last executing test programs: 28.552351811s ago: executing program 2 (id=718): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x28000, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="67430f7ff10f33672e470f01df66baf80cb814aa7d83ef66bafc0cb081ee66b897008ee0c4c121fbb0703a0000460f001d5e1a7f960f20d835080000000f22d82664420f06b9800000c00f3235008000000f30", 0x53}], 0x1, 0x43, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4800) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x7) listen(0xffffffffffffffff, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000300)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 26.888323487s ago: executing program 2 (id=721): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000240)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x800000, 0x400, 0xfffffffd, 0x379}, &(0x7f0000000040), 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/power/pm_debug_messages', 0x100, 0x2f) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) dup3(r5, r8, 0x80000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 15.934538253s ago: executing program 2 (id=739): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xc9}], 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 15.236602247s ago: executing program 2 (id=742): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @pic={0x96, 0xbb, 0x8, 0xb9, 0x1c, 0xa, 0x4, 0x7, 0x1, 0x39, 0x0, 0x7, 0x3, 0x4, 0xff, 0x14}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xbc, 0xe1, 0x0, 0x6, 0x1, 0x41, 0x0, 0xf3, 0x7, 0xc, 0x3, 0x0, 0x40, 0x1, 0x7}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x6, 0x8000000000000, 0x80000004000080, 0x0, 0x5, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x40) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) socket$inet_sctp(0x2, 0x5, 0x84) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) 11.599080691s ago: executing program 1 (id=750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 11.524566445s ago: executing program 3 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 10.755242058s ago: executing program 3 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 9.785999963s ago: executing program 3 (id=755): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]}) r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4000000001, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.725982061s ago: executing program 4 (id=758): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) 8.634413384s ago: executing program 3 (id=759): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x28000, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="67430f7ff10f33672e470f01df66baf80cb814aa7d83ef66bafc0cb081ee66b897008ee0c4c121fbb0703a0000460f001d5e1a7f960f20d835080000000f22d82664420f06b9800000c00f3235008000000f30", 0x53}], 0x1, 0x43, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4800) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x7) poll(&(0x7f0000000040), 0x0, 0x400) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000300)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 7.760155057s ago: executing program 4 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x0, 0x1, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000018000100000000", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f00000004c0)) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f0000000900)="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", 0x3b2}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="a21ba41b141a19048f49b6c5a991295be31bc6b60105e1b3f72d6a6c94ba1a55b2140bad343c608da61db8dc18d7a17dda748bff73d3b950e18008bfbe3ecd59f9d9a606f28dde91a502b509576616cccd555750", 0x54}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x22}, @end, @end, @rr={0x7, 0x17, 0x65, [@dev={0xac, 0x14, 0x14, 0xf}, @loopback, @multicast1, @empty, @loopback]}, @generic={0x86, 0xf, "0da73e9e029dafaaafa9dc5329"}, @noop, @timestamp={0x44, 0xc, 0x93, 0x0, 0x1, [0x4, 0x8]}, @lsrr={0x83, 0x27, 0x4c, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @local, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @private=0xa010101]}]}}}], 0x70}, 0x20048050) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) 7.377272145s ago: executing program 0 (id=761): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e4511000000057474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="1006000000000000ee8de7932b326f8a3164ae439862807a1589836c734d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe87}, {&(0x7f00000033c0)="d6d038091fcf458c", 0x8}], 0x6}, 0x24044091) 7.110453181s ago: executing program 3 (id=762): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) poll(&(0x7f0000000440)=[{r0, 0x5510}], 0x1, 0xa) 6.90551512s ago: executing program 1 (id=763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6.685565041s ago: executing program 0 (id=764): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xc9}], 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 6.305889166s ago: executing program 4 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 6.156905641s ago: executing program 1 (id=766): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e8}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.15632932s ago: executing program 3 (id=767): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2"], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x608c4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf254, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x4, 0x0, 0x1ff, 0x8000, 0x3ff, 0x4, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x0, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x4], [0x6, 0x1e, 0x3, 0x8003, 0xfffffffe, 0x3, 0x0, 0x5, 0x75, 0xfffffffc, 0x4, 0x7ffd, 0x72c, 0x1c32, 0x3, 0x9, 0x10100, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x4000000, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x0, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xb, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x401, 0x3, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0x7, 0xe55, 0x10, 0x80000001, 0x4, 0x101, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xd, 0x47, 0x2, 0x3, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8001, 0xbf23, 0x6, 0x8, 0x956, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xd, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x9, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x7, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x80e, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) 6.033095394s ago: executing program 0 (id=768): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 5.566606169s ago: executing program 2 (id=769): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4000000001, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.315726529s ago: executing program 4 (id=770): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) 5.294909233s ago: executing program 1 (id=771): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2d29, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket(0x400000000010, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x20, 0x1, 0x0, 0x0, {{0x2}, "6d61495425799bcc27a03f94bd395a21ed"}}]}]}, @TCA_BASIC_ACT={0x4}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5.140302776s ago: executing program 0 (id=772): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000008340)=""/4099, 0x1003}], 0x2}, 0x5}, {{&(0x7f00000007c0)=@generic, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f0000000540)=""/13, 0xd}, {&(0x7f0000000700)=""/76, 0x4c}, {&(0x7f00000005c0)=""/37, 0x25}, {0xffffffffffffffff}, {0x0}, {0x0}, {&(0x7f0000001c80)=""/211, 0xd3}], 0x8}, 0x401}], 0x2, 0x10000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x100, 0x4, 0xffffffbe}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x8, 0xe}, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000600)={0x2, @sliced={0x7, [0x7, 0x9, 0x2, 0x675, 0x8001, 0x7, 0x7f, 0x53, 0xf6, 0x7, 0x7, 0xd, 0x8, 0x1, 0x9f55, 0x0, 0x8, 0x2, 0xe, 0x81c1, 0xfff9, 0x400, 0x7, 0x10, 0x5, 0x7, 0xd, 0xce, 0x9, 0xfe01, 0x4, 0x0, 0x6, 0xba0, 0x1, 0x16b, 0x4, 0x100, 0x5, 0x9, 0x9, 0x1, 0xd, 0xfbff, 0xaa, 0x2, 0x8, 0x2], 0x8}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xffffff7e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x2, 0x404d1464, 0x2, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x105) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r7, 0x1, 0x460c, 0x9) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000a40)={&(0x7f00000004c0)={0x50, 0xfffffffffffffff5, 0x8, {0x7, 0x2b, 0x2, 0x48604c48, 0x7, 0x1ff, 0x5, 0xa, 0x0, 0x0, 0x100, 0xd1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20004841}, 0x4048804) 4.576103993s ago: executing program 1 (id=773): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 4.421837265s ago: executing program 4 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.373015818s ago: executing program 2 (id=775): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000d80)={{0x1, 0x1, 0x0, 0x4, 'syz1\x00', 0x6}, 0x1, [0x9, 0x5, 0x1ff, 0x4, 0x1, 0x85, 0x2, 0x5, 0x6, 0x4, 0x9, 0x10000, 0xb, 0x33, 0x4, 0xb221, 0xfff, 0x0, 0xb8a1, 0x6, 0xced, 0x3, 0x1000, 0x7, 0xc, 0x101, 0x1, 0x40, 0x6, 0x9, 0x100000001, 0x5, 0x0, 0x8, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x9, 0xffffffffffffff80, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x82c2, 0x7, 0x4, 0x100, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x1, 0x10, 0x4, 0x3, 0x9, 0x80000000, 0x8, 0x7, 0x1ff, 0xffffffffffffff01, 0x9, 0x3399, 0x7, 0x87, 0x8, 0x12d2, 0x10, 0x2, 0x8, 0x2, 0xa1, 0x3f800000000000, 0x1, 0x0, 0x4, 0x3, 0x3, 0x8000, 0x8000000000000000, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0xa, 0x0, 0xfffffffffffff1c3, 0x0, 0x3, 0x5, 0x7ff, 0xa24, 0x80000001, 0x7, 0xbf6, 0xc000000000, 0x6, 0x80, 0x7ff, 0x101, 0x9, 0x400, 0x7f, 0x5, 0x2, 0x0, 0x100, 0x3, 0x8, 0x2e, 0x10, 0x1400000000400000, 0x5, 0x1, 0x1, 0x8000000000000001, 0x1, 0x3, 0x7f, 0x6, 0x800]}) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r1}, {r1, 0x10}], 0x2, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000100)={'some', 0x20, 0x4, 0x20, 0xffffd}, 0x2f) close(r2) 3.508033265s ago: executing program 4 (id=776): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) unshare(0x28000600) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 2.298960719s ago: executing program 0 (id=777): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8, 0xfffffffd, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0xffffffff, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0xf, 0x6, 0x5, 0x100000, 0x762, 0x3, 0x800000d, 