1: config 0 has no interface number 0 [ 1096.512495][ T8755] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1096.522157][ T8755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.530476][ T8755] usb 5-1: Product: syz [ 1096.536530][ T8755] usb 5-1: Manufacturer: syz [ 1096.541303][ T8755] usb 5-1: SerialNumber: syz [ 1096.595139][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1096.687642][ T8755] usb 5-1: config 0 descriptor?? [ 1096.722309][T15556] loop2: detected capacity change from 0 to 7 [ 1096.787585][T15556] Dev loop2: unable to read RDB block 7 [ 1096.793462][T15556] loop2: unable to read partition table [ 1096.804605][ T9] usb 3-1: device descriptor read/64, error -71 [ 1096.843344][T15556] loop2: partition table beyond EOD, truncated [ 1096.849888][T15556] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1096.936919][ T8755] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1096.984310][ T8755] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1096.996400][ T8755] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1097.004608][ T8755] usb 5-1: media controller created [ 1097.055351][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1097.142236][ T8755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1097.275175][ T9] usb 3-1: device descriptor read/64, error -71 [ 1097.404735][ T9] usb usb3-port1: attempt power cycle [ 1097.486629][ T8755] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1097.775327][ T8755] usb 5-1: USB disconnect, device number 55 [ 1097.809565][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1097.868774][ T9] usb 3-1: device descriptor read/8, error -71 [ 1098.299098][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1098.326820][ T9] usb 3-1: device descriptor read/8, error -71 [ 1098.437837][ T9] usb usb3-port1: unable to enumerate USB device [ 1098.911751][T15581] tipc: Started in network mode [ 1098.917144][T15581] tipc: Node identity befca09a9c4b, cluster identity 4711 [ 1098.925163][T15581] tipc: Enabled bearer , priority 0 [ 1098.935199][ T8755] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1098.944079][T15579] tipc: Resetting bearer [ 1099.072949][T15579] tipc: Disabling bearer [ 1099.155234][ T8755] usb 5-1: Using ep0 maxpacket: 16 [ 1099.216299][ T8755] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1099.225977][ T8755] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1099.234255][ T8755] usb 5-1: Product: syz [ 1099.238671][ T8755] usb 5-1: Manufacturer: syz [ 1099.243436][ T8755] usb 5-1: SerialNumber: syz [ 1099.255429][ T8755] usb 5-1: config 0 descriptor?? [ 1099.473853][T15578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.483217][T15578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.710061][T15591] syz.4.3227 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1100.352946][T15595] loop2: detected capacity change from 0 to 7 [ 1100.362367][T15595] Dev loop2: unable to read RDB block 7 [ 1100.368262][T15595] loop2: unable to read partition table [ 1100.379131][T15595] loop2: partition table beyond EOD, truncated [ 1100.385880][T15595] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1101.315517][ T8755] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1101.615169][ T8755] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1101.623400][ T8755] usb 9-1: config 0 has no interface number 0 [ 1101.740958][ T8755] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1101.750602][ T8755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.760307][ T8755] usb 9-1: Product: syz [ 1101.765640][ T8755] usb 9-1: Manufacturer: syz [ 1101.770851][ T8755] usb 9-1: SerialNumber: syz [ 1101.795806][ T8755] usb 9-1: config 0 descriptor?? [ 1102.869796][ T8755] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1103.926320][ T8755] usb 5-1: USB disconnect, device number 56 [ 1104.674333][ T9] usb 9-1: USB disconnect, device number 22 [ 1105.030583][T15619] tipc: Started in network mode [ 1105.038431][T15619] tipc: Node identity 6a65327896c7, cluster identity 4711 [ 1105.046540][T15619] tipc: Enabled bearer , priority 0 [ 1105.297835][T15614] tipc: Resetting bearer [ 1105.470067][T15614] tipc: Disabling bearer [ 1105.547787][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1105.700455][ T9] usb 5-1: device descriptor read/64, error -71 [ 1105.945472][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1106.101318][ T9] usb 5-1: device descriptor read/64, error -71 [ 1106.216135][ T9] usb usb5-port1: attempt power cycle [ 1106.218105][T15632] loop2: detected capacity change from 0 to 7 [ 1106.230585][T15632] Dev loop2: unable to read RDB block 7 [ 1106.236733][T15632] loop2: unable to read partition table [ 1106.250070][T15632] loop2: partition table beyond EOD, truncated [ 1106.256771][T15632] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1106.569258][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1106.628828][ T9] usb 5-1: device descriptor read/8, error -71 [ 1106.876742][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1106.907664][ T9] usb 5-1: device descriptor read/8, error -71 [ 1107.016237][ T9] usb usb5-port1: unable to enumerate USB device [ 1107.101100][T15641] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1107.111729][T15641] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1107.772694][T15650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3254'. [ 1107.955243][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1108.176634][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1108.184865][ T9] usb 6-1: config 0 has no interface number 0 [ 1108.236279][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1108.246067][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.254260][ T9] usb 6-1: Product: syz [ 1108.258690][ T9] usb 6-1: Manufacturer: syz [ 1108.263471][ T9] usb 6-1: SerialNumber: syz [ 1108.305201][ T9] usb 6-1: config 0 descriptor?? [ 1108.423668][T15660] tipc: Started in network mode [ 1108.429435][T15660] tipc: Node identity a6f580393c5, cluster identity 4711 [ 1108.438097][T15660] tipc: Enabled bearer , priority 0 [ 1108.454194][T15654] tipc: Resetting bearer [ 1108.599945][T15654] tipc: Disabling bearer [ 1108.606451][ T8715] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1108.631283][ T9] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1108.678563][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1108.691715][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1108.702181][ T9] usb 6-1: media controller created [ 1108.772956][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.815189][ T8715] usb 9-1: Using ep0 maxpacket: 8 [ 1108.867429][ T8715] usb 9-1: config 0 has an invalid interface number: 56 but max is 0 [ 1108.875935][ T8715] usb 9-1: config 0 has no interface number 0 [ 1108.938327][ T8715] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1108.947807][ T8715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.956184][ T8715] usb 9-1: Product: syz [ 1108.960520][ T8715] usb 9-1: Manufacturer: syz [ 1108.965442][ T8715] usb 9-1: SerialNumber: syz [ 1109.027997][ T8715] usb 9-1: config 0 descriptor?? [ 1109.060293][ T8715] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1109.068534][ T8715] pctv452e: pctv452e_power_ctrl: 1 [ 1109.068534][ T8715] [ 1109.076425][ T8715] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1109.076425][ T8715] [ 1109.086947][ T8715] dvb-usb: bulk message failed: -22 (5/0) [ 1109.102113][ T8715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1109.117185][ T8715] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1109.126194][ T8715] usb 9-1: media controller created [ 1109.134150][ T8715] dvb-usb: bulk message failed: -22 (8/0) [ 1109.140811][ T8715] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1109.149679][ T8715] dvb-usb: MAC address reading failed. [ 1109.156786][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1109.376095][ T8715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1109.638651][ T9] usb 6-1: USB disconnect, device number 41 [ 1111.292615][ T8715] DVB: Unable to find symbol stb0899_attach() [ 1111.299062][ T8715] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1111.336062][ T8749] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1111.568231][ T8749] usb 3-1: Using ep0 maxpacket: 32 [ 1111.638311][ T8749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.649971][ T8749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.660118][ T8749] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1111.669503][ T8749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.010380][ T8749] usb 3-1: config 0 descriptor?? [ 1112.318342][ T8715] rc_core: IR keymap rc-tt-1500 not found [ 1112.324256][ T8715] Registered IR keymap rc-empty [ 1112.331459][ T8715] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1112.344187][ T8715] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input27 [ 1112.513283][ T8715] dvb-usb: schedule remote query interval to 100 msecs. [ 1112.520632][ T8715] pctv452e: pctv452e_power_ctrl: 0 [ 1112.520632][ T8715] [ 1112.528237][ T8715] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1112.541807][ T8715] usb 9-1: USB disconnect, device number 23 acpid: input device has been disconnected, fd 3 [ 1113.254650][ T8749] usbhid 3-1:0.0: can't add hid device: -71 [ 1113.261325][ T8749] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1113.299694][ T8749] usb 3-1: USB disconnect, device number 13 [ 1113.318927][T15695] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3267'. [ 1113.449379][ T8715] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1113.805619][ T8715] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1113.895378][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1113.984374][ T8715] usb 9-1: device descriptor read/64, error -71 [ 1114.085382][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1114.122062][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1114.131521][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.297493][ T9] usb 5-1: config 0 descriptor?? [ 1114.321455][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1114.345664][ T8715] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1114.566459][ T8715] usb 9-1: device descriptor read/64, error -71 [ 1114.573265][ T9] gspca_vc032x: reg_r err -32 [ 1114.578313][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.583730][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.589498][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.595184][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.600622][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.606190][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.611620][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.617397][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.622810][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.628363][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.633781][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.639325][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.644752][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.650657][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.656190][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.664109][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.670319][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.675932][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1114.681340][ T9] gspca_vc032x: Unknown sensor... [ 1114.686855][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1114.701391][ T8715] usb usb9-port1: attempt power cycle [ 1114.794356][T15705] tipc: Enabled bearer , priority 0 [ 