last executing test programs: 17m42.206443755s ago: executing program 0 (id=1902): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x0, 0x0, 0x6, "58e6a8498fea"}, 0x0, 0x0}) 17m36.922928202s ago: executing program 0 (id=1913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) 17m35.492752075s ago: executing program 0 (id=1915): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701dd"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}, {0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x6, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17m31.898543326s ago: executing program 0 (id=1924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 17m30.69773186s ago: executing program 0 (id=1927): socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 17m30.54312493s ago: executing program 0 (id=1928): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) capset(0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff61", 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = memfd_create(0x0, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r2, 0x0) setresgid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ftruncate(r2, 0x0) 17m15.005873948s ago: executing program 32 (id=1928): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) capset(0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff61", 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = memfd_create(0x0, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r2, 0x0) setresgid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ftruncate(r2, 0x0) 43.215839664s ago: executing program 1 (id=5258): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x43]}, 0x75) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x800, 0xa, 0x4}) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000b00)=0x88f) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}}) getpid() r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) 41.971016307s ago: executing program 1 (id=5261): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x40, 0x9, 0x2, "5004"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 41.722138703s ago: executing program 1 (id=5263): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008000", @ANYRES32=0x0, @ANYRES32], 0x24}}, 0x0) 41.491727246s ago: executing program 1 (id=5264): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 41.414946281s ago: executing program 1 (id=5266): r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000080)=""/80, 0x50}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000002bc0)=""/4113, 0x1011}], 0x4}, 0x70003}], 0x1, 0x1142, 0x0) 41.285321994s ago: executing program 1 (id=5268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r4, &(0x7f0000000000)=""/28, 0x1c) 19.53444866s ago: executing program 3 (id=5327): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 18.071601469s ago: executing program 3 (id=5329): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) 17.199991242s ago: executing program 5 (id=5331): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 16.894935676s ago: executing program 5 (id=5333): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x20000050) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000280), &(0x7f00000004c0)={0x0, 0xfb, 0x54, 0x1, 0xc, "ff4a635bc48ac1a11e421e42075c8a9a", "32dfd58f215cfebb8c3448e0a1de828b0be119310c991c8d88177ab470d0de4a33acbc40dffb1e91b399b084c6ee0bc4cc536cd5f98a0c75c3127ba02f7bd5"}, 0x54, 0x1) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 14.283102482s ago: executing program 5 (id=5336): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r4, &(0x7f0000000000)=""/28, 0x1c) 14.120483271s ago: executing program 3 (id=5338): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701dd"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}, {0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x6, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12.231355513s ago: executing program 3 (id=5343): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 11.351499807s ago: executing program 5 (id=5345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x1009, 0x1, 0x0}, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 8.987540228s ago: executing program 4 (id=5347): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 8.632779092s ago: executing program 4 (id=5349): socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.207081488s ago: executing program 4 (id=5350): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) 7.070628051s ago: executing program 4 (id=5351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(0x0, 0x77, 0x503341) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000810000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.073688599s ago: executing program 2 (id=5352): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 5.851005687s ago: executing program 2 (id=5353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)="3a74966c898cdc52852ffa9889efcf7a8e1444544a8202003d69d231d0ed18285689cc9a1f37c73be7d6d58c6c80e343e1c3b394cf3338d94582ba5889c8f3fa39109f1224a8bef85b6aa9c1c25d249c51b6cd1f1a6af50d6c88f5a5a28a23801f", 0x61}], 0x1, 0x0, 0x0, 0x8004}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/72, 0x48}], 0x3}, 0x12440) 5.502114728s ago: executing program 2 (id=5354): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file1/../file0', [], 0xa, "000278414808f90249a8974898280f3c43"}, 0x25) writev(r1, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 5.230718524s ago: executing program 3 (id=5355): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 5.059455399s ago: executing program 2 (id=5356): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 4.769716443s ago: executing program 2 (id=5357): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket(0x2d, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) syz_open_dev$I2C(0x0, 0x1, 0x2603) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) fsync(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) 4.395228864s ago: executing program 5 (id=5358): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) 3.321365593s ago: executing program 3 (id=5359): socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.301254445s ago: executing program 4 (id=5360): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000740), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000780)="88fce2ca0b76fed5bdfb55cb08d888969f066276823237b5467bbc63ad984c7bae1b751127fa1fa9fb81e474eb9ebc7001", 0x5, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) 205.919747ms ago: executing program 4 (id=5361): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 7.583012ms ago: executing program 2 (id=5362): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 0s ago: executing program 5 (id=5363): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa16b", 0x3, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) kernel console output (not intermixed with test programs): f/nullb0": -EINTR [ 1461.135141][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1461.135160][ T37] audit: type=1800 audit(1776521173.501:33): pid=18973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4044" name="file0" dev="overlay" ino=1073 res=0 errno=0 [ 1463.581294][T19012] overlayfs: failed to resolve './file1': -2 [ 1465.877473][T19042] overlayfs: failed to resolve './file1': -2 [ 1471.645597][T19107] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1472.011644][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4092'. [ 1475.558512][T19142] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1475.728867][T19148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'. [ 1476.205153][ T5812] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1476.366537][ T5812] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1476.366574][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1476.366601][ T5812] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1476.372841][ T5812] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1476.372871][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.372893][ T5812] usb 2-1: Product: syz [ 1476.372908][ T5812] usb 2-1: Manufacturer: syz [ 1476.372924][ T5812] usb 2-1: SerialNumber: syz [ 1476.446958][ T5812] usb 2-1: config 0 descriptor?? [ 1476.448547][T19157] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1476.449089][T19157] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1476.494196][ T5812] usb 2-1: ucan: probing device on interface #0 [ 1476.703799][ T5812] usb 2-1: ucan: could not read protocol version, ret=0 [ 1476.703822][ T5812] usb 2-1: ucan: probe failed; try to update the device firmware [ 1477.034762][ T31] usb 2-1: USB disconnect, device number 79 [ 1478.212569][T19176] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4111'. [ 1482.603320][T19221] overlayfs: missing 'lowerdir' [ 1484.425999][T19228] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1484.558699][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.558760][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.862627][T19261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4141'. [ 1490.208421][T19310] overlayfs: failed to resolve './file1': -2 [ 1491.617455][T19309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4156'. [ 1496.887027][T19382] afs: Unknown parameter 'Î ' [ 1500.453381][T19418] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1505.883751][T19487] overlayfs: failed to resolve './file1': -2 [ 1509.773494][T19535] overlayfs: failed to resolve './file1': -2 [ 1512.971390][T19552] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4243'. [ 1513.009260][T19552] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4243'. [ 1517.809990][T19629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1517.810006][T19629] UDF-fs: Scanning with blocksize 512 failed [ 1517.810975][T19629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1517.810987][T19629] UDF-fs: Scanning with blocksize 1024 failed [ 1517.812364][T19629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1517.812375][T19629] UDF-fs: Scanning with blocksize 2048 failed [ 1517.812582][T19629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1517.812591][T19629] UDF-fs: Scanning with blocksize 4096 failed [ 1526.587982][T12175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1526.642231][T12175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1526.643857][T12175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1526.738444][T12175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1526.739923][T12175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1527.467403][T19723] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1527.467605][T19723] UDF-fs: Scanning with blocksize 512 failed [ 1528.234277][T19723] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1528.234301][T19723] UDF-fs: Scanning with blocksize 1024 failed [ 1528.234969][T19723] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1529.050936][T19723] UDF-fs: Scanning with blocksize 2048 failed [ 1529.053681][ T5801] Bluetooth: hci3: command tx timeout [ 1529.079283][T19723] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1529.079306][T19723] UDF-fs: Scanning with blocksize 4096 failed [ 1529.519337][T13864] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1529.676995][T13864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.677011][T13864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1529.677038][T13864] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1529.678712][T13864] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1529.678732][T13864] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1529.678743][T13864] usb 2-1: Product: syz [ 1529.678751][T13864] usb 2-1: SerialNumber: syz [ 1529.688257][T13864] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1529.688294][T13864] cdc_ncm 2-1:1.0: bind() failure [ 1529.897542][T13864] usb 2-1: USB disconnect, device number 80 [ 1531.085149][ T5801] Bluetooth: hci3: command tx timeout [ 1531.597962][ T1024] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.937567][T19765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1531.937610][T19765] UDF-fs: Scanning with blocksize 512 failed [ 1532.016117][T19765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1532.016139][T19765] UDF-fs: Scanning with blocksize 1024 failed [ 1532.036704][T19765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1532.036725][T19765] UDF-fs: Scanning with blocksize 2048 failed [ 1532.052177][T19765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1532.052218][T19765] UDF-fs: Scanning with blocksize 4096 failed [ 1532.784364][T19768] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1532.784501][T19768] UDF-fs: Scanning with blocksize 512 failed [ 1532.816841][T19768] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1532.816884][T19768] UDF-fs: Scanning with blocksize 1024 failed [ 1532.834810][T19768] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1532.834853][T19768] UDF-fs: Scanning with blocksize 2048 failed [ 1532.858111][T19768] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1532.858152][T19768] UDF-fs: Scanning with blocksize 4096 failed [ 1533.165314][ T5801] Bluetooth: hci3: command tx timeout [ 1535.809441][ T5801] Bluetooth: hci3: command tx timeout [ 1536.478539][ T1024] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.593830][T19712] chnl_net:caif_netlink_parms(): no params data found [ 1540.514448][ T1024] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.992444][T19822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1541.854490][ T1024] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.925285][T19712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.925495][T19712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.925688][T19712] bridge_slave_0: entered allmulticast mode [ 1541.928571][T19712] bridge_slave_0: entered promiscuous mode [ 1541.932438][T19712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.932630][T19712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.932824][T19712] bridge_slave_1: entered allmulticast mode [ 1541.988644][T19712] bridge_slave_1: entered promiscuous mode [ 1543.290073][T19712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.464523][T19712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.805634][T19861] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1544.807923][T19712] team0: Port device team_slave_0 added [ 1545.930263][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.930305][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.965571][T19712] team0: Port device team_slave_1 added [ 1546.430257][T19712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.430270][T19712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.430285][T19712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.434336][T19712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.434346][T19712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.434361][T19712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.879051][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4343'. [ 