0xe, 0x2b12, 0x101, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x0, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x3, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x80000001, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.381879908s ago: executing program 0 (id=778): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe359f7ed2401f27a7f77d040b"}}) 0s ago: executing program 1 (id=779): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@sndrcv={0x30}, @authinfo={0x12}], 0x48}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002000128009000100626f6e640000000010000280040008800800070005000000d11c5d31ca034faacca9c554b8cbaf6a9b48e8ca9df81baad82305b1"], 0x40}, 0x1, 0x0, 0x0, 0x40060880}, 0x240400c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 172.059149][ T5779] cgroup: Unknown subsys name 'net' [ 172.190276][ T5779] cgroup: Unknown subsys name 'cpuset' [ 172.204205][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 177.965614][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 183.471658][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.492547][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.503241][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.512044][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.521390][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.532132][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.542956][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.551884][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.581850][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.582892][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.596307][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.605858][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.607549][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.614900][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.629320][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.631145][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.645658][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.680921][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.703145][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.714593][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.880171][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.925499][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.983607][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.005142][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.016655][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.255783][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 185.400942][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 185.441904][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 185.730504][ T51] Bluetooth: hci2: command tx timeout [ 185.736256][ T5806] Bluetooth: hci0: command tx timeout [ 185.736769][ T5801] Bluetooth: hci1: command tx timeout [ 185.852457][ T5801] Bluetooth: hci3: command tx timeout [ 186.050077][ T5801] Bluetooth: hci4: command tx timeout [ 186.304553][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.312439][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.320496][ T5799] bridge_slave_0: entered allmulticast mode [ 186.329923][ T5799] bridge_slave_0: entered promiscuous mode [ 186.359949][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.367483][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.375447][ T5799] bridge_slave_1: entered allmulticast mode [ 186.385081][ T5799] bridge_slave_1: entered promiscuous mode [ 186.400626][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 186.480684][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 186.681275][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.851637][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.861846][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.869333][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.877197][ T5800] bridge_slave_0: entered allmulticast mode [ 186.886733][ T5800] bridge_slave_0: entered promiscuous mode [ 187.032539][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.040597][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.048200][ T5800] bridge_slave_1: entered allmulticast mode [ 187.057767][ T5800] bridge_slave_1: entered promiscuous mode [ 187.068807][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.076596][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.084406][ T5796] bridge_slave_0: entered allmulticast mode [ 187.094046][ T5796] bridge_slave_0: entered promiscuous mode [ 187.177577][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.185412][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.194682][ T5796] bridge_slave_1: entered allmulticast mode [ 187.203111][ T5796] bridge_slave_1: entered promiscuous mode [ 187.308758][ T5799] team0: Port device team_slave_0 added [ 187.389746][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.409464][ T5799] team0: Port device team_slave_1 added [ 187.467192][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.521174][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.599213][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.662009][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.669247][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.695952][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.713829][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.722232][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.732211][ T5813] bridge_slave_0: entered allmulticast mode [ 187.742317][ T5813] bridge_slave_0: entered promiscuous mode [ 187.812921][ T5801] Bluetooth: hci0: command tx timeout [ 187.818572][ T5801] Bluetooth: hci1: command tx timeout [ 187.827557][ T5801] Bluetooth: hci2: command tx timeout [ 187.899902][ T5801] Bluetooth: hci3: command tx timeout [ 187.911871][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.919736][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.927233][ T5813] bridge_slave_1: entered allmulticast mode [ 187.936937][ T5813] bridge_slave_1: entered promiscuous mode [ 187.947544][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.954955][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.983489][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.026270][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.034874][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.042711][ T5807] bridge_slave_0: entered allmulticast mode [ 188.052000][ T5807] bridge_slave_0: entered promiscuous mode [ 188.129725][ T5801] Bluetooth: hci4: command tx timeout [ 188.202206][ T5800] team0: Port device team_slave_0 added [ 188.220799][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.243703][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.251162][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.258978][ T5807] bridge_slave_1: entered allmulticast mode [ 188.267629][ T5807] bridge_slave_1: entered promiscuous mode [ 188.282390][ T5796] team0: Port device team_slave_0 added [ 188.341229][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.357069][ T5800] team0: Port device team_slave_1 added [ 188.374578][ T5796] team0: Port device team_slave_1 added [ 188.457762][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.564705][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.669689][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.676795][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.704596][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.780727][ T5813] team0: Port device team_slave_0 added [ 188.790172][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.797471][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.825596][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.841317][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.848704][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.875407][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.933736][ T5799] hsr_slave_0: entered promiscuous mode [ 188.943359][ T5799] hsr_slave_1: entered promiscuous mode [ 188.960569][ T5813] team0: Port device team_slave_1 added [ 188.969992][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.977538][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.004290][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.066467][ T5807] team0: Port device team_slave_0 added [ 189.135028][ T5807] team0: Port device team_slave_1 added [ 189.237542][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.244944][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.271318][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.467302][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.474643][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.501315][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.515093][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.523388][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.550625][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.649761][ T5796] hsr_slave_0: entered promiscuous mode [ 189.659857][ T5796] hsr_slave_1: entered promiscuous mode [ 189.668455][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 189.674637][ T5796] Cannot create hsr debugfs directory [ 189.728357][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.735859][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.762869][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.833591][ T5800] hsr_slave_0: entered promiscuous mode [ 189.844205][ T5800] hsr_slave_1: entered promiscuous mode [ 189.853215][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 189.859318][ T5800] Cannot create hsr debugfs directory [ 189.892701][ T5801] Bluetooth: hci2: command tx timeout [ 189.901119][ T5801] Bluetooth: hci1: command tx timeout [ 189.901644][ T51] Bluetooth: hci0: command tx timeout [ 189.977703][ T5807] hsr_slave_0: entered promiscuous mode [ 189.987882][ T5807] hsr_slave_1: entered promiscuous mode [ 189.997516][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 189.999916][ T51] Bluetooth: hci3: command tx timeout [ 190.003632][ T5807] Cannot create hsr debugfs directory [ 190.216842][ T51] Bluetooth: hci4: command tx timeout [ 190.332494][ T5813] hsr_slave_0: entered promiscuous mode [ 190.342421][ T5813] hsr_slave_1: entered promiscuous mode [ 190.350725][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 190.356655][ T5813] Cannot create hsr debugfs directory [ 