last executing test programs: 13m31.605629682s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r2, 0x401, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) 13m14.33962982s ago: executing program 32 (id=5): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r2, 0x401, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) 7m7.814727327s ago: executing program 1 (id=968): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f000035e000/0x4000)=nil, 0x4000, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x445bd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0x2a6a, &(0x7f0000000000)={0x0, 0xb91f, 0x80, 0x1, 0x28b}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) 7m6.430665377s ago: executing program 1 (id=975): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fc, 0x34325241, 0x2, [r7, 0x0, r8, r9], [0x2b8]}) 7m4.349215637s ago: executing program 1 (id=977): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) r3 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x3250, &(0x7f00000008c0)={0x0, 0xa01b, 0x3000}, 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d574f46b717dc54be3af474e74f", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) syz_io_uring_setup(0x1, &(0x7f0000000480)={0x0, 0x7733, 0x80, 0xfffffffe, 0x34f, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 7m4.024964628s ago: executing program 1 (id=978): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 7m1.418628702s ago: executing program 1 (id=982): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x80000000, 0x8000005, 0x4, 0x5, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2}) waitid(0x2, r2, 0x0, 0x4, &(0x7f0000000500)) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) 6m59.292153733s ago: executing program 1 (id=986): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, 0x0) mq_notify(0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@any, 0xffffffff}, 0x8001, 0x0, 0x0, 0x9, 0x3b15, 0xfffffffd, 0x9, 0x804}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) unshare(0x22020600) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) accept$unix(r5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000380)="218768b0ec8fa62c25d0cb36b873f5d52df069b4c7ceafb1be8f1e3b4b76bf0dc197c97e883e6b60a6cf93c3510ea23ed7571f6786f5b099d6cd49bdd58d187a8f52417405d6b822c3ac5691570c4454e1a87f13c42b180e60ab78b369e76db1d7a41632b9b8ef70b96321e9ebc1602fec62988223e95cb3c51f43d0874fc39881a0ee2ddcd011d1309350057480b728223b4c98d0628d9d9ee420142e72e1fe845624973797759a5abffb75b839b205499384", 0xb3, r2) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd32", 0xb) 6m43.126783214s ago: executing program 33 (id=986): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, 0x0) mq_notify(0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@any, 0xffffffff}, 0x8001, 0x0, 0x0, 0x9, 0x3b15, 0xfffffffd, 0x9, 0x804}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) unshare(0x22020600) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) accept$unix(r5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000380)="218768b0ec8fa62c25d0cb36b873f5d52df069b4c7ceafb1be8f1e3b4b76bf0dc197c97e883e6b60a6cf93c3510ea23ed7571f6786f5b099d6cd49bdd58d187a8f52417405d6b822c3ac5691570c4454e1a87f13c42b180e60ab78b369e76db1d7a41632b9b8ef70b96321e9ebc1602fec62988223e95cb3c51f43d0874fc39881a0ee2ddcd011d1309350057480b728223b4c98d0628d9d9ee420142e72e1fe845624973797759a5abffb75b839b205499384", 0xb3, r2) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd32", 0xb) 6m27.813959182s ago: executing program 0 (id=1051): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 6m26.177795321s ago: executing program 0 (id=1056): socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x6a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0xc1) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x805) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) 6m24.298677476s ago: executing program 0 (id=1061): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 6m23.074796878s ago: executing program 0 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r3, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r2, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r1, @ANYBLOB="00032dbd7000fddbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00fbffffff06001600008000000500120001000000060011000200000008000b0005000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000500000006001600050000000500120000000000060011000000000008000b0005000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000300000006001600cc0000000500120000000000060011000800000008000b0040000000080001007063690011000200303030303a30303a31302e3000000000280003000200000008000b002503000006001600090000000500120000000000060011007488000008000b000a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000400000006001600000400000500120001000000060011000100000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000800000006001600030000000500120000000000060011000600000008000b00ff0f0000"], 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x850) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r6}}, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x1, 0x339}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c080}, 0x400c0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) 6m22.851385917s ago: executing program 0 (id=1070): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x208}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) iopl(0x40) socket$isdn_base(0x22, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x55, 0x4000, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) r6 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000aba000/0x3000)=nil) shmctl$SHM_LOCK(r6, 0xb) close(r1) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r7, 0xc0285629, &(0x7f0000000800)={0x300, 0x7, 0x6, '\x00', &(0x7f00000007c0)}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x40000}, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 6m21.260873949s ago: executing program 0 (id=1071): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0x2d, 0x806, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xffff}, {0x10000003, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x3, 0x489aa92e}, {0x5}, {0x40, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x8000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 6m5.86020035s ago: executing program 34 (id=1071): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0x2d, 0x806, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xffff}, {0x10000003, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x3, 0x489aa92e}, {0x5}, {0x40, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x8000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 2m36.155566265s ago: executing program 6 (id=2939): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000214010025bd7000fddbdf250900020073797a306f"], 0x1c}, 0x1, 0x0, 0x0, 0x24000841}, 0x4000840) 2m36.003113184s ago: executing program 6 (id=2942): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) sendfile(r0, r0, 0x0, 0x80000001) 2m35.982361903s ago: executing program 6 (id=2943): syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) 2m33.265752562s ago: executing program 6 (id=2965): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x8000000000000003, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000200)={0x1e0980001, 0x0, "bfdc1413ae000000e20000000000544700", 0x8, 0xfffffffffffffffc, 0xff, 0x6, 0x8000000, 0x0, 0xfffffffb, 0x3e, [0x2, 0x1, 0x3, 0x2]}) 2m33.059569775s ago: executing program 6 (id=2969): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) 2m32.849719893s ago: executing program 6 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x26, 0x9, 0x70bd26, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4008050) 2m29.451828909s ago: executing program 5 (id=3016): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 2m29.296853715s ago: executing program 5 (id=3019): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r0, &(0x7f0000000140)=[@e={0xff, 0xa, 0xf, 0x81, @SEQ_CONTROLLER=0xff, 0x8, 0x8, 0xc0}], 0x8) 2m29.13741394s ago: executing program 5 (id=3023): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000021c0)=""/4123, 0x101b}], 0x1) 2m28.911529342s ago: executing program 5 (id=3027): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/151, 0x30}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000540)=""/138, 0x8a}, {&(0x7f0000000600)=""/206, 0xfffffebe}], 0x6}, 0x6ca}], 0x1, 0x40014102, 0x0) 2m27.048954459s ago: executing program 5 (id=3043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) 2m26.91084422s ago: executing program 5 (id=3044): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x101, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000500)=[{r0, 0xa005}], 0x1, 0x0, 0x0, 0x0) 2m17.723048583s ago: executing program 35 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x26, 0x9, 0x70bd26, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4008050) 2m11.808287075s ago: executing program 36 (id=3044): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x101, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000500)=[{r0, 0xa005}], 0x1, 0x0, 0x0, 0x0) 2.915620835s ago: executing program 9 (id=4750): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x20) 2.722762544s ago: executing program 9 (id=4755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0xc2, 0x0, 0x0, 0x8, {[@md5sig={0x1d, 0x12, "400053e0c9d32076c99dd6cea46c5d7b"}]}}}}}}}}, 0x0) 2.494438071s ago: executing program 9 (id=4760): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 2.467308438s ago: executing program 7 (id=4761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.353039819s ago: executing program 8 (id=4763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x40884) 2.277813318s ago: executing program 8 (id=4764): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) 1.260662997s ago: executing program 2 (id=4765): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) 1.259797849s ago: executing program 9 (id=4767): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = epoll_create(0x9) r1 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000040)={0x32000000}) 1.148228574s ago: executing program 9 (id=4768): r0 = io_uring_setup(0x3b2f, &(0x7f0000000200)={0x0, 0x136e, 0x400, 0x1, 0x2a8}) close(r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 1.086272492s ago: executing program 7 (id=4769): getxattr(0x0, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/128, &(0x7f0000000000)=0x80) 1.054642942s ago: executing program 8 (id=4770): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x216f}]}}]}, 0x44}}, 0x0) 1.043711271s ago: executing program 2 (id=4771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 896.971045ms ago: executing program 2 (id=4774): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@any, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) 835.836844ms ago: executing program 7 (id=4775): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) 805.626129ms ago: executing program 8 (id=4776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4040802) 709.007019ms ago: executing program 2 (id=4778): ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x7f000000, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 704.926113ms ago: executing program 8 (id=4779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0x80a0000, 0x1000, &(0x7f0000c28000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 647.48653ms ago: executing program 7 (id=4780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='*\x003'], 0x48}}, 0x0) 582.734931ms ago: executing program 3 (id=4781): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3b9ac9ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) 536.392459ms ago: executing program 3 (id=4782): socket$kcm(0x11, 0x200000000000003, 0x300) socket(0x11, 0x3, 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 519.767141ms ago: executing program 7 (id=4783): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) r3 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x3250, &(0x7f00000008c0)={0x0, 0xa01b, 0x3000}, 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d574f46b717dc", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) syz_io_uring_setup(0x1, &(0x7f0000000480)={0x0, 0x7733, 0x80, 0xfffffffe, 0x34f, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 437.5496ms ago: executing program 2 (id=4784): timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x3, 0xfffffffffffffff8}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 420.537689ms ago: executing program 7 (id=4785): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="401406"], 0x0, 0x0}) 361.945691ms ago: executing program 3 (id=4786): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000c4) 301.055996ms ago: executing program 3 (id=4787): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x34, 0xe, 0xd, 0x9, 0x7, 0xfffffffb, 0x5, 0x114}) 153.041615ms ago: executing program 3 (id=4788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="48007a800c0003"], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) 151.293134ms ago: executing program 2 (id=4789): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 87.179378ms ago: executing program 9 (id=4790): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0xb, {{0xa, 0x0, 0x80, @mcast2}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x4, @private0, 0x77}}, {{0xa, 0x4e21, 0x4, @remote, 0x9}}]}, 0x190) syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a0400071100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 14.867127ms ago: executing program 3 (id=4791): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) 0s ago: executing program 8 (id=4792): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x2000}) kernel console output (not intermixed with test programs): 666.550423][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.439019][ T6348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.613359][ T6348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.710492][ T6348] bond0 (unregistering): Released all slaves [ 668.932497][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1962'. [ 668.932573][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1962'. [ 669.070378][ T6348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.071718][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1962'. [ 669.071769][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1962'. [ 669.173726][ T6348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.260427][ T6348] bond0 (unregistering): Released all slaves [ 669.288966][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1962'. [ 669.289019][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1962'. [ 669.316155][ T6047] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 669.505295][ T6047] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 669.505326][ T6047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.505342][ T6047] usb 3-1: Product: syz [ 669.505353][ T6047] usb 3-1: Manufacturer: syz [ 669.505364][ T6047] usb 3-1: SerialNumber: syz [ 669.582965][ T6047] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 669.764751][T10913] hsr_slave_0: entered promiscuous mode [ 669.765744][T10913] hsr_slave_1: entered promiscuous mode [ 669.766460][T10913] debugfs: 'hsr0' already exists in 'hsr' [ 669.766478][T10913] Cannot create hsr debugfs directory [ 669.805120][ T37] audit: type=1326 audit(1765547810.189:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875184][ T37] audit: type=1326 audit(1765547810.209:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875251][ T37] audit: type=1326 audit(1765547810.209:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875288][ T37] audit: type=1326 audit(1765547810.249:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875321][ T37] audit: type=1326 audit(1765547810.249:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875359][ T37] audit: type=1326 audit(1765547810.249:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875406][ T37] audit: type=1326 audit(1765547810.249:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875578][ T37] audit: type=1326 audit(1765547810.249:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875626][ T37] audit: type=1326 audit(1765547810.249:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 669.875818][ T37] audit: type=1326 audit(1765547810.249:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 670.084114][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 670.259851][ T6348] hsr_slave_0: left promiscuous mode [ 670.273903][ T6348] hsr_slave_1: left promiscuous mode [ 670.275067][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.328831][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.448054][ T9095] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 670.552329][ T31] usb 3-1: USB disconnect, device number 13 [ 670.608003][ T9095] usb 6-1: Using ep0 maxpacket: 8 [ 670.610103][ T9095] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.610185][ T9095] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.610225][ T9095] usb 6-1: config 0 interface 0 has no altsetting 0 [ 670.612716][ T9095] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 670.612746][ T9095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.612767][ T9095] usb 6-1: Product: syz [ 670.612782][ T9095] usb 6-1: Manufacturer: syz [ 670.612798][ T9095] usb 6-1: SerialNumber: syz [ 670.701552][ T9095] usb 6-1: config 0 descriptor?? [ 670.720182][ T9095] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 670.937610][ T9095] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 670.962774][ T9095] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 670.965488][ T9095] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 671.124704][ T5945] usb 6-1: USB disconnect, device number 12 [ 671.269276][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 671.270013][ T10] ath9k_htc: Failed to initialize the device [ 671.274655][ T31] usb 3-1: ath9k_htc: USB layer deinitialized [ 671.638596][ T6348] team0 (unregistering): Port device team_slave_1 removed [ 671.850559][ T6348] team0 (unregistering): Port device team_slave_0 removed [ 672.242401][T11529] ALSA: mixer_oss: invalid OSS volume '' [ 672.811316][ T6348] team0 (unregistering): Port device team_slave_0 removed [ 674.652167][T10389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.712684][T10389] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.746841][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.746996][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.812889][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.813124][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.975401][T11618] 9p: Bad value for 'rfdno' [ 675.913565][T11655] ufs: You didn't specify the type of your ufs filesystem [ 675.913565][T11655] [ 675.913565][T11655] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 675.913565][T11655] [ 675.913565][T11655] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 675.913612][T11655] ufs: ufstype=old is supported read-only [ 675.914557][T11655] ufs: ufs_fill_super(): bad magic number [ 676.285219][T10913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 676.356397][T10913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 676.443403][T10913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 676.509228][T11671] IPv6: sit1: Disabled Multicast RS [ 676.510556][T11671] sit1: entered allmulticast mode [ 676.709192][T10913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 676.903898][T10389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.300273][T10913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.361158][T10913] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.404191][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.404609][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.444822][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.445493][ T6348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.873066][T10389] veth0_vlan: entered promiscuous mode [ 677.886005][T10389] veth1_vlan: entered promiscuous mode [ 677.976956][T10389] veth0_macvtap: entered promiscuous mode [ 678.041042][T10389] veth1_macvtap: entered promiscuous mode [ 678.070376][T10389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.086477][T10389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.088715][T11727] 9p: Bad value for 'rfdno' [ 678.124755][ T1014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.124998][ T1014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.125248][ T1014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.168542][ T1014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.350765][T10913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.394962][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.394985][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.468367][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.470859][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.136056][T11800] binder: 11798:11800 ioctl c00c6211 0 returned -14 [ 681.298529][T10913] veth0_vlan: entered promiscuous mode [ 681.352266][T10913] veth1_vlan: entered promiscuous mode [ 681.558792][T10913] veth0_macvtap: entered promiscuous mode [ 681.565838][T10913] veth1_macvtap: entered promiscuous mode [ 681.645167][T10913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.815223][T10913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.774856][T11814] netlink: 'syz.5.2134': attribute type 1 has an invalid length. [ 682.774881][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2134'. [ 682.818291][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2135'. [ 682.818970][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2135'. [ 682.819003][T11818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.912416][ T6352] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.936766][ T6352] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.946739][ T6352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.947518][ T6352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.779821][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.779845][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.878775][ T1430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.878799][ T1430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.725447][T11881] netlink: 296 bytes leftover after parsing attributes in process `syz.7.2158'. [ 687.025207][T11883] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 687.025228][T11883] overlayfs: missing 'lowerdir' [ 688.317521][T11900] EXT4-fs (loop2): unable to read superblock [ 689.719691][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'. [ 689.914571][T11931] 9p: Bad value for 'rfdno' [ 691.016941][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.017016][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.801455][ T5945] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 692.080583][ T5945] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 692.080616][ T5945] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 692.080636][ T5945] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 692.080657][ T5945] usb 7-1: config 220 has no interface number 2 [ 692.080735][ T5945] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 692.080764][ T5945] usb 7-1: config 220 interface 0 has no altsetting 0 [ 692.080784][ T5945] usb 7-1: config 220 interface 76 has no altsetting 0 [ 692.080803][ T5945] usb 7-1: config 220 interface 1 has no altsetting 0 [ 692.083886][ T5945] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 692.083917][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.083939][ T5945] usb 7-1: Product: syz [ 692.083955][ T5945] usb 7-1: Manufacturer: syz [ 692.083972][ T5945] usb 7-1: SerialNumber: syz [ 692.230076][T11968] comedi comedi4: bad chanlist[0]=0x000001dc chan=476 range length=2 [ 692.559959][ T5945] usb 7-1: selecting invalid altsetting 0 [ 692.562694][ T5945] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 692.562734][ T5945] uvcvideo 7-1:220.0: No valid video chain found. [ 692.622686][ T5945] usb 7-1: selecting invalid altsetting 0 [ 692.622729][ T5945] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 692.627421][ T5945] usb 7-1: USB disconnect, device number 2 [ 693.611238][T11986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2206'. [ 695.294892][ T37] audit: type=1326 audit(1765547835.679:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 695.295539][ T37] audit: type=1326 audit(1765547835.679:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 695.345940][ T37] audit: type=1326 audit(1765547835.729:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 695.346223][ T37] audit: type=1326 audit(1765547835.729:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 695.370922][ T37] audit: type=1326 audit(1765547835.739:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 695.370997][ T37] audit: type=1326 audit(1765547835.739:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 695.371060][ T37] audit: type=1326 audit(1765547835.739:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 695.371112][ T37] audit: type=1326 audit(1765547835.739:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.7.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 695.828540][ T37] audit: type=1326 audit(1765547836.129:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.2.2220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10755df749 code=0x0 [ 697.626811][T12069] netlink: 'syz.2.2243': attribute type 1 has an invalid length. [ 697.626840][T12069] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2243'. [ 698.869950][T12093] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2254'. [ 698.934907][T12093] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.555695][T12146] netlink: 'syz.6.2276': attribute type 12 has an invalid length. [ 702.750156][ T37] audit: type=1326 audit(1765547843.139:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12159 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 702.750409][ T37] audit: type=1326 audit(1765547843.139:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12159 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 702.779303][ T37] audit: type=1326 audit(1765547843.169:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12159 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 702.779622][ T37] audit: type=1326 audit(1765547843.169:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12159 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 703.240607][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2290'. [ 703.240656][T12176] netlink: 'syz.6.2290': attribute type 2 has an invalid length. [ 703.240673][T12176] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2290'. [ 704.650943][T12191] bridge0: port 1(bridge_slave_0) entered listening state [ 704.943271][T12209] IPv6: NLM_F_CREATE should be specified when creating new route [ 706.490037][ T37] audit: type=1326 audit(1765547846.879:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.6.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 706.490465][ T37] audit: type=1326 audit(1765547846.879:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.6.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 706.494000][ T37] audit: type=1326 audit(1765547846.879:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.6.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 706.494290][ T37] audit: type=1326 audit(1765547846.879:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.6.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 706.494566][ T37] audit: type=1326 audit(1765547846.879:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.6.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 710.583521][T12324] 9p: Bad value for 'rfdno' [ 711.628044][T12352] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2370'. [ 714.345698][ T37] audit: type=1326 audit(1765547854.729:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10755df749 code=0x7ffc0000 [ 714.350533][ T37] audit: type=1326 audit(1765547854.739:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10755df749 code=0x7ffc0000 [ 714.368020][ T37] audit: type=1326 audit(1765547854.749:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f10755df749 code=0x7ffc0000 [ 714.368394][ T37] audit: type=1326 audit(1765547854.759:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10755df749 code=0x7ffc0000 [ 716.021524][T12399] bond1: option downdelay: invalid value (18446744073709551615) [ 716.021554][T12399] bond1: option downdelay: allowed values 0 - 2147483647 [ 716.947630][T12399] bond1 (unregistering): Released all slaves [ 717.688188][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2401'. [ 718.211371][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2409'. [ 718.211405][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2409'. [ 721.500455][T12499] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2432'. [ 721.500507][T12499] netlink: 'syz.6.2432': attribute type 1 has an invalid length. [ 722.739846][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2440'. [ 722.788024][ T5993] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 722.854401][T12524] bond0: Error: Cannot enslave bond to itself. [ 722.951457][ T5993] usb 7-1: Using ep0 maxpacket: 16 [ 722.957015][ T5993] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 722.957048][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.957069][ T5993] usb 7-1: config 0 has no interface number 0 [ 723.015176][ T5993] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 723.015207][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.015222][ T5993] usb 7-1: Product: syz [ 723.015234][ T5993] usb 7-1: Manufacturer: syz [ 723.015247][ T5993] usb 7-1: SerialNumber: syz [ 723.209550][ T5872] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 723.628887][ T5993] usb 7-1: config 0 descriptor?? [ 723.765521][T12530] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2444'. [ 723.794510][ T5993] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 723.794547][ T5993] uvcvideo 7-1:0.105: No valid video chain found. [ 723.855040][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.855079][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.855125][ T5872] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 723.855150][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.860741][ T5872] usb 6-1: config 0 descriptor?? [ 723.981501][ T5993] usb 7-1: USB disconnect, device number 3 [ 724.324142][ T5872] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 724.324310][ T5872] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 724.393324][ T5872] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0002/input/input11 [ 724.446882][ T5872] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 724.467484][T12548] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2452'. [ 724.602066][ T8896] usb 6-1: USB disconnect, device number 13 [ 726.352118][ T37] audit: type=1326 audit(1765547866.739:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz.7.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 726.353159][ T37] audit: type=1326 audit(1765547866.739:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz.7.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 726.356008][ T37] audit: type=1326 audit(1765547866.739:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz.7.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 726.356754][ T37] audit: type=1326 audit(1765547866.739:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz.7.