1550.886637][T15004] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1551.530524][T15004] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1551.530557][T15004] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1551.530582][T15004] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1551.679566][T15004] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1551.679598][T15004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.679619][T15004] usb 6-1: Product: syz [ 1551.679634][T15004] usb 6-1: Manufacturer: syz [ 1551.679650][T15004] usb 6-1: SerialNumber: syz [ 1551.692024][T15004] usb 6-1: config 0 descriptor?? [ 1551.722191][T19903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1551.722306][T19903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1551.736973][T15004] usb 6-1: ucan: probing device on interface #0 [ 1551.892721][T19712] hsr_slave_0: entered promiscuous mode [ 1551.931857][T19712] hsr_slave_1: entered promiscuous mode [ 1551.945889][T19712] debugfs: 'hsr0' already exists in 'hsr' [ 1551.945955][T19712] Cannot create hsr debugfs directory [ 1552.132323][T15004] usb 6-1: ucan: device reported invalid tx-fifo size [ 1552.132346][T15004] usb 6-1: ucan: probe failed; try to update the device firmware [ 1552.745267][T15004] usb 6-1: USB disconnect, device number 33 [ 1555.111142][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1556.035482][ T1024] bridge_slave_1: left allmulticast mode [ 1556.035512][ T1024] bridge_slave_1: left promiscuous mode [ 1556.035765][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.144703][ T1024] bridge_slave_0: left allmulticast mode [ 1556.144732][ T1024] bridge_slave_0: left promiscuous mode [ 1556.144971][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.055749][ T1024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1557.135705][ T1024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1557.160451][ T1024] bond0 (unregistering): Released all slaves [ 1557.225966][ T5460] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1559.185214][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1559.207738][T20006] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1559.207752][T20006] UDF-fs: Scanning with blocksize 512 failed [ 1559.208141][T20006] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1559.208151][T20006] UDF-fs: Scanning with blocksize 1024 failed [ 1559.208396][T20006] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1559.208405][T20006] UDF-fs: Scanning with blocksize 2048 failed [ 1559.208626][T20006] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1559.208635][T20006] UDF-fs: Scanning with blocksize 4096 failed [ 1559.237302][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1560.157726][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4377'. [ 1562.765985][ T5460] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1565.219034][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4388'. [ 1565.305639][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4388'. [ 1565.887620][ T1024] hsr_slave_0: left promiscuous mode [ 1566.075198][ T1024] hsr_slave_1: left promiscuous mode [ 1566.076215][ T1024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1566.076238][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.942000][ T1024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1566.942019][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.315752][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 1568.328443][ T1024] veth1_macvtap: left promiscuous mode [ 1568.328548][ T1024] veth0_macvtap: left promiscuous mode [ 1568.328777][ T1024] veth1_vlan: left promiscuous mode [ 1568.328951][ T1024] veth0_vlan: left promiscuous mode [ 1571.256418][ T1024] team0 (unregistering): Port device team_slave_1 removed [ 1571.274911][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4399'. [ 1571.305890][ T1024] team0 (unregistering): Port device team_slave_0 removed [ 1571.327057][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4399'. [ 1578.190766][T20185] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1578.190790][T20185] UDF-fs: Scanning with blocksize 512 failed [ 1578.241204][T20185] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1578.243247][T20185] UDF-fs: Scanning with blocksize 1024 failed [ 1580.533884][T20185] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1580.536582][T20185] UDF-fs: Scanning with blocksize 2048 failed [ 1580.587282][T19712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1580.599175][T20185] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1580.599189][T20185] UDF-fs: Scanning with blocksize 4096 failed [ 1580.999161][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4416'. [ 1581.104401][T19712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1581.119796][T19712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1581.798456][T19712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1581.879696][T19712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1583.010559][T19712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1583.353941][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4421'. [ 1588.155572][T20249] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1588.163489][T12175] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1588.367441][T12175] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1588.371776][T12175] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1588.390551][T12175] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1589.217205][T12175] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1591.873404][T12175] Bluetooth: hci2: command tx timeout [ 1594.352244][T12175] Bluetooth: hci2: command tx timeout [ 1599.707249][T12175] Bluetooth: hci2: command tx timeout [ 1601.715521][T12175] Bluetooth: hci2: command tx timeout [ 1602.083985][T20325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4445'. [ 1603.415459][T20342] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1604.858066][T20335] netlink: 'syz.1.4448': attribute type 12 has an invalid length. [ 1607.320977][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.321047][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.218041][T20386] netlink: 'syz.2.4462': attribute type 12 has an invalid length. [ 1615.437678][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4473'. [ 1615.692803][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4473'. [ 1615.916268][T20243] chnl_net:caif_netlink_parms(): no params data found [ 1616.886093][T20462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4476'. [ 1617.030337][T20463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4476'. [ 1619.773969][T20243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.774041][T20243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.774205][T20243] bridge_slave_0: entered allmulticast mode [ 1619.776055][T20243] bridge_slave_0: entered promiscuous mode [ 1619.781784][T20243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.781848][T20243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.781962][T20243] bridge_slave_1: entered allmulticast mode [ 1619.783412][T20243] bridge_slave_1: entered promiscuous mode [ 1619.992521][T20486] capability: warning: `syz.5.4483' uses deprecated v2 capabilities in a way that may be insecure [ 1620.079447][T20488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4483'. [ 1620.386573][T20487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4482'. [ 1620.490915][T20243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.540748][T20243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.672185][T20501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4485'. [ 1621.811423][T20243] team0: Port device team_slave_0 added [ 1621.961982][T20243] team0: Port device team_slave_1 added [ 1623.463945][ T6420] bridge_slave_1: left allmulticast mode [ 1623.463965][ T6420] bridge_slave_1: left promiscuous mode [ 1623.464124][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.529093][ T6420] bridge_slave_0: left allmulticast mode [ 1623.529121][ T6420] bridge_slave_0: left promiscuous mode [ 1623.529369][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.679005][ T6420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1627.228727][ T6420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1627.323812][ T6420] bond0 (unregistering): Released all slaves [ 1627.893079][ T5460] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1627.925410][T20243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.925425][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.925447][T20243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.931539][T20243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.931554][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.931576][T20243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.114434][T20243] hsr_slave_0: entered promiscuous mode [ 1628.121720][T20243] hsr_slave_1: entered promiscuous mode [ 1628.122654][T20243] debugfs: 'hsr0' already exists in 'hsr' [ 1628.140582][T20243] Cannot create hsr debugfs directory [ 1631.461160][ T6420] hsr_slave_0: left promiscuous mode [ 1631.499579][ T6420] hsr_slave_1: left promiscuous mode [ 1631.500561][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1631.557784][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1633.335188][T13864] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1633.637004][T13864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.637068][T13864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1633.637093][T13864] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1633.637136][T13864] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1633.637160][T13864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.890383][T13864] usb 6-1: config 0 descriptor?? [ 1635.016075][T20612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4507'. [ 1635.127099][T13864] usb 6-1: USB disconnect, device number 34 [ 1635.206814][ T6420] team0 (unregistering): Port device team_slave_1 removed [ 1635.266904][ T6420] team0 (unregistering): Port device team_slave_0 removed [ 1638.137223][ T5460] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1646.630007][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1646.691588][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1646.712185][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1646.952618][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1646.998478][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1648.199610][T20720] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4534'. [ 1650.145193][ T5801] Bluetooth: hci3: command tx timeout [ 1650.205172][ T5882] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1650.371996][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.372031][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1650.372043][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1650.372067][ T5882] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1650.372080][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.451309][ T5882] usb 5-1: config 0 descriptor?? [ 1650.726287][ T5812] usb 5-1: USB disconnect, device number 69 [ 1651.850010][T20704] chnl_net:caif_netlink_parms(): no params data found [ 1651.965204][T15004] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1652.136936][T15004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.136973][T15004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1652.136987][T15004] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1652.137010][T15004] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1652.137022][T15004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.172708][T15004] usb 5-1: config 0 descriptor?? [ 1652.195173][ T5801] Bluetooth: hci3: command tx timeout [ 1652.331449][ T5812] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1652.399260][ T31] usb 5-1: USB disconnect, device number 70 [ 1652.518823][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.518856][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1652.518869][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1652.518892][ T5812] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1652.518905][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.521815][ T5812] usb 3-1: config 0 descriptor?? [ 1652.732269][ T5812] usb 3-1: USB disconnect, device number 74 [ 1652.865550][ T1024] bridge_slave_1: left allmulticast mode [ 1652.865580][ T1024] bridge_slave_1: left promiscuous mode [ 1652.865812][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.967324][ T1024] bridge_slave_0: left allmulticast mode [ 1652.967344][ T1024] bridge_slave_0: left promiscuous mode [ 1652.967497][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.275260][ T5801] Bluetooth: hci3: command tx timeout [ 1656.367107][ T5801] Bluetooth: hci3: command tx timeout [ 1656.535714][ T1024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1656.860929][ T1024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1656.946868][ T1024] bond0 (unregistering): Released all slaves [ 1657.889259][ T1024] hsr_slave_0: left promiscuous mode [ 1657.956982][ T1024] hsr_slave_1: left promiscuous mode [ 1657.957590][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.011054][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.074478][T20811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4553'. [ 1660.398479][T20817] loop7: detected capacity change from 0 to 7 [ 1660.422006][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.422098][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.851889][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.851923][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.898932][ T1024] team0 (unregistering): Port device team_slave_1 removed [ 1660.975421][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.975462][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.980383][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.980415][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.980789][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.980817][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.981133][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.981161][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.981467][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.981494][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.981667][T20817] ldm_validate_partition_table(): Disk read failed. [ 1660.981895][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.981922][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.982219][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.982246][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.982545][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1660.982571][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1660.982964][T20817] Dev