191.496670][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.517494][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.572439][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.608696][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.821252][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.845095][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.900793][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.932122][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.958723][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.982723][ T51] Bluetooth: hci1: command tx timeout [ 191.988503][ T51] Bluetooth: hci0: command tx timeout [ 191.994259][ T51] Bluetooth: hci2: command tx timeout [ 192.004427][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.036037][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.050308][ T5806] Bluetooth: hci3: command tx timeout [ 192.109906][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.235719][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.292550][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.296576][ T5806] Bluetooth: hci4: command tx timeout [ 192.391084][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.412553][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.641442][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.672813][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.723058][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.753893][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.129010][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.180492][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.326244][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.369177][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.376883][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.398983][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.445731][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.453430][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.572546][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.580126][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.596918][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.604517][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.640043][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.802532][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.923170][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.930758][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.010867][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.048074][ T1857] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.055977][ T1857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.343502][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.408701][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.495780][ T1857] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.503687][ T1857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.638794][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.662789][ T1857] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.670390][ T1857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.848321][ T1857] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.856084][ T1857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.874403][ T1857] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.882024][ T1857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.966157][ T5807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.978223][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.160594][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.201448][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.247290][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.637357][ T5796] veth0_vlan: entered promiscuous mode [ 196.698520][ T5799] veth0_vlan: entered promiscuous mode [ 196.781475][ T5796] veth1_vlan: entered promiscuous mode [ 196.813236][ T5799] veth1_vlan: entered promiscuous mode [ 196.862248][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.989106][ T5800] veth0_vlan: entered promiscuous mode [ 197.136634][ T5796] veth0_macvtap: entered promiscuous mode [ 197.179094][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.196264][ T5800] veth1_vlan: entered promiscuous mode [ 197.268051][ T5796] veth1_macvtap: entered promiscuous mode [ 197.339149][ T5799] veth0_macvtap: entered promiscuous mode [ 197.409630][ T5799] veth1_macvtap: entered promiscuous mode [ 197.507857][ T5807] veth0_vlan: entered promiscuous mode [ 197.615729][ T5800] veth0_macvtap: entered promiscuous mode [ 197.647288][ T5807] veth1_vlan: entered promiscuous mode [ 197.672368][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.694810][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.751876][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.764535][ T5800] veth1_macvtap: entered promiscuous mode [ 197.814980][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.867660][ T4542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.937731][ T4542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.990297][ T4542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.050309][ T4542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.088250][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.115758][ T4542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.147620][ T5807] veth0_macvtap: entered promiscuous mode [ 198.171109][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.194941][ T4542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.233403][ T5807] veth1_macvtap: entered promiscuous mode [ 198.248720][ T4542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.338236][ T4542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.401832][ T4542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.451029][ T4542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.480676][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.525502][ T4542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.570747][ T4542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.592125][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.684579][ T1857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.787586][ T1857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.844854][ T1857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.875434][ T1857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.797015][ T5813] veth0_vlan: entered promiscuous mode [ 199.951534][ T5813] veth1_vlan: entered promiscuous mode [ 200.294029][ T5813] veth0_macvtap: entered promiscuous mode [ 200.357828][ T5813] veth1_macvtap: entered promiscuous mode [ 200.533429][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.652855][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.747092][ T4386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.809105][ T4386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.852396][ T3812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.878042][ T3812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.484276][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.493686][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.617015][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.625276][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.836171][ T1857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.847281][ T1857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.973061][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.981352][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.088638][ T5799] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 205.159178][ T1846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.167561][ T1846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.216243][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.227931][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.282142][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.291080][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.616482][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.624969][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.616697][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.624965][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.692507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.775745][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.784401][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.970718][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 207.979782][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 208.202265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 208.441888][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 208.803599][ T2233] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 209.047508][ T2233] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.056881][ T2233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.067487][ T2233] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 209.076949][ T2233] usb 3-1: config 1 has no interface number 1 [ 209.083908][ T2233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 209.091814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 209.097110][ T2233] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.190512][ T2233] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.200311][ T2233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.208608][ T2233] usb 3-1: Product: syz [ 209.214369][ T2233] usb 3-1: Manufacturer: syz [ 209.219269][ T2233] usb 3-1: SerialNumber: syz [ 209.563365][ T2233] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 209.571570][ T2233] usb 3-1: MIDIStreaming interface descriptor not found [ 209.907451][ T2233] usb 3-1: USB disconnect, device number 2 [ 210.390822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 210.433366][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.521665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 210.866939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 210.967436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 211.072361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 211.108420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 211.108483][ T6038] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET) [ 211.128745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 211.746212][ T6046] tipc: Started in network mode [ 211.752030][ T6046] tipc: Node identity f24b526d97f5, cluster identity 4711 [ 211.760231][ T6046] tipc: Enabled bearer , priority 0 [ 211.870456][ T6040] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 211.938278][ T6043] syzkaller0: entered promiscuous mode [ 211.944151][ T6043] syzkaller0: entered allmulticast mode [ 212.076273][ T6043] tipc: Resetting bearer [ 212.205135][ T6049] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.224011][ T6042] tipc: Resetting bearer [ 212.282486][ T6042] tipc: Disabling bearer [ 214.340089][ T2233] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 214.342930][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 214.537358][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 214.572625][ T2233] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.580587][ T5904] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 214.583183][ T2233] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.592293][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.614624][ T2233] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.624727][ T2233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.692976][ T5904] usb 3-1: config 0 descriptor?? [ 214.992663][ T5904] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 215.000489][ T2233] usb 1-1: usb_control_msg returned -32 [ 215.010146][ T2233] usbtmc 1-1:16.0: can't read capabilities [ 215.084873][ T5904] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 215.095488][ T5904] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 215.157810][ T2233] usb 1-1: USB disconnect, device number 2 [ 216.840036][ T5854] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 217.101467][ T5854] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 217.113674][ T5854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.125949][ T5854] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.135268][ T5854] usb 1-1: config 1 has no interface number 1 [ 217.142095][ T5854] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 217.155283][ T5854] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.459460][ T5854] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.469149][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.477773][ T5854] usb 1-1: Product: syz [ 217.482281][ T5854] usb 1-1: Manufacturer: syz [ 217.486974][ T5854] usb 1-1: SerialNumber: syz [ 218.028869][ T5854] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 218.040213][ T5854] usb 1-1: MIDIStreaming interface descriptor not found [ 218.300049][ T5854] usb 1-1: USB disconnect, device number 3 [ 218.642926][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.574137][ T2233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 219.787021][ T2233] usb 1-1: Using ep0 maxpacket: 16 [ 219.827948][ T2233] usb 1-1: config 0 has no interfaces? [ 219.872910][ T2233] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 219.885798][ T2233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.896040][ T2233] usb 1-1: Product: syz [ 219.900582][ T2233] usb 1-1: Manufacturer: syz [ 219.905272][ T2233] usb 1-1: SerialNumber: syz [ 220.122332][ T2233] usb 1-1: config 0 descriptor?? [ 220.345417][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 220.354426][ T6084] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 220.483600][ T2233] usb 1-1: USB disconnect, device number 4 [ 222.186472][ T6090] tipc: Started in network mode [ 222.191794][ T6090] tipc: Node identity e261a8e1ae52, cluster identity 4711 [ 222.200160][ T6090] tipc: Enabled bearer , priority 0 [ 222.282231][ T6092] syzkaller0: entered promiscuous mode [ 222.288043][ T6092] syzkaller0: entered allmulticast mode [ 222.359993][ T6090] tipc: Resetting bearer [ 222.370655][ T6089] tipc: Resetting bearer [ 222.396814][ T6089] tipc: Disabling bearer [ 223.247343][ T6096] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 224.550965][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.557608][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.098367][ T6134] tipc: Started in network mode [ 228.103811][ T6134] tipc: Node identity 42f828c2313a, cluster identity 4711 [ 228.111967][ T6134] tipc: Enabled bearer , priority 0 [ 228.202073][ T6134] syzkaller0: entered promiscuous mode [ 228.207759][ T6134] syzkaller0: entered allmulticast mode [ 228.244919][ T6134] tipc: Resetting bearer [ 228.284812][ T6133] tipc: Resetting bearer [ 228.301392][ T6133] tipc: Disabling bearer [ 228.879850][ T6142] input: syz0 as /devices/virtual/input/input5 [ 234.083702][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.65'. [ 234.103600][ T6188] loop5: detected capacity change from 0 to 911 [ 234.870060][ T2233] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 235.119175][ T2233] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 235.128357][ T2233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.144412][ T2233] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 235.155181][ T2233] usb 2-1: config 1 has no interface number 1 [ 235.161528][ T2233] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 235.174753][ T2233] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.225325][ T2233] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.241292][ T2233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.251714][ T2233] usb 2-1: Product: syz [ 235.256086][ T2233] usb 2-1: Manufacturer: syz [ 235.261133][ T2233] usb 2-1: SerialNumber: syz [ 235.592354][ T2233] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 235.600043][ T2233] usb 2-1: MIDIStreaming interface descriptor not found [ 236.008875][ T2233] usb 2-1: USB disconnect, device number 2 [ 236.300812][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.507365][ T6208] Invalid logical block size (7) [ 242.770858][ T6247] Invalid logical block size (7) [ 243.910846][ T6257] tipc: Started in network mode [ 243.916008][ T6257] tipc: Node identity 4eba2fcd85b1, cluster identity 4711 [ 243.924679][ T6257] tipc: Enabled bearer , priority 0 [ 244.080218][ T6256] syzkaller0: entered promiscuous mode [ 244.085910][ T6256] syzkaller0: entered allmulticast mode [ 244.190184][ T6256] tipc: Resetting bearer [ 244.263816][ T6252] tipc: Resetting bearer [ 244.324414][ T6252] tipc: Disabling bearer [ 244.903879][ T6261] input: syz0 as /devices/virtual/input/input6 [ 248.655548][ T6281] Invalid logical block size (7) [ 248.665322][ T6279] loop2: detected capacity change from 0 to 7 [ 248.676744][ T6279] Dev loop2: unable to read RDB block 7 [ 248.683095][ T6279] loop2: unable to read partition table [ 248.698552][ T6279] loop2: partition table beyond EOD, truncated [ 248.705544][ T6279] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 248.727160][ T6279] loop5: detected capacity change from 0 to 3951 [ 248.764341][ T6279] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 249.053798][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 249.216342][ T6288] Zero length message leads to an empty skb [ 249.461574][ T6287] netlink: 'syz.1.100': attribute type 41 has an invalid length. [ 249.913624][ T6293] tipc: Enabled bearer , priority 0 [ 250.001371][ T6293] syzkaller0: entered promiscuous mode [ 250.007054][ T6293] syzkaller0: entered allmulticast mode [ 250.134495][ T6293] tipc: Resetting bearer [ 250.203200][ T6291] tipc: Resetting bearer [ 250.232450][ T6291] tipc: Disabling bearer [ 250.980085][ T6303] process 'syz.1.103' launched './file0' with NULL argv: empty string added [ 252.743513][ T6316] loop2: detected capacity change from 0 to 7 [ 252.900766][ T6316] Dev loop2: unable to read RDB block 7 [ 252.906789][ T6316] loop2: unable to read partition table [ 253.120345][ T6316] loop2: partition table beyond EOD, truncated [ 253.127006][ T6316] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 253.222581][ T6324] loop5: detected capacity change from 0 to 4047 [ 253.294827][ T6324] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 253.382604][ T6085] Buffer I/O error on dev loop5, logical block 505, async page read [ 254.399890][ T6330] Invalid logical block size (7) [ 256.551288][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 257.541571][ T6341] tipc: Started in network mode [ 257.546713][ T6341] tipc: Node identity f277f2b0605, cluster identity 4711 [ 257.555070][ T6341] tipc: Enabled bearer , priority 0 [ 257.601260][ T6342] syzkaller0: entered promiscuous mode [ 257.606923][ T6342] syzkaller0: entered allmulticast mode [ 257.689335][ T6341] tipc: Resetting bearer [ 257.772230][ T6340] tipc: Resetting bearer [ 257.787910][ T6340] tipc: Disabling bearer [ 260.062725][ T6361] loop9: detected capacity change from 0 to 7 [ 260.101231][ T6361] Dev loop9: unable to read RDB block 7 [ 260.108301][ T6361] loop9: AHDI p4 [ 260.112333][ T6361] loop9: partition table partially beyond EOD, truncated [ 260.728650][ T6366] loop7: detected capacity change from 0 to 7 [ 263.605474][ T5852] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 263.810930][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 263.859120][ T5852] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 263.868552][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.893127][ T5852] usb 4-1: config 0 descriptor?? [ 264.246339][ T5852] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 264.370018][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.385879][ T5852] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 264.393500][ T5852] usb 4-1: media controller created [ 264.516328][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.550959][ T6384] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 264.805468][ T6388] loop2: detected capacity change from 0 to 7 [ 264.889315][ T6388] Dev loop2: unable to read RDB block 7 [ 264.897580][ T6388] loop2: unable to read partition table [ 264.905039][ T6388] loop2: partition table beyond EOD, truncated [ 264.911726][ T6388] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 264.964953][ T5852] az6027: usb out operation failed. (-71) [ 264.972090][ T5852] az6027: usb out operation failed. (-71) [ 264.978106][ T5852] stb0899_attach: Driver disabled by Kconfig [ 264.985065][ T5852] az6027: no front-end attached [ 264.985065][ T5852] [ 264.995578][ T5852] az6027: usb out operation failed. (-71) [ 265.001587][ T5852] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 265.012928][ T5852] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 265.142963][ T5852] dvb-usb: schedule remote query interval to 400 msecs. [ 265.150560][ T5852] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 265.230829][ T5852] usb 4-1: USB disconnect, device number 2 [ 265.349173][ T6388] loop5: detected capacity change from 0 to 4151 [ 265.603210][ T5852] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 265.690585][ T6366] Dev loop7: unable to read RDB block 7 [ 265.697380][ T6366] loop7: unable to read partition table [ 265.793159][ T6366] loop7: partition table beyond EOD, truncated [ 265.800355][ T6366] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 265.820479][ T6388] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 268.686595][ T6405] loop2: detected capacity change from 0 to 7 [ 268.866611][ T6405] Dev loop2: unable to read RDB block 7 [ 268.873136][ T6405] loop2: unable to read partition table [ 268.989331][ T6409] loop5: detected capacity change from 0 to 3247 [ 269.035138][ T6410] ipvlan2: entered promiscuous mode [ 269.068141][ T6405] loop2: partition table beyond EOD, truncated [ 269.075147][ T6405] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 269.091228][ T5153] Dev loop2: unable to read RDB block 7 [ 269.097756][ T5153] loop2: unable to read partition table [ 269.152176][ T5153] loop2: partition table beyond EOD, truncated [ 269.162266][ T6412] loop9: detected capacity change from 0 to 7 [ 269.203282][ T6409] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 269.227427][ T6412] Dev loop9: unable to read RDB block 7 [ 269.240112][ T6412] loop9: AHDI p4 [ 269.243980][ T6412] loop9: partition table partially beyond EOD, truncated [ 270.721154][ T6424] loop7: detected capacity change from 0 to 7 [ 272.673765][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 272.880849][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 273.996414][ T6424] Dev loop7: unable to read RDB block 7 [ 274.006745][ T6424] loop7: unable to read partition table [ 274.111181][ T6424] loop7: partition table beyond EOD, truncated [ 274.117696][ T6424] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 274.867108][ T6446] loop2: detected capacity change from 0 to 7 [ 274.936320][ T6446] Dev loop2: unable to read RDB block 7 [ 274.942450][ T6446] loop2: unable to read partition table [ 275.004280][ T6451] loop5: detected capacity change from 0 to 4095 [ 275.037910][ T6446] loop2: partition table beyond EOD, truncated [ 275.044689][ T6446] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 275.045241][ T6451] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 275.118503][ T5854] hid-generic 0005:00FF:5508.0001: unknown main item tag 0x0 [ 275.149202][ T5854] hid-generic 0005:00FF:5508.0001: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 275.284441][ T6085] Buffer I/O error on dev loop5, logical block 511, async page read [ 275.693324][ T6460] bond1: Removing last arp target with arp_interval on [ 275.701585][ T6460] bond1: entered allmulticast mode [ 275.708164][ T6460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.742930][ T5904] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 275.758537][ T5904] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 275.799388][ T5904] usb 3-1: USB disconnect, device number 3 [ 275.846524][ T6050] Buffer I/O error on dev loop5, logical block 511, async page read [ 276.715377][ T6469] fido_id[6469]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 277.020522][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 277.126302][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 279.046839][ T6484] loop7: detected capacity change from 0 to 7 [ 283.271320][ T6484] Dev loop7: unable to read RDB block 7 [ 283.277401][ T6484] loop7: unable to read partition table [ 283.310909][ T6484] loop7: partition table beyond EOD, truncated [ 283.317283][ T6484] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 286.007591][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.015446][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.222571][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 288.270562][ T6533] bond1: Removing last arp target with arp_interval on [ 288.282972][ T6533] bond1: entered allmulticast mode [ 288.289859][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.009797][ T6539] syzkaller0: entered promiscuous mode [ 289.015613][ T6539] syzkaller0: entered allmulticast mode [ 294.119415][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 297.571695][ T6578] syzkaller0: entered promiscuous mode [ 297.577291][ T6578] syzkaller0: entered allmulticast mode [ 298.272520][ T5904] hid-generic 0005:00FF:5508.0002: unknown main item tag 0x0 [ 298.338557][ T5904] hid-generic 0005:00FF:5508.0002: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 299.494499][ T6588] fido_id[6588]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 299.737059][ T6594] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 300.442898][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 301.408460][ T6608] bond1: Removing last arp target with arp_interval on [ 301.416856][ T6608] bond1: entered allmulticast mode [ 301.423751][ T6608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.326606][ T6626] Invalid logical block size (7) [ 304.311535][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 306.114861][ T6648] loop9: detected capacity change from 0 to 7 [ 306.218873][ T6648] Dev loop9: unable to read RDB block 7 [ 306.225242][ T6648] loop9: AHDI p2 [ 306.229193][ T6648] loop9: partition table partially beyond EOD, truncated [ 307.775645][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 308.531277][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 308.537884][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 308.544853][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 308.545015][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 310.513180][ T6691] syzkaller0: entered promiscuous mode [ 310.518860][ T6691] syzkaller0: entered allmulticast mode [ 310.941067][ T6702] input: syz1 as /devices/virtual/input/input9 [ 311.170360][ T6701] loop9: detected capacity change from 0 to 7 [ 311.237884][ T6701] Dev loop9: unable to read RDB block 7 [ 311.244556][ T6701] loop9: AHDI p2 [ 311.248521][ T6701] loop9: partition table partially beyond EOD, truncated [ 311.380201][ T5852] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 311.691806][ T5852] usb 2-1: not running at top speed; connect to a high speed hub [ 311.741855][ T5852] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.753275][ T5852] usb 2-1: config 1 interface 0 has no altsetting 0 [ 311.796965][ T5852] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.806894][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.815411][ T5852] usb 2-1: Product: ࠒ [ 311.819880][ T5852] usb 2-1: Manufacturer: ᠌ [ 311.824582][ T5852] usb 2-1: SerialNumber: ฯﷷ隲䦩醽皗馴쒑Χ㵽༶跠ɸ헓젂릋锌쭍ꐝ彷邘臲䆰푞룖緩拓滯䌣쁓隽熏뇚팓ʂ㽷裫璉㕂粕⹈뛘瞅몧痏䚯龜蒊㹡ꂆ≴뜎⇞꼆ꘁ따ꃕꘑ섍⠕踁雟ᩔ唜횐ᣳẐܺỮ墷괿ꀇ홑頝熛枊啃흕㺙Ᵹ᪟ꜳ휊፨⥎⡜愗༔䯓ᒍ涟䮢Ꮼ喴㌁曣돔Ẻ벥ꖢ꾣⪯扚 [ 311.904531][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 312.493296][ T5904] hid-generic 0005:00FF:5508.0003: unknown main item tag 0x0 [ 312.680505][ T5904] hid-generic 0005:00FF:5508.0003: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 313.974329][ T6714] fido_id[6714]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 314.209053][ T5852] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 314.348283][ T5852] usb 2-1: USB disconnect, device number 3 [ 314.428584][ T6720] loop5: detected capacity change from 0 to 3639 [ 314.536416][ T6720] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 314.877637][ T6734] bond2: Removing last arp target with arp_interval on [ 314.886391][ T6734] bond2: entered allmulticast mode [ 314.893342][ T6734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.946467][ T6030] Buffer I/O error on dev loop5, logical block 454, async page read [ 315.123211][ T6727] hub 9-0:1.0: USB hub found [ 315.152703][ T6727] hub 9-0:1.0: 1 port detected [ 317.835083][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 318.021261][ T6750] syzkaller0: entered promiscuous mode [ 318.026956][ T6750] syzkaller0: entered allmulticast mode [ 319.520443][ T5852] hid-generic 0005:00FF:5508.0004: unknown main item tag 0x0 [ 319.633637][ T5852] hid-generic 0005:00FF:5508.0004: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 320.793236][ T6765] fido_id[6765]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 321.462570][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 323.460319][ T6787] syzkaller0: entered promiscuous mode [ 323.466001][ T6787] syzkaller0: entered allmulticast mode [ 326.182453][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 326.192048][ T6809] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 326.202517][ T6809] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 326.250611][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 327.307579][ T6819] syzkaller0: entered promiscuous mode [ 327.313659][ T6819] syzkaller0: entered allmulticast mode [ 328.043391][ T6829] bond3: Removing last arp target with arp_interval on [ 328.051775][ T6829] bond3: entered allmulticast mode [ 328.058504][ T6829] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.935216][ T6857] vivid-007: disconnect [ 330.971539][ T6856] vivid-007: reconnect [ 336.790645][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 336.965704][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 337.018260][ T5904] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 337.029455][ T5904] usb 5-1: config 0 has no interface number 0 [ 337.133640][ T5904] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 337.147267][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.156045][ T5904] usb 5-1: Product: syz [ 337.160776][ T5904] usb 5-1: Manufacturer: syz [ 337.165744][ T5904] usb 5-1: SerialNumber: syz [ 337.304540][ T5904] usb 5-1: config 0 descriptor?? [ 337.338420][ T5904] asix 5-1:0.251: probe with driver asix failed with error -22 [ 338.737742][ T5852] hid-generic 0005:00FF:5508.0005: unknown main item tag 0x0 [ 338.795617][ T5852] hid-generic 0005:00FF:5508.0005: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 339.488954][ T6928] fido_id[6928]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 339.804032][ T5904] usb 5-1: USB disconnect, device number 2 [ 340.984665][ T6939] bond2: Removing last arp target with arp_interval on [ 340.993580][ T6939] bond2: entered allmulticast mode [ 341.001499][ T6939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.580921][ T6959] netlink: 'syz.3.317': attribute type 5 has an invalid length. [ 346.979902][ T5852] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 347.192736][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 347.225930][ T5852] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 347.236970][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.323052][ T5852] usb 5-1: config 0 descriptor?? [ 347.443783][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.450941][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.658366][ T5852] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 347.683841][ T5852] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 