1114.808420][T15703] tipc: Resetting bearer [ 1114.956708][T15703] tipc: Disabling bearer [ 1115.045692][ T8715] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1115.075851][ T8715] usb 9-1: device descriptor read/8, error -71 [ 1115.095772][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1115.287626][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1115.296206][ T9] usb 6-1: config 0 has no interface number 0 [ 1115.336031][ T8715] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1115.440267][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1115.450194][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.458574][ T9] usb 6-1: Product: syz [ 1115.463048][ T9] usb 6-1: Manufacturer: syz [ 1115.468099][ T9] usb 6-1: SerialNumber: syz [ 1115.500528][ T8715] usb 9-1: device descriptor read/8, error -71 [ 1115.557059][ T9] usb 6-1: config 0 descriptor?? [ 1115.623515][ T8715] usb usb9-port1: unable to enumerate USB device [ 1115.796272][ T9] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1115.820076][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1115.831700][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1115.840196][ T9] usb 6-1: media controller created [ 1115.964142][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.025908][T15707] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 1116.173735][T15723] loop2: detected capacity change from 0 to 7 [ 1116.187053][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1116.191700][T15723] Dev loop2: unable to read RDB block 7 [ 1116.203137][T15723] loop2: unable to read partition table [ 1116.273413][T15723] loop2: partition table beyond EOD, truncated [ 1116.280069][T15723] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1116.523836][ T9] usb 6-1: USB disconnect, device number 42 [ 1116.836352][ T8749] usb 5-1: USB disconnect, device number 61 [ 1116.922285][T15730] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3280'. [ 1117.136649][T15733] tipc: Enabled bearer , priority 0 [ 1117.176121][T15732] tipc: Resetting bearer [ 1117.350046][T15732] tipc: Disabling bearer [ 1117.714324][T15740] tipc: Enabled bearer , priority 0 [ 1117.895647][ T9] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1117.962637][T15737] tipc: Resetting bearer [ 1118.105512][T15737] tipc: Disabling bearer [ 1118.215702][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1118.227787][ T9] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1118.236629][ T9] usb 9-1: config 179 has no interface number 0 [ 1118.244822][ T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1118.257239][ T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1118.268835][ T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1118.280565][ T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1118.292259][ T9] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1118.306718][ T9] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1118.316474][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.455874][T15742] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.700632][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input28 [ 1118.920260][ T9] usb 9-1: USB disconnect, device number 28 [ 1118.926650][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1118.926867][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1119.150761][T15757] loop2: detected capacity change from 0 to 7 [ 1119.159366][T15757] Dev loop2: unable to read RDB block 7 [ 1119.167077][T15757] loop2: unable to read partition table [ 1119.177278][T15757] loop2: partition table beyond EOD, truncated [ 1119.183645][T15757] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1120.176624][T15761] ALSA: seq fatal error: cannot create timer (-22) [ 1127.536146][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1127.723148][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1127.749037][ T9] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1127.758773][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.857560][ T9] usb 6-1: config 0 descriptor?? [ 1127.922589][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1128.021148][T15774] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3296'. [ 1128.242795][ T9] gspca_vc032x: reg_r err -32 [ 1128.247721][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.253177][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.258598][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.263941][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.269388][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.274804][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.283051][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.289353][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.294762][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.300258][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.305748][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.311159][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.316749][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.322171][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.327605][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.332944][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.338335][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.343675][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1128.349150][ T9] gspca_vc032x: Unknown sensor... [ 1128.354390][ T9] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1128.754484][T15783] tipc: Enabled bearer , priority 0 [ 1128.888392][T15781] tipc: Resetting bearer [ 1129.122905][T15781] tipc: Disabling bearer [ 1129.445242][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1129.637789][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1129.646100][T15794] loop2: detected capacity change from 0 to 7 [ 1129.654342][T15794] Dev loop2: unable to read RDB block 7 [ 1129.658568][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.660321][T15794] loop2: unable to read partition table [ 1129.671335][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.683951][T15794] loop2: partition table beyond EOD, truncated [ 1129.686938][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1129.693119][T15794] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1129.706143][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1129.706286][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.800239][ T9] usb 3-1: config 0 descriptor?? [ 1129.875688][ T8755] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1130.035253][ T8755] usb 9-1: Using ep0 maxpacket: 8 [ 1130.052277][ T8755] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1130.061209][ T8755] usb 9-1: config 179 has no interface number 0 [ 1130.067928][ T8755] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1130.079354][ T8755] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1130.090951][ T8755] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1130.102624][ T8755] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1130.114384][ T8755] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1130.129749][ T8755] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1130.139657][ T8755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.226058][ T8749] usb 6-1: USB disconnect, device number 43 [ 1130.258641][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.267000][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.274461][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.282248][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.289805][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.297542][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.305094][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.312537][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.320129][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.330392][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1130.386719][T15793] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1130.503476][ T9] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1130.515661][ T9] microsoft 0003:045E:07DA.000F: no inputs found [ 1130.522177][ T9] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 1130.652219][ T9] usb 3-1: USB disconnect, device number 14 [ 1130.665197][ T8755] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input29 [ 1130.858335][ T8715] usb 9-1: USB disconnect, device number 29 [ 1130.858382][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1130.858590][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1131.506475][T15806] loop5: detected capacity change from 0 to 7 [ 1131.566255][T15806] Dev loop5: unable to read RDB block 7 [ 1131.572276][T15806] loop5: AHDI p1 p2 p3 [ 1131.576955][T15806] loop5: partition table partially beyond EOD, truncated [ 1131.584450][T15806] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1131.591639][T15806] loop5: p3 start 335544320 is beyond EOD, truncated [ 1131.953301][T15810] tipc: Cannot configure node identity twice [ 1132.470221][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1132.587112][T15820] kvm: pic: single mode not supported [ 1132.594206][T15820] kvm: pic: single mode not supported [ 1132.600352][T15820] kvm: pic: level sensitive irq not supported [ 1132.663588][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1132.678526][ T9] usb 5-1: config 0 has no interface number 0 [ 1132.749152][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1132.758703][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.767046][ T9] usb 5-1: Product: syz [ 1132.771365][ T9] usb 5-1: Manufacturer: syz [ 1132.776443][ T9] usb 5-1: SerialNumber: syz [ 1132.879717][ T9] usb 5-1: config 0 descriptor?? [ 1133.072279][T15831] loop5: detected capacity change from 0 to 7 [ 1133.114759][T15831] Dev loop5: unable to read RDB block 7 [ 1133.115511][ T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1133.120775][T15831] loop5: AHDI p1 p2 p3 [ 1133.133674][T15831] loop5: partition table partially beyond EOD, truncated [ 1133.141309][T15831] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1133.148298][T15831] loop5: p3 start 335544320 is beyond EOD, truncated [ 1133.170614][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1133.182202][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1133.190578][ T9] usb 5-1: media controller created [ 1133.291284][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1133.358007][T15816] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 1133.416979][ T8715] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1133.461063][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1133.586029][ T8715] usb 9-1: Using ep0 maxpacket: 8 [ 1133.609917][ T8715] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1133.618618][ T8715] usb 9-1: config 179 has no interface number 0 [ 1133.625276][ T8715] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1133.636824][ T8715] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1133.648366][ T8715] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1133.659994][ T8715] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1133.671822][ T8715] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1133.685468][ T8715] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1133.694735][ T8715] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.741202][T15833] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1133.751247][ T9] usb 5-1: USB disconnect, device number 62 [ 1134.035975][ T8715] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input30 [ 1134.240057][ T8755] usb 9-1: USB disconnect, device number 30 [ 