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 726.407934][ T6042] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 726.630651][ T6042] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 726.630682][ T6042] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.630703][ T6042] usb 3-1: config 0 has no interface number 0 [ 726.630756][ T6042] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 726.630781][ T6042] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 726.630824][ T6042] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 726.630848][ T6042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.636174][ T6042] usb 3-1: config 0 descriptor?? [ 726.756372][ T6042] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 726.871599][ T6042] usb 3-1: USB disconnect, device number 14 [ 726.888040][ T3078] usb 3-1: Failed to submit usb control message: -71 [ 726.888082][ T3078] usb 3-1: unable to send the bmi data to the device: -71 [ 726.888107][ T3078] usb 3-1: unable to get target info from device [ 726.888137][ T3078] usb 3-1: could not get target info (-71) [ 726.888166][ T3078] usb 3-1: could not probe fw (-71) [ 727.197362][ T37] audit: type=1326 audit(1765547867.579:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12625 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 727.238284][ T37] audit: type=1326 audit(1765547867.579:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12625 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 727.244005][ T37] audit: type=1326 audit(1765547867.629:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12625 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 727.244066][ T37] audit: type=1326 audit(1765547867.629:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12629 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f03443e2005 code=0x7ffc0000 [ 727.314620][ T37] audit: type=1326 audit(1765547867.699:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12625 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 727.464810][ T37] audit: type=1326 audit(1765547867.849:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12629 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f03443af749 code=0x7ffc0000 [ 728.329613][T12638] ieee802154 phy0 wpan0: encryption failed: -22 [ 728.473526][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2495'. [ 728.473554][T12642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2495'. [ 728.955164][T12662] netlink: zone id is out of range [ 728.955183][T12662] netlink: zone id is out of range [ 728.955197][T12662] netlink: get zone limit has 4 unknown bytes [ 730.068579][T12664] 9p: Bad value for 'rfdno' [ 731.488787][T12706] ieee802154 phy0 wpan0: encryption failed: -22 [ 731.521355][T12710] ubi31: attaching mtd0 [ 731.586159][T12710] ubi31: scanning is finished [ 731.586185][T12710] ubi31: empty MTD device detected [ 732.074088][T12710] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 732.074121][T12710] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 732.074141][T12710] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 732.074160][T12710] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 732.074179][T12710] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 732.074197][T12710] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 732.074216][T12710] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1742319578 [ 732.074238][T12710] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 732.076312][T12725] ubi31: background thread "ubi_bgt31d" started, PID 12725 [ 734.428169][ T8896] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 734.582871][ T8896] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 734.582906][ T8896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.640675][ T8896] usb 8-1: config 0 descriptor?? [ 734.659955][ T8896] cp210x 8-1:0.0: cp210x converter detected [ 735.072746][ T8896] cp210x 8-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 735.072782][ T8896] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 735.083785][ T8896] usb 8-1: cp210x converter now attached to ttyUSB0 [ 735.108242][ T8896] usb 8-1: USB disconnect, device number 2 [ 735.198640][ T8896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 735.199151][ T8896] cp210x 8-1:0.0: device disconnected [ 736.904491][T12851] vivid-007: disconnect [ 736.905040][T12850] vivid-007: reconnect [ 738.576894][T12894] netlink: 'syz.6.2608': attribute type 1 has an invalid length. [ 738.585649][T12894] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2608'. [ 739.968487][ T5806] Bluetooth: hci5: Invalid handle: 0xfd00 > 0x0eff [ 743.116752][T12980] : entered promiscuous mode [ 743.297975][ T5993] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 743.329637][T12994] lo: entered promiscuous mode [ 743.334653][T12994] tunl0: entered promiscuous mode [ 743.335378][T12994] gre0: entered promiscuous mode [ 743.335942][T12994] gretap0: entered promiscuous mode [ 743.336498][T12994] ip_vti0: entered promiscuous mode [ 743.337157][T12994] ip6_vti0: entered promiscuous mode [ 743.337708][T12994] sit0: entered promiscuous mode [ 743.358648][T12994] ip6tnl0: entered promiscuous mode [ 743.359327][T12994] ip6gre0: entered promiscuous mode [ 743.359973][T12994] syz_tun: entered promiscuous mode [ 743.369597][T12994] ip6gretap0: entered promiscuous mode [ 743.370372][T12994] bridge0: entered promiscuous mode [ 743.371040][T12994] vcan0: entered promiscuous mode [ 743.372907][T12994] bond0: entered promiscuous mode [ 743.372928][T12994] bond_slave_0: entered promiscuous mode [ 743.373189][T12994] bond_slave_1: entered promiscuous mode [ 743.374353][T12994] team0: entered promiscuous mode [ 743.374372][T12994] team_slave_0: entered promiscuous mode [ 743.391965][T12994] team_slave_1: entered promiscuous mode [ 744.161337][T12994] dummy0: entered promiscuous mode [ 744.162645][T12994] nlmon0: entered promiscuous mode [ 744.163349][T12994] caif0: entered promiscuous mode [ 744.163541][T12994] batadv0: entered promiscuous mode [ 744.164364][T12994] vxcan0: entered promiscuous mode [ 744.165030][T12994] vxcan1: entered promiscuous mode [ 744.165653][T12994] veth0: entered promiscuous mode [ 744.166286][T12994] veth1: entered promiscuous mode [ 744.166919][T12994] wg0: entered promiscuous mode [ 744.167552][T12994] wg1: entered promiscuous mode [ 744.217764][T12994] wg2: entered promiscuous mode [ 744.218699][T12994] veth0_to_bridge: entered promiscuous mode [ 744.220751][T12994] veth1_to_bridge: entered promiscuous mode [ 744.222231][T12994] veth0_to_bond: entered promiscuous mode [ 744.223476][T12994] veth1_to_bond: entered promiscuous mode [ 744.224722][T12994] veth0_to_team: entered promiscuous mode [ 744.226154][T12994] veth1_to_team: entered promiscuous mode [ 744.319908][T12994] veth0_to_batadv: entered promiscuous mode [ 744.320782][T12994] batadv_slave_0: entered promiscuous mode [ 744.321521][T12994] veth1_to_batadv: entered promiscuous mode [ 744.330217][T12994] batadv_slave_1: entered promiscuous mode [ 744.331012][T12994] xfrm0: entered promiscuous mode [ 744.331755][T12994] veth0_to_hsr: entered promiscuous mode [ 744.333155][T12994] veth1_to_hsr: entered promiscuous mode [ 744.334540][T12994] hsr0: entered promiscuous mode [ 744.336786][T12994] veth1_virt_wifi: entered promiscuous mode [ 744.337524][T12994] veth0_virt_wifi: entered promiscuous mode [ 744.393705][T12994] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 744.396460][T12994] vlan0: entered promiscuous mode [ 744.397427][T12994] vlan1: entered promiscuous mode [ 744.408885][T12994] macvlan0: entered promiscuous mode [ 744.409926][T12994] macvlan1: entered promiscuous mode [ 744.410849][T12994] ipvlan0: entered promiscuous mode [ 744.411070][T12994] ipvlan1: entered promiscuous mode [ 744.412667][T12994] macvtap0: entered promiscuous mode [ 744.413589][T12994] macsec0: entered promiscuous mode [ 744.428977][T12994] geneve0: entered promiscuous mode [ 744.429726][T12994] geneve1: entered promiscuous mode [ 744.430444][T12994] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 744.431170][T12994] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 744.431863][T12994] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 744.432654][T12994] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 744.458719][T12994] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 744.459543][T12994] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 744.460256][T12994] ip6gretap1: entered promiscuous mode [ 744.532703][ T5993] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 744.532736][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.532759][ T5993] usb 8-1: Product: syz [ 744.532776][ T5993] usb 8-1: Manufacturer: syz [ 744.532792][ T5993] usb 8-1: SerialNumber: syz [ 744.592687][ T5993] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 744.664146][ T5872] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 745.413224][ T6047] usb 8-1: USB disconnect, device number 3 [ 745.576600][ T37] audit: type=1326 audit(1765547885.959:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.6.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 745.580768][ T37] audit: type=1326 audit(1765547885.969:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.6.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 745.609872][ T37] audit: type=1326 audit(1765547885.999:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.6.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 745.612458][ T37] audit: type=1326 audit(1765547885.999:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.6.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d62f1f749 code=0x7ffc0000 [ 745.767697][T13027] comedi comedi0: s526: I/O port conflict (0x8002f,64) [ 745.959174][T13035] netlink: 'syz.2.2665': attribute type 3 has an invalid length. [ 747.001212][ T5872] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 747.001512][ T5872] ath9k_htc: Failed to initialize the device [ 747.020870][ T6047] usb 8-1: ath9k_htc: USB layer deinitialized [ 749.487966][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 752.478705][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.478782][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.831772][T13142] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2710'. [ 753.082984][T13150] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 753.168185][T13156] warning: `syz.6.2715' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 753.320145][T13160] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2719'. [ 753.320176][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2719'. [ 753.320193][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 755.288121][T13198] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2736'. [ 755.808065][T13212] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2742'. [ 757.272454][ T49] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 757.428282][ T49] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 757.428324][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.428459][ T49] usb 7-1: Product: syz [ 757.428477][ T49] usb 7-1: Manufacturer: syz [ 757.428497][ T49] usb 7-1: SerialNumber: syz [ 757.482207][ T37] audit: type=1800 audit(1765547897.869:119): pid=13233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.5.2751" name="/" dev="tmpfs" ino=1286 res=0 errno=0 [ 757.550464][ T49] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 757.604857][ T5798] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 759.087910][ T5798] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 759.088112][ T5798] ath9k_htc: Failed to initialize the device [ 759.345309][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 759.391312][T13260] QAT: failed to copy from user cfg_data. [ 759.392070][ T9] usb 7-1: USB disconnect, device number 4 [ 759.397073][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 760.878834][T13280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 760.878858][T13280] IPv6: NLM_F_CREATE should be set when creating new route [ 760.879054][T13280] IPv6: NLM_F_CREATE should be set when creating new route [ 761.004389][T13283] netlink: 'syz.6.2774': attribute type 1 has an invalid length. [ 761.400725][T13304] 9p: Bad value for 'rfdno' [ 762.906282][T13336] 9p: Bad value for 'rfdno' [ 763.518018][T13372] 9p: Bad value for 'rfdno' [ 764.957064][T13407] 9p: Bad value for 'rfdno' [ 765.178140][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2843'. [ 765.304434][T13430] 9p: Bad value for 'rfdno' [ 766.490681][T13442] ieee802154 phy0 wpan0: encryption failed: -90 [ 766.850787][T13464] 9p: Bad value for 'rfdno' [ 767.074090][T13473] tmpfs: Bad value for 'mpol' [ 768.518298][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2880'. [ 769.123765][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2895'. [ 769.897714][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 770.027958][ T49] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 770.177997][ T49] usb 6-1: Using ep0 maxpacket: 8 [ 770.181309][ T49] usb 6-1: unable to get BOS descriptor or descriptor too short [ 770.186161][ T49] usb 6-1: config 7 has an invalid interface number: 58 but max is 0 [ 770.186191][ T49] usb 6-1: config 7 has no interface number 0 [ 770.186243][ T49] usb 6-1: config 7 interface 58 altsetting 3 bulk endpoint 0x86 has invalid maxpacket 210 [ 770.186271][ T49] usb 6-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.186301][ T49] usb 6-1: config 7 interface 58 has no altsetting 0 [ 770.258408][ T49] usb 6-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 770.258443][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.258465][ T49] usb 6-1: Product: syz [ 770.258481][ T49] usb 6-1: Manufacturer: syz [ 770.258496][ T49] usb 6-1: SerialNumber: syz [ 770.307998][T13559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 770.536868][ T49] usb 6-1: USB disconnect, device number 14 [ 771.972119][T13603] overlayfs: missing 'lowerdir' [ 773.188625][ T5945] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 773.350582][ T5945] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 773.350614][ T5945] usb 7-1: config 0 has no interface number 0 [ 773.353782][ T5945] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 773.353826][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.353849][ T5945] usb 7-1: Product: syz [ 773.353865][ T5945] usb 7-1: Manufacturer: syz [ 773.353881][ T5945] usb 7-1: SerialNumber: syz [ 773.416695][ T5945] usb 7-1: config 0 descriptor?? [ 773.657484][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2949'. [ 773.657515][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2949'. [ 773.702356][ T5945] uvcvideo 7-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 773.702459][ T5945] uvcvideo 7-1:0.64: Entity type for entity Output 224 was not initialized! [ 773.703573][ T5945] uvcvideo 7-1:0.64: Failed to create links for entity 224 [ 773.703596][ T5945] uvcvideo 7-1:0.64: Failed to register entities (-22). [ 773.746470][ T5945] usb 7-1: USB disconnect, device number 5 [ 773.872960][T13655] Invalid source name [ 773.872981][T13655] UBIFS error (pid: 13655): cannot open "./file0", error -22 [ 773.978006][T13662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 773.978048][T13662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 773.978065][T13662] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2954'. [ 774.059949][T13664] comedi: No check for data length of config insn id 40060 is implemented [ 774.059972][T13664] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 774.059987][T13664] comedi: Assuming n=15 is correct [ 774.147107][T13672] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2960'. [ 776.867521][T13720] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2981'. [ 776.939574][T13720] bridge1: entered promiscuous mode [ 778.907979][ T5945] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 779.067574][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.067612][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.067656][ T5945] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 779.067682][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.112675][ T5945] usb 3-1: config 0 descriptor?? [ 779.734146][ T5945] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 779.760559][ T5945] usb 3-1: USB