loop7: unable to read RDB block 0 [ 1661.052698][T20817] loop7: unable to read partition table [ 1661.052945][T20817] loop7: partition table beyond EOD, truncated [ 1661.052978][T20817] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1661.159057][T20817] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1661.301766][ T1024] team0 (unregistering): Port device team_slave_0 removed [ 1661.352888][T20823] netlink: 'syz.4.4556': attribute type 22 has an invalid length. [ 1661.352903][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1663.515173][T20704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.515310][T20704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.515555][T20704] bridge_slave_0: entered allmulticast mode [ 1663.532888][T20704] bridge_slave_0: entered promiscuous mode [ 1663.543918][T20823] bond0: option ad_select: unable to set because the bond device is up [ 1663.574971][T20704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.575455][T20704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.575698][T20704] bridge_slave_1: entered allmulticast mode [ 1663.593352][T20704] bridge_slave_1: entered promiscuous mode [ 1663.995938][T20704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.002055][T20704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.378935][T20704] team0: Port device team_slave_0 added [ 1664.390965][T20704] team0: Port device team_slave_1 added [ 1664.538622][T20704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.538636][T20704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.538651][T20704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.542883][T20704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.542898][T20704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.542913][T20704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.715698][T20704] hsr_slave_0: entered promiscuous mode [ 1665.718295][T20704] hsr_slave_1: entered promiscuous mode [ 1665.718849][T20704] debugfs: 'hsr0' already exists in 'hsr' [ 1665.718864][T20704] Cannot create hsr debugfs directory [ 1666.388460][T20857] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1669.116731][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.116912][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.574645][T20704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1669.679537][T20704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1669.680515][T20704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1669.718626][T20704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1669.732379][T20704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1669.855197][ T31] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1669.939106][T20704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1669.940261][T20704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1669.994261][T20704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1670.010091][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.010147][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1670.010171][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.049189][ T31] usb 6-1: config 0 descriptor?? [ 1670.062244][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 1670.474544][T20704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.491395][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1670.694790][ T31] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1670.697424][T20704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.710485][ T31] pwc: recv_control_msg error -71 req 04 val 1000 [ 1670.710979][ T31] pwc: recv_control_msg error -71 req 04 val 1300 [ 1670.711456][ T31] pwc: recv_control_msg error -71 req 04 val 1400 [ 1670.712035][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 1670.713544][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 1670.714036][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 1670.714624][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 1670.744710][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.745645][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.783925][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.785707][T11258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.804982][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 1670.806460][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 1670.806971][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 1670.807574][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 1670.808258][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 1670.808716][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 1670.812796][ T31] pwc: Registered as video103. [ 1670.869097][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input101 [ 1670.934794][ T31] usb 6-1: USB disconnect, device number 35 [ 1673.107512][T20704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.714732][T20704] veth0_vlan: entered promiscuous mode [ 1674.809447][T20704] veth1_vlan: entered promiscuous mode [ 1674.832069][T20933] loop7: detected capacity change from 0 to 7 [ 1675.259032][ C0] blk_print_req_error: 10 callbacks suppressed [ 1675.259046][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.259063][ C0] buffer_io_error: 10 callbacks suppressed [ 1675.259069][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.331867][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.331949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.368536][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.368571][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.395856][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.395879][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.397992][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.398146][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.456036][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.456060][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.459597][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.459643][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.530645][T20933] ldm_validate_partition_table(): Disk read failed. [ 1675.531455][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.531477][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.539912][T20934] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1675.540890][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.540920][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.543209][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1675.543254][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1675.555981][T20933] Dev loop7: unable to read RDB block 0 [ 1675.690088][T20933] loop7: unable to read partition table [ 1675.690232][T20933] loop7: partition table beyond EOD, truncated [ 1675.690252][T20933] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1675.920142][T20941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4583'. [ 1675.941634][T20704] veth0_macvtap: entered promiscuous mode [ 1675.961864][T20704] veth1_macvtap: entered promiscuous mode [ 1676.495761][T20704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.532748][T20704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.570361][T10381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.679121][T10381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.790102][T10381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.857849][ T866] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1676.874502][ T3267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.089801][ T866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.091410][ T866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1677.091439][ T866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1677.091460][ T866] usb 2-1: SerialNumber: syz [ 1677.126097][ T866] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1677.255548][ T866] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1678.006162][ T866] usb 2-1: USB disconnect, device number 81 [ 1678.851904][T11258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.851926][T11258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.842501][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.842525][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.033365][ T5812] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1682.645212][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 1682.647651][ T5812] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 1682.647667][ T5812] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.647677][ T5812] usb 2-1: config 8 has no interface number 0 [ 1682.647702][ T5812] usb 2-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1682.647717][ T5812] usb 2-1: config 8 interface 206 has no altsetting 0 [ 1682.709808][ T5812] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1682.709838][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.709862][ T5812] usb 2-1: Product: syz [ 1682.709877][ T5812] usb 2-1: Manufacturer: syz [ 1682.709892][ T5812] usb 2-1: SerialNumber: syz [ 1683.181234][T13311] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1683.404659][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4593'. [ 1683.523337][T20953] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1683.601573][T13311] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1683.601596][T13311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.601607][T13311] usb 4-1: Product: syz [ 1683.601615][T13311] usb 4-1: Manufacturer: syz [ 1683.601623][T13311] usb 4-1: SerialNumber: syz [ 1683.696337][T20953] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1683.696586][T20953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.696608][T20953] usb 6-1: Product: syz [ 1683.696623][T20953] usb 6-1: Manufacturer: syz [ 1683.696638][T20953] usb 6-1: SerialNumber: syz [ 1684.087557][ T5812] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 1684.134313][T13311] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1684.134367][T13311] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1684.228694][ T5812] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1684.228756][ T5812] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1684.466991][T20953] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1684.467109][T20953] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1684.517867][ T5812] usb 2-1: USB disconnect, device number 82 [ 1684.622201][ T5812] garmin_gps 2-1:8.206: device disconnected [ 1685.198615][ T5812] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1685.668832][T13311] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1685.669543][T13311] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1685.696697][T13311] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1685.696807][T13311] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1685.744796][T13311] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1685.758475][ T5812] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1685.758506][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.758527][ T5812] usb 2-1: Product: syz [ 1685.758685][ T5812] usb 2-1: Manufacturer: syz [ 1685.758703][ T5812] usb 2-1: SerialNumber: syz [ 1685.861706][T13311] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1685.948681][T13311] usb 4-1: USB disconnect, device number 62 [ 1686.185552][T20953] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1686.186793][T20953] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1686.187140][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1686.187264][T20953] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 1686.187312][T20953] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1686.188545][T20953] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1686.277544][T20953] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1686.294119][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1686.294178][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1686.330339][T20953] usb 6-1: USB disconnect, device number 36 [ 1687.008890][T13864] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1687.173167][T13864] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1687.173198][T13864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.173268][T13864] usb 4-1: Product: syz [ 1687.173285][T13864] usb 4-1: Manufacturer: syz [ 1687.173299][T13864] usb 4-1: SerialNumber: syz [ 1687.196972][T15004] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1687.307996][T13311] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1687.821454][T15004] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1687.821475][T15004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.821486][T15004] usb 6-1: Product: syz [ 1687.821494][T15004] usb 6-1: Manufacturer: syz [ 1687.821501][T15004] usb 6-1: SerialNumber: syz [ 1687.905461][T13311] usb 3-1: Using ep0 maxpacket: 16 [ 1687.907452][T13311] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 1687.907473][T13311] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.907492][T13311] usb 3-1: config 8 has no interface number 0 [ 1687.907535][T13311] usb 3-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1687.907564][T13311] usb 3-1: config 8 interface 206 has no altsetting 0 [ 1687.910420][T13311] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1687.910448][T13311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.910469][T13311] usb 3-1: Product: syz [ 1687.910484][T13311] usb 3-1: Manufacturer: syz [ 1687.910499][T13311] usb 3-1: SerialNumber: syz [ 1687.946480][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1687.975475][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1688.014864][T13864] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1688.114955][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1688.153867][T13311] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 1688.162713][T13311] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1688.162769][T13311] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1688.170879][T13311] usb 3-1: USB disconnect, device number 75 [ 1688.174425][T13311] garmin_gps 3-1:8.206: device disconnected [ 1688.202505][ T5812] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1688.232853][ T5812] usb 2-1: USB disconnect, device number 83 [ 1688.287564][T15004] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1689.242780][T13311] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1689.944588][T13864] net_ratelimit: 4 callbacks suppressed [ 1689.944701][T13864] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1690.171804][T13864] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1690.188718][T13864] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1690.188833][T13864] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1690.190184][T13864] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1690.200491][T13311] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1690.200521][T13311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.200540][T13311] usb 