1134.240101][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1134.240312][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1134.693053][T15849] random: crng reseeded on system resumption [ 1135.481393][T15858] loop5: detected capacity change from 0 to 7 [ 1135.504624][T15858] Dev loop5: unable to read RDB block 7 [ 1135.511193][T15858] loop5: AHDI p1 p2 p3 [ 1135.515713][T15858] loop5: partition table partially beyond EOD, truncated [ 1135.523186][T15858] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1135.530344][T15858] loop5: p3 start 335544320 is beyond EOD, truncated [ 1136.452318][T15869] bridge0: entered promiscuous mode [ 1136.458190][T15869] vlan2: entered promiscuous mode [ 1136.665595][ T8755] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1136.869437][ T8755] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1136.879589][ T8755] usb 6-1: config 0 has no interface number 0 [ 1136.908845][ T8755] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1136.918344][ T8755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.926720][ T8755] usb 6-1: Product: syz [ 1136.931050][ T8755] usb 6-1: Manufacturer: syz [ 1136.935920][ T8755] usb 6-1: SerialNumber: syz [ 1136.967801][ T8755] usb 6-1: config 0 descriptor?? [ 1137.040529][T15878] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 1137.063878][T15878] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 1137.107034][T15878] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 1137.145706][T15878] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 1137.167913][T15878] kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 1137.229640][T15878] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 1137.229910][ T8755] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1137.258524][ T8755] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1137.265278][T15878] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1137.270507][ T8755] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1137.285048][ T8755] usb 6-1: media controller created [ 1137.323907][T15878] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 1137.349471][ T8755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1137.463501][T15878] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 1137.474799][T15878] kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 1138.546370][ T8755] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1138.586816][T15870] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 1139.237751][ T8755] usb 6-1: USB disconnect, device number 44 [ 1144.505080][ T8749] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1144.722623][ T8749] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1144.730977][ T8749] usb 5-1: config 0 has no interface number 0 [ 1144.773102][ T8749] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1144.782772][ T8749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.791146][ T8749] usb 5-1: Product: syz [ 1144.795666][ T8749] usb 5-1: Manufacturer: syz [ 1144.800402][ T8749] usb 5-1: SerialNumber: syz [ 1144.864062][ T8749] usb 5-1: config 0 descriptor?? [ 1145.114475][ T8749] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1145.150160][ T8749] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1145.161355][ T8749] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1145.169681][ T8749] usb 5-1: media controller created [ 1145.234425][ T8749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1145.326907][T15958] CUSE: unknown device info "" [ 1145.332116][T15958] CUSE: unknown device info "@" [ 1145.337330][T15958] CUSE: unknown device info "" [ 1145.342447][T15958] CUSE: DEVNAME unspecified [ 1146.386775][ T8749] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1153.571153][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1153.577799][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1153.677292][ T8749] usb 5-1: USB disconnect, device number 63 [ 1155.585858][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 1156.490048][T15994] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1160.451441][T12602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1160.479122][T12602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1160.489652][T12602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1160.525706][T12602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1160.540241][T12602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1161.847139][ T30] audit: type=1326 audit(1768055972.582:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb438f749 code=0x7ffc0000 [ 1161.871840][ T30] audit: type=1326 audit(1768055972.602:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faeb438f749 code=0x7ffc0000 [ 1161.895130][ T30] audit: type=1326 audit(1768055972.612:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb438f749 code=0x7ffc0000 [ 1161.917875][ T30] audit: type=1326 audit(1768055972.612:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb438f749 code=0x7ffc0000 [ 1161.942596][ T30] audit: type=1326 audit(1768055972.612:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7faeb438f749 code=0x7ffc0000 [ 1161.965417][ T30] audit: type=1326 audit(1768055972.612:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb438f749 code=0x7ffc0000 [ 1161.991380][ T30] audit: type=1326 audit(1768055972.612:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb438f749 code=0x7ffc0000 [ 1162.014351][ T30] audit: type=1326 audit(1768055972.622:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7faeb438f749 code=0x7ffc0000 [ 1162.036374][T16027] chnl_net:caif_netlink_parms(): no params data found [ 1162.037020][ T30] audit: type=1326 audit(1768055972.622:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faeb43865e7 code=0x7ffc0000 [ 1162.066718][ T30] audit: type=1326 audit(1768055972.622:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.2.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faeb432b829 code=0x7ffc0000 [ 1162.625533][T12602] Bluetooth: hci4: command tx timeout [ 1162.735307][T14720] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1163.009465][T14720] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.021268][T14720] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.220226][T14720] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1163.229873][T14720] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1163.238534][T14720] usb 9-1: Manufacturer: syz [ 1163.446826][T14720] usb 9-1: config 0 descriptor?? [ 1163.915669][T14720] hid_parser_main: 24 callbacks suppressed [ 1163.915765][T14720] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1163.928886][T14720] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1163.936076][T14720] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1163.943108][T14720] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1163.950320][T14720] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1163.957546][T14720] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1163.964631][T14720] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1164.047863][T14720] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1164.172797][T16027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.180763][T16027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.189172][T16027] bridge_slave_0: entered allmulticast mode [ 1164.199398][T16027] bridge_slave_0: entered promiscuous mode [ 1164.279491][T16027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.287411][T16027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.295302][T16027] bridge_slave_1: entered allmulticast mode [ 1164.305402][T16027] bridge_slave_1: entered promiscuous mode [ 1164.663961][T16027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.713969][T16027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.730091][ T5811] Bluetooth: hci4: command tx timeout [ 1164.842799][T16027] team0: Port device team_slave_0 added [ 1164.861075][T16027] team0: Port device team_slave_1 added [ 1164.962322][T16027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.969738][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.996246][T16027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.014773][T16027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.022178][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.051069][T16027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.225729][T14720] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 1165.233530][T14720] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 1165.237058][T16027] hsr_slave_0: entered promiscuous mode [ 1165.253581][T16027] hsr_slave_1: entered promiscuous mode [ 1165.262633][T16027] debugfs: 'hsr0' already exists in 'hsr' [ 1165.268660][T16027] Cannot create hsr debugfs directory [ 1165.298632][T14720] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -71 [ 1165.369238][T14720] usb 9-1: USB disconnect, device number 31 [ 1166.360079][T16027] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1166.366975][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3406'. [ 1166.456421][T16027] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1166.536870][T16027] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1166.604214][T16027] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1166.785934][ T5811] Bluetooth: hci4: command tx timeout [ 1174.532222][ T5811] Bluetooth: hci4: command tx timeout [ 1175.262022][T16027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.500155][T16027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.555577][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.563058][T11807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.622009][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.629681][T11807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.547812][T16113] Bluetooth: hci5: command 0x0406 tx timeout [ 1177.556694][T16027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.023989][T16027] veth0_vlan: entered promiscuous mode [ 1180.135350][T16027] veth1_vlan: entered promiscuous mode [ 1180.475986][T16027] veth0_macvtap: entered promiscuous mode [ 1180.528519][T16027] veth1_macvtap: entered promiscuous mode [ 1180.701552][T16027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.779791][T16027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.843727][T15475] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.854800][T15475] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.894480][T15475] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.927297][T15475] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.532136][T16220] 9p: Bad value for 'wfdno' [ 1186.097703][T14954] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1186.784626][ T9] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1187.352216][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.365283][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.390438][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1187.400063][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1187.408461][ T9] usb 9-1: Manufacturer: syz [ 1187.480196][ T9] usb 9-1: config 0 descriptor?? [ 1187.910775][ T9] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1187.919338][ T9] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1187.926512][ T9] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1187.933549][ T9] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1187.940754][ T9] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1187.948041][ T9] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1187.955223][ T9] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1188.054301][ T9] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1188.529161][T15974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.537364][T15974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.639784][T15326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.648045][T15326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.995988][ T9] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 1189.006542][ T9] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 1189.049461][ T9] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 1189.116975][ T9] usb 9-1: USB disconnect, device number 32 [ 1189.136501][T16280] No control pipe specified [ 1189.160203][T16280] No control pipe specified [ 1189.993010][T16293] loop6: detected capacity change from 0 to 2640 [ 1190.000844][T16293] buffer_io_error: 6 callbacks suppressed [ 1190.000916][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.015282][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.025808][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.033866][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.042780][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.051041][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.059297][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.067635][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.075930][T16293] ldm_validate_partition_table(): Disk read failed. [ 1190.082740][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.090938][T16293] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.099194][T16293] Dev loop6: unable to read RDB block 0 [ 1190.105628][T16293] loop6: unable to read partition table [ 1190.419713][T16293] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1190.832413][T16300] 9p: Bad value for 'wfdno' [ 1192.384201][T16310] binder: 16308:16310 ioctl 4018620d 0 returned -22 [ 1193.131850][T16316] No control pipe specified [ 1193.153009][T16316] No control pipe specified [ 1195.686610][ T8715] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1195.909887][ T8715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.921439][ T8715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.956700][ T8715] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1195.968104][ T8715] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1195.976930][ T8715] usb 3-1: Manufacturer: syz [ 1195.989487][ T8715] usb 3-1: config 0 descriptor?? [ 1196.108067][T16332] loop6: detected capacity change from 0 to 2640 [ 1196.116268][T16332] buffer_io_error: 6 callbacks suppressed [ 1196.116353][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.130281][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.138421][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.146569][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.154594][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.162863][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.173265][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.181884][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.189962][T16332] ldm_validate_partition_table(): Disk read failed. [ 1196.197057][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.205210][T16332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.213330][T16332] Dev loop6: unable to read RDB block 0 [ 1196.219627][T16332] loop6: unable to read partition table [ 1196.290448][T16332] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1196.472786][ T8715] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1196.481772][ T8715] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1196.489267][ T8715] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1196.496350][ T8715] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1196.503260][ T8715] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1196.510293][ T8715] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1196.517268][ T8715] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1196.575352][ T8715] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1196.844171][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1196.844250][ T30] audit: type=1326 audit(1768056007.622:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16337 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316d78f749 code=0x7ffc0000 [ 1196.873706][ T30] audit: type=1326 audit(1768056007.632:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16337 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f316d78f749 code=0x7ffc0000 [ 1196.897571][ T30] audit: type=1326 audit(1768056007.632:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16337 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316d78f749 code=0x7ffc0000 [ 1196.959127][ T30] audit: type=1326 audit(1768056007.712:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16337 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316d78f749 code=0x7ffc0000 [ 1197.138468][ T30] audit: type=1326 audit(1768056007.792:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16337 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f316d78f749 code=0x7ffc0000 [ 1197.161951][ T30] audit: type=1326 audit(1768056007.792:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16337 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316d78f749 code=0x7ffc0000 [ 1197.538759][ T8715] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 1197.546792][ T8715] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 1197.574314][ T8715] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -71 [ 1197.627345][ T8715] usb 3-1: USB disconnect, device number 15 [ 1197.694150][T16343] binder: 16341:16343 ioctl 4018620d 0 returned -22 [ 1198.235526][T16348] No control pipe specified [ 1198.279025][T16348] No control pipe specified [ 1200.667485][T16365] loop6: detected capacity change from 0 to 2640 [ 1200.677099][T16365] ldm_validate_partition_table(): Disk read failed. [ 1200.684033][T16365] Dev loop6: unable to read RDB block 0 [ 1200.691037][T16365] loop6: unable to read partition table [ 1200.838363][T16365] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1201.368379][T16375] binder: 16374:16375 ioctl 4018620d 0 returned -22 [ 1202.261984][T16385] tipc: Enabled bearer , priority 0 [ 1202.329603][T16383] tipc: Disabling bearer [ 1202.811048][T16393] program syz.4.3506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1203.483359][T16404] binder: 16402:16404 ioctl 4018620d 0 returned -22 [ 1204.245764][T16416] tipc: Enabled bearer , priority 0 [ 1204.337262][T16415] tipc: Disabling bearer [ 1204.541615][ T8715] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1204.706517][ T8715] usb 10-1: device descriptor read/64, error -71 [ 1204.976615][ T8715] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1206.099737][ T8715] usb 10-1: device descriptor read/64, error -71 [ 1206.243410][ T8715] usb usb10-port1: attempt power cycle [ 1206.936439][T16441] binder: 16440:16441 ioctl 4018620d 0 returned -22 [ 1206.960285][ T8715] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1207.362715][ T8715] usb 10-1: device descriptor read/8, error -71 [ 1207.635377][ T9] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1207.891231][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.902572][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.012374][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1208.022008][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1208.030351][ T9] usb 9-1: Manufacturer: syz [ 1208.123753][ T9] usb 9-1: config 0 descriptor?? [ 1208.391020][T16458] tipc: Enabled bearer , priority 0 [ 1208.428307][T16457] tipc: Disabling bearer [ 1208.565685][ T9] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1208.572753][ T9] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1208.579958][ T9] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1208.587103][ T9] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1208.594122][ T9] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1208.601299][ T9] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1208.608468][ T9] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1208.700189][ T9] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1209.315109][ T9] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 1209.322838][ T9] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 1209.402372][ T9] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -32 [ 1212.292337][T16031] usb 9-1: USB disconnect, device number 33 [ 1212.397601][T14720] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1212.658423][T14720] usb 3-1: device descriptor read/64, error -71 [ 1212.739852][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.746723][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.955318][T14720] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1213.169031][T14720] usb 3-1: device descriptor read/64, error -71 [ 1213.286161][T14720] usb usb3-port1: attempt power cycle [ 1214.435989][T16498] tipc: Enabled bearer , priority 0 [ 1214.458628][T16495] tipc: Disabling bearer [ 1216.374347][T16511] kvm: pic: level sensitive irq not supported [ 1216.375064][T16511] kvm: pic: level sensitive irq not supported [ 1216.406084][T16511] kvm: pic: single mode not supported [ 1216.413004][T16511] kvm: pic: level sensitive irq not supported [ 1216.457626][T16511] kvm: pic: level sensitive irq not supported [ 1216.488453][T16511] kvm: pic: level sensitive irq not supported [ 1216.500962][T16511] kvm: pic: level sensitive irq not supported [ 1216.513247][T16511] kvm: pic: level sensitive irq not supported [ 1216.520442][T16511] kvm: pic: level sensitive irq not supported [ 1216.529960][T16511] kvm: pic: level sensitive irq not supported [ 1216.543728][T16511] kvm: pic: level sensitive irq not supported [ 1217.031447][T16524] Set syz0 is full, maxelem 0 reached [ 1217.698561][T16535] 9p: Bad value for 'wfdno' [ 1217.865489][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1217.941839][T16540] tipc: Started in network mode [ 1217.947104][T16540] tipc: Node identity 1241b1cc2cad, cluster identity 4711 [ 1217.957705][T16540] tipc: Enabled bearer , priority 0 [ 1218.001110][T16539] tipc: Disabling bearer [ 1218.057826][ T9] usb 6-1: device descriptor read/64, error -71 [ 1218.295570][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1218.475764][ T9] usb 6-1: device descriptor read/64, error -71 [ 1218.592232][ T9] usb usb6-port1: attempt power cycle [ 1219.006451][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1219.073086][ T9] usb 6-1: device descriptor read/8, error -71 [ 1219.325849][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1219.386473][ T9] usb 6-1: device descriptor read/8, error -71 [ 1219.506377][ T9] usb usb6-port1: unable to enumerate USB device [ 1222.805214][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1223.025938][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1223.050843][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1223.065856][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1223.076972][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1223.086917][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1223.098166][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1223.307152][ T9] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1223.316598][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.324690][ T9] usb 6-1: Product: syz [ 1223.329020][ T9] usb 6-1: Manufacturer: syz [ 1223.333702][ T9] usb 6-1: SerialNumber: syz [ 1223.416857][ T9] usb 6-1: config 0 descriptor?? [ 