347.693369][ T5852] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 348.766974][ T5904] hid-generic 0005:00FF:5508.0006: unknown main item tag 0x0 [ 348.811463][ T5904] hid-generic 0005:00FF:5508.0006: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 350.204822][ T7007] fido_id[7007]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 350.743550][ T5904] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 350.968698][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 351.053399][ T5904] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.063172][ T5904] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 351.072773][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.178262][ T5904] usb 2-1: config 0 descriptor?? [ 352.549987][ T2233] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 352.817400][ T2233] usb 4-1: Using ep0 maxpacket: 32 [ 352.921714][ T2233] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 352.931127][ T2233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.045597][ T2233] usb 4-1: config 0 descriptor?? [ 353.600318][ T2233] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 354.191174][ T5904] usb 2-1: USB disconnect, device number 4 [ 354.933650][ T7032] bond3: Removing last arp target with arp_interval on [ 354.950853][ T7032] bond3: entered allmulticast mode [ 354.957344][ T7032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.931081][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 356.076524][ T5904] hid-generic 0005:00FF:5508.0007: unknown main item tag 0x0 [ 356.128539][ T5904] hid-generic 0005:00FF:5508.0007: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 357.038286][ T7043] fido_id[7043]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 357.995899][ T30] audit: type=1326 audit(1764281461.786:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.024260][ T30] audit: type=1326 audit(1764281461.826:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.048865][ T30] audit: type=1326 audit(1764281461.826:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.072082][ T30] audit: type=1326 audit(1764281461.826:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.095072][ T30] audit: type=1326 audit(1764281461.826:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.127841][ T30] audit: type=1326 audit(1764281461.826:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.152487][ T30] audit: type=1326 audit(1764281461.826:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.175163][ T30] audit: type=1326 audit(1764281461.826:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.197966][ T30] audit: type=1326 audit(1764281461.826:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.360227][ T30] audit: type=1326 audit(1764281462.066:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 358.500709][ T7053] mmap: syz.0.350 (7053) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 359.980299][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 360.190894][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 360.380891][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 360.392183][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.479900][ T24] usb 3-1: config 0 descriptor?? [ 360.730514][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 362.811139][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 367.253384][ T7100] input: syz1 as /devices/virtual/input/input10 [ 367.405741][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 368.343609][ T7109] bond4: Removing last arp target with arp_interval on [ 368.352323][ T7109] bond4: entered allmulticast mode [ 368.369065][ T7109] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.758049][ T5881] hid-generic 0005:00FF:5508.0008: unknown main item tag 0x0 [ 368.786458][ T5881] hid-generic 0005:00FF:5508.0008: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 369.690379][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 369.735061][ T7115] fido_id[7115]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 370.201531][ T7123] loop9: detected capacity change from 0 to 7 [ 370.225810][ T7123] Dev loop9: unable to read RDB block 7 [ 370.232101][ T7123] loop9: AHDI p2 [ 370.235860][ T7123] loop9: partition table partially beyond EOD, truncated [ 371.032159][ T7127] vlan2: entered allmulticast mode [ 372.208647][ T7136] input: syz1 as /devices/virtual/input/input11 [ 372.716109][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 372.850517][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 373.605290][ T5904] hid-generic 0005:00FF:5508.0009: unknown main item tag 0x0 [ 373.691893][ T5904] hid-generic 0005:00FF:5508.0009: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 374.255720][ T7155] loop9: detected capacity change from 0 to 7 [ 374.273647][ T7155] Dev loop9: unable to read RDB block 7 [ 374.279688][ T7155] loop9: AHDI p2 [ 374.283562][ T7155] loop9: partition table partially beyond EOD, truncated [ 374.666499][ T7151] fido_id[7151]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 376.498025][ T7174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 376.763340][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 376.796338][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 377.999929][ T7188] loop9: detected capacity change from 0 to 7 [ 378.015522][ T7188] Dev loop9: unable to read RDB block 7 [ 378.021555][ T7188] loop9: AHDI p2 [ 378.025414][ T7188] loop9: partition table partially beyond EOD, truncated [ 378.087182][ T7192] batadv_slave_1: entered promiscuous mode [ 378.255869][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'. [ 378.529007][ T7190] batadv_slave_1: left promiscuous mode [ 379.328334][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 379.550648][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 379.587655][ T7208] bond2: Removing last arp target with arp_interval on [ 379.596544][ T7208] bond2: entered allmulticast mode [ 379.604051][ T7208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.578166][ T7229] loop9: detected capacity change from 0 to 7 [ 382.693686][ T7229] Dev loop9: unable to read RDB block 7 [ 382.700138][ T7229] loop9: unable to read partition table [ 382.740073][ T7229] loop9: partition table beyond EOD, truncated [ 382.746595][ T7229] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 383.740299][ T7235] batadv_slave_1: entered promiscuous mode [ 383.802734][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.416'. [ 383.961049][ T7235] batadv_slave_1: left promiscuous mode [ 387.556131][ T7271] loop9: detected capacity change from 0 to 7 [ 387.620758][ T7271] Dev loop9: unable to read RDB block 7 [ 387.626912][ T7271] loop9: unable to read partition table [ 387.742310][ T7271] loop9: partition table beyond EOD, truncated [ 387.749061][ T7271] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 389.777660][ T7287] batadv_slave_1: entered promiscuous mode [ 389.939186][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.430'. [ 390.225537][ T7287] batadv_slave_1: left promiscuous mode [ 392.426170][ T5881] hid-generic 0005:00FF:5508.000A: unknown main item tag 0x0 [ 392.459081][ T5881] hid-generic 0005:00FF:5508.000A: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 393.133998][ T7320] fido_id[7320]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 393.323096][ T7324] loop9: detected capacity change from 0 to 7 [ 393.373669][ T7324] Dev loop9: unable to read RDB block 7 [ 393.380055][ T7324] loop9: unable to read partition table [ 393.486050][ T7324] loop9: partition table beyond EOD, truncated [ 393.492738][ T7324] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 393.806622][ T7333] bond3: Removing last arp target with arp_interval on [ 393.815343][ T7333] bond3: entered allmulticast mode [ 393.822105][ T7333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.482583][ T7339] batadv_slave_1: entered promiscuous mode [ 394.605602][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.444'. [ 394.682232][ T7339] batadv_slave_1: left promiscuous mode [ 399.043888][ T5904] hid-generic 0005:00FF:5508.000B: unknown main item tag 0x0 [ 399.191499][ T5904] hid-generic 0005:00FF:5508.000B: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 399.807541][ T7373] fido_id[7373]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 401.732111][ T7386] fuse: Bad value for 'fd' [ 405.405273][ T7423] fuse: Bad value for 'fd' [ 406.191743][ T7428] bond4: Removing last arp target with arp_interval on [ 406.200508][ T7428] bond4: entered allmulticast mode [ 406.207613][ T7428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.856672][ T5852] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 408.873104][ T5852] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 408.882567][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.882896][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.896098][ T2233] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 408.922128][ T2233] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 408.939285][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 408.955538][ T24] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 409.097136][ T24] usb 3-1: USB disconnect, device number 4 [ 409.143576][ T2233] usb 4-1: USB disconnect, device number 3 [ 409.173256][ T5852] usb 5-1: USB disconnect, device number 3 [ 409.859069][ T7462] fuse: Bad value for 'fd' [ 409.890491][ T5852] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 411.122792][ T7470] bond5: Removing last arp target with arp_interval on [ 411.131667][ T7470] bond5: entered allmulticast mode [ 411.138792][ T7470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.804649][ T5852] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 414.009976][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 414.054600][ T5852] usb 4-1: config 0 has no interfaces? [ 414.076163][ T5852] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 414.086325][ T5852] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 414.095335][ T5852] usb 4-1: Manufacturer: syz [ 414.187860][ T5852] usb 4-1: config 0 descriptor?? [ 414.871209][ T5904] usb 4-1: USB disconnect, device number 4 [ 418.059754][ T7548] netlink: 'syz.4.508': attribute type 21 has an invalid length. [ 428.658569][ T7650] fuse: Unknown parameter 'fd0x0000000000000003' [ 437.690590][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 447.291772][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 447.415526][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 450.546806][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 