3-1: Product: syz [ 1690.200555][T13311] usb 3-1: Manufacturer: syz [ 1690.200569][T13311] usb 3-1: SerialNumber: syz [ 1690.303671][T15004] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1690.303730][T15004] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1690.304691][T15004] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1690.384256][T13864] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1690.416907][T15004] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1690.461780][T13864] usb 4-1: USB disconnect, device number 63 [ 1690.618783][T15004] usb 6-1: USB disconnect, device number 37 [ 1690.797239][T13311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1690.797301][T13311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1692.268635][T21052] Bluetooth: MGMT ver 1.23 [ 1692.328727][T13311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1692.328764][T13311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1692.329276][T13311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1692.387763][T13311] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1692.427421][T13311] usb 3-1: USB disconnect, device number 76 [ 1692.875243][T15004] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1693.050999][T15004] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1693.052288][T15004] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.052303][T15004] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1693.052330][T15004] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1693.052352][T15004] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1693.052374][T15004] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1693.052388][T15004] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1693.085180][T15004] usb 4-1: string descriptor 0 read error: -22 [ 1693.085312][T15004] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1693.085336][T15004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.372810][T15004] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 1697.709706][T15004] usb 4-1: USB disconnect, device number 64 [ 1701.835185][ T5800] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1701.995115][ T5800] usb 5-1: Using ep0 maxpacket: 16 [ 1701.997468][ T5800] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 1701.997484][ T5800] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.997495][ T5800] usb 5-1: config 8 has no interface number 0 [ 1701.997519][ T5800] usb 5-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1701.997535][ T5800] usb 5-1: config 8 interface 206 has no altsetting 0 [ 1702.000378][ T5800] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1702.000395][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.000406][ T5800] usb 5-1: Product: syz [ 1702.000414][ T5800] usb 5-1: Manufacturer: syz [ 1702.000421][ T5800] usb 5-1: SerialNumber: syz [ 1702.606592][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4643'. [ 1703.202848][ T5800] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 1703.254182][ T5800] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1703.254237][ T5800] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1703.277968][ T5800] usb 5-1: USB disconnect, device number 71 [ 1703.279772][ T5800] garmin_gps 5-1:8.206: device disconnected [ 1703.623325][T21153] loop7: detected capacity change from 0 to 7 [ 1703.635181][ C0] blk_print_req_error: 10 callbacks suppressed [ 1703.635194][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.635209][ C0] buffer_io_error: 10 callbacks suppressed [ 1703.635215][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.636754][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.636806][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.638174][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.638218][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.638733][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.638774][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.639162][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.639201][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.639582][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.639629][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.640145][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.640217][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.640411][T21153] ldm_validate_partition_table(): Disk read failed. [ 1703.640726][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.640767][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.641126][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.641165][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.641533][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1703.641577][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.642509][T21153] Dev loop7: unable to read RDB block 0 [ 1703.747173][T21153] loop7: unable to read partition table [ 1703.747698][T21153] loop7: partition table beyond EOD, truncated [ 1703.747779][T21153] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1703.956437][T21153] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1707.555190][ T5800] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1707.730571][ T5800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.730621][ T5800] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1707.730642][ T5800] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1707.730684][ T5800] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1707.730707][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.797323][ T5800] usb 3-1: config 0 descriptor?? [ 1708.021738][ T5800] usb 3-1: USB disconnect, device number 77 [ 1708.155170][ T5961] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1708.305222][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 1708.309580][ T5961] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 1708.309608][ T5961] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.309628][ T5961] usb 6-1: config 8 has no interface number 0 [ 1708.309672][ T5961] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1708.309700][ T5961] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1708.309724][ T5961] usb 6-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1708.309752][ T5961] usb 6-1: config 8 interface 206 has no altsetting 0 [ 1708.313672][ T5961] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1708.313699][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.313719][ T5961] usb 6-1: Product: syz [ 1708.313732][ T5961] usb 6-1: Manufacturer: syz [ 1708.313747][ T5961] usb 6-1: SerialNumber: syz [ 1708.550255][ T5961] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 1708.682588][ T5961] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1708.682649][ T5961] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1708.725217][ T5961] usb 6-1: USB disconnect, device number 38 [ 1708.813105][ T5961] garmin_gps 6-1:8.206: device disconnected [ 1709.679134][T21217] loop8: detected capacity change from 0 to 7 [ 1709.798567][T21217] Dev loop8: unable to read RDB block 7 [ 1709.798612][T21217] loop8: unable to read partition table [ 1709.798841][T21217] loop8: partition table beyond EOD, truncated [ 1709.798874][T21217] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1715.017823][T15004] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1715.185356][T15004] usb 5-1: Using ep0 maxpacket: 8 [ 1715.187204][T15004] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1715.187237][T15004] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1715.187263][T15004] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1715.187286][T15004] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1715.187318][T15004] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1715.187331][T15004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.468199][T15004] usb 5-1: GET_CAPABILITIES returned 0 [ 1715.468250][T15004] usbtmc 5-1:16.0: can't read capabilities [ 1716.024213][ T5800] usb 5-1: USB disconnect, device number 72 [ 1719.433409][T21335] loop8: detected capacity change from 0 to 7 [ 1720.143256][T21335] Dev loop8: unable to read RDB block 7 [ 1720.143309][T21335] loop8: unable to read partition table [ 1720.143526][T21335] loop8: partition table beyond EOD, truncated [ 1720.143561][T21335] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1720.638269][ T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1720.674964][T21352] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1721.623347][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1721.638788][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.638816][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1721.638866][ T31] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1721.638915][ T31] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1721.638963][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1721.638990][ T31] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1721.753571][ T31] usb 5-1: string descriptor 0 read error: -22 [ 1721.753724][ T31] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1721.753748][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.607019][ T31] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1722.607050][ T31] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1722.607068][ T31] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1722.647521][ T5800] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1722.795143][ T5800] usb 4-1: Using ep0 maxpacket: 16 [ 1722.804067][ T5800] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 1722.804090][ T5800] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.804107][ T5800] usb 4-1: config 8 has no interface number 0 [ 1722.804201][ T5800] usb 4-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1722.804227][ T5800] usb 4-1: config 8 interface 206 has no altsetting 0 [ 1722.828381][ T5800] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1722.829417][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.829441][ T5800] usb 4-1: Product: syz [ 1722.829456][ T5800] usb 4-1: Manufacturer: syz [ 1722.829471][ T5800] usb 4-1: SerialNumber: syz [ 1723.141550][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4739'. [ 1723.183484][ T31] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 1723.195256][ T5800] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 1723.325479][ T5800] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1723.325538][ T5800] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1723.375539][ T5800] usb 4-1: USB disconnect, device number 65 [ 1723.403210][ T31] usb 5-1: USB disconnect, device number 73 [ 1723.451863][ T5800] garmin_gps 4-1:8.206: device disconnected [ 1724.755740][T21394] loop8: detected capacity change from 0 to 7 [ 1724.759299][T21394] Dev loop8: unable to read RDB block 7 [ 1724.759332][T21394] loop8: unable to read partition table [ 1724.759478][T21394] loop8: partition table beyond EOD, truncated [ 1724.759501][T21394] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1724.944401][T21401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4755'. [ 1727.359897][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4769'. [ 1728.580705][T21445] loop8: detected capacity change from 0 to 7 [ 1728.638146][T21445] Dev loop8: unable to read RDB block 7 [ 1728.638194][T21445] loop8: unable to read partition table [ 1728.638415][T21445] loop8: partition table beyond EOD, truncated [ 1728.638446][T21445] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1730.381712][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.399741][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.079764][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1731.535156][T21466] syz.5.4780 (21466) used greatest stack depth: 17696 bytes left [ 1733.393617][T21490] loop7: detected capacity change from 0 to 7 [ 1733.398777][ C1] blk_print_req_error: 15 callbacks suppressed [ 1733.398801][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.398828][ C1] buffer_io_error: 15 callbacks suppressed [ 1733.398839][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.399118][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.399143][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.399378][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.399402][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.399640][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.399664][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.403287][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.403315][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.405244][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.405271][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.405501][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.405525][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.405603][T21490] ldm_validate_partition_table(): Disk read failed. [ 1733.405737][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.405761][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.405962][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.405984][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.406174][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1733.406197][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1733.407061][T21490] Dev loop7: unable to read RDB block 0 [ 1733.408853][T21490] loop7: unable to read partition table [ 1733.409068][T21490] loop7: partition table beyond EOD, truncated [ 1733.409085][T21490] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1738.216001][T21541] loop7: detected capacity change from 0 to 7 [ 1738.271217][T21541] ldm_validate_partition_table(): Disk read failed. [ 1738.329465][T21541] Dev loop7: unable to read RDB block 0 [ 1738.346180][T21541] loop7: unable to read partition table [ 1738.346411][T21541] loop7: partition table beyond EOD, truncated [ 1738.346443][T21541] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1741.917277][T21616] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1742.101620][T21602] kvm: pic: level sensitive irq not supported [ 1742.124818][T21602] kvm: pic: non byte read [ 1742.138479][T21602] kvm: pic: level sensitive irq not supported [ 1742.138874][T21602] kvm: pic: non byte read [ 1742.139485][T21602] kvm: pic: level sensitive irq not supported [ 1742.236526][T21602] kvm: pic: non byte read [ 1742.236833][T21602] kvm: pic: level sensitive irq not supported [ 1742.236905][T21602] kvm: pic: non byte read [ 1742.239613][T21602] kvm: pic: level sensitive irq not supported [ 1744.285116][ T5800] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1744.857938][ T5800] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.857996][ T5800] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1744.858020][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.872984][ T5800] usb 6-1: config 0 