1223.872410][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1223.885686][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1223.905622][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1223.916705][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1223.933429][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1223.941954][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1223.949676][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1223.965345][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1223.998176][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.022606][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.035921][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.056176][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.083739][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.094287][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.136737][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.159418][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.169012][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.176939][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.183995][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1224.190355][ T9] input input31: Timeout waiting for response from device. [ 1224.241461][ T9] usb 6-1: USB disconnect, device number 49 [ 1224.303465][T16587] fuse: Bad value for 'fd' [ 1224.672121][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3578'. [ 1224.869223][T16592] 9p: Bad value for 'rfdno' [ 1225.482720][T16604] loop5: detected capacity change from 0 to 7 [ 1225.504314][T16604] Dev loop5: unable to read RDB block 7 [ 1225.510602][T16604] loop5: AHDI p1 p2 p3 [ 1225.515071][T16604] loop5: partition table partially beyond EOD, truncated [ 1225.522556][T16604] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1225.529708][T16604] loop5: p3 start 335544320 is beyond EOD, truncated [ 1231.861658][T16625] 9p: Bad value for 'rfdno' [ 1232.252269][T16629] loop9: detected capacity change from 0 to 7 [ 1232.289524][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.299552][ C0] buffer_io_error: 22 callbacks suppressed [ 1232.299631][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.361187][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.371358][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.413752][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.424094][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.438754][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.448705][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.460720][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.470867][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.494329][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.504401][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.522802][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.532766][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.543169][T16629] ldm_validate_partition_table(): Disk read failed. [ 1232.561468][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.571416][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.584733][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.594656][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.656974][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.667018][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1232.679059][T16629] Dev loop9: unable to read RDB block 0 [ 1232.755427][T14720] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1232.862714][T16629] loop9: unable to read partition table [ 1232.891204][T16629] loop9: partition table beyond EOD, truncated [ 1232.898102][T16629] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1232.955271][T14720] usb 3-1: Using ep0 maxpacket: 16 [ 1233.004683][T14720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1233.081152][T14720] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 1233.089638][T14720] usb 3-1: config 0 has no interface number 0 [ 1233.095933][T14720] usb 3-1: config 0 interface 183 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 11 [ 1233.107456][T14720] usb 3-1: config 0 interface 183 has no altsetting 0 [ 1233.332015][T14720] usb 3-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=c6.40 [ 1233.346088][T14720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.354295][T14720] usb 3-1: Product: syz [ 1233.358855][T14720] usb 3-1: Manufacturer: syz [ 1233.363622][T14720] usb 3-1: SerialNumber: syz [ 1233.568383][T14720] usb 3-1: config 0 descriptor?? [ 1233.650412][T14720] keyspan 3-1:0.183: Keyspan 1 port adapter converter detected [ 1233.659792][T14720] keyspan 3-1:0.183: found no endpoint descriptor for endpoint 87 [ 1233.668218][T14720] keyspan 3-1:0.183: found no endpoint descriptor for endpoint 7 [ 1233.686820][T14720] keyspan 3-1:0.183: found no endpoint descriptor for endpoint 81 [ 1233.695911][T14720] keyspan 3-1:0.183: found no endpoint descriptor for endpoint 2 [ 1233.704083][T14720] keyspan 3-1:0.183: found no endpoint descriptor for endpoint 85 [ 1233.712647][T14720] keyspan 3-1:0.183: found no endpoint descriptor for endpoint 5 [ 1233.945483][T14720] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1234.764255][T16640] loop5: detected capacity change from 0 to 7 [ 1234.787015][T16640] Dev loop5: unable to read RDB block 7 [ 1234.792824][T16640] loop5: AHDI p1 p2 p3 [ 1234.797662][T16640] loop5: partition table partially beyond EOD, truncated [ 1234.805355][T16640] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1234.812329][T16640] loop5: p3 start 335544320 is beyond EOD, truncated [ 1235.456289][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1235.645373][ T9] usb 10-1: device descriptor read/64, error -71 [ 1235.946619][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1236.175729][T16031] usb 3-1: USB disconnect, device number 19 [ 1236.196887][T16031] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1236.212107][T16031] keyspan 3-1:0.183: device disconnected [ 1236.223028][ T9] usb 10-1: device descriptor read/64, error -71 [ 1236.373510][ T9] usb usb10-port1: attempt power cycle [ 1236.756140][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1236.770437][T16654] tipc: Enabled bearer , priority 0 [ 1236.791047][T16653] tipc: Resetting bearer [ 1236.797023][ T9] usb 10-1: device descriptor read/8, error -71 [ 1236.836593][T16653] tipc: Disabling bearer [ 1237.075326][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1237.120716][ T9] usb 10-1: device descriptor read/8, error -71 [ 1237.247386][ T9] usb usb10-port1: unable to enumerate USB device [ 1237.759576][T16658] 9p: Bad value for 'rfdno' [ 1238.375378][T14720] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1238.602855][T14720] usb 6-1: config 1 has an invalid interface number: 140 but max is 0 [ 1238.611753][T14720] usb 6-1: config 1 has no interface number 0 [ 1238.618175][T14720] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1238.627519][T14720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.771175][T16673] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1238.840067][T16031] IPVS: starting estimator thread 0... [ 1238.962930][T16675] IPVS: using max 192 ests per chain, 9600 per kthread [ 1239.014420][T14720] usb 6-1: MBOX3: Invalid descriptor size=18. [ 1242.878798][ T9] usb 6-1: USB disconnect, device number 50 [ 1243.429901][T16705] 9p: Bad value for 'rfdno' [ 1243.817832][T16709] loop5: detected capacity change from 0 to 7 [ 1243.839542][T16709] Dev loop5: unable to read RDB block 7 [ 1243.845898][T16709] loop5: AHDI p1 p2 p3 [ 1243.850398][T16709] loop5: partition table partially beyond EOD, truncated [ 1243.858576][T16709] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1243.865786][T16709] loop5: p3 start 335544320 is beyond EOD, truncated [ 1245.291528][T16744] tipc: Enabling of bearer rejected, failed to enable media [ 1254.687088][T16778] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3646'. [ 1254.798995][T16783] tipc: Enabling of bearer rejected, failed to enable media [ 1255.792660][T16796] syzkaller0: entered promiscuous mode [ 1255.798550][T16796] syzkaller0: entered allmulticast mode [ 1256.562592][T16812] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3661'. [ 1257.385895][T16824] tipc: Enabling of bearer rejected, failed to enable media [ 1259.216082][T16836] syzkaller0: entered promiscuous mode [ 1259.221756][T16836] syzkaller0: entered allmulticast mode [ 1259.458495][T16839] fuse: Bad value for 'fd' [ 1260.083542][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1260.750598][T16858] tipc: Enabling of bearer rejected, failed to enable media [ 1261.341131][T16865] syzkaller0: entered promiscuous mode [ 1261.347247][T16865] syzkaller0: entered allmulticast mode [ 1262.039208][T14720] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1262.239862][T14720] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.250855][T14720] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1262.262092][T14720] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1262.372510][T14720] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1262.382278][T14720] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1262.390977][T14720] usb 10-1: Manufacturer: syz [ 1262.430716][T14720] usb 10-1: config 0 descriptor?? [ 1262.470278][T14720] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1262.901289][T16884] bridge0: entered promiscuous mode [ 1262.907088][T16884] vlan0: entered promiscuous mode [ 1265.317672][T14720] usb 10-1: USB disconnect, device number 10 [ 1266.444637][T16903] tipc: Enabling of bearer rejected, failed to enable media [ 1266.988090][T16914] tipc: Enabling of bearer rejected, failed to enable media [ 1268.237486][ T30] audit: type=1326 audit(1768056079.022:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16931 comm="syz.5.3708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x0 [ 1268.762147][T16947] tipc: Enabling of bearer rejected, failed to enable media [ 1268.963614][T16950] tipc: Enabled bearer , priority 0 [ 1269.005229][T16948] tipc: Disabling bearer [ 1270.608100][T16990] tipc: Enabling of bearer rejected, failed to enable media [ 1271.906517][T17001] tipc: Enabling of bearer rejected, failed to enable media [ 1273.188619][T17031] tipc: Enabling of bearer rejected, failed to enable media [ 1274.165673][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.172407][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.189621][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3753'. [ 1275.333264][T17057] hsr_slave_1 (unregistering): left promiscuous mode [ 1276.633530][T17079] tipc: Enabling of bearer rejected, failed to enable media [ 1287.517976][ T6664] Bluetooth: hci4: command 0x0406 tx timeout [ 1291.305438][ T9] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1291.485388][ T9] usb 6-1: device descriptor read/64, error -71 [ 1291.798975][ T9] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1291.965385][ T9] usb 6-1: device descriptor read/64, error -71 [ 1292.078974][ T9] usb usb6-port1: attempt power cycle [ 1292.427173][ T9] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1292.477006][ T9] usb 6-1: device descriptor read/8, error -71 [ 1293.319386][ T9] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1293.361025][ T9] usb 6-1: device descriptor read/8, error -71 [ 1293.895247][T17220] binder: 17219:17220 ioctl 4018620d 0 returned -22 [ 1294.345887][ T9] usb usb6-port1: unable to enumerate USB device [ 1294.771376][T16113] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1295.743433][T17229] netlink: 'syz.9.3822': attribute type 10 has an invalid length. [ 1295.801212][T17229] syz_tun: entered promiscuous mode [ 1295.866941][T17229] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1295.917861][T17231] netlink: 'syz.9.3822': attribute type 10 has an invalid length. [ 