disconnect, device number 15 [ 780.094497][T13828] 9p: Bad value for 'rfdno' [ 781.736854][T13854] 9p: Bad value for 'rfdno' [ 782.511702][T13890] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3061'. [ 783.556601][T13906] kernel profiling enabled (shift: 5) [ 784.066519][T13931] ptrace attach of "./syz-executor exec"[5802] was attempted by "\x22"[13931] [ 784.461012][ T5798] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 784.614200][ T5798] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 784.614235][ T5798] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 784.614256][ T5798] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 784.614279][ T5798] usb 8-1: config 220 has no interface number 2 [ 784.614357][ T5798] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 784.614387][ T5798] usb 8-1: config 220 interface 0 has no altsetting 0 [ 784.614408][ T5798] usb 8-1: config 220 interface 76 has no altsetting 0 [ 784.614428][ T5798] usb 8-1: config 220 interface 1 has no altsetting 0 [ 784.621984][ T5798] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 784.622022][ T5798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.622047][ T5798] usb 8-1: Product: syz [ 784.622063][ T5798] usb 8-1: Manufacturer: syz [ 784.622081][ T5798] usb 8-1: SerialNumber: syz [ 784.877048][ T5798] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 784.877096][ T5798] uvcvideo 8-1:220.0: No valid video chain found. [ 784.877160][ T5798] usb 8-1: selecting invalid altsetting 0 [ 784.937532][ T5798] usb 8-1: selecting invalid altsetting 0 [ 784.937575][ T5798] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 784.955672][ T5798] usb 8-1: USB disconnect, device number 4 [ 785.344890][T13991] binder: 13990:13991 ioctl c018620c 200000000140 returned -22 [ 785.453934][T13995] 9p: Bad value for 'rfdno' [ 785.507411][T13998] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3111'. [ 785.953600][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 785.953629][T14025] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3124'. [ 787.598301][T14088] CUSE: info not properly terminated [ 788.439444][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3171'. [ 789.809188][T14152] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 789.809208][T14152] overlayfs: missing 'lowerdir' [ 789.937968][ T5945] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 790.087914][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 790.104135][ T5945] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 790.104167][ T5945] usb 3-1: config 0 has no interface number 0 [ 790.104217][ T5945] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 790.104247][ T5945] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 790.144839][ T5945] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 790.144872][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.144895][ T5945] usb 3-1: Product: syz [ 790.144911][ T5945] usb 3-1: Manufacturer: syz [ 790.144925][ T5945] usb 3-1: SerialNumber: syz [ 790.157735][ T5945] usb 3-1: config 0 descriptor?? [ 790.455135][ T5945] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 790.674548][ T5945] usb 3-1: USB disconnect, device number 16 [ 791.017343][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 791.036209][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 791.037550][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 791.057129][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 791.061876][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 791.172855][T14195] lo speed is unknown, defaulting to 1000 [ 791.238404][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3208'. [ 791.612470][T14195] chnl_net:caif_netlink_parms(): no params data found [ 793.090584][T14195] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.090851][T14195] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.091078][T14195] bridge_slave_0: entered allmulticast mode [ 793.094764][T14195] bridge_slave_0: entered promiscuous mode [ 793.100656][T14195] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.108179][T14195] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.108492][T14195] bridge_slave_1: entered allmulticast mode [ 793.112363][T14195] bridge_slave_1: entered promiscuous mode [ 793.168260][ T5807] Bluetooth: hci2: command tx timeout [ 793.614347][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.635653][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.833197][T14195] team0: Port device team_slave_0 added [ 794.859108][T14195] team0: Port device team_slave_1 added [ 795.031279][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.031300][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.031331][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.060047][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.060073][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.060106][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.250492][ T5807] Bluetooth: hci2: command tx timeout [ 795.392260][T14195] hsr_slave_0: entered promiscuous mode [ 795.393876][T14195] hsr_slave_1: entered promiscuous mode [ 796.390201][T14350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3275'. [ 796.390553][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3275'. [ 796.443818][T14195] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 796.503598][T14195] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 796.552091][T14357] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3280'. [ 796.557501][T14195] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 796.620257][T14195] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 796.851485][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 796.864227][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 796.874386][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 796.895191][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 796.895748][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 796.897557][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 797.106385][T14373] lo speed is unknown, defaulting to 1000 [ 797.337899][ T5807] Bluetooth: hci2: command tx timeout [ 797.365485][T14195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.792907][T14195] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.831421][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.831541][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.901826][T12911] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.902084][T12911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.044647][T14373] chnl_net:caif_netlink_parms(): no params data found [ 798.218276][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 798.388002][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 798.389978][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 798.390005][ T10] usb 3-1: config 0 has no interface number 0 [ 798.390051][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 798.390069][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 798.390087][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 798.390107][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 798.390145][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 798.390163][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.400320][ T10] usb 3-1: config 0 descriptor?? [ 798.478135][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 798.631975][ T10] usb 3-1: USB disconnect, device number 17 [ 798.637693][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 798.696743][T14373] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.696970][T14373] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.697237][T14373] bridge_slave_0: entered allmulticast mode [ 798.701942][T14373] bridge_slave_0: entered promiscuous mode [ 798.738223][T14373] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.738364][T14373] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.738967][T14373] bridge_slave_1: entered allmulticast mode [ 798.741306][T14373] bridge_slave_1: entered promiscuous mode [ 798.928279][ T5807] Bluetooth: hci6: command tx timeout [ 799.071600][T14373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.091958][T14373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.368660][T14464] __vm_enough_memory: pid: 14464, comm: syz.7.3322, bytes: 21200411512832 not enough memory for the allocation [ 799.408652][ T5807] Bluetooth: hci2: command tx timeout [ 799.459682][T14373] team0: Port device team_slave_0 added [ 799.493948][T14373] team0: Port device team_slave_1 added [ 799.762527][T14373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.762548][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.762577][T14373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.884242][T14373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.884262][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.884294][T14373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.365915][T14195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.390608][T14373] hsr_slave_0: entered promiscuous mode [ 800.393300][T14373] hsr_slave_1: entered promiscuous mode [ 800.394410][T14373] debugfs: 'hsr0' already exists in 'hsr' [ 800.394437][T14373] Cannot create hsr debugfs directory [ 800.411689][T14497] xt_socket: unknown flags 0xd0 [ 801.007981][ T5807] Bluetooth: hci6: command tx timeout [ 801.585076][T14195] veth0_vlan: entered promiscuous mode [ 801.620150][T14195] veth1_vlan: entered promiscuous mode [ 801.623046][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3357'. [ 801.958260][T14373] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 802.034837][T14373] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 803.354645][ T5807] Bluetooth: hci6: command tx timeout [ 803.391352][T14195] veth0_macvtap: entered promiscuous mode [ 803.397040][T14195] veth1_macvtap: entered promiscuous mode [ 803.471213][T14373] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 803.502886][T14373] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 803.715794][T14195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.745599][T14195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.799454][T12906] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.802936][ T3519] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.803353][ T3519] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.803569][ T3519] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.412865][ T5807] Bluetooth: hci6: command tx timeout [ 805.522369][T12911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.522395][T12911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.952377][T14373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.287058][T12911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.287089][T12911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.411184][T14373] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.479321][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.479550][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.540196][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.540372][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.374376][T14373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.818319][T12150] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 810.990902][T12150] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.990933][T12150] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 810.992463][T12150] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 810.992538][T12150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 810.992561][T12150] usb 8-1: SerialNumber: syz [ 811.170749][T14373] veth0_vlan: entered promiscuous mode [ 811.192904][T14373] veth1_vlan: entered promiscuous mode [ 811.246141][T12150] usb 8-1: 0:2 : does not exist [ 811.286623][T14373] veth0_macvtap: entered promiscuous mode [ 811.305029][T14373] veth1_macvtap: entered promiscuous mode [ 811.375920][T12150] usb 8-1: USB disconnect, device number 5 [ 811.481089][T14373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.522229][T14373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.565645][ T1508] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.565699][ T1508] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.565740][ T1508] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.565777][ T1508] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.161902][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.161928][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.313304][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.313329][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.478255][T12150] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 812.630225][T12150] usb 8-1: device descriptor read/64, error -71 [ 812.929831][T12150] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 813.057929][T12150] usb 8-1: device descriptor read/64, error -71 [ 813.320748][T12150] usb usb8-port1: attempt power cycle [ 813.992247][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.992332][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.023255][T12150] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 814.048531][T12150] usb 8-1: device descriptor read/8, error -71 [ 814.223646][T14785] syz.9.3459 (14785): drop_caches: 4 [ 814.297962][T12150] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 814.318950][T12150] usb 8-1: device descriptor read/8, error -71 [ 814.428552][T12150] usb usb8-port1: unable to enumerate USB device [ 815.710637][T14825] dvmrp2: entered allmulticast mode [ 815.715506][T14828] dvmrp2: left allmulticast mode [ 816.337997][ T3645] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 816.491298][ T3645] usb 3-1: Using ep0 maxpacket: 8 [ 816.494714][ T3645] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.494774][ T3645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 816.535161][ T3645] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 816.535194][ T3645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.535217][ T3645] usb 3-1: Product: syz [ 816.535233][ T3645] usb 3-1: Manufacturer: syz [ 816.535249][ T3645] usb 3-1: SerialNumber: syz [ 816.586788][ T3645] usb 3-1: config 0 descriptor?? [ 817.315850][ T31] usb 3-1: USB disconnect, device number 18 [ 817.797944][ T31] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 817.947918][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 817.950392][ T31] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 817.950428][ T31] usb 10-1: config 0 has no interface number 0 [ 817.950481][ T31] usb 10-1: config 0 interface 12 has no altsetting 0 [ 817.953614][ T31] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 817.953644][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.953667][ T31] usb 10-1: Product: syz [ 817.953682][ T31] usb 10-1: Manufacturer: syz [ 817.953698][ T31] usb 10-1: SerialNumber: syz [ 817.986669][ T31] usb 10-1: config 0 descriptor?? [ 818.329661][T14903] tipc: Started in network mode [ 818.329765][T14903] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 818.335755][T14903] tipc: Enabled bearer , priority 10 [ 818.801386][ T31] f81534 10-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 818.801464][ T31] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 818.801483][ T31] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 818.801583][ T31] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 818.875648][ T49] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 818.896282][ T31] usb 10-1: USB disconnect, device number 2 [ 819.046036][ T49] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 819.046072][ T49] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.046094][ T49] usb 9-1: Product: syz [ 819.046109][ T49] usb 9-1: Manufacturer: syz [ 819.046125][ T49] usb 9-1: SerialNumber: syz [ 819.086456][ T49] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 819.165551][ T5872] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 819.353546][ T49] tipc: Node number