descriptor?? [ 1744.912974][ T5800] pwc: Askey VC010 type 2 USB webcam detected. [ 1745.027211][T21668] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1745.321850][ T5800] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1745.323451][ T5800] pwc: recv_control_msg error -32 req 02 val 2700 [ 1745.921153][ T5800] pwc: recv_control_msg error -32 req 04 val 1000 [ 1745.922588][ T5800] pwc: recv_control_msg error -32 req 04 val 1300 [ 1745.926137][ T5800] pwc: recv_control_msg error -32 req 04 val 1400 [ 1745.952818][ T5800] pwc: recv_control_msg error -32 req 02 val 2000 [ 1745.982429][ T5800] pwc: recv_control_msg error -32 req 02 val 2100 [ 1745.983484][ T5800] pwc: recv_control_msg error -32 req 04 val 1500 [ 1745.984486][ T5800] pwc: recv_control_msg error -32 req 02 val 2500 [ 1745.991301][ T5800] pwc: recv_control_msg error -32 req 02 val 2400 [ 1745.992307][ T5800] pwc: recv_control_msg error -32 req 02 val 2600 [ 1745.993948][ T5800] pwc: recv_control_msg error -32 req 02 val 2900 [ 1746.220042][ T5800] pwc: recv_control_msg error -71 req 04 val 1100 [ 1746.224556][ T5800] pwc: recv_control_msg error -71 req 04 val 1200 [ 1746.297574][ T5800] pwc: Registered as video103. [ 1746.328762][ T5800] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input102 [ 1746.390442][ T5800] usb 6-1: USB disconnect, device number 39 [ 1746.984593][T21699] input: syz1 as /devices/virtual/input/input103 [ 1747.106923][ T5800] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1747.267439][ T5800] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.267496][ T5800] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1747.267520][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.288095][ T5800] usb 4-1: config 0 descriptor?? [ 1747.306197][ T5800] pwc: Askey VC010 type 2 USB webcam detected. [ 1747.597239][ T5882] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1747.745154][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 1747.749365][ T5882] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 1747.749392][ T5882] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.749412][ T5882] usb 6-1: config 2 has no interface number 0 [ 1747.749465][ T5882] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1747.749491][ T5882] usb 6-1: config 2 interface 88 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1747.749519][ T5882] usb 6-1: config 2 interface 88 has no altsetting 0 [ 1747.753831][ T5882] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1747.753860][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.753881][ T5882] usb 6-1: Product: syz [ 1747.753897][ T5882] usb 6-1: Manufacturer: syz [ 1747.753914][ T5882] usb 6-1: SerialNumber: syz [ 1747.819695][ T5800] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1747.897815][ T5800] pwc: recv_control_msg error -32 req 02 val 2700 [ 1747.902541][ T5800] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1747.903520][ T5800] pwc: recv_control_msg error -32 req 04 val 1000 [ 1747.904753][ T5800] pwc: recv_control_msg error -32 req 04 val 1300 [ 1747.908954][ T5800] pwc: recv_control_msg error -32 req 04 val 1400 [ 1747.911343][ T5800] pwc: recv_control_msg error -32 req 02 val 2000 [ 1747.915232][ T5800] pwc: recv_control_msg error -32 req 02 val 2100 [ 1747.918777][ T5800] pwc: recv_control_msg error -32 req 04 val 1500 [ 1747.921157][ T5800] pwc: recv_control_msg error -32 req 02 val 2500 [ 1747.923683][ T5800] pwc: recv_control_msg error -32 req 02 val 2400 [ 1747.929684][ T5800] pwc: recv_control_msg error -32 req 02 val 2600 [ 1747.930385][ T5800] pwc: recv_control_msg error -32 req 02 val 2900 [ 1748.786143][ T5800] pwc: recv_control_msg error -71 req 04 val 1100 [ 1748.793756][T21712] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1748.794546][ T5800] pwc: recv_control_msg error -71 req 04 val 1200 [ 1748.819808][ T5882] asix 6-1:2.88: probe with driver asix failed with error -22 [ 1749.814091][ T5800] pwc: Registered as video103. [ 1749.830131][ T5800] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input104 [ 1749.860126][ T5800] usb 4-1: USB disconnect, device number 66 [ 1750.364905][ T5882] usb 6-1: USB disconnect, device number 40 [ 1751.212552][T21766] loop8: detected capacity change from 0 to 7 [ 1751.219632][T21766] Dev loop8: unable to read RDB block 7 [ 1751.219674][T21766] loop8: unable to read partition table [ 1751.219884][T21766] loop8: partition table beyond EOD, truncated [ 1751.219910][T21766] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1752.310314][T21792] input: syz1 as /devices/virtual/input/input105 [ 1752.342377][T21790] kvm: pic: level sensitive irq not supported [ 1752.342453][T21790] kvm: pic: non byte read [ 1752.342609][T21790] kvm: pic: level sensitive irq not supported [ 1752.342662][T21790] kvm: pic: non byte read [ 1752.342804][T21790] kvm: pic: level sensitive irq not supported [ 1752.342855][T21790] kvm: pic: non byte read [ 1752.342996][T21790] kvm: pic: level sensitive irq not supported [ 1752.343046][T21790] kvm: pic: non byte read [ 1753.445321][T21818] sg_write: data in/out 437212/170 bytes for SCSI command 0x0-- guessing data in; [ 1753.445321][T21818] program syz.3.4907 not setting count and/or reply_len properly [ 1753.519381][T21815] input: syz1 as /devices/virtual/input/input106 [ 1759.675500][T15004] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1759.855815][T15004] usb 5-1: Using ep0 maxpacket: 16 [ 1759.990232][T15004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.194926][T15004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1760.194964][T15004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1760.194987][T15004] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1760.234228][T15004] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1760.256677][T15004] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1760.256708][T15004] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1760.256728][T15004] usb 5-1: Manufacturer: syz [ 1760.292016][T15004] usb 5-1: config 0 descriptor?? [ 1761.255109][T15004] rc_core: IR keymap rc-hauppauge not found [ 1761.255129][T15004] Registered IR keymap rc-empty [ 1761.255274][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.258503][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4964'. [ 1761.297313][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.330926][T15004] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1761.353523][T15004] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input107 [ 1761.384855][T21959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.402154][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.422814][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.435364][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.465202][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.485182][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.505205][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.525237][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.545167][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.565231][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.585188][T15004] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.607324][T15004] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1761.607340][T15004] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1761.614344][T15004] usb 5-1: USB disconnect, device number 74 [ 1761.821922][T21968] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1766.376679][ T5882] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1766.527150][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 1766.529242][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.529294][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1766.529322][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1766.529342][ T5882] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1766.529364][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1766.530557][ T5882] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1766.530584][ T5882] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1766.530601][ T5882] usb 5-1: Manufacturer: syz [ 1766.574905][ T5882] usb 5-1: config 0 descriptor?? [ 1766.695127][ T5961] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1766.847116][ T5961] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1766.847147][ T5961] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.847168][ T5961] usb 6-1: config 220 has no interface number 2 [ 1766.847207][ T5961] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1766.847222][ T5961] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1766.847232][ T5961] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1766.847246][ T5961] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1766.849477][ T5961] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1766.849501][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.849512][ T5961] usb 6-1: Product: syz [ 1766.849521][ T5961] usb 6-1: Manufacturer: syz [ 1766.849529][ T5961] usb 6-1: SerialNumber: syz [ 1767.035382][ T5882] rc_core: IR keymap rc-hauppauge not found [ 1767.035458][ T5882] Registered IR keymap rc-empty [ 1767.035660][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.055263][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.090664][ T5882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1767.137478][ T5882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input108 [ 1767.168398][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.186843][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.205298][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.227703][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.245182][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.266248][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.288522][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.309280][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.325237][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.328010][ T5961] usb 6-1: selecting invalid altsetting 0 [ 1767.347696][ T5882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1767.443351][ T5961] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1767.443388][ T5961] uvcvideo 6-1:220.0: No valid video chain found. [ 1767.450096][ T5882] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1767.450119][ T5882] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1767.515557][ T5961] usb 6-1: selecting invalid altsetting 0 [ 1767.515596][ T5961] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1767.526601][ T5882] usb 5-1: USB disconnect, device number 75 [ 1767.529808][ T5961] usb 6-1: USB disconnect, device number 41 [ 1767.864548][T22078] loop8: detected capacity change from 0 to 7 [ 1767.871250][T22078] Dev loop8: unable to read RDB block 7 [ 1767.871294][T22078] loop8: unable to read partition table [ 1767.871488][T22078] loop8: partition table beyond EOD, truncated [ 1767.871507][T22078] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1768.651487][T22094] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 1768.651487][T22094] program syz.2.5020 not setting count and/or reply_len properly [ 1769.388131][T22111] loop8: detected capacity change from 0 to 7 [ 1769.389468][T22111] Dev loop8: unable to read RDB block 7 [ 1769.389511][T22111] loop8: unable to read partition table [ 1769.389726][T22111] loop8: partition table beyond EOD, truncated [ 1769.389760][T22111] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1769.470044][T22100] kvm: pic: non byte read [ 1769.470204][T22100] kvm: pic: level sensitive irq not supported [ 1769.470258][T22100] kvm: pic: non byte read [ 1769.470403][T22100] kvm: pic: level sensitive irq not supported [ 1769.470461][T22100] kvm: pic: non byte read [ 1769.470601][T22100] kvm: pic: level sensitive irq not supported [ 1769.470652][T22100] kvm: pic: non byte read [ 1769.565130][T15004] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1769.565317][T12713] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1769.730923][T15004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.731542][T15004] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1769.731569][T15004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.733321][T12713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.733373][T12713] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1769.733396][T12713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.798131][T15004] usb 5-1: config 0 descriptor?? [ 1769.801880][T12713] usb 4-1: config 0 descriptor?? [ 1769.827311][T15004] pwc: Askey VC010 type 2 USB webcam detected. [ 1769.831997][T12713] pwc: Askey VC010 type 2 USB webcam detected. [ 1770.215188][T16144] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1770.220826][T12713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1770.223265][T12713] pwc: recv_control_msg error -32 req 02 val 2700 [ 1770.247251][T15004] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1770.248256][T15004] pwc: recv_control_msg error -32 req 02 val 2700 [ 1770.249070][T15004] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1770.250970][T15004] pwc: recv_control_msg error -32 req 04 val 1000 [ 1770.252815][T15004] pwc: recv_control_msg error -32 req 04 val 1300 [ 1770.253815][T15004] pwc: recv_control_msg error -32 req 04 val 1400 [ 1770.261261][T15004] pwc: recv_control_msg error -32 req 02 val 2000 [ 1770.307255][T15004] pwc: recv_control_msg error -32 req 02 val 2100 [ 1770.313482][T15004] pwc: recv_control_msg error -32 req 04 val 1500 [ 1770.321441][T15004] pwc: recv_control_msg error -32 req 02 val 2500 [ 1770.334445][T15004] pwc: recv_control_msg error -32 req 02 val 2400 [ 1770.346357][T15004] pwc: recv_control_msg error -32 req 02 val 2600 [ 1770.352830][T15004] pwc: recv_control_msg error -32 req 02 val 2900 [ 1770.370358][T16144] usb 3-1: Using ep0 maxpacket: 32 [ 1770.373979][T16144] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1770.374005][T16144] usb 3-1: config 0 has no interface number 0 [ 1770.374050][T16144] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1770.414581][T16144] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1770.414607][T16144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.414642][T16144] usb 3-1: Product: syz [ 1770.414657][T16144] usb 3-1: Manufacturer: syz [ 1770.414820][T16144] usb 3-1: SerialNumber: syz [ 1770.430470][T16144] usb 3-1: config 0 descriptor?? [ 1770.451424][T12713] pwc: recv_control_msg error -32 req 04 val 1000 [ 1770.453867][T12713] pwc: recv_control_msg error -32 req 04 val 1300 [ 1770.454744][T12713] pwc: recv_control_msg error -32 req 04 val 1400 [ 1770.484214][T12713] pwc: recv_control_msg error -32 req 02 val 2000 [ 1770.491674][T12713] pwc: recv_control_msg error -32 req 02 val 2100 [ 1770.492995][T12713] pwc: recv_control_msg error -32 req 04 val 1500 [ 1770.495737][T12713] pwc: recv_control_msg error -32 req 02 val 2500 [ 