1295.982144][T17231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.000189][T17231] team0: Port device bond0 added [ 1296.148095][T17233] bond0: (slave syz_tun): Releasing backup interface [ 1296.430937][T17233] team0: Port device bond0 removed [ 1296.461103][T17233] bridge_slave_0: left allmulticast mode [ 1296.467171][T17233] bridge_slave_0: left promiscuous mode [ 1296.473814][T17233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.577317][T16031] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1296.657341][T17233] bridge_slave_1: left allmulticast mode [ 1296.663282][T17233] bridge_slave_1: left promiscuous mode [ 1296.670086][T17233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.704555][T17233] bond0: (slave bond_slave_0): Releasing backup interface [ 1296.745884][T17233] bond0: (slave bond_slave_1): Releasing backup interface [ 1296.793367][T17233] team0: Port device team_slave_0 removed [ 1296.820954][T16031] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1296.833733][T16031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.896999][T17233] team0: Port device team_slave_1 removed [ 1296.908153][T17233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.915927][T17233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.927763][T16031] usb 6-1: config 0 descriptor?? [ 1296.947323][T17243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1297.004443][T17233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.012282][T17233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.057037][T17233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1297.297494][T16031] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1297.472044][T16031] usb 6-1: USB disconnect, device number 55 [ 1297.849446][T17254] tipc: Enabling of bearer rejected, failed to enable media [ 1298.397059][T17262] loop7: detected capacity change from 0 to 16384 [ 1298.536890][T17265] loop7: detected capacity change from 16384 to 0 [ 1298.544748][ C1] blk_print_req_error: 5 callbacks suppressed [ 1298.551149][ C1] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1299.799280][T17275] ptrace attach of "./syz-executor exec"[17279] was attempted by "./syz-executor exec"[17275] [ 1305.151964][ T6664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1305.161945][ T6664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1305.174549][ T6664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1305.221332][ T6664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1305.366690][ T6664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1307.283787][T17303] loop6: detected capacity change from 0 to 2640 [ 1307.291371][T17303] buffer_io_error: 5 callbacks suppressed [ 1307.291443][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.305587][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.313625][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.322356][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.330501][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.338767][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.346948][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.355298][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.363265][T17303] ldm_validate_partition_table(): Disk read failed. [ 1307.370177][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.380536][T17303] Buffer I/O error on dev loop6, logical block 0, async page read [ 1307.389590][T17303] Dev loop6: unable to read RDB block 0 [ 1307.395819][T17303] loop6: unable to read partition table [ 1307.518001][T17303] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1307.587920][T16113] Bluetooth: hci2: command tx timeout [ 1307.881008][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1307.906839][T17290] chnl_net:caif_netlink_parms(): no params data found [ 1308.117493][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.128231][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1308.139301][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1308.205825][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1308.215520][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1308.223791][ T9] usb 3-1: Manufacturer: syz [ 1308.238583][ T9] usb 3-1: config 0 descriptor?? [ 1308.284032][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1309.232187][T17290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.240233][T17290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.248640][T17290] bridge_slave_0: entered allmulticast mode [ 1309.258497][T17290] bridge_slave_0: entered promiscuous mode [ 1309.294163][T17290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.302047][T17290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.310143][T17290] bridge_slave_1: entered allmulticast mode [ 1309.323315][T17290] bridge_slave_1: entered promiscuous mode [ 1309.477070][T17290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.502361][T17290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.640618][T17290] team0: Port device team_slave_0 added [ 1309.687295][T17290] team0: Port device team_slave_1 added [ 1309.694590][T16113] Bluetooth: hci2: command tx timeout [ 1309.893350][T17290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.901443][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.927849][T17290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.950835][T17290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.960827][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.994143][T17290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.059236][ T6664] Bluetooth: hci2: command tx timeout [ 1315.299242][T17290] hsr_slave_0: entered promiscuous mode [ 1315.309887][T17290] hsr_slave_1: entered promiscuous mode [ 1315.319061][T17290] debugfs: 'hsr0' already exists in 'hsr' [ 1315.325152][T17290] Cannot create hsr debugfs directory [ 1315.447036][ T9] usb 3-1: USB disconnect, device number 20 [ 1315.761097][T17345] binder: 17343:17345 ioctl 4018620d 0 returned -22 [ 1315.788226][T17339] syzkaller0: entered promiscuous mode [ 1315.793902][T17339] syzkaller0: entered allmulticast mode [ 1317.106375][ T6664] Bluetooth: hci2: command tx timeout [ 1317.435575][ T9] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1317.595092][ T9] usb 6-1: device descriptor read/64, error -71 [ 1317.777373][T17290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1317.803821][T17290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1317.840701][T17290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1317.878305][T17290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1317.896829][ T9] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1318.055164][ T9] usb 6-1: device descriptor read/64, error -71 [ 1318.186214][ T9] usb usb6-port1: attempt power cycle [ 1318.562496][ T9] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1318.609758][ T9] usb 6-1: device descriptor read/8, error -71 [ 1318.691638][T17290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.789429][T17290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.831179][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.838735][T15974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.874336][ T9] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1318.948367][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.955800][T15974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.978083][ T9] usb 6-1: device descriptor read/8, error -71 [ 1319.091819][ T9] usb usb6-port1: unable to enumerate USB device [ 1320.023976][T17290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.313889][T17380] binder: 17378:17380 ioctl 4018620d 0 returned -22 [ 1320.768799][T17290] veth0_vlan: entered promiscuous mode [ 1320.915290][T17290] veth1_vlan: entered promiscuous mode [ 1320.939178][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3874'. [ 1321.348666][T17290] veth0_macvtap: entered promiscuous mode [ 1321.430171][T17290] veth1_macvtap: entered promiscuous mode [ 1321.552790][ T30] audit: type=1326 audit(1768056132.332:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1321.576203][ T30] audit: type=1326 audit(1768056132.332:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1321.599185][ T30] audit: type=1326 audit(1768056132.332:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1321.623516][ T30] audit: type=1326 audit(1768056132.332:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1321.647435][ T30] audit: type=1326 audit(1768056132.342:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1321.671774][ T30] audit: type=1326 audit(1768056132.352:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1321.694964][ T30] audit: type=1326 audit(1768056132.362:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1321.706635][T17290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.719619][ T30] audit: type=1326 audit(1768056132.362:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1322.002935][T17290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.046686][ T30] audit: type=1326 audit(1768056132.512:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1322.069968][ T30] audit: type=1326 audit(1768056132.562:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.5.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482118f749 code=0x7ffc0000 [ 1322.116471][ T7223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.186364][ T7223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.206509][ T7223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.279856][T15475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.131470][T17413] tipc: Enabling of bearer rejected, failed to enable media [ 1323.722500][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1323.945286][T17420] loop5: detected capacity change from 0 to 7 [ 1323.985977][T17420] Dev loop5: unable to read RDB block 7 [ 1323.992438][T17420] loop5: AHDI p1 p2 p3 [ 1323.996978][T17420] loop5: partition table partially beyond EOD, truncated [ 1324.004728][T17420] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1324.012046][T17420] loop5: p3 start 335544320 is beyond EOD, truncated [ 1324.110719][T17418] hsr_slave_1 (unregistering): left promiscuous mode [ 1325.738478][T17438] fuse: Bad value for 'group_id' [ 1325.743618][T17438] fuse: Bad value for 'group_id' [ 1326.254396][ T8715] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1326.461889][ T8715] usb 3-1: Using ep0 maxpacket: 32 [ 1326.506414][ T8715] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1326.516011][ T8715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.593282][ T8715] usb 3-1: config 0 descriptor?? [ 1326.642686][ T8715] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1326.826678][ T8715] gspca_vc032x: reg_r err -32 [ 1326.834970][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.840582][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.846422][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.851864][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.857421][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.861644][T17458] loop5: detected capacity change from 0 to 7 [ 1326.862814][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.862873][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.880247][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.885781][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.891256][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.896766][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.902181][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.907823][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.911982][T17458] Dev loop5: unable to read RDB block 7 [ 