set to 10136234 [ 819.427429][ T5918] usb 9-1: USB disconnect, device number 2 [ 820.910452][ T5872] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 820.910658][ T5872] ath9k_htc: Failed to initialize the device [ 820.911530][ T5918] usb 9-1: ath9k_htc: USB layer deinitialized [ 821.084855][T14957] batadv0: entered promiscuous mode [ 821.126999][T14957] batadv0: left promiscuous mode [ 823.002228][T15045] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 823.333939][T15060] tipc: Enabled bearer , priority 10 [ 823.454305][T15069] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3592'. [ 823.454333][T15069] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3592'. [ 823.454391][T15069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3592'. [ 823.600443][ T8896] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 823.677941][ T49] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 823.747973][ T8896] usb 10-1: Using ep0 maxpacket: 16 [ 823.752656][ T8896] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.752696][ T8896] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.752721][ T8896] usb 10-1: config 0 interface 0 has no altsetting 0 [ 823.752758][ T8896] usb 10-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 823.752783][ T8896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.762460][ T8896] usb 10-1: config 0 descriptor?? [ 823.901448][ T49] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.901478][ T49] usb 3-1: config 0 has no interface number 0 [ 823.901531][ T49] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 823.901558][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.907616][ T49] usb 3-1: config 0 descriptor?? [ 823.960424][ T49] usb 3-1: selecting invalid altsetting 1 [ 823.974030][ T49] dvb_ttusb_budget: ttusb_init_controller: error [ 823.974368][ T49] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 824.035376][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3603'. [ 824.137603][ T49] DVB: Unable to find symbol cx22700_attach() [ 824.201656][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201698][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201729][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201758][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201787][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201816][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201845][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201883][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201912][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.201940][ T8896] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 824.234212][ T8896] apple 0003:05AC:0247.0004: unexpected long global item [ 824.235238][ T8896] apple 0003:05AC:0247.0004: parse failed [ 824.235359][ T8896] apple 0003:05AC:0247.0004: probe with driver apple failed with error -22 [ 824.304789][ T49] DVB: Unable to find symbol tda10046_attach() [ 824.304805][ T49] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 824.307641][ T49] usb 3-1: USB disconnect, device number 19 [ 824.455370][ T9095] usb 10-1: USB disconnect, device number 3 [ 826.330725][T15138] netdevsim netdevsim9: Firmware load for '../file0' refused, path contains '..' component [ 826.526995][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3628'. [ 826.652342][T15154] 9p: Bad value for 'rfdno' [ 827.080356][T15170] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3639'. [ 827.080389][T15170] tipc: Invalid UDP bearer configuration [ 827.080436][T15170] tipc: Enabling of bearer rejected, failed to enable media [ 827.407930][ T5872] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 827.581198][T15184] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3647'. [ 827.581711][ T5872] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 827.581742][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 827.585949][ T5872] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 827.585980][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 827.586002][ T5872] usb 3-1: Product: syz [ 827.586018][ T5872] usb 3-1: Manufacturer: syz [ 827.586034][ T5872] usb 3-1: SerialNumber: syz [ 827.612524][ T5872] usb 3-1: config 0 descriptor?? [ 827.668847][ T5872] usb 3-1: selecting invalid altsetting 0 [ 827.839495][ T5872] usb 3-1: USB disconnect, device number 20 [ 828.155338][T15199] 9p: Bad value for 'rfdno' [ 828.295087][T15205] syz_tun: entered allmulticast mode [ 828.308268][ T5872] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 828.457943][ T5872] usb 9-1: Using ep0 maxpacket: 8 [ 828.461656][ T5872] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.461722][ T5872] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 828.461751][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 828.461779][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 828.461803][ T5872] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 828.466280][ T5872] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 828.466313][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 828.466336][ T5872] usb 9-1: Product: syz [ 828.466352][ T5872] usb 9-1: Manufacturer: syz [ 828.466368][ T5872] usb 9-1: SerialNumber: syz [ 828.507694][T15214] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3660'. [ 828.576610][ T5872] usb 9-1: config 0 descriptor?? [ 828.810215][ T5872] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 828.810256][ T5872] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 829.011408][ T5872] radio-si470x 9-1:0.0: software version 226, hardware version 210 [ 829.011443][ T5872] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 829.159801][ T6047] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 829.212641][ T5872] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 829.212777][ T5872] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 829.213230][ T5872] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 829.216709][ T5872] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 829.270624][ T5872] usb 9-1: USB disconnect, device number 3 [ 829.307936][ T6047] usb 10-1: Using ep0 maxpacket: 8 [ 829.311101][ T6047] usb 10-1: unable to get BOS descriptor or descriptor too short [ 829.318574][ T6047] usb 10-1: config 4 interface 0 has no altsetting 0 [ 829.336849][ T6047] usb 10-1: string descriptor 0 read error: -22 [ 829.337138][ T6047] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 829.337167][ T6047] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.387352][ T6047] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 829.405873][ T6047] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 829.406898][ T6047] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 829.406958][ T6047] usb 10-1: media controller created [ 829.490480][ T6047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.929983][ T6047] usb 10-1: USB disconnect, device number 4 [ 830.407997][T14676] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 830.562901][T14676] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 830.562938][T14676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.599059][T14676] ums-cypress 3-1:1.0: USB Mass Storage device detected [ 830.802456][T14676] usb 3-1: USB disconnect, device number 21 [ 831.688676][T15316] 9p: Bad value for 'rfdno' [ 832.289912][T15355] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3728'. [ 832.359098][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3731'. [ 832.384238][T15360] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 832.384277][T15360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.773434][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 833.929278][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 833.930547][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.930605][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.930635][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 833.931771][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.931837][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.931870][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 833.933230][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.933870][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.933903][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 833.935257][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.935317][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.935347][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 833.936491][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.936547][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.936577][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 833.940281][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.940353][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.940387][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 833.969946][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.970019][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.970053][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 833.971585][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.971649][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.971683][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 834.032847][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 834.032886][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 834.032912][ T10] usb 8-1: Product: syz [ 834.032929][ T10] usb 8-1: Manufacturer: syz [ 834.032947][ T10] usb 8-1: SerialNumber: syz [ 834.078758][ T10] usb 8-1: config 0 descriptor?? [ 834.252341][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 834.334687][T12150] usb 8-1: USB disconnect, device number 10 [ 834.361445][T12150] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 837.445822][ T5807] Bluetooth: hci6: unexpected event for opcode 0x0c05 [ 837.516125][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3786'. [ 837.516216][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3786'. [ 838.019580][T14676] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 838.454920][T14676] usb 8-1: Using ep0 maxpacket: 32 [ 838.470564][T14676] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 838.470593][T14676] usb 8-1: config 0 has no interface number 0 [ 838.492397][T14676] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 838.492431][T14676] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.492462][T14676] usb 8-1: Product: syz [ 838.492477][T14676] usb 8-1: Manufacturer: syz [ 838.492491][T14676] usb 8-1: SerialNumber: syz [ 838.497457][T14676] usb 8-1: config 0 descriptor?? [ 839.521938][T14676] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 839.521984][T14676] usb 8-1: selecting invalid altsetting 1 [ 839.522001][T14676] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 839.590834][T14676] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 839.591173][T14676] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 839.591211][T14676] usb 8-1: media controller created [ 839.655157][T14676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.687556][T15532] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3809'. [ 839.741140][T14676] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 839.741202][T14676] zl10353_read_register: readreg error (reg=127, ret==-71) [ 839.741705][T14676] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 839.911808][T14676] usb 8-1: USB disconnect, device number 11 [ 840.262629][T15543] tipc: Started in network mode [ 840.262668][T15543] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 840.317950][T15543] tipc: Enabled bearer , priority 10 [ 840.432805][T15551] overlayfs: workdir and upperdir must be separate subtrees [ 841.381344][ T49] tipc: Node number set to 1 [ 841.424377][T15586] netlink: 'syz.9.3833': attribute type 16 has an invalid length. [ 841.424403][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3833'. [ 843.546066][ T37] audit: type=1326 audit(1765547983.929:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15649 comm="syz.7.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 843.546435][ T37] audit: type=1326 audit(1765547983.929:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15649 comm="syz.7.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 843.568270][ T37] audit: type=1326 audit(1765547983.959:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15649 comm="syz.7.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 843.572817][ T37] audit: type=1326 audit(1765547983.959:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15649 comm="syz.7.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 843.576637][ T37] audit: type=1326 audit(1765547983.959:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15649 comm="syz.7.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 843.577146][ T37] audit: type=1326 audit(1765547983.959:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15649 comm="syz.7.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ff46f749 code=0x7ffc0000 [ 843.898687][ T5807] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 844.180809][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3879'. [ 845.329699][T15694] netlink: 'syz.8.3883': attribute type 153 has an invalid length. [ 845.378089][ T6148] IPVS: starting estimator thread 0... [ 845.473284][T15697] IPVS: using max 7 ests per chain, 16800 per kthread [ 845.813862][T15718] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3896'. [ 846.202487][ T6148] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 846.357868][ T6148] usb 10-1: Using ep0 maxpacket: 16 [ 846.360122][ T6148] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 846.360154][ T6148] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 846.362894][ T6148] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 846.362926][ T6148] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.362949][ T6148] usb 10-1: Product: syz [ 846.362964][ T6148] usb 10-1: Manufacturer: syz [ 846.362980][ T6148] usb 10-1: SerialNumber: syz [ 846.371162][ T6148] usb 10-1: config 0 descriptor?? [ 846.393248][ T6148] hub 10-1:0.0: bad descriptor, ignoring hub [ 846.393299][ T6148] hub 10-1:0.0: probe with driver hub failed with error -5 [ 846.410669][ T6148] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input15 [ 847.031202][T15766] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3919'. [ 848.511415][T15792] fuse: Bad value for 'user_id' [ 848.511440][T15792] fuse: Bad value for 'user_id' [ 848.704475][T15800] tipc: Invalid UDP bearer configuration [ 848.704523][T15800] tipc: Enabling of bearer rejected, failed to enable media [ 848.720363][T15798] 9p: Bad value for 'rfdno' [ 850.358065][ T5155] usb 10-1: reset high-speed USB device number 5 using dummy_hcd [ 850.380414][ T5155] usb 10-1: device reset changed ep0 maxpacket size! [ 850.412188][ T5945] usb 10-1: USB disconnect, device number 5 [ 850.727910][ T5945] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 850.889122][ T5945] usb 10-1: Using ep0 maxpacket: 32 [ 850.891800][ T5945] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.891836][ T5945] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.891878][ T5945] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 850.891903][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.903946][ T5945] usb 10-1: config 0 descriptor?? [ 851.343084][ T5945] ft260 0003:0403:6030.0005: item fetching failed at offset 0/2 [ 851.353608][ T5945] ft260 0003:0403:6030.0005: failed to parse HID [ 851.353749][ T5945] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -22 [ 851.575723][ T9095] usb 10-1: USB disconnect, device number 6 [ 851.867898][ T5978] kernel write not supported for file /amidi2 (pid: 5978 comm: kworker/0:8) [ 852.276139][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3992'. [ 855.548247][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4018'. [ 855.548274][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4018'. [ 857.560279][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'. [ 