1770.497594][T12713] pwc: recv_control_msg error -32 req 02 val 2400 [ 1770.498993][T12713] pwc: recv_control_msg error -32 req 02 val 2600 [ 1770.514803][T16144] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1770.514838][T16144] em28xx 3-1:0.132: Video interface 132 found: [ 1770.559421][T15004] pwc: recv_control_msg error -71 req 04 val 1100 [ 1770.559967][T15004] pwc: recv_control_msg error -71 req 04 val 1200 [ 1770.593910][T15004] pwc: Registered as video103. [ 1770.604349][T15004] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input109 [ 1770.635357][T15004] usb 5-1: USB disconnect, device number 76 [ 1770.706447][T12713] pwc: recv_control_msg error -71 req 02 val 2800 [ 1770.707094][T12713] pwc: recv_control_msg error -71 req 04 val 1100 [ 1770.707536][T12713] pwc: recv_control_msg error -71 req 04 val 1200 [ 1770.707626][T12713] videodev: could not get a free minor [ 1770.707635][T12713] pwc: Failed to register as video device (-23). [ 1770.708848][T12713] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -23 [ 1770.767132][T12713] usb 4-1: USB disconnect, device number 67 [ 1770.934028][T16144] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1771.342161][T16144] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1771.342184][T16144] em28xx 3-1:0.132: board has no eeprom [ 1771.731764][T16144] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1771.731783][T16144] em28xx 3-1:0.132: analog set to bulk mode. [ 1771.732665][ T5961] em28xx 3-1:0.132: Registering V4L2 extension [ 1771.785416][T16144] usb 3-1: USB disconnect, device number 78 [ 1771.793888][T16144] em28xx 3-1:0.132: Disconnecting em28xx [ 1772.003442][ T5961] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1772.003464][ T5961] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1772.003472][ T5961] em28xx 3-1:0.132: No AC97 audio processor [ 1772.095269][ T5961] usb 3-1: Decoder not found [ 1772.095284][ T5961] em28xx 3-1:0.132: failed to create media graph [ 1772.095308][ T5961] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1772.165934][ T5961] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1772.166500][T16144] em28xx 3-1:0.132: Closing input extension [ 1772.467004][T16144] em28xx 3-1:0.132: Freeing device [ 1772.750074][T22197] loop2: detected capacity change from 0 to 7 [ 1772.754534][T22197] Dev loop2: unable to read RDB block 7 [ 1772.754587][T22197] loop2: unable to read partition table [ 1772.754801][T22197] loop2: partition table beyond EOD, truncated [ 1772.784320][T12713] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1772.793180][T22197] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1772.955167][T16144] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1772.975128][T12713] usb 4-1: Using ep0 maxpacket: 16 [ 1772.980324][T12713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.980358][T12713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1772.980374][T12713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1772.980391][T12713] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1772.980403][T12713] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1772.983209][T12713] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1772.983236][T12713] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1772.983257][T12713] usb 4-1: Manufacturer: syz [ 1773.083159][T12713] usb 4-1: config 0 descriptor?? [ 1773.108651][T16144] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.108707][T16144] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1773.108731][T16144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.136154][T16144] usb 3-1: config 0 descriptor?? [ 1773.164479][T16144] pwc: Askey VC010 type 2 USB webcam detected. [ 1773.235170][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 1773.920404][T16144] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1773.925151][T16144] pwc: recv_control_msg error -32 req 02 val 2700 [ 1774.035156][T12713] rc_core: IR keymap rc-hauppauge not found [ 1774.035176][T12713] Registered IR keymap rc-empty [ 1774.035603][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.059065][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.078745][T12713] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1774.084604][T12713] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input111 [ 1774.148449][T16144] pwc: recv_control_msg error -32 req 04 val 1000 [ 1774.150029][T16144] pwc: recv_control_msg error -32 req 04 val 1300 [ 1774.150741][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.151579][T16144] pwc: recv_control_msg error -32 req 04 val 1400 [ 1774.177322][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.193385][T16144] pwc: recv_control_msg error -32 req 02 val 2000 [ 1774.194188][T16144] pwc: recv_control_msg error -32 req 02 val 2100 [ 1774.197585][T16144] pwc: recv_control_msg error -32 req 04 val 1500 [ 1774.215766][T16144] pwc: recv_control_msg error -32 req 02 val 2500 [ 1774.215801][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.218109][T16144] pwc: recv_control_msg error -32 req 02 val 2400 [ 1774.220959][T16144] pwc: recv_control_msg error -32 req 02 val 2600 [ 1774.235170][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.255220][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.292918][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.315350][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.345393][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.365904][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.395332][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1774.431689][T16144] pwc: recv_control_msg error -71 req 02 val 2800 [ 1774.432748][T16144] pwc: recv_control_msg error -71 req 04 val 1100 [ 1774.433209][T16144] pwc: recv_control_msg error -71 req 04 val 1200 [ 1774.433208][T12713] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1774.433239][T12713] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1774.454578][T16144] pwc: Registered as video103. [ 1774.487477][T16144] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input112 [ 1774.512577][T12713] usb 4-1: USB disconnect, device number 68 [ 1774.567435][T16144] usb 3-1: USB disconnect, device number 79 [ 1775.825529][T12713] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1775.985174][T12713] usb 3-1: Using ep0 maxpacket: 16 [ 1775.988685][T12713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.988740][T12713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1775.988769][T12713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1775.988792][T12713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1775.988817][T12713] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1775.992391][T12713] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1775.992420][T12713] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1775.992442][T12713] usb 3-1: Manufacturer: syz [ 1776.084426][T12713] usb 3-1: config 0 descriptor?? [ 1776.405118][T12713] rc_core: IR keymap rc-hauppauge not found [ 1776.405141][T12713] Registered IR keymap rc-empty [ 1776.405398][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1776.634101][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1776.780907][T12713] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1776.835930][T12713] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input113 [ 1776.981625][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.032762][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.051119][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.092669][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.119932][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.157599][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.239921][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.255445][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.275301][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.295305][T12713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1777.373712][T12713] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1777.374417][T12713] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1778.709254][T16144] usb 3-1: USB disconnect, device number 80 [ 1779.691567][T22294] loop2: detected capacity change from 0 to 7 [ 1779.693218][T22294] Dev loop2: unable to read RDB block 7 [ 1779.693249][T22294] loop2: AHDI p1 p2 p3 [ 1779.693276][T22294] loop2: partition table partially beyond EOD, truncated [ 1779.694016][T22294] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1779.694039][T22294] loop2: p3 start 335544320 is beyond EOD, truncated [ 1782.205197][ T5882] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1782.357705][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.357762][ T5882] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1782.357788][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.395912][ T5882] usb 4-1: config 0 descriptor?? [ 1782.413107][ T5882] pwc: Askey VC010 type 2 USB webcam detected. [ 1782.819605][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1782.820390][ T5882] pwc: recv_control_msg error -32 req 02 val 2700 [ 1783.021807][ T5882] pwc: recv_control_msg error -32 req 04 val 1000 [ 1783.022872][ T5882] pwc: recv_control_msg error -32 req 04 val 1300 [ 1783.041092][ T5882] pwc: recv_control_msg error -32 req 04 val 1400 [ 1783.042303][ T5882] pwc: recv_control_msg error -32 req 02 val 2000 [ 1783.043061][ T5882] pwc: recv_control_msg error -32 req 02 val 2100 [ 1783.045656][ T5882] pwc: recv_control_msg error -32 req 04 val 1500 [ 1783.076221][ T5882] pwc: recv_control_msg error -32 req 02 val 2500 [ 1783.079222][ T5882] pwc: recv_control_msg error -32 req 02 val 2400 [ 1783.081402][ T5882] pwc: recv_control_msg error -32 req 02 val 2600 [ 1783.311258][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 1783.311950][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 1783.330232][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 1784.345971][ T5882] pwc: Registered as video103. [ 1784.360195][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input114 [ 1784.369106][ T5882] usb 4-1: USB disconnect, device number 69 [ 1790.650631][T22417] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1790.845126][T16144] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1790.940094][T22432] loop8: detected capacity change from 0 to 7 [ 1790.943562][T22432] Dev loop8: unable to read RDB block 7 [ 1790.943590][T22432] loop8: unable to read partition table [ 1790.943708][T22432] loop8: partition table beyond EOD, truncated [ 1790.943727][T22432] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1790.995342][T16144] usb 6-1: Using ep0 maxpacket: 16 [ 1790.997677][T16144] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.997734][T16144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1790.997763][T16144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1790.997784][T16144] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1790.997807][T16144] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1790.999359][T16144] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1790.999389][T16144] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1790.999411][T16144] usb 6-1: Manufacturer: syz [ 1791.095937][T16144] usb 6-1: config 0 descriptor?? [ 1792.413638][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.413707][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.639538][T16144] rc_core: IR keymap rc-hauppauge not found [ 1792.639557][T16144] Registered IR keymap rc-empty [ 1792.639704][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.667717][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.688238][T16144] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1792.708889][T16144] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input115 [ 1792.733527][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.745236][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.765218][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.785184][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.805156][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.825209][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.845693][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.869351][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.892996][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.924932][T16144] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1792.979628][T16144] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1792.979654][T16144] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1793.025846][T16144] usb 6-1: USB disconnect, device number 42 [ 1793.047606][T12713] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1793.228587][T12713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.228641][T12713] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1793.228666][T12713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.253564][T12713] usb 4-1: config 0 descriptor?? [ 1793.288384][T12713] pwc: Askey VC010 type 2 USB webcam detected. [ 1793.673258][T12713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1793.688387][T12713] pwc: recv_control_msg error -32 req 02 val 2700 [ 1793.903919][T12713] pwc: recv_control_msg error -32 req 04 val 1000 [ 1793.905785][T12713] pwc: recv_control_msg error -32 req 04 val 1300 [ 1793.908086][T12713] pwc: recv_control_msg error -32 req 04 val 1400 [ 1793.908872][T12713] pwc: recv_control_msg error -32 req 02 val 2000 [ 1793.909497][T12713] pwc: recv_control_msg error -32 req 02 val 2100 [ 1793.911010][T12713] pwc: recv_control_msg error -32 req 04 val 1500 [ 1793.912737][T12713] pwc: recv_control_msg error -32 req 02 val 2500 [ 1793.913517][T12713] pwc: recv_control_msg error -32 req 02 val 2400 [ 1793.914355][T12713] pwc: recv_control_msg error -32 req 02 val 2600 [ 1794.132558][T12713] pwc: recv_control_msg error -71 req 02 val 2800 [ 1794.134264][T12713] pwc: recv_control_msg error -71 req 04 val 1100 [ 1794.140762][T12713] pwc: recv_control_msg error -71 req 04 val 1200 [ 1794.298255][T12713] pwc: Registered as video103. [ 1794.302074][T12713] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input116 [ 1794.308873][T12713] usb 4-1: USB disconnect, device number 70 [ 1795.246611][T22501] loop2: detected capacity change from 0 to 7 [ 1795.261739][T22501] Dev loop2: unable to read RDB block 7 [ 1795.261759][T22501] loop2: AHDI p1 p2 p3 [ 1795.261776][T22501] loop2: partition table partially beyond EOD, truncated [ 1795.261963][T22501] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1795.261976][T22501] loop2: p3 start 335544320 is beyond EOD, truncated [ 1795.345134][T12713] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1795.525172][T12713] usb 4-1: Using ep0 maxpacket: 16 [ 