1326.913217][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.913273][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.913328][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.919487][T17458] loop5: AHDI p1 p2 p3 [ 1326.924525][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.930300][T17458] loop5: partition table partially beyond EOD, [ 1326.938102][ T8715] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.938179][ T8715] gspca_vc032x: Unknown sensor... [ 1326.938475][ T8715] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1326.976725][T17458] truncated [ 1326.980206][T17458] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1326.987503][T17458] loop5: p3 start 335544320 is beyond EOD, truncated [ 1328.109697][T17483] netlink: 'syz.4.3905': attribute type 1 has an invalid length. [ 1328.454065][T17488] tipc: Enabling of bearer rejected, failed to enable media [ 1329.092463][T17497] loop5: detected capacity change from 0 to 7 [ 1329.101182][T17497] Dev loop5: unable to read RDB block 7 [ 1329.107224][T17497] loop5: AHDI p1 p2 p3 [ 1329.111580][T17497] loop5: partition table partially beyond EOD, truncated [ 1329.119209][T17497] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1329.126321][T17497] loop5: p3 start 335544320 is beyond EOD, truncated [ 1329.157954][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.166222][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.201555][ T8715] usb 3-1: USB disconnect, device number 21 [ 1329.461914][T11827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.470230][T11827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.846574][ T8715] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1330.035216][ T8715] usb 6-1: Using ep0 maxpacket: 16 [ 1330.074448][ T8715] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1330.084672][ T8715] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1330.096965][ T8715] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1330.110205][ T8715] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1330.235768][ T8715] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1330.245568][ T8715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.253771][ T8715] usb 6-1: Product: syz [ 1330.261005][ T8715] usb 6-1: Manufacturer: syz [ 1330.265883][ T8715] usb 6-1: SerialNumber: syz [ 1330.289124][ T8715] usb 6-1: config 0 descriptor?? [ 1330.702284][ T8715] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 1330.902694][ T8715] usb 6-1: USB disconnect, device number 60 [ 1331.235307][T17528] loop5: detected capacity change from 0 to 7 [ 1331.277765][T17528] Dev loop5: unable to read RDB block 7 [ 1331.283698][T17528] loop5: AHDI p1 p2 p3 [ 1331.288673][T17528] loop5: partition table partially beyond EOD, truncated [ 1331.296386][T17528] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1331.303346][T17528] loop5: p3 start 335544320 is beyond EOD, truncated [ 1333.137952][T17559] warning: `syz.0.3936' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1334.231184][T17573] netlink: 'syz.4.3941': attribute type 7 has an invalid length. [ 1335.689602][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.696633][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.686307][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3948'. [ 1338.391228][T17617] tipc: Enabling of bearer rejected, failed to enable media [ 1340.901704][ T6664] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1341.027296][T17640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1341.189134][T17640] hsr_slave_1 (unregistering): left promiscuous mode [ 1344.818357][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3983'. [ 1345.118972][T17677] hsr_slave_1 (unregistering): left promiscuous mode [ 1347.960060][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4000'. [ 1351.283036][T17736] fuse: Bad value for 'fd' [ 1352.072867][T17745] ip6gretap0: entered promiscuous mode [ 1352.078891][T17745] vlan3: entered promiscuous mode [ 1352.263489][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4012'. [ 1353.423863][T17766] fuse: Bad value for 'fd' [ 1354.033295][T17780] ip6gretap0: entered promiscuous mode [ 1354.039212][T17780] vlan2: entered promiscuous mode [ 1355.427021][T17794] fuse: Bad value for 'fd' [ 1356.470357][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1356.470438][ T30] audit: type=1326 audit(1768056167.252:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.2.4040" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faeb438f749 code=0x0 [ 1356.986901][T17822] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1357.721768][T17828] kvm_intel: kvm [17827]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x75 [ 1357.791727][T17837] Illegal XDP return value 17837 on prog (id 159) dev syz_tun, expect packet loss! [ 1358.218481][T17845] overlayfs: missing 'lowerdir' [ 1359.779684][T17865] vlan3: entered promiscuous mode [ 1360.226866][T17874] loop6: detected capacity change from 0 to 2640 [ 1360.234464][T17874] buffer_io_error: 6 callbacks suppressed [ 1360.234547][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.248872][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.257018][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.265276][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.273315][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.281537][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.290032][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.298205][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.306337][T17874] ldm_validate_partition_table(): Disk read failed. [ 1360.313144][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.326554][T17874] Buffer I/O error on dev loop6, logical block 0, async page read [ 1360.334675][T17874] Dev loop6: unable to read RDB block 0 [ 1360.342585][T17874] loop6: unable to read partition table [ 1360.355597][T17874] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1360.817483][T17885] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4066'. [ 1361.877944][T17903] vlan2: entered promiscuous mode [ 1362.242976][ T6664] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1362.253078][ T6664] CPU: 0 UID: 0 PID: 6664 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(none) [ 1362.253260][ T6664] Tainted: [L]=SOFTLOCKUP [ 1362.253320][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1362.253423][ T6664] Workqueue: hci1 hci_rx_work [ 1362.253612][ T6664] Call Trace: [ 1362.253661][ T6664] [ 1362.253709][ T6664] __dump_stack+0x26/0x30 [ 1362.253869][ T6664] dump_stack_lvl+0x14c/0x1c0 [ 1362.254038][ T6664] dump_stack+0x1e/0x25 [ 1362.254189][ T6664] sysfs_create_dir_ns+0x46c/0x540 [ 1362.254374][ T6664] kobject_add_internal+0xf0f/0x1870 [ 1362.254558][ T6664] kobject_add+0x2c1/0x410 [ 1362.254726][ T6664] ? kmsan_get_metadata+0xfb/0x160 [ 1362.254918][ T6664] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1362.255114][ T6664] device_add+0xa70/0x1c10 [ 1362.255298][ T6664] hci_conn_add_sysfs+0x15f/0x2f0 [ 1362.255486][ T6664] le_conn_complete_evt+0x1d03/0x2240 [ 1362.255674][ T6664] hci_le_conn_complete_evt+0x157/0x260 [ 1362.255842][ T6664] hci_le_meta_evt+0x6eb/0x960 [ 1362.255978][ T6664] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1362.256149][ T6664] hci_event_packet+0xce2/0x1e40 [ 1362.256341][ T6664] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1362.256520][ T6664] hci_rx_work+0x8c3/0xfc0 [ 1362.256704][ T6664] ? kmsan_get_metadata+0xfb/0x160 [ 1362.256886][ T6664] ? __pfx_hci_rx_work+0x10/0x10 [ 1362.257070][ T6664] process_scheduled_works+0xb91/0x1d80 [ 1362.257320][ T6664] worker_thread+0xedf/0x1590 [ 1362.257480][ T6664] kthread+0xd5c/0xf00 [ 1362.257611][ T6664] ? __pfx_worker_thread+0x10/0x10 [ 1362.257761][ T6664] ? __pfx_kthread+0x10/0x10 [ 1362.257895][ T6664] ret_from_fork+0x208/0x710 [ 1362.258070][ T6664] ? __switch_to+0x53d/0x790 [ 1362.258220][ T6664] ? __pfx_kthread+0x10/0x10 [ 1362.258365][ T6664] ret_from_fork_asm+0x1a/0x30 [ 1362.258562][ T6664] [ 1362.440302][ T6664] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1362.455375][ T6664] Bluetooth: hci1: failed to register connection device [ 1362.900689][T17917] syzkaller0: entered promiscuous mode [ 1362.906844][T17917] syzkaller0: entered allmulticast mode [ 1363.752706][T17934] 9p: Bad value for 'rfdno' [ 1364.568628][T17944] loop6: detected capacity change from 0 to 2640 [ 1364.576850][T17944] ldm_validate_partition_table(): Disk read failed. [ 1364.583937][T17944] Dev loop6: unable to read RDB block 0 [ 1364.590267][T17944] loop6: unable to read partition table [ 1364.621619][T17944] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1366.173710][T17966] 9p: Bad value for 'rfdno' [ 1375.082894][T18046] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4130'. [ 1375.810621][T18063] loop6: detected capacity change from 0 to 2640 [ 1375.818347][T18063] buffer_io_error: 22 callbacks suppressed [ 1375.818397][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.832318][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.840615][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.848784][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.856993][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.865459][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.873622][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.888579][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.898715][T18063] ldm_validate_partition_table(): Disk read failed. [ 1375.905843][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.913884][T18063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1375.922235][T18063] Dev loop6: unable to read RDB block 0 [ 1375.928576][T18063] loop6: unable to read partition table [ 1375.965318][T18063] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1377.681813][T18089] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4149'. [ 1377.878855][T18091] ip6gretap0: entered promiscuous mode [ 1377.884624][T18091] vlan2: entered promiscuous mode [ 1378.810738][T18099] loop6: detected capacity change from 0 to 2640 [ 1378.819179][T18099] ldm_validate_partition_table(): Disk read failed. [ 1378.826305][T18099] Dev loop6: unable to read RDB block 0 [ 1378.832416][T18099] loop6: unable to read partition table [ 1378.840484][T18099] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1380.871557][T18109] syz.0.4157 (18109) used greatest stack depth: 2344 bytes left [ 1383.512661][T18124] vlan2: entered promiscuous mode [ 1383.948097][T18126] loop6: detected capacity change from 0 to 2640 [ 1383.955828][T18126] buffer_io_error: 22 callbacks suppressed [ 1383.955903][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1383.972410][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1383.981323][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1383.989532][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1383.997789][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.005971][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.014047][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.022235][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.030369][T18126] ldm_validate_partition_table(): Disk read failed. [ 1384.037322][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.045495][T18126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.053670][T18126] Dev loop6: unable to read RDB block 0 [ 1384.059897][T18126] loop6: unable to read partition table [ 1384.113282][T18126] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1384.801535][T18130] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4160'. [ 1388.531351][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4167'. [ 