858.162502][T16042] rdma_op ffff88803244da70 conn xmit_rdma 0000000000000000 [ 858.277952][T15975] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 858.309627][T16048] sd 0:0:1:0: device reset [ 858.446848][T15975] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 858.446881][T15975] usb 8-1: config 1 has no interface number 0 [ 858.446945][T15975] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 858.446974][T15975] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 858.447001][T15975] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.513125][T15975] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 858.513160][T15975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.513183][T15975] usb 8-1: Product: syz [ 858.513199][T15975] usb 8-1: Manufacturer: syz [ 858.513215][T15975] usb 8-1: SerialNumber: syz [ 858.591931][T16036] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 858.848508][T16036] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 858.903399][T16061] [U]  [ 858.903463][T16061] [U] K{ [ 858.903995][T16061] [U] T 1ŠFFˊ`GJǘGO/MC [ 858.906589][T16061] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 858.907523][T16061] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 858.937271][T16061] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 858.971900][T16061] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 858.973828][T16061] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 858.983229][T16061] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 858.996655][T16061] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 859.023830][T16061] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 859.036099][T16061] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 859.038057][T16061] [U] 22Ʃ۩X?0;3U [ 859.051769][T16061] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 859.078796][T16061] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 859.079758][T16061] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 859.094571][T16061] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 859.095980][T16061] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 859.096062][T16061] [U] EC [ 859.117579][T16061] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 859.189621][T16060] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 859.338678][T15975] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 859.439917][T15975] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 859.439948][T15975] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 859.441501][T15975] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 859.441524][T15975] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 859.489060][T15975] usb 8-1: USB disconnect, device number 12 [ 859.495198][T15975] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem [ 860.657002][T16083] netlink: 'syz.2.4066': attribute type 10 has an invalid length. [ 860.657030][T16083] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4066'. [ 860.676122][T16083] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 860.692002][T16083] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 860.762139][T15975] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 860.877907][ T5798] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 861.045518][ T5798] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.045568][ T5798] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 861.045594][ T5798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.081489][ T5798] usb 9-1: config 0 descriptor?? [ 862.265214][ T5798] hid_parser_main: 839 callbacks suppressed [ 862.265242][ T5798] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 862.265275][ T5798] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 862.265312][ T5798] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 862.265342][ T5798] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 862.265373][ T5798] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 862.265402][ T5798] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 862.412342][ T5798] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0 [ 862.479027][ T5798] usb 9-1: USB disconnect, device number 4 [ 864.370740][T12150] IPVS: starting estimator thread 0... [ 864.423367][T16169] netlink: 'syz.9.4102': attribute type 1 has an invalid length. [ 864.467993][T16170] IPVS: using max 7 ests per chain, 16800 per kthread [ 864.762953][T16180] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 865.077894][T12150] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 865.078080][T16196] syz.8.4115: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 865.082922][T16196] CPU: 1 UID: 0 PID: 16196 Comm: syz.8.4115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 865.082958][T16196] Tainted: [L]=SOFTLOCKUP [ 865.082966][T16196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 865.082981][T16196] Call Trace: [ 865.082990][T16196] [ 865.083000][T16196] dump_stack_lvl+0x189/0x250 [ 865.083036][T16196] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 865.083070][T16196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.083100][T16196] ? __pfx__printk+0x10/0x10 [ 865.083124][T16196] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 865.083159][T16196] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 865.083201][T16196] warn_alloc+0x22e/0x3b0 [ 865.083242][T16196] ? stack_trace_save+0x9c/0xe0 [ 865.083272][T16196] ? __pfx_warn_alloc+0x10/0x10 [ 865.083322][T16196] ? kasan_save_track+0x4f/0x80 [ 865.083352][T16196] ? kasan_save_track+0x3e/0x80 [ 865.083383][T16196] ? __kasan_kmalloc+0x93/0xb0 [ 865.083414][T16196] ? __kmalloc_cache_noprof+0x1fb/0x6d0 [ 865.083445][T16196] ? xskq_create+0x56/0x170 [ 865.083473][T16196] ? xsk_setsockopt+0x4dc/0x8d0 [ 865.083496][T16196] ? do_sock_setsockopt+0x17c/0x1b0 [ 865.083518][T16196] ? __x64_sys_setsockopt+0x145/0x1b0 [ 865.083539][T16196] ? do_syscall_64+0xfa/0xf80 [ 865.083574][T16196] __vmalloc_node_range_noprof+0x134/0x16a0 [ 865.083645][T16196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 865.083690][T16196] ? __kasan_kmalloc+0x93/0xb0 [ 865.083729][T16196] vmalloc_user_noprof+0xad/0xf0 [ 865.083759][T16196] ? xskq_create+0xbf/0x170 [ 865.083788][T16196] xskq_create+0xbf/0x170 [ 865.083818][T16196] xsk_init_queue+0xb0/0x110 [ 865.083848][T16196] xsk_setsockopt+0x4dc/0x8d0 [ 865.083875][T16196] ? __pfx_xsk_setsockopt+0x10/0x10 [ 865.083910][T16196] ? __fget_files+0x2a/0x420 [ 865.083937][T16196] ? __fget_files+0x2a/0x420 [ 865.083960][T16196] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 865.083989][T16196] ? __pfx_xsk_setsockopt+0x10/0x10 [ 865.084017][T16196] do_sock_setsockopt+0x17c/0x1b0 [ 865.084045][T16196] __x64_sys_setsockopt+0x145/0x1b0 [ 865.084075][T16196] do_syscall_64+0xfa/0xf80 [ 865.084108][T16196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.084133][T16196] ? clear_bhb_loop+0x60/0xb0 [ 865.084160][T16196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.084182][T16196] RIP: 0033:0x7f2493acf749 [ 865.084212][T16196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.084232][T16196] RSP: 002b:00007f2491d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 865.084255][T16196] RAX: ffffffffffffffda RBX: 00007f2493d25fa0 RCX: 00007f2493acf749 [ 865.084272][T16196] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 865.084286][T16196] RBP: 00007f2493b53f91 R08: 0000000000000004 R09: 0000000000000000 [ 865.084301][T16196] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.084322][T16196] R13: 00007f2493d26038 R14: 00007f2493d25fa0 R15: 00007ffed6879718 [ 865.084359][T16196] [ 865.088728][T16196] Mem-Info: [ 865.088749][T16196] active_anon:3138 inactive_anon:15335 isolated_anon:0 [ 865.088749][T16196] active_file:26428 inactive_file:35498 isolated_file:0 [ 865.088749][T16196] unevictable:768 dirty:253 writeback:0 [ 865.088749][T16196] slab_reclaimable:12798 slab_unreclaimable:108622 [ 865.088749][T16196] mapped:39613 shmem:13932 pagetables:1483 [ 865.088749][T16196] sec_pagetables:0 bounce:0 [ 865.088749][T16196] kernel_misc_reclaimable:0 [ 865.088749][T16196] free:1250557 free_pcp:6696 free_cma:0 [ 865.088812][T16196] Node 0 active_anon:12552kB inactive_anon:61340kB active_file:105508kB inactive_file:141992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158452kB dirty:1012kB writeback:0kB shmem:54192kB kernel_stack:14692kB pagetables:5772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 865.088864][T16196] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 865.088911][T16196] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 865.088976][T16196] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 865.089020][T16196] Node 0 DMA32 free:1084668kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12552kB inactive_anon:61340kB active_file:105508kB inactive_file:141992kB unevictable:1536kB writepending:1012kB zspages:0kB present:3129332kB managed:2574580kB mlocked:0kB bounce:0kB free_pcp:26284kB local_pcp:17880kB free_cma:0kB [ 865.089114][T16196] lowmem_reserve[]: 0 0 1 1 1 [ 865.089154][T16196] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 865.089225][T16196] lowmem_reserve[]: 0 0 0 0 0 [ 865.089268][T16196] Node 1 Normal free:3902200kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:16kB free_cma:0kB [ 865.089347][T16196] lowmem_reserve[]: 0 0 0 0 0 [ 865.089389][T16196] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 865.089539][T16196] Node 0 DMA32: 565*4kB (UME) 1021*8kB (UME) 1091*16kB (UME) 71*32kB (UME) 50*64kB (UME) 82*128kB (UME) 174*256kB (UM) 142*512kB (UME) 80*1024kB (UM) 45*2048kB (UM) 183*4096kB (UM) = 1084748kB [ 865.089740][T16196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 865.089868][T16196] Node 1 Normal: 106*4kB (UE) 14*8kB (UME) 30*16kB (UME) 180*32kB (UME) 94*64kB (UME) 32*128kB (UME) 13*256kB (UME) 12*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3902200kB [ 865.090076][T16196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.090097][T16196] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 865.090118][T16196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.090136][T16196] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 865.090158][T16196] 75854 total pagecache pages [ 865.090172][T16196] 0 pages in swap cache [ 865.090181][T16196] Free swap = 124996kB [ 865.090192][T16196] Total swap = 124996kB [ 865.090201][T16196] 2097051 pages RAM [ 865.090209][T16196] 0 pages HighMem/MovableOnly [ 865.090218][T16196] 421380 pages reserved [ 865.090233][T16196] 0 pages cma reserved [ 865.417871][T12150] usb 10-1: Using ep0 maxpacket: 8 [ 865.496865][T12150] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 865.496925][T12150] usb 10-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 865.496951][T12150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.517950][ T10] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 865.687328][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 865.687364][ T10] usb 8-1: config 0 has no interface number 0 [ 865.687434][ T10] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 865.687462][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.783073][ T10] usb 8-1: config 0 descriptor?? [ 865.817453][ T10] usb 8-1: selecting invalid altsetting 1 [ 865.817662][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 865.817678][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 865.936497][T12150] usb 10-1: config 0 descriptor?? [ 866.024459][ T5887] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 866.067386][ T10] DVB: Unable to find symbol cx22700_attach() [ 866.168196][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 866.170734][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.170769][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.170794][ T5887] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 866.170840][ T5887] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 866.170865][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.195913][ T5887] usb 9-1: config 0 descriptor?? [ 866.364503][T12150] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 866.364545][T12150] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 866.364576][T12150] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 866.364606][T12150] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 866.412102][T12150] apple 0003:05AC:027D.0007: hidraw0: USB HID v4.00 Device [HID 05ac:027d] on usb-dummy_hcd.9-1/input0 [ 866.498245][ T10] DVB: Unable to find symbol tda10046_attach() [ 866.498323][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 866.552771][ T10] usb 8-1: USB disconnect, device number 13 [ 866.634599][T12150] usb 10-1: USB disconnect, device number 7 [ 866.742635][ T5887] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0008/input/input16 [ 866.836822][ T5887] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 866.871851][ T5887] usb 9-1: USB disconnect, device number 5 [ 868.283632][ T3645] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 868.440403][ T3645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.440455][ T3645] usb 8-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 868.440481][ T3645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.528044][ T3645] usb 8-1: config 0 descriptor?? [ 869.759579][T16261] macsec1: entered promiscuous mode [ 869.759609][T16261] macsec1: entered allmulticast mode [ 870.172488][ T3645] nintendo 0003:057E:200E.0009: item 0 4 0 11 parsing failed [ 870.173265][ T3645] nintendo 0003:057E:200E.0009: HID parse failed [ 870.236568][ T3645] nintendo 0003:057E:200E.0009: probe - fail = -22 [ 870.236707][ T3645] nintendo 0003:057E:200E.0009: probe with driver nintendo failed with error -22 [ 870.382879][ T5887] usb 8-1: USB disconnect, device number 14 [ 870.405055][T16271] tipc: Enabling of bearer rejected, failed to enable media [ 870.874524][T16293] usb usb5: usbfs: process 16293 (syz.2.4160) did not claim interface 1 before use [ 873.317914][T14676] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 873.455447][T16343] netlink: 'syz.9.4181': attribute type 11 has an invalid length. [ 873.475699][T14676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.475734][T14676] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 873.475780][T14676] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 873.475806][T14676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.524894][T14676] usb 3-1: config 0 descriptor?? [ 873.914934][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4186'. [ 873.954680][T14676] asus 0003:048D:CE50.000A: item fetching failed at offset 2/5 [ 873.955542][T14676] asus 0003:048D:CE50.000A: Asus hid parse failed: -22 [ 873.955655][T14676] asus 0003:048D:CE50.000A: probe with driver asus failed with error -22 [ 874.153773][T14676] usb 3-1: USB disconnect, device number 22 [ 874.883910][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4199'. [ 875.018700][ T5918] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 875.190570][ T5918] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 875.190606][ T5918] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 875.190626][ T5918] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 875.190646][ T5918] usb 9-1: config 220 has no interface number 2 [ 875.190722][ T5918] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 875.190751][ T5918] usb 9-1: config 220 interface 0 has no altsetting 0 [ 875.190769][ T5918] usb 9-1: config 220 interface 76 has no altsetting 0 [ 875.190788][ T5918] usb 9-1: config 220 interface 1 has no altsetting 0 [ 875.194090][ T5918] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 875.194121][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.194143][ T5918] usb 9-1: Product: syz [ 875.194157][ T5918] usb 9-1: Manufacturer: syz [ 875.194172][ T5918] usb 9-1: SerialNumber: syz [ 875.317897][ T6042] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 875.344978][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.345084][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.388335][ T8896] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 875.473670][ T6042] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 875.473706][ T6042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.473729][ T6042] usb 3-1: Product: syz [ 875.473745][ T6042] usb 3-1: Manufacturer: syz [ 875.473760][ T6042] usb 3-1: SerialNumber: syz [ 875.510816][ T6042] usb 3-1: config 0 descriptor?? [ 875.536540][ T6042] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 875.557838][ T8896] usb 8-1: Using ep0 maxpacket: 8 [ 875.570790][ T8896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 875.570836][ T8896] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 875.570890][ T8896] usb 8-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 875.570918][ T8896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.622147][ T8896] usb 8-1: config 0 descriptor?? [ 875.629858][ T6042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 875.638401][ T6042] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 875.638462][ T6042] usb 3-1: media controller created [ 875.654383][ T5918] usb 9-1: selecting invalid altsetting 0 [ 875.687422][ T6042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 875.707157][ T5918] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 875.707195][ T5918] uvcvideo 9-1:220.0: No valid video chain found. [ 875.815176][ T5918] usb 9-1: selecting invalid altsetting 0 [ 875.815283][ T5918] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 875.848756][ T6042] DVB: Unable to find symbol mt352_attach() [ 875.868404][T16390] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 875.874011][ T5918] usb 9-1: USB disconnect, device number 6 [ 876.070427][ T8896] apple 0003:05AC:026C.000B: unbalanced collection at end of report description [ 876.071628][ T8896] apple 0003:05AC:026C.000B: parse failed [ 876.071737][ T8896] apple 0003:05AC:026C.000B: probe with driver apple failed with error -22 [ 876.118066][ T6042] DVB: Unable to find symbol nxt6000_attach() [ 876.118084][ T6042] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 876.124554][ T6042] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 876.206505][ T6042] dvb-usb: schedule remote query interval to 1000 msecs. [ 876.206531][ T6042] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 876.206945][ T6042] dvb-usb: bulk message failed: -22 (7/0) [ 876.206966][ T6042] dvb-usb: bulk message failed: -22 (7/0) [ 876.248635][T12150] usb 8-1: USB disconnect, device number 15 [ 876.255716][ T6042] usb 3-1: USB disconnect, device number 23 [ 876.499733][ T6042] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 876.987943][ T6042] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 877.141651][ T6042] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 877.141684][ T6042] usb 3-1: config 0 has no interface number 0 [ 877.141735][ T6042] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 877.141765][ T6042] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 877.145829][ T6042] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 877.145862][ T6042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.145884][ T6042] usb 3-1: Product: syz [ 877.145900][ T6042] usb 3-1: Manufacturer: syz [ 877.145915][ T6042] usb 3-1: SerialNumber: syz [ 877.235832][ T6042] usb 3-1: config 0 descriptor?? [ 877.237106][T16429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 877.282391][ T6042] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 877.366630][T16460] veth1_macvtap: left promiscuous mode [ 877.366663][T16460] macsec0: entered promiscuous mode [ 877.366682][T16460] macsec0: entered allmulticast mode [ 877.424108][T16460] veth1_macvtap: entered promiscuous mode [ 877.424138][T16460] veth1_macvtap: entered allmulticast mode [ 877.424523][T16460] macsec0: left promiscuous mode [ 877.424753][T16460] macsec0: left allmulticast mode [ 877.424768][T16460] veth1_macvtap: left allmulticast mode [ 877.498497][ T6042] usb 3-1: USB disconnect, device number 24 [ 877.743993][T16472] gretap0: entered promiscuous mode [ 877.751660][T16472] gretap0: left promiscuous mode [ 877.831902][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4244'. [ 878.025367][T16489] netlink: 'syz.7.4249': attribute type 10 has an invalid length. [ 878.130475][T16489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.151900][T16489] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 878.168834][T16491] netlink: 'syz.7.4249': attribute type 10 has an invalid length. [ 878.168857][T16491] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4249'. [ 878.168902][T16491] batadv0: entered promiscuous mode [ 878.168920][T16491] batadv0: entered allmulticast mode [ 878.209033][T16491] bond0: (slave batadv0): Releasing backup interface [ 878.264110][T16491] bridge0: port 3(batadv0) entered blocking state [ 878.275557][T16491] bridge0: port 3(batadv0) entered disabled state [ 878.577199][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 878.577222][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 880.123045][T16540] netlink: 182 bytes leftover after parsing attributes in process `syz.8.4268'. [ 881.554699][ T5807] Bluetooth: hci3: Dropping invalid advertising data [ 881.554741][ T5807] Bluetooth: hci3: Malformed LE Event: 0x02 [ 881.967701][T16588] netdevsim netdevsim9: Direct firmware load for failed with error -2 [ 881.969572][T16588] netdevsim netdevsim9: Falling back to sysfs fallback for: [ 882.028096][T15975] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 882.220361][T15975] usb 8-1: Using ep0 maxpacket: 8 [ 882.226594][T15975] usb 8-1: unable to get BOS descriptor or descriptor too short [ 882.232082][T15975] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 882.232117][T15975] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.232140][T15975] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 882.232166][T15975] usb 8-1: config 1 has no interface number 1 [ 882.232226][T15975] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 882.232275][T15975] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 882.232310][T15975] usb 8-1: config 1 interface 2 has no altsetting 0 [ 882.252217][T15975] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 882.252256][T15975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.252281][T15975] usb 8-1: Product: syz [ 882.252300][T15975] usb 8-1: Manufacturer: syz [ 882.252317][T15975] usb 8-1: SerialNumber: syz [ 883.525205][T15975] usb 8-1: USB disconnect, device number 16 [ 885.062505][ T5807] Bluetooth: hci1: Invalid handle: 0xfd00 > 0x0eff [ 885.816383][ T5798] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 886.747318][ T5798] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 886.747384][ T5798] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 886.747419][ T5798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.825200][ T5798] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 887.078895][T16679] tipc: Started in network mode [ 887.078930][T16679] tipc: Node identity 7f000001, cluster identity 4711 [ 887.080157][T16679] tipc: Enabling of bearer rejected, failed to enable media [ 887.124440][T16683] ipvlan2: entered promiscuous mode [ 887.124470][T16683] ipvlan2: entered allmulticast mode [ 887.124485][T16683] geneve1: entered allmulticast mode [ 887.717971][ T6000] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 887.758355][T16710] tmpfs: Cannot disable swap on remount [ 887.871038][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 887.871078][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.871099][ T6000] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 887.871146][ T6000] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 887.871172][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.876644][ T6000] usb 8-1: config 0 descriptor?? [ 887.940556][ T5798] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 887.940598][ T5798] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 887.941544][ T5798] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 888.289492][ T10] usb 9-1: USB disconnect, device number 7 [ 889.322275][ T6000] hid-multitouch 0003:0457:07DA.000C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.7-1/input0 [ 889.360489][ T6000] usb 8-1: USB disconnect, device number 17 [ 889.543103][T16752] x_tables: ip6_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 168 [ 895.055780][T15975] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 895.207915][T15975] usb 10-1: Using ep0 maxpacket: 8 [ 895.210682][T15975] usb 10-1: unable to get BOS descriptor or descriptor too short [ 895.211962][T15975] usb 10-1: config 4 interface 0 has no altsetting 0 [ 895.257238][T15975] usb 10-1: string descriptor 0 read error: -22 [ 895.257343][T15975] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 895.257369][T15975] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 895.319459][T15975] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 895.346416][T15975] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 895.346821][T15975] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 895.346877][T15975] usb 10-1: media controller created [ 895.419804][T16862] Bluetooth: MGMT ver 1.23 [ 895.439677][T15975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 895.525623][T16866] veth1_macvtap: left promiscuous mode [ 895.525747][T16866] macsec0: entered allmulticast mode [ 895.582096][T16868] veth1_macvtap: entered promiscuous mode [ 895.582125][T16868] veth1_macvtap: entered allmulticast mode [ 895.586301][T16868] macsec0: left allmulticast mode [ 895.586324][T16868] veth1_macvtap: left allmulticast mode [ 896.528949][T15975] zl10353_read_register: readreg error (reg=127, ret==0) [ 896.648187][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4437'. [ 896.669931][T15975] usb 10-1: USB disconnect, device number 8 [ 897.263244][T16935] binder_alloc: binder_alloc_mmap_handler: 16933 2000000a0000-2000000a2000 already mapped failed -16 [ 898.348395][T16942] netlink: 216 bytes leftover after parsing attributes in process `syz.9.4454'. [ 898.348438][T16942] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4454'. [ 898.348458][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4454'. [ 901.570183][ T5806] Bluetooth: hci6: link tx timeout [ 901.570472][ T5806] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 901.658016][ T5978] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 901.818305][ T5978] usb 9-1: Using ep0 maxpacket: 32 [ 901.821160][ T5978] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.821234][ T5978] usb 9-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 901.821261][ T5978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.829600][ T5978] usb 9-1: config 0 descriptor?? [ 901.849906][ T5978] dvb-usb: found a 'TeVii S662' in warm state. [ 901.849976][ T5978] dw2102: su3000_power_ctrl: 1, initialized 0 [ 901.850940][ T5978] dvb-usb: bulk message failed: -22 (2/0) [ 901.874138][ T5978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 901.876889][ T5978] dvbdev: DVB: registering new adapter (TeVii S662) [ 901.876955][ T5978] usb 9-1: media controller created [ 901.877512][ T5978] dvb-usb: bulk message failed: -22 (6/0) [ 901.877530][ T5978] dw2102: i2c transfer failed. [ 901.877559][ T5978] dvb-usb: bulk message failed: -22 (6/0) [ 901.877580][ T5978] dw2102: i2c transfer failed. [ 901.877605][ T5978] dvb-usb: bulk message failed: -22 (6/0) [ 901.877622][ T5978] dw2102: i2c transfer failed. [ 901.877641][ T5978] dvb-usb: bulk message failed: -22 (6/0) [ 901.877658][ T5978] dw2102: i2c transfer failed. [ 901.877678][ T5978] dvb-usb: bulk message failed: -22 (6/0) [ 901.877694][ T5978] dw2102: i2c transfer failed. [ 901.877713][ T5978] dvb-usb: bulk message failed: -22 (6/0) [ 901.887246][ T5978] dw2102: i2c transfer failed. [ 901.887268][ T5978] dvb-usb: MAC address: 02:02:02:02:02:02 [ 901.939692][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.995274][T17025] 9p: Bad value for 'rfdno' [ 902.041792][T17003] dvb-usb: bulk message failed: -22 (7/0) [ 902.041817][T17003] dw2102: i2c transfer failed. [ 902.042499][ T5978] dvb-usb: bulk message failed: -22 (3/0) [ 902.042518][ T5978] dw2102: command 0x0e transfer failed. [ 902.042529][ T5978] dvb-usb: bulk message failed: -22 (3/0) [ 902.042542][ T5978] dw2102: command 0x0e transfer failed. [ 902.058475][ T5918] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 902.218005][ T5918] usb 10-1: Using ep0 maxpacket: 16 [ 902.223885][ T5918] usb 10-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 902.224001][ T5918] usb 10-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 902.224040][ T5918] usb 10-1: config 0 interface 0 has no altsetting 0 [ 902.224077][ T5918] usb 10-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 902.224102][ T5918] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.250845][ T5918] usb 10-1: config 0 descriptor?? [ 902.348006][ T5978] dvb-usb: bulk message failed: -22 (3/0) [ 902.351173][ T5978] dw2102: command 0x0e transfer failed. [ 902.351269][ T5978] dvb-usb: bulk message failed: -22 (3/0) [ 902.351286][ T5978] dw2102: command 0x0e transfer failed. [ 902.351296][ T5978] dvb-usb: bulk message failed: -22 (1/0) [ 902.351310][ T5978] dw2102: command 0x51 transfer failed. [ 902.351320][ T5978] dvb-usb: bulk message failed: -22 (5/0) [ 902.351333][ T5978] dw2102: i2c probe for address 0x68 failed. [ 902.351345][ T5978] dvb-usb: bulk message failed: -22 (5/0) [ 902.351585][ T5978] dw2102: i2c probe for address 0x69 failed. [ 902.351599][ T5978] dvb-usb: bulk message failed: -22 (5/0) [ 902.351614][ T5978] dw2102: i2c probe for address 0x6a failed. [ 902.351626][ T5978] dw2102: probing for demodulator failed. Is the external power switched on? [ 902.351649][ T5978] dvb-usb: no frontend was attached by 'TeVii S662' [ 902.678503][ T5978] rc_core: IR keymap rc-tt-1500 not found [ 902.678585][ T5978] Registered IR keymap rc-empty [ 902.707284][T17050] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 902.775842][ T5918] hid_parser_main: 11 callbacks suppressed [ 902.775863][ T5918] hid-u2fzero 0003:20A0:4287.000D: unknown main item tag 0x2 [ 902.775885][ T5918] hid-u2fzero 0003:20A0:4287.000D: item fetching failed at offset 4/5 [ 902.776508][ T5918] hid-u2fzero 0003:20A0:4287.000D: probe with driver hid-u2fzero failed with error -22 [ 902.782442][ T5978] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 902.785832][ T5978] input: TeVii S662 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input19 [ 902.838268][ T5978] dvb-usb: schedule remote query interval to 250 msecs. [ 902.838286][ T5978] dw2102: su3000_power_ctrl: 0, initialized 1 [ 902.838296][ T5978] dvb-usb: TeVii S662 successfully initialized and connected. [ 902.847017][ T5978] usb 9-1: USB disconnect, device number 8 [ 903.003903][ T5918] usb 10-1: USB disconnect, device number 9 [ 903.054541][T17061] netlink: 292 bytes leftover after parsing attributes in process `syz.8.4510'. [ 903.217462][ T5978] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 903.648010][ T5807] Bluetooth: hci6: command 0x0405 tx timeout [ 903.695428][T17088] netlink: 'syz.2.4521': attribute type 5 has an invalid length. [ 904.003439][T17104] netlink: 'syz.8.4529': attribute type 83 has an invalid length. [ 904.020987][T17108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4528'. [ 904.347979][T17113] sp0: Synchronizing with TNC [ 904.364690][T17122] sp0: Found TNC [ 904.891067][ T5978] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 906.001232][ T5978] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 906.001268][ T5978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.001291][ T5978] usb 10-1: Product: syz [ 906.001307][ T5978] usb 10-1: Manufacturer: syz [ 906.001323][ T5978] usb 10-1: SerialNumber: syz [ 906.040970][T12150] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 906.064119][ T5978] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 906.123681][ T5918] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 