450.703943][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 451.274146][ T7819] bond2: Removing last arp target with arp_interval on [ 451.282838][ T7819] bond2: entered allmulticast mode [ 451.290353][ T7819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.630066][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 456.630142][ T30] audit: type=1326 audit(1764281560.456:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 456.659804][ T30] audit: type=1326 audit(1764281560.466:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 461.310379][ T5946] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 461.511587][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 461.592479][ T5946] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 461.602055][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.661650][ T5946] usb 5-1: config 0 descriptor?? [ 461.897474][ T5946] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 461.952144][ T5946] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.056982][ T5946] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 462.064840][ T5946] usb 5-1: media controller created [ 462.226099][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.652134][ T5946] az6027: usb out operation failed. (-71) [ 462.714196][ T5946] az6027: usb out operation failed. (-71) [ 462.721018][ T5946] stb0899_attach: Driver disabled by Kconfig [ 462.727231][ T5946] az6027: no front-end attached [ 462.727231][ T5946] [ 462.811407][ T5946] az6027: usb out operation failed. (-71) [ 462.817378][ T5946] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 462.827268][ T5946] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 462.991672][ T5946] dvb-usb: schedule remote query interval to 400 msecs. [ 462.998795][ T5946] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 463.125803][ T5946] usb 5-1: USB disconnect, device number 5 [ 463.585148][ T5946] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 464.268338][ T7922] bond5: Removing last arp target with arp_interval on [ 464.276414][ T7922] bond5: entered allmulticast mode [ 464.282952][ T7922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.220470][ T7931] netlink: 'syz.4.622': attribute type 4 has an invalid length. [ 466.314697][ T7931] netlink: 'syz.4.622': attribute type 4 has an invalid length. [ 466.940008][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 467.200859][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 467.212067][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 467.221863][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.294744][ T24] usb 2-1: config 0 descriptor?? [ 467.511992][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 467.557687][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.642485][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 467.650098][ T24] usb 2-1: media controller created [ 467.755024][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.040520][ C1] hrtimer: interrupt took 320116 ns [ 468.119093][ T24] az6027: usb out operation failed. (-71) [ 468.160675][ T24] az6027: usb out operation failed. (-71) [ 468.166512][ T24] stb0899_attach: Driver disabled by Kconfig [ 468.173068][ T24] az6027: no front-end attached [ 468.173068][ T24] [ 468.260063][ T24] az6027: usb out operation failed. (-71) [ 468.266160][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 468.276631][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 468.542672][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 468.550324][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 468.721134][ T24] usb 2-1: USB disconnect, device number 5 [ 469.373112][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 470.354738][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.361587][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.110000][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 474.294877][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 474.317245][ T24] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 474.326147][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.336963][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 474.351951][ T24] usb 3-1: config 0 has no interface number 0 [ 474.358270][ T24] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.371758][ T24] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 474.383936][ T24] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 474.394536][ T24] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.795441][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 474.805147][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.814060][ T24] usb 3-1: Product: syz [ 474.818374][ T24] usb 3-1: Manufacturer: syz [ 474.823227][ T24] usb 3-1: SerialNumber: syz [ 475.073026][ T24] usb 3-1: config 0 descriptor?? [ 475.092569][ T7996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.191941][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.340114][ T5852] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 475.550083][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 475.604837][ T5852] usb 5-1: config 0 has no interfaces? [ 475.633434][ T5852] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 475.643466][ T5852] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 475.651794][ T5852] usb 5-1: Manufacturer: syz [ 475.762867][ T5852] usb 5-1: config 0 descriptor?? [ 475.817958][ T8007] input: syz1 as /devices/virtual/input/input14 [ 476.402249][ T8007] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 477.036515][ T5852] usb 5-1: USB disconnect, device number 6 [ 479.689238][ T30] audit: type=1326 audit(1764281583.476:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.712040][ T30] audit: type=1326 audit(1764281583.476:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.734798][ T30] audit: type=1326 audit(1764281583.476:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.757776][ T30] audit: type=1326 audit(1764281583.486:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.781641][ T30] audit: type=1326 audit(1764281583.486:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.804553][ T30] audit: type=1326 audit(1764281583.486:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.827063][ T30] audit: type=1326 audit(1764281583.486:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.849454][ T30] audit: type=1326 audit(1764281583.486:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.874444][ T30] audit: type=1326 audit(1764281583.486:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 479.898182][ T30] audit: type=1326 audit(1764281583.496:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea8e58f749 code=0x7ffc0000 [ 480.710195][ T8030] bond1: Removing last arp target with arp_interval on [ 480.718177][ T8030] bond1: entered allmulticast mode [ 480.725715][ T8030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.020151][ T5946] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 484.370117][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 484.425269][ T5946] usb 1-1: config 0 has no interfaces? [ 484.435354][ T5946] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 484.444896][ T5946] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 484.453441][ T5946] usb 1-1: Manufacturer: syz [ 484.470599][ T5946] usb 1-1: config 0 descriptor?? [ 485.524666][ T5946] usb 1-1: USB disconnect, device number 5 [ 487.150045][ T5852] usb 3-1: USB disconnect, device number 5 [ 496.611203][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 496.611279][ T30] audit: type=1326 audit(1764281600.446:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.640265][ T30] audit: type=1326 audit(1764281600.446:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.667859][ T30] audit: type=1326 audit(1764281600.446:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.692270][ T30] audit: type=1326 audit(1764281600.446:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.715021][ T30] audit: type=1326 audit(1764281600.446:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.739348][ T30] audit: type=1326 audit(1764281600.446:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.768433][ T30] audit: type=1326 audit(1764281600.446:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.794344][ T30] audit: type=1326 audit(1764281600.456:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.816816][ T30] audit: type=1326 audit(1764281600.476:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 496.905703][ T30] audit: type=1326 audit(1764281600.746:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea3258f749 code=0x7ffc0000 [ 507.285111][ T8211] netlink: 'syz.1.711': attribute type 9 has an invalid length. [ 507.293087][ T8211] netlink: 'syz.1.711': attribute type 6 has an invalid length. [ 507.301775][ T8211] netlink: 'syz.1.711': attribute type 7 has an invalid length. [ 507.313678][ T8211] netlink: 'syz.1.711': attribute type 8 has an invalid length. [ 510.323208][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 510.323263][ T30] audit: type=1326 audit(1764281614.066:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.352019][ T30] audit: type=1326 audit(1764281614.076:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.374838][ T30] audit: type=1326 audit(1764281614.076:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.399168][ T30] audit: type=1326 audit(1764281614.076:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.422153][ T30] audit: type=1326 audit(1764281614.076:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.444602][ T30] audit: type=1326 audit(1764281614.076:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.467106][ T30] audit: type=1326 audit(1764281614.076:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.492130][ T30] audit: type=1326 audit(1764281614.076:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.515361][ T30] audit: type=1326 audit(1764281614.076:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 510.538010][ T30] audit: type=1326 audit(1764281614.076:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01e2b8f749 code=0x7ffc0000 [ 513.650676][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 513.662962][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 516.208562][ T8258] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 519.720036][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 519.930081][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 519.952566][ T8285] loop7: detected capacity change from 0 to 7 [ 520.024435][ T24] usb 5-1: config 0 has no interfaces? [ 520.191524][ T24] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 520.201368][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.209945][ T24] usb 5-1: Product: syz [ 520.218737][ T24] usb 5-1: Manufacturer: syz [ 520.224894][ T24] usb 5-1: SerialNumber: syz [ 520.242849][ T24] usb 5-1: config 0 descriptor?? [ 520.481797][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.492422][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.769968][ T8283] batadv0: entered promiscuous mode [ 520.775517][ T8283] vlan2: entered promiscuous mode [ 520.960003][ T5854] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 521.024326][ T5946] usb 5-1: USB disconnect, device number 7 [ 521.170484][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 521.235503][ T5854] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 521.246606][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.257966][ T5854] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 521.267174][ T5854] usb 1-1: config 0 has no interface number 0 [ 521.273436][ T5854] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.284558][ T5854] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 521.296440][ T5854] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 521.306899][ T5854] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.377650][ T5854] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 521.387244][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.396026][ T5854] usb 1-1: Product: syz [ 521.400518][ T5854] usb 1-1: Manufacturer: syz [ 521.405247][ T5854] usb 1-1: SerialNumber: syz [ 521.424211][ T5854] usb 1-1: config 0 descriptor?? [ 521.432063][ T8289] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 521.474923][ T5854] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.873479][ T8292] input: syz1 as /devices/virtual/input/input15 [ 523.571103][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 524.360359][ T8285] Dev loop7: unable to read RDB block 7 [ 524.366399][ T8285] loop7: unable to read partition table [ 524.450439][ T8285] loop7: partition table beyond EOD, truncated [ 524.456964][ T8285] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 524.941119][ T8301] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 526.270733][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 526.270808][ T30] audit: type=1326 audit(1764281630.016:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.299764][ T30] audit: type=1326 audit(1764281630.016:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.322240][ T30] audit: type=1326 audit(1764281630.016:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.344692][ T30] audit: type=1326 audit(1764281630.016:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.369998][ T30] audit: type=1326 audit(1764281630.016:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.395058][ T30] audit: type=1326 audit(1764281630.016:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.417718][ T30] audit: type=1326 audit(1764281630.016:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.440929][ T30] audit: type=1326 audit(1764281630.026:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.465750][ T30] audit: type=1326 audit(1764281630.026:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 526.489347][ T30] audit: type=1326 audit(1764281630.026:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f765ff8f749 code=0x7ffc0000 [ 529.236219][ T8335] tipc: Can't bind to reserved service type 2 [ 529.682497][ T8338] loop7: detected capacity change from 0 to 7 [ 531.364623][ T24] usb 1-1: USB disconnect, device number 6 [ 531.801139][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.808056][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.558502][ T8338] Dev loop7: unable to read RDB block 7 [ 533.565218][ T8338] loop7: unable to read partition table [ 533.601012][ T8338] loop7: partition table beyond EOD, truncated [ 533.607519][ T8338] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 535.521968][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 535.761717][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 535.807655][ T24] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 535.816423][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.827426][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 535.836736][ T24] usb 4-1: config 0 has no interface number 0 [ 535.843282][ T24] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 535.854524][ T24] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 535.866569][ T24] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 535.877044][ T24] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.970044][ T24] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 535.980417][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.994927][ T24] usb 4-1: Product: syz [ 535.999290][ T24] usb 4-1: Manufacturer: syz [ 536.006938][ T24] usb 4-1: SerialNumber: syz [ 536.043426][ T24] usb 4-1: config 0 descriptor?? [ 536.053580][ T8384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 536.181065][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.491880][ T8397] input: syz1 as /devices/virtual/input/input16 [ 536.743909][ T8400] loop7: detected capacity change from 0 to 7 [ 537.938658][ T5806] Bluetooth: hci4: unexpected event for opcode 0x041b [ 540.180070][ T8290] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 540.310492][ T8400] Dev loop7: unable to read RDB block 7 [ 540.316375][ T8400] loop7: unable to read partition table [ 540.359336][ T8400] loop7: partition table beyond EOD, truncated [ 540.366467][ T8400] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 540.415373][ T8290] usb 1-1: Using ep0 maxpacket: 32 [ 540.447248][ T8290] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 540.457343][ T8290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.515802][ T8290] usb 1-1: config 0 descriptor?? [ 540.748688][ T8290] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 540.775796][ T8290] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.855086][ T8290] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 540.862588][ T8290] usb 1-1: media controller created [ 540.976825][ T8290] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.986282][ T8417] ===================================================== [ 540.986454][ T8417] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x23e7/0x2f60 [ 540.986611][ T8417] __i2c_smbus_xfer+0x23e7/0x2f60 [ 540.986757][ T8417] i2c_smbus_xfer+0x31d/0x4d0 [ 540.986899][ T8417] i2cdev_ioctl_smbus+0x4a1/0x660 [ 540.987016][ T8417] i2cdev_ioctl+0xa14/0xf40 [ 540.987117][ T8417] __se_sys_ioctl+0x23c/0x400 [ 540.987257][ T8417] __x64_sys_ioctl+0x97/0xe0 [ 540.987393][ T8417] x64_sys_call+0x1cbc/0x3e30 [ 541.045727][ T8417] do_syscall_64+0xd9/0xfa0 [ 541.050665][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.056741][ T8417] [ 541.059148][ T8417] Local variable msgbuf1.i created at: [ 541.065075][ T8417] __i2c_smbus_xfer+0x86a/0x2f60 [ 541.070511][ T8417] i2c_smbus_xfer+0x31d/0x4d0 [ 541.075377][ T8417] [ 541.077827][ T8417] CPU: 1 UID: 0 PID: 8417 Comm: syz.0.778 Not tainted syzkaller #0 PREEMPT(none) [ 541.087815][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.099321][ T8417] ===================================================== [ 541.110985][ T8417] Disabling lock debugging due to kernel taint [ 541.117215][ T8417] Kernel panic - not syncing: kmsan.panic set ... [ 541.123702][ T8417] CPU: 1 UID: 0 PID: 8417 Comm: syz.0.778 Tainted: G B syzkaller #0 PREEMPT(none) [ 541.134601][ T8417] Tainted: [B]=BAD_PAGE [ 541.138795][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.148931][ T8417] Call Trace: [ 541.152278][ T8417] [ 541.155258][ T8417] __dump_stack+0x26/0x30 [ 541.159718][ T8417] dump_stack_lvl+0x53/0x270 [ 541.164594][ T8417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 541.170518][ T8417] dump_stack+0x1e/0x25 [ 541.174788][ T8417] vpanic+0x435/0xd30 [ 541.178938][ T8417] panic+0x15d/0x160 [ 541.183002][ T8417] kmsan_report+0x31c/0x320 [ 541.187778][ T8417] ? __msan_warning+0x1b/0x30 [ 541.192538][ T8417] ? __i2c_smbus_xfer+0x23e7/0x2f60 [ 541.197849][ T8417] ? i2c_smbus_xfer+0x31d/0x4d0 [ 541.202808][ T8417] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 541.208096][ T8417] ? i2cdev_ioctl+0xa14/0xf40 [ 541.212866][ T8417] ? __se_sys_ioctl+0x23c/0x400 [ 541.217825][ T8417] ? __x64_sys_ioctl+0x97/0xe0 [ 541.222719][ T8417] ? x64_sys_call+0x1cbc/0x3e30 [ 541.227684][ T8417] ? do_syscall_64+0xd9/0xfa0 [ 541.232490][ T8417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.238663][ T8417] ? az6027_i2c_xfer+0x2bdf/0x2c40 [ 541.243947][ T8417] ? kmsan_get_metadata+0xfb/0x160 [ 541.249169][ T8417] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 541.255651][ T8417] ? kmsan_get_metadata+0xfb/0x160 [ 541.260874][ T8417] ? kmsan_get_metadata+0xfb/0x160 [ 541.266108][ T8417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 541.272031][ T8417] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 541.277271][ T8417] __msan_warning+0x1b/0x30 [ 541.281880][ T8417] __i2c_smbus_xfer+0x23e7/0x2f60 [ 541.287071][ T8417] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 541.293301][ T8417] ? rt_mutex_lock+0x3e/0x70 [ 541.298020][ T8417] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 541.303861][ T8417] i2c_smbus_xfer+0x31d/0x4d0 [ 541.308700][ T8417] i2cdev_ioctl_smbus+0x4a1/0x660 [ 541.313919][ T8417] i2cdev_ioctl+0xa14/0xf40 [ 541.318535][ T8417] ? __pfx_kmsan_get_metadata+0x9/0x10 [ 541.324107][ T8417] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 541.329242][ T8417] __se_sys_ioctl+0x23c/0x400 [ 541.334055][ T8417] __x64_sys_ioctl+0x97/0xe0 [ 541.338883][ T8417] x64_sys_call+0x1cbc/0x3e30 [ 541.343697][ T8417] do_syscall_64+0xd9/0xfa0 [ 541.348332][ T8417] ? clear_bhb_loop+0x40/0x90 [ 541.353103][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.359284][ T8417] RIP: 0033:0x7fea3258f749 [ 541.363792][ T8417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.383500][ T8417] RSP: 002b:00007fea334f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.392013][ T8417] RAX: ffffffffffffffda RBX: 00007fea327e5fa0 RCX: 00007fea3258f749 [ 541.400147][ T8417] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004 [ 541.408193][ T8417] RBP: 00007fea32613f91 R08: 0000000000000000 R09: 0000000000000000 [ 541.416234][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.424366][ T8417] R13: 00007fea327e6038 R14: 00007fea327e5fa0 R15: 00007fff05539058 [ 541.432865][ T8417] [ 541.436344][ T8417] Kernel Offset: disabled [ 541.440724][ T8417] Rebooting in 86400 seconds..