1388.561296][T18150] bridge0: entered promiscuous mode [ 1388.566942][T18150] macsec1: entered promiscuous mode [ 1388.572976][T18150] macsec1: entered allmulticast mode [ 1388.582953][T18150] bridge0: entered allmulticast mode [ 1388.591983][T18150] bridge0: port 1(macsec1) entered blocking state [ 1388.599077][T18150] bridge0: port 1(macsec1) entered disabled state [ 1395.958057][T18150] bridge0: left allmulticast mode [ 1395.964114][T18150] bridge0: left promiscuous mode [ 1396.176386][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4174'. [ 1396.209351][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4174'. [ 1397.061180][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.067992][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1407.206564][T18214] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4194'. [ 1407.574420][T18221] netlink: 424 bytes leftover after parsing attributes in process `syz.2.4195'. [ 1408.170094][T18226] syzkaller0: entered promiscuous mode [ 1408.175981][T18226] syzkaller0: entered allmulticast mode [ 1411.703772][T18257] IPv6: NLM_F_CREATE should be specified when creating new route [ 1411.898719][ T8715] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1412.055186][ T8715] usb 6-1: Using ep0 maxpacket: 8 [ 1412.104595][ T8715] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1412.114225][ T8715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.122883][ T8715] usb 6-1: Product: syz [ 1412.127328][ T8715] usb 6-1: Manufacturer: syz [ 1412.133763][ T8715] usb 6-1: SerialNumber: syz [ 1412.158662][ T8715] usb 6-1: config 0 descriptor?? [ 1412.194409][ T8715] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1412.384566][T18263] netlink: 'syz.2.4214': attribute type 10 has an invalid length. [ 1412.481768][T18263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.503052][T18263] team0: Port device bond0 added [ 1413.041126][T18269] tipc: Started in network mode [ 1413.046448][T18269] tipc: Node identity 4, cluster identity 4711 [ 1413.055296][T18269] tipc: Node number set to 4 [ 1413.086981][ T8715] gspca_sonixj: reg_r err -71 [ 1413.092087][ T8715] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1413.112513][ T8715] usb 6-1: USB disconnect, device number 61 [ 1413.132759][T18271] tipc: Enabling of bearer rejected, failed to enable media [ 1414.161384][T18286] autofs: Unknown parameter '0x0000000000000000' [ 1414.170118][T18286] autofs: Unknown parameter '0x0000000000000000' [ 1415.883564][T18302] netlink: 'syz.2.4229': attribute type 10 has an invalid length. [ 1417.541120][T18320] autofs: Unknown parameter '0x0000000000000000' [ 1417.563523][T18320] autofs: Unknown parameter '0x0000000000000000' [ 1418.947315][T18340] netlink: 'syz.5.4242': attribute type 10 has an invalid length. [ 1419.009685][T18340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.026588][T18340] team0: Port device bond0 added [ 1419.356955][T18344] team0: Port device bond0 removed [ 1419.391223][T18344] bridge_slave_0: left allmulticast mode [ 1419.398315][T18344] bridge_slave_0: left promiscuous mode [ 1419.407826][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.541715][T18347] autofs: Unknown parameter '0x0000000000000000' [ 1419.593576][T18347] autofs: Unknown parameter '0x0000000000000000' [ 1419.650195][T18344] bridge_slave_1: left allmulticast mode [ 1419.656417][T18344] bridge_slave_1: left promiscuous mode [ 1419.663039][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.668285][T18344] bond0: (slave bond_slave_0): Releasing backup interface [ 1421.068705][T18344] bond0: (slave bond_slave_1): Releasing backup interface [ 1422.448000][T18344] team0: Port device team_slave_0 removed [ 1422.609219][T18344] team0: Port device team_slave_1 removed [ 1422.620841][T18344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.638971][T18344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.528733][T18344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.536662][T18344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.644201][T18344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1425.400846][T18367] tipc: Enabled bearer , priority 0 [ 1425.410323][T18368] syzkaller0: entered promiscuous mode [ 1425.416376][T18368] syzkaller0: entered allmulticast mode [ 1425.649107][T18365] tipc: Resetting bearer [ 1425.687313][T18365] tipc: Disabling bearer [ 1426.954403][T18396] team0: Port device bond0 removed [ 1426.991449][T18396] bridge_slave_0: left allmulticast mode [ 1426.997436][T18396] bridge_slave_0: left promiscuous mode [ 1427.004045][T18396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.076456][T18396] bridge_slave_1: left allmulticast mode [ 1427.090475][T18396] bridge_slave_1: left promiscuous mode [ 1427.097732][T18396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.151331][T18396] bond0: (slave bond_slave_0): Releasing backup interface [ 1427.193756][T18396] bond0: (slave bond_slave_1): Releasing backup interface [ 1427.262802][T18396] team0: Port device team_slave_0 removed [ 1427.302283][T18396] team0: Port device team_slave_1 removed [ 1427.313371][T18396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.321045][T18396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.358451][T18396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.366139][T18396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.394012][T18396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1429.908566][T16113] Bluetooth: hci2: command 0x0406 tx timeout [ 1430.948002][ T30] audit: type=1326 audit(1768056241.732:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18431 comm="syz.0.4272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2423b8f749 code=0x0 [ 1431.363990][T18441] overlayfs: failed to clone upperpath [ 1433.808896][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4286'. [ 1433.820594][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4286'. [ 1436.443378][T18482] ===================================================== [ 1436.450890][T18482] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x18e5/0x1fc0 [ 1436.459309][T18482] bpf_prog_run_generic_xdp+0x18e5/0x1fc0 [ 1436.465444][T18482] do_xdp_generic+0xd52/0x1690 [ 1436.470394][T18482] tun_get_user+0x506b/0x6c60 [ 1436.475372][T18482] tun_chr_write_iter+0x3e9/0x5c0 [ 1436.480594][T18482] vfs_write+0xbe2/0x15d0 [ 1436.485217][T18482] __x64_sys_write+0x1fb/0x4d0 [ 1436.490175][T18482] x64_sys_call+0x30ab/0x3e70 [ 1436.495213][T18482] do_syscall_64+0xd3/0xf80 [ 1436.500095][T18482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.506272][T18482] [ 1436.508664][T18482] Uninit was stored to memory at: [ 1436.513986][T18482] pskb_expand_head+0x310/0x15d0 [ 1436.519254][T18482] do_xdp_generic+0xa79/0x1690 [ 1436.524200][T18482] tun_get_user+0x506b/0x6c60 [ 1436.529125][T18482] tun_chr_write_iter+0x3e9/0x5c0 [ 1436.534336][T18482] vfs_write+0xbe2/0x15d0 [ 1436.538972][T18482] __x64_sys_write+0x1fb/0x4d0 [ 1436.544007][T18482] x64_sys_call+0x30ab/0x3e70 [ 1436.548984][T18482] do_syscall_64+0xd3/0xf80 [ 1436.553684][T18482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.559895][T18482] [ 1436.562288][T18482] Uninit was created at: [ 1436.566923][T18482] __kmalloc_node_track_caller_noprof+0xb77/0x1c90 [ 1436.573665][T18482] kmalloc_reserve+0x22f/0x4b0 [ 1436.578709][T18482] __alloc_skb+0x805/0x1040 [ 1436.583397][T18482] alloc_skb_with_frags+0xc5/0xa60 [ 1436.588808][T18482] sock_alloc_send_pskb+0xacc/0xc60 [ 1436.594204][T18482] tun_get_user+0x1142/0x6c60 [ 1436.599178][T18482] tun_chr_write_iter+0x3e9/0x5c0 [ 1436.604392][T18482] vfs_write+0xbe2/0x15d0 [ 1436.609007][T18482] __x64_sys_write+0x1fb/0x4d0 [ 1436.613949][T18482] x64_sys_call+0x30ab/0x3e70 [ 1436.618980][T18482] do_syscall_64+0xd3/0xf80 [ 1436.623661][T18482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.629752][T18482] [ 1436.632156][T18482] CPU: 0 UID: 0 PID: 18482 Comm: syz.5.4290 Tainted: G L syzkaller #0 PREEMPT(none) [ 1436.643369][T18482] Tainted: [L]=SOFTLOCKUP [ 1436.647843][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1436.658036][T18482] ===================================================== [ 1436.665059][T18482] Disabling lock debugging due to kernel taint [ 1436.671260][T18482] Kernel panic - not syncing: kmsan.panic set ... [ 1436.677751][T18482] CPU: 0 UID: 0 PID: 18482 Comm: syz.5.4290 Tainted: G B L syzkaller #0 PREEMPT(none) [ 1436.688793][T18482] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1436.694381][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1436.704553][T18482] Call Trace: [ 1436.707925][T18482] [ 1436.710941][T18482] __dump_stack+0x26/0x30 [ 1436.715453][T18482] dump_stack_lvl+0x50/0x1c0 [ 1436.720139][T18482] ? dump_stack+0x12/0x25 [ 1436.724621][T18482] dump_stack+0x1e/0x25 [ 1436.728941][T18482] vpanic+0x435/0xd30 [ 1436.733116][T18482] panic+0x15d/0x160 [ 1436.737138][T18482] kmsan_report+0x31c/0x320 [ 1436.741823][T18482] ? __msan_warning+0x1b/0x30 [ 1436.746594][T18482] ? bpf_prog_run_generic_xdp+0x18e5/0x1fc0 [ 1436.752633][T18482] ? do_xdp_generic+0xd52/0x1690 [ 1436.757690][T18482] ? tun_get_user+0x506b/0x6c60 [ 1436.762715][T18482] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1436.768043][T18482] ? vfs_write+0xbe2/0x15d0 [ 1436.772638][T18482] ? __x64_sys_write+0x1fb/0x4d0 [ 1436.777672][T18482] ? x64_sys_call+0x30ab/0x3e70 [ 1436.782644][T18482] ? do_syscall_64+0xd3/0xf80 [ 1436.787503][T18482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.793657][T18482] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1436.799588][T18482] ? ___bpf_prog_run+0xea65/0xeba0 [ 1436.804819][T18482] ? __bpf_prog_run32+0xc2/0xf0 [ 1436.809816][T18482] ? kmsan_get_metadata+0xfb/0x160 [ 1436.815155][T18482] __msan_warning+0x1b/0x30 [ 1436.819844][T18482] bpf_prog_run_generic_xdp+0x18e5/0x1fc0 [ 1436.825786][T18482] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1436.831816][T18482] do_xdp_generic+0xd52/0x1690 [ 1436.836703][T18482] ? tun_get_user+0x4b01/0x6c60 [ 1436.841677][T18482] ? filter_irq_stacks+0x49/0x190 [ 1436.846900][T18482] ? kmsan_get_metadata+0xfb/0x160 [ 1436.852161][T18482] ? tun_get_user+0x4fea/0x6c60 [ 1436.857205][T18482] tun_get_user+0x506b/0x6c60 [ 1436.862100][T18482] ? stack_depot_save_flags+0x35/0x790 [ 1436.867749][T18482] ? kmsan_get_metadata+0xfb/0x160 [ 1436.873071][T18482] ? kmsan_get_metadata+0xfb/0x160 [ 1436.878352][T18482] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1436.884972][T18482] tun_chr_write_iter+0x3e9/0x5c0 [ 1436.890209][T18482] vfs_write+0xbe2/0x15d0 [ 1436.894733][T18482] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1436.900481][T18482] __x64_sys_write+0x1fb/0x4d0 [ 1436.905436][T18482] x64_sys_call+0x30ab/0x3e70 [ 1436.910295][T18482] do_syscall_64+0xd3/0xf80 [ 1436.914990][T18482] ? clear_bhb_loop+0x40/0x90 [ 1436.919823][T18482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.925893][T18482] RIP: 0033:0x7f482118e1ff [ 1436.930440][T18482] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1436.950215][T18482] RSP: 002b:00007f4821f8a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1436.958795][T18482] RAX: ffffffffffffffda RBX: 00007f48213e5fa0 RCX: 00007f482118e1ff [ 1436.966918][T18482] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 1436.975027][T18482] RBP: 00007f4821213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1436.983126][T18482] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1436.991220][T18482] R13: 00007f48213e6038 R14: 00007f48213e5fa0 R15: 00007fff11dbe8d8 [ 1436.999363][T18482] [ 1437.002917][T18482] Kernel Offset: disabled [ 1437.007290][T18482] Rebooting in 86400 seconds..