906.190563][T12150] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 906.190596][T12150] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 906.190616][T12150] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 906.190637][T12150] usb 9-1: config 220 has no interface number 2 [ 906.190740][T12150] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 906.190772][T12150] usb 9-1: config 220 interface 0 has no altsetting 0 [ 906.190792][T12150] usb 9-1: config 220 interface 76 has no altsetting 0 [ 906.190917][T12150] usb 9-1: config 220 interface 1 has no altsetting 0 [ 906.195001][T12150] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 906.195034][T12150] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.195056][T12150] usb 9-1: Product: syz [ 906.195071][T12150] usb 9-1: Manufacturer: syz [ 906.195089][T12150] usb 9-1: SerialNumber: syz [ 906.628061][T12150] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 906.628098][T12150] uvcvideo 9-1:220.0: No valid video chain found. [ 906.628159][T12150] usb 9-1: selecting invalid altsetting 0 [ 906.695100][T12150] usb 9-1: selecting invalid altsetting 0 [ 906.695144][T12150] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 906.719324][T12150] usb 9-1: USB disconnect, device number 9 [ 906.754038][T14676] usb 10-1: USB disconnect, device number 10 [ 907.370889][T17202] 9p: Bad value for 'rfdno' [ 907.488770][ T5918] usb 10-1: Service connection timeout for: 256 [ 907.488799][ T5918] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 907.518991][ T5918] ath9k_htc: Failed to initialize the device [ 907.523195][T14676] usb 10-1: ath9k_htc: USB layer deinitialized [ 907.662379][T17213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4580'. [ 907.973168][T17234] 9p: Bad value for 'rfdno' [ 908.107918][ T5798] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 908.260111][ T5798] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 908.260149][ T5798] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 908.260177][ T5798] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 908.262713][ T5798] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 908.262744][ T5798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.262773][ T5798] usb 8-1: Product: syz [ 908.262789][ T5798] usb 8-1: Manufacturer: syz [ 908.262805][ T5798] usb 8-1: SerialNumber: syz [ 908.293002][ T5798] usb 8-1: config 0 descriptor?? [ 908.293977][T17227] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 908.294126][T17227] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 908.321850][ T5798] usb 8-1: ucan: probing device on interface #0 [ 908.596483][T17250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4598'. [ 908.596516][T17250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4598'. [ 908.926972][ T5798] ucan 8-1:0.0: probe with driver ucan failed with error -71 [ 908.962572][ T5798] usb 8-1: USB disconnect, device number 18 [ 909.160166][ T5806] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 909.366638][T17286] support for the xor transformation has been removed. [ 909.467934][ T5798] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 910.235445][ T5798] usb 9-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 910.235483][ T5798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.266571][ T5798] usb 9-1: config 0 descriptor?? [ 910.287231][ T5798] pwc: Creative Labs Webcam Pro Ex detected. [ 910.422011][T17296] autofs: Bad value for 'fd' [ 910.601997][ T5798] pwc: Failed to set LED on/off time (-71) [ 910.602479][ T5798] pwc: send_video_command error -71 [ 910.602491][ T5798] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 910.602616][ T5798] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 910.639332][ T5798] usb 9-1: USB disconnect, device number 10 [ 910.696197][ T5806] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 910.753443][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4623'. [ 912.371905][T17337] 9p: Bad value for 'rfdno' [ 913.402990][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4649'. [ 913.446372][T17368] genirq: Flags mismatch irq 10. 00202000 (aio_iiro_16) vs. 00202080 (virtio2) [ 913.458036][ T3612] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.498986][ T3612] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.500415][ T3078] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.500463][ T3078] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.635230][T17376] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4654'. [ 913.968583][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 914.199369][T17405] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4667'. [ 916.122379][T17442] max out of range [ 917.911603][T17473] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4698'. [ 918.109128][ T5806] Bluetooth: hci6: command 0x0405 tx timeout [ 919.620159][ T5806] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 924.502442][T17586] netlink: 'syz.8.4746': attribute type 2 has an invalid length. [ 924.502466][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4746'. [ 925.718171][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4752'. [ 925.718201][T17600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4752'. [ 925.917311][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4757'. [ 925.920740][T12902] bond0: (slave bond_slave_0): interface is now down [ 925.920776][T12902] bond0: (slave bond_slave_1): interface is now down [ 925.992604][T12902] bond0: (slave bond_slave_0): interface is now down [ 925.992631][T12902] bond0: (slave bond_slave_1): interface is now down [ 925.997410][T12902] bond0: now running without any active interface! [ 927.973613][T17665] 9p: Bad value for 'rfdno' [ 928.320641][ T10] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 928.403926][T17678] netlink: 'syz.2.4789': attribute type 9 has an invalid length. [ 928.403952][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4789'. [ 928.448339][ T38] INFO: task syz-executor:8146 blocked for more than 143 seconds. [ 928.448369][ T38] Tainted: G L syzkaller #0 [ 928.448382][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 928.448393][ T38] task:syz-executor state:D stack:20704 pid:8146 tgid:8146 ppid:1 task_flags:0x400140 flags:0x00080002 [ 928.448455][ T38] Call Trace: [ 928.448463][ T38] [ 928.448501][ T38] __schedule+0x1480/0x50a0 [ 928.448545][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 928.448580][ T38] ? sched_clock_cpu+0x74/0x430 [ 928.448607][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 928.448632][ T38] ? __pfx___schedule+0x10/0x10 [ 928.448684][ T38] rt_mutex_schedule+0x77/0xf0 [ 928.448706][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 928.448747][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 928.448777][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 928.448805][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 928.448832][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 928.448871][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 928.448916][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 928.448943][ T38] mutex_lock_nested+0x16a/0x1d0 [ 928.448974][ T38] nfsd_shutdown_threads+0x4e/0xd0 [ 928.449005][ T38] nfsd_umount+0x41/0x60 [ 928.449038][ T38] deactivate_locked_super+0xbc/0x130 [ 928.449069][ T38] cleanup_mnt+0x425/0x4c0 [ 928.449099][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 928.449132][ T38] task_work_run+0x1d4/0x260 [ 928.449171][ T38] ? __pfx_task_work_run+0x10/0x10 [ 928.449211][ T38] ? exit_to_user_mode_loop+0x55/0x4f0 [ 928.449247][ T38] exit_to_user_mode_loop+0xff/0x4f0 [ 928.449277][ T38] ? rcu_is_watching+0x15/0xb0 [ 928.449304][ T38] do_syscall_64+0x2e3/0xf80 [ 928.449338][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.449361][ T38] ? clear_bhb_loop+0x60/0xb0 [ 928.449389][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.449412][ T38] RIP: 0033:0x7f03443b0a77 [ 928.449431][ T38] RSP: 002b:00007ffd38ec3328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 928.449454][ T38] RAX: 0000000000000000 RBX: 00007f0344433d7d RCX: 00007f03443b0a77 [ 928.449470][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd38ec33e0 [ 928.449491][ T38] RBP: 00007ffd38ec33e0 R08: 0000000000000000 R09: 0000000000000000 [ 928.449506][ T38] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd38ec4470 [ 928.449521][ T38] R13: 00007f0344433d7d R14: 00000000000beb39 R15: 00007ffd38ec44b0 [ 928.449558][ T38] [ 928.449625][ T38] [ 928.449625][ T38] Showing all locks held in the system: [ 928.449635][ T38] 5 locks held by kworker/0:1/10: [ 928.449647][ T38] #0: ffff88801c2dad38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 928.449709][ T38] #1: ffffc900000f7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 928.449765][ T38] #2: ffff888027e0f188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4f30 [ 928.449817][ T38] #3: ffff888027e335b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2190/0x4f30 [ 928.449869][ T38] #4: ffff8880278d7e58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21c0/0x4f30 [ 928.449925][ T38] 1 lock held by rcu_tasks_trace/36: [ 928.449937][ T38] #0: ffffffff8d5af5a0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 928.449995][ T38] 1 lock held by khungtaskd/38: [ 928.450007][ T38] #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 928.450100][ T38] 2 locks held by getty/5560: [ 928.450112][ T38] #0: ffff888034cfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 928.450166][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 928.450228][ T38] 10 locks held by syz-executor/5811: [ 928.450248][ T38] 2 locks held by syz-executor/8146: [ 928.450261][ T38] #0: ffff8880298e00d0 (&type->s_umount_key#91){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 928.450322][ T38] #1: ffffffff8d89a358 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 928.450384][ T38] 2 locks held by syz.6.2973/13703: [ 928.450397][ T38] #0: ffffffff8e90b9e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 928.450456][ T38] #1: ffffffff8d89a358 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x134/0x1630 [ 928.450523][ T38] 3 locks held by syz-executor/14195: [ 928.450539][ T38] 2 locks held by kworker/1:9/14676: [ 928.450552][ T38] 4 locks held by syz.2.4789/17675: [ 928.450565][ T38] 4 locks held by syz.9.4790/17679: [ 928.450578][ T38] [ 928.450583][ T38] ============================================= [ 928.450583][ T38] [ 928.450593][ T38] NMI backtrace for cpu 1 [ 928.450612][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 928.450642][ T38] Tainted: [L]=SOFTLOCKUP [ 928.450650][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 928.450663][ T38] Call Trace: [ 928.450672][ T38] [ 928.450680][ T38] dump_stack_lvl+0x189/0x250 [ 928.450708][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.450732][ T38] ? __pfx__printk+0x10/0x10 [ 928.450759][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 928.450782][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 928.450803][ T38] ? __pfx__printk+0x10/0x10 [ 928.450824][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 928.450845][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 928.450867][ T38] sys_info+0x135/0x170 [ 928.450882][ T38] watchdog+0xf95/0xfe0 [ 928.450907][ T38] ? watchdog+0x20a/0xfe0 [ 928.450932][ T38] kthread+0x711/0x8a0 [ 928.450959][ T38] ? __pfx_watchdog+0x10/0x10 [ 928.450978][ T38] ? __pfx_kthread+0x10/0x10 [ 928.450999][ T38] ? rt_spin_unlock+0x150/0x200 [ 928.451023][ T38] ? rt_spin_unlock+0x161/0x200 [ 928.451040][ T38] ? __pfx_kthread+0x10/0x10 [ 928.451065][ T38] ret_from_fork+0x599/0xb30 [ 928.451086][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 928.451113][ T38] ? __switch_to_asm+0x39/0x70 [ 928.451137][ T38] ? __switch_to_asm+0x33/0x70 [ 928.451160][ T38] ? __pfx_kthread+0x10/0x10 [ 928.451185][ T38] ret_from_fork_asm+0x1a/0x30 [ 928.451223][ T38] [ 928.451234][ T38] Sending NMI from CPU 1 to CPUs 0: [ 928.451260][ C0] NMI backtrace for cpu 0 [ 928.451277][ C0] CPU: 0 UID: 0 PID: 14195 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 928.451304][ C0] Tainted: [L]=SOFTLOCKUP [ 928.451311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 928.451323][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x11/0xa0 [ 928.451346][ C0] Code: e9 84 80 16 09 cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 a0 b1 91 <65> 44 8b 05 27 29 f1 0f 41 81 e0 00 00 ff 00 ba 00 01 00 00 23 91 [ 928.451363][ C0] RSP: 0018:ffffc9000e247990 EFLAGS: 00000246 [ 928.451379][ C0] RAX: ffffffff816992de RBX: ffff88802c0cd630 RCX: ffff88802f118000 [ 928.451394][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 928.451406][ C0] RBP: ffff88802f118000 R08: 0000000000000000 R09: 0000000000000000 [ 928.451419][ C0] R10: dffffc0000000000 R11: ffffed1005e23001 R12: dffffc0000000000 [ 928.451433][ C0] R13: 0000000080000000 R14: ffff88802c0cd620 R15: ffff88802c0cbc80 [ 928.451446][ C0] FS: 000055557da90500(0000) GS:ffff888126d06000(0000) knlGS:0000000000000000 [ 928.451463][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.451476][ C0] CR2: 00007f24948556c0 CR3: 00000000258ca000 CR4: 00000000003526f0 [ 928.451494][ C0] Call Trace: [ 928.451500][ C0] [ 928.451507][ C0] fpu_clone+0x3be/0x970 [ 928.451539][ C0] copy_thread+0x3f5/0x9a0 [ 928.451563][ C0] copy_process+0x180a/0x3960 [ 928.451594][ C0] ? copy_process+0x915/0x3960 [ 928.451621][ C0] ? __pfx_copy_process+0x10/0x10 [ 928.451645][ C0] ? count_memcg_event_mm+0x21/0x260 [ 928.451676][ C0] kernel_clone+0x21d/0x7a0 [ 928.451701][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 928.451743][ C0] __x64_sys_clone+0x18b/0x1e0 [ 928.451770][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 928.451808][ C0] ? do_syscall_64+0xbe/0xf80 [ 928.451837][ C0] do_syscall_64+0xfa/0xf80 [ 928.451863][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.451882][ C0] ? clear_bhb_loop+0x60/0xb0 [ 928.451903][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.451921][ C0] RIP: 0033:0x7f2493ac5e93 [ 928.451935][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 928.451951][ C0] RSP: 002b:00007ffed6879998 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 928.451969][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2493ac5e93 [ 928.451982][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 928.451994][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 928.452005][ C0] R10: 000055557da907d0 R11: 0000000000000246 R12: 0000000000000000 [ 928.452017][ C0] R13: 00000000000927c0 R14: 00000000000e28d8 R15: 00007ffed6879b30 [ 928.452040][ C0] [ 928.452265][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 928.452288][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 928.452318][ T38] Tainted: [L]=SOFTLOCKUP [ 928.452326][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 928.452339][ T38] Call Trace: [ 928.452348][ T38] [ 928.452357][ T38] dump_stack_lvl+0x99/0x250 [ 928.452388][ T38] ? __asan_memcpy+0x40/0x70 [ 928.452418][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.452447][ T38] ? __pfx__printk+0x10/0x10 [ 928.452488][ T38] vpanic+0x237/0x6d0 [ 928.452519][ T38] ? __pfx_vpanic+0x10/0x10 [ 928.452558][ T38] panic+0xb9/0xc0 [ 928.452587][ T38] ? __pfx_panic+0x10/0x10 [ 928.452628][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 928.452665][ T38] watchdog+0xfdf/0xfe0 [ 928.452696][ T38] ? watchdog+0x20a/0xfe0 [ 928.452729][ T38] kthread+0x711/0x8a0 [ 928.452765][ T38] ? __pfx_watchdog+0x10/0x10 [ 928.452790][ T38] ? __pfx_kthread+0x10/0x10 [ 928.452819][ T38] ? rt_spin_unlock+0x150/0x200 [ 928.452851][ T38] ? rt_spin_unlock+0x161/0x200 [ 928.452873][ T38] ? __pfx_kthread+0x10/0x10 [ 928.452906][ T38] ret_from_fork+0x599/0xb30 [ 928.452934][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 928.452970][ T38] ? __switch_to_asm+0x39/0x70 [ 928.453001][ T38] ? __switch_to_asm+0x33/0x70 [ 928.453031][ T38] ? __pfx_kthread+0x10/0x10 [ 928.453064][ T38] ret_from_fork_asm+0x1a/0x30 [ 928.453111][ T38] [ 928.453389][ T38] Kernel Offset: disabled