1795.528587][T12713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.528639][T12713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1795.528665][T12713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1795.528686][T12713] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1795.528709][T12713] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1795.532512][T12713] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1795.532540][T12713] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1795.532560][T12713] usb 4-1: Manufacturer: syz [ 1795.594065][T12713] usb 4-1: config 0 descriptor?? [ 1795.626013][T21363] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1795.775229][T21363] usb 6-1: Using ep0 maxpacket: 16 [ 1795.780470][T21363] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.780524][T21363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1795.781087][T21363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1795.781113][T21363] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1795.781138][T21363] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1795.783971][T21363] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1795.784115][T21363] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1795.784138][T21363] usb 6-1: Manufacturer: syz [ 1795.822445][T21363] usb 6-1: config 0 descriptor?? [ 1795.838568][T22519] kvm: pic: non byte read [ 1795.838725][T22519] kvm: pic: level sensitive irq not supported [ 1795.838774][T22519] kvm: pic: non byte read [ 1795.838913][T22519] kvm: pic: level sensitive irq not supported [ 1795.838961][T22519] kvm: pic: non byte read [ 1795.839101][T22519] kvm: pic: level sensitive irq not supported [ 1795.839150][T22519] kvm: pic: non byte read [ 1795.839292][T22519] kvm: pic: level sensitive irq not supported [ 1795.839341][T22519] kvm: pic: non byte read [ 1795.843146][T22519] kvm: pic: level sensitive irq not supported [ 1795.843214][T22519] kvm: pic: non byte read [ 1795.851517][T22519] kvm: pic: level sensitive irq not supported [ 1795.852254][T22519] kvm: pic: non byte read [ 1795.853438][T22519] kvm: pic: level sensitive irq not supported [ 1795.854729][T22519] kvm: pic: non byte read [ 1795.856788][T22519] kvm: pic: level sensitive irq not supported [ 1795.858038][T22519] kvm: pic: non byte read [ 1795.860869][T22519] kvm: pic: level sensitive irq not supported [ 1795.860939][T22519] kvm: pic: non byte read [ 1795.866914][T22519] kvm: pic: level sensitive irq not supported [ 1796.025151][T12713] rc_core: IR keymap rc-hauppauge not found [ 1796.025172][T12713] Registered IR keymap rc-empty [ 1796.025379][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.045168][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.080903][T12713] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1796.095421][T12713] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input117 [ 1796.109207][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.131408][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.151265][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5193'. [ 1796.155515][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.155710][T21363] rc_core: IR keymap rc-hauppauge not found [ 1796.155726][T21363] Registered IR keymap rc-empty [ 1796.156075][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.175261][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.175573][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.205269][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.225205][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.245266][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.246724][T21363] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 1796.265209][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.266658][T21363] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input118 [ 1796.296437][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.315302][T12713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1796.343701][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.355689][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.393856][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.405486][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.410488][T12713] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1796.410511][T12713] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1796.425478][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.455969][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.464249][T12713] usb 4-1: USB disconnect, device number 71 [ 1796.487232][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.506295][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.525493][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.545271][T21363] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1796.639288][T21363] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1796.639313][T21363] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1796.715662][T21363] usb 6-1: USB disconnect, device number 43 [ 1797.090326][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5206'. [ 1797.159995][T22564] loop8: detected capacity change from 0 to 7 [ 1797.179668][T22564] Dev loop8: unable to read RDB block 7 [ 1797.179713][T22564] loop8: unable to read partition table [ 1797.179915][T22564] loop8: partition table beyond EOD, truncated [ 1797.179949][T22564] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1797.286117][T22571] loop2: detected capacity change from 0 to 7 [ 1797.309311][T22571] Dev loop2: unable to read RDB block 7 [ 1797.309333][T22571] loop2: AHDI p1 p2 p3 [ 1797.309348][T22571] loop2: partition table partially beyond EOD, truncated [ 1797.309526][T22571] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1797.309546][T22571] loop2: p3 start 335544320 is beyond EOD, truncated [ 1797.436199][T22576] loop2: detected capacity change from 0 to 7 [ 1797.437205][T22576] Dev loop2: unable to read RDB block 7 [ 1797.437235][T22576] loop2: AHDI p1 p2 p3 [ 1797.437260][T22576] loop2: partition table partially beyond EOD, truncated [ 1797.437464][T22576] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1797.437485][T22576] loop2: p3 start 335544320 is beyond EOD, truncated [ 1797.505207][T21363] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1797.677494][T21363] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1797.677523][T21363] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.677543][T21363] usb 4-1: config 220 has no interface number 2 [ 1797.677593][T21363] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1797.677607][T21363] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1797.677617][T21363] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1797.677628][T21363] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1797.679803][T21363] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1797.679820][T21363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.679831][T21363] usb 4-1: Product: syz [ 1797.679839][T21363] usb 4-1: Manufacturer: syz [ 1797.679849][T21363] usb 4-1: SerialNumber: syz [ 1797.875256][ T5961] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1797.996709][T21363] usb 4-1: selecting invalid altsetting 0 [ 1797.997223][T21363] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1797.997253][T21363] uvcvideo 4-1:220.0: No valid video chain found. [ 1798.025112][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 1798.041979][ T5961] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.042032][ T5961] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.042096][ T5961] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1798.042120][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.120205][ T5961] usbtmc 6-1:16.0: bulk endpoints not found [ 1798.140462][T21363] usb 4-1: selecting invalid altsetting 0 [ 1798.140498][T21363] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1798.151325][T21363] usb 4-1: USB disconnect, device number 72 [ 1799.237148][T15004] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1799.824344][T15004] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1799.824374][T15004] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.824396][T15004] usb 3-1: config 220 has no interface number 2 [ 1799.824481][T15004] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1799.824508][T15004] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1799.824528][T15004] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1799.824547][T15004] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1800.175984][T15004] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1800.176322][T15004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.176822][T15004] usb 3-1: Product: syz [ 1800.176938][T15004] usb 3-1: Manufacturer: syz [ 1800.177191][T15004] usb 3-1: SerialNumber: syz [ 1800.583871][T15004] usb 3-1: selecting invalid altsetting 0 [ 1800.584377][T15004] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1800.584407][T15004] uvcvideo 3-1:220.0: No valid video chain found. [ 1800.627760][ T5861] usb 6-1: USB disconnect, device number 44 [ 1800.697027][T15004] usb 3-1: selecting invalid altsetting 0 [ 1800.697072][T15004] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1800.723692][T15004] usb 3-1: USB disconnect, device number 81 [ 1800.925614][ T5961] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1801.127496][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.127553][ T5961] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1801.127579][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.032408][ T5961] usb 5-1: config 0 descriptor?? [ 1802.096263][ T5961] pwc: Askey VC010 type 2 USB webcam detected. [ 1802.288548][T22687] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5260'. [ 1802.454590][ T5961] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1802.468424][ T5961] pwc: recv_control_msg error -32 req 02 val 2700 [ 1802.672127][ T5961] pwc: recv_control_msg error -32 req 04 val 1000 [ 1802.682088][ T5961] pwc: recv_control_msg error -32 req 04 val 1300 [ 1802.684522][ T5961] pwc: recv_control_msg error -32 req 04 val 1400 [ 1802.698376][ T5961] pwc: recv_control_msg error -32 req 02 val 2000 [ 1802.701529][ T5961] pwc: recv_control_msg error -32 req 02 val 2100 [ 1802.718183][ T5961] pwc: recv_control_msg error -32 req 04 val 1500 [ 1802.719674][ T5961] pwc: recv_control_msg error -32 req 02 val 2500 [ 1802.720308][ T5961] pwc: recv_control_msg error -32 req 02 val 2400 [ 1802.721109][ T5961] pwc: recv_control_msg error -32 req 02 val 2600 [ 1802.723660][ T5961] pwc: recv_control_msg error -32 req 02 val 2900 [ 1802.751615][ T5961] pwc: recv_control_msg error -32 req 02 val 2800 [ 1802.764952][ T5961] pwc: recv_control_msg error -32 req 04 val 1100 [ 1802.772995][ T5961] pwc: recv_control_msg error -71 req 04 val 1200 [ 1802.787120][ T5961] pwc: Registered as video103. [ 1802.800194][ T5961] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input119 [ 1802.828123][ T5961] usb 5-1: USB disconnect, device number 77 [ 1803.925150][ T5961] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1804.708281][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1804.753317][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1804.767539][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1804.771924][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1804.777333][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1804.831116][ T5961] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1804.831144][ T5961] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.831163][ T5961] usb 5-1: config 220 has no interface number 2 [ 1804.831228][ T5961] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1804.831255][ T5961] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1804.831275][ T5961] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1804.831293][ T5961] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1804.967456][ T5961] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1804.967489][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.967510][ T5961] usb 5-1: Product: syz [ 1804.967524][ T5961] usb 5-1: Manufacturer: syz [ 1804.967538][ T5961] usb 5-1: SerialNumber: syz [ 1805.261881][ T5961] usb 5-1: selecting invalid altsetting 0 [ 1805.285857][ T5961] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1805.285891][ T5961] uvcvideo 5-1:220.0: No valid video chain found. [ 1805.324647][ T5961] usb 5-1: selecting invalid altsetting 0 [ 1805.324684][ T5961] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1805.346617][ T5961] usb 5-1: USB disconnect, device number 78 [ 1805.929704][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 1807.144583][T17447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.432564][ T5801] Bluetooth: hci2: command tx timeout [ 1809.342389][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5281'. [ 1809.475177][ T5801] Bluetooth: hci2: command tx timeout [ 1809.554881][T22756] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5282'. [ 1809.619516][T17447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.180387][T17447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.608516][ T5801] Bluetooth: hci2: command tx timeout [ 1812.412438][T17447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.614273][T22724] chnl_net:caif_netlink_parms(): no params data found [ 1813.092638][T22724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.092845][T22724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.093023][T22724] bridge_slave_0: entered allmulticast mode [ 1813.096256][T22724] bridge_slave_0: entered promiscuous mode [ 1813.099451][T22724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.099644][T22724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.099835][T22724] bridge_slave_1: entered allmulticast mode [ 1813.102267][T22724] bridge_slave_1: entered promiscuous mode [ 1813.885552][T22724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1813.915126][T22724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1813.940015][ T5801] Bluetooth: hci2: command tx timeout [ 1814.040642][T22724] team0: Port device team_slave_0 added [ 1814.044099][T22724] team0: Port device team_slave_1 added [ 1814.121640][T22724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.121658][T22724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.121682][T22724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.172011][T22724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.172026][T22724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.172050][T22724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.456291][T22724] hsr_slave_0: entered promiscuous mode [ 1814.457613][T22724] hsr_slave_1: entered promiscuous mode [ 1814.460813][T22724] debugfs: 'hsr0' already exists in 'hsr' [ 1814.460838][T22724] Cannot create hsr debugfs directory [ 1815.326563][ T5882] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1815.478486][ T5882] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1815.478516][ T5882] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1815.478537][ T5882] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.478557][ T5882] usb 5-1: config 220 has no interface number 2 [ 1815.478634][ T5882] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1815.478663][ T5882] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1815.478682][ T5882] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1815.478701][ T5882] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1815.564246][ T5882] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1815.564277][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.564296][ T5882] usb 5-1: Product: syz [ 1815.564309][ T5882] usb 5-1: Manufacturer: syz [ 1815.564322][ T5882] usb 5-1: SerialNumber: syz [ 1815.870830][ T5882] usb 5-1: selecting invalid altsetting 0 [ 1815.893661][ T5882] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1815.893694][ T5882] uvcvideo 5-1:220.0: No valid video chain found. [ 1815.919850][ T5882] usb 5-1: selecting invalid altsetting 0 [ 1815.919884][ T5882] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1815.975826][ T5882] usb 5-1: USB disconnect, device number 79 [ 1815.991737][T22821] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5299'. [ 1816.145773][T17447] bridge_slave_1: left allmulticast mode [ 1816.145801][T17447] bridge_slave_1: left promiscuous mode [ 1816.146037][T17447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.226763][T17447] bridge_slave_0: left allmulticast mode [ 1816.226794][T17447] bridge_slave_0: left promiscuous mode [ 1816.227072][T17447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.650505][T17447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1818.136433][T17447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1818.204272][T17447] bond0 (unregistering): Released all slaves [ 1819.389606][T22862] loop2: detected capacity change from 0 to 7 [ 1819.390626][T22862] Dev loop2: unable to read RDB block 7 [ 1819.390683][T22862] loop2: unable to read partition table [ 1819.390921][T22862] loop2: partition table beyond EOD, truncated [ 1819.390940][T22862] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1819.977790][T22871] random: crng reseeded on system resumption [ 1822.608010][T22909] loop2: detected capacity change from 0 to 7 [ 1822.622291][T22909] Dev loop2: unable to read RDB block 7 [ 1822.622342][T22909] loop2: unable to read partition table [ 1822.622558][T22909] loop2: partition table beyond EOD, truncated [ 1822.622590][T22909] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1823.761458][ T5460] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1824.735169][ T5961] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1824.919338][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 1824.923517][ T5961] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1824.923549][ T5961] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1824.923569][ T5961] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1824.923583][ T5961] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1824.923607][ T5961] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1824.923619][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.237250][ T5961] usb 6-1: GET_CAPABILITIES returned 0 [ 1825.237281][ T5961] usbtmc 6-1:16.0: can't read capabilities [ 1826.545195][T13311] usb 6-1: USB disconnect, device number 45 [ 1826.741054][T22934] loop2: detected capacity change from 0 to 7 [ 1826.751648][T22934] Dev loop2: unable to read RDB block 7 [ 1826.751698][T22934] loop2: unable to read partition table [ 1826.751903][T22934] loop2: partition table beyond EOD, truncated [ 1826.751922][T22934] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1827.667564][T17447] hsr_slave_0: left promiscuous mode [ 1827.685314][T17447] hsr_slave_1: left promiscuous mode [ 1827.685980][T17447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1827.685996][T17447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1827.747689][T17447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1827.747716][T17447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1827.885140][T13311] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1827.886698][T17447] veth1_macvtap: left promiscuous mode [ 1827.886756][T17447] veth0_macvtap: left promiscuous mode [ 1827.962997][T17447] veth1_vlan: left promiscuous mode [ 1827.963110][T17447] veth0_vlan: left promiscuous mode [ 1828.035581][T13311] usb 6-1: Using ep0 maxpacket: 16 [ 1828.038027][T13311] usb 6-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 1828.038057][T13311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1828.038073][T13311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1828.038085][T13311] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1828.038097][T13311] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1828.040231][T13311] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1828.040247][T13311] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1828.040258][T13311] usb 6-1: Manufacturer: syz [ 1828.043927][T13311] usb 6-1: config 0 descriptor?? [ 1828.555136][T13311] rc_core: IR keymap rc-hauppauge not found [ 1828.555155][T13311] Registered IR keymap rc-empty [ 1828.555361][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.589109][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.608178][T13311] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1828.641285][T13311] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input120 [ 1828.664250][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.676708][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.695983][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.715236][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.735359][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.759695][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.774546][T22960] loop2: detected capacity change from 0 to 7 [ 1828.785787][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.805213][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.808844][T22960] Dev loop2: unable to read RDB block 7 [ 1828.808884][T22960] loop2: unable to read partition table [ 1828.810160][T22960] loop2: partition table beyond EOD, truncated [ 1828.810727][T22960] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1828.825171][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.857817][T13311] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.991056][T22963] random: crng reseeded on system resumption [ 1829.047330][T13311] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1829.047369][T13311] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1829.194371][T13311] usb 6-1: USB disconnect, device number 46 [ 1832.732410][T17447] team0 (unregistering): Port device team_slave_1 removed [ 1832.899488][T17447] team0 (unregistering): Port device team_slave_0 removed [ 1835.560925][T23008] loop2: detected capacity change from 0 to 7 [ 1835.561659][T23008] Dev loop2: unable to read RDB block 7 [ 1835.561686][T23008] loop2: unable to read partition table [ 1835.561816][T23008] loop2: partition table beyond EOD, truncated [ 1835.561827][T23008] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1836.105178][ T5861] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1837.277255][ T5861] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1837.277287][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.432399][ T5861] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1837.617592][ T5861] gspca_sn9c20x: Write register 1000 failed -71 [ 1837.617614][ T5861] gspca_sn9c20x: Device initialization failed [ 1837.617694][ T5861] gspca_sn9c20x 3-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1837.674994][ T5861] usb 3-1: USB disconnect, device number 82 [ 1839.187722][T23031] loop8: detected capacity change from 0 to 7 [ 1839.213025][T23031] Dev loop8: unable to read RDB block 7 [ 1839.213061][T23031] loop8: unable to read partition table [ 1839.213189][T23031] loop8: partition table beyond EOD, truncated [ 1839.213200][T23031] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1839.546936][T23037] loop2: detected capacity change from 0 to 7 [ 1839.565287][T23037] Dev loop2: unable to read RDB block 7 [ 1839.565323][T23037] loop2: AHDI p1 p2 p3 [ 1839.565349][T23037] loop2: partition table partially beyond EOD, truncated [ 1839.565592][T23037] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1839.565611][T23037] loop2: p3 start 335544320 is beyond EOD, truncated [ 1840.036266][T23044] random: crng reseeded on system resumption [ 1844.299896][T22724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1844.351438][T22724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1844.352237][T22724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1844.453431][T20997] ------------[ cut here ]------------ [ 1844.453444][T20997] kcov->t != t [ 1844.453461][T20997] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: udevd/20997 [ 1844.453685][T20997] Modules linked in: [ 1844.453719][T20997] CPU: 1 UID: 0 PID: 20997 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1844.453748][T20997] Tainted: [L]=SOFTLOCKUP [ 1844.453756][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1844.453776][T20997] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1844.453808][T20997] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 1844.453827][T20997] RSP: 0018:ffffc90007417d20 EFLAGS: 00010206 [ 1844.453844][T20997] RAX: 6fc1c26fc7275100 RBX: ffff888035e02300 RCX: 0000000000000000 [ 1844.453861][T20997] RDX: 00000000f5c63644 RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 1844.453876][T20997] RBP: ffffc90007417e78 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 1844.453892][T20997] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 1844.453909][T20997] R13: 0000000000000000 R14: ffff888035e02308 R15: ffff88802e999ec0 [ 1844.453924][T20997] FS: 00007f40fe2fc880(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 1844.453943][T20997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1844.453959][T20997] CR2: 000055df9d36ca38 CR3: 000000005add8000 CR4: 00000000003526f0 [ 1844.453979][T20997] Call Trace: [ 1844.453987][T20997] [ 1844.453999][T20997] do_exit+0x150/0x22c0 [ 1844.454071][T20997] ? lockdep_hardirqs_on+0x7a/0x110 [ 1844.454171][T20997] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1844.454254][T20997] ? reacquire_held_locks+0x104/0x190 [ 1844.454322][T20997] ? rt_spin_lock+0x1e0/0x400 [ 1844.454342][T20997] ? __pfx_do_exit+0x10/0x10 [ 1844.454368][T20997] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1844.454414][T20997] ? rt_spin_unlock+0x160/0x200 [ 1844.454438][T20997] do_group_exit+0x21b/0x2d0 [ 1844.454466][T20997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.454520][T20997] __x64_sys_exit_group+0x3f/0x40 [ 1844.454546][T20997] x64_sys_call+0x221a/0x2240 [ 1844.454604][T20997] do_syscall_64+0x15f/0xf80 [ 1844.454657][T20997] ? trace_irq_disable+0x3b/0x140 [ 1844.454707][T20997] ? clear_bhb_loop+0x40/0x90 [ 1844.454732][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.454753][T20997] RIP: 0033:0x7f40fe4346c5 [ 1844.454776][T20997] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1844.454795][T20997] RSP: 002b:00007ffc783c0788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1844.454815][T20997] RAX: ffffffffffffffda RBX: 000055df9d4c4da0 RCX: 00007f40fe4346c5 [ 1844.454831][T20997] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1844.454846][T20997] RBP: 000055df9d363910 R08: 0000000000000000 R09: 0000000000000000 [ 1844.454858][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1844.454870][T20997] R13: 00007ffc783c07d0 R14: 0000000000000000 R15: 0000000000000000 [ 1844.454900][T20997] [ 1844.454910][T20997] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1844.454927][T20997] CPU: 1 UID: 0 PID: 20997 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1844.454956][T20997] Tainted: [L]=SOFTLOCKUP [ 1844.454963][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1844.454975][T20997] Call Trace: [ 1844.454984][T20997] [ 1844.454996][T20997] vpanic+0x56c/0xa60 [ 1844.455029][T20997] ? __pfx__printk+0x10/0x10 [ 1844.455053][T20997] ? __pfx_vpanic+0x10/0x10 [ 1844.455070][T20997] ? is_bpf_text_address+0x292/0x2b0 [ 1844.455148][T20997] ? is_bpf_text_address+0x26/0x2b0 [ 1844.455176][T20997] panic+0xc5/0xd0 [ 1844.455195][T20997] ? __pfx_panic+0x10/0x10 [ 1844.455228][T20997] __warn+0x315/0x4c0 [ 1844.455247][T20997] ? kcov_task_exit+0xf5/0x160 [ 1844.455278][T20997] ? kcov_task_exit+0xf5/0x160 [ 1844.455307][T20997] __report_bug+0x29a/0x540 [ 1844.455395][T20997] ? kcov_task_exit+0xf5/0x160 [ 1844.455427][T20997] ? __pfx___report_bug+0x10/0x10 [ 1844.455456][T20997] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1844.455492][T20997] ? rt_spin_lock+0x1e0/0x400 [ 1844.455514][T20997] ? rt_spin_lock+0x1e0/0x400 [ 1844.455537][T20997] ? kcov_task_exit+0xf5/0x160 [ 1844.455569][T20997] report_bug+0x16a/0x220 [ 1844.455596][T20997] ? kcov_task_exit+0xf5/0x160 [ 1844.455624][T20997] ? kcov_task_exit+0xf7/0x160 [ 1844.455654][T20997] handle_bug+0x9c/0x200 [ 1844.455685][T20997] exc_invalid_op+0x1a/0x50 [ 1844.455715][T20997] asm_exc_invalid_op+0x1a/0x20 [ 1844.455735][T20997] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1844.455767][T20997] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 1844.455787][T20997] RSP: 0018:ffffc90007417d20 EFLAGS: 00010206 [ 1844.455805][T20997] RAX: 6fc1c26fc7275100 RBX: ffff888035e02300 RCX: 0000000000000000 [ 1844.455821][T20997] RDX: 00000000f5c63644 RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 1844.455837][T20997] RBP: ffffc90007417e78 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 1844.455854][T20997] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 1844.455871][T20997] R13: 0000000000000000 R14: ffff888035e02308 R15: ffff88802e999ec0 [ 1844.455894][T20997] ? rt_spin_lock+0x1e0/0x400 [ 1844.455924][T20997] do_exit+0x150/0x22c0 [ 1844.455948][T20997] ? lockdep_hardirqs_on+0x7a/0x110 [ 1844.455974][T20997] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1844.456004][T20997] ? reacquire_held_locks+0x104/0x190 [ 1844.456033][T20997] ? rt_spin_lock+0x1e0/0x400 [ 1844.456053][T20997] ? __pfx_do_exit+0x10/0x10 [ 1844.456078][T20997] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1844.456109][T20997] ? rt_spin_unlock+0x160/0x200 [ 1844.456133][T20997] do_group_exit+0x21b/0x2d0 [ 1844.456161][T20997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.456185][T20997] __x64_sys_exit_group+0x3f/0x40 [ 1844.456212][T20997] x64_sys_call+0x221a/0x2240 [ 1844.456235][T20997] do_syscall_64+0x15f/0xf80 [ 1844.456261][T20997] ? trace_irq_disable+0x3b/0x140 [ 1844.456282][T20997] ? clear_bhb_loop+0x40/0x90 [ 1844.456309][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.456330][T20997] RIP: 0033:0x7f40fe4346c5 [ 1844.456350][T20997] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1844.456369][T20997] RSP: 002b:00007ffc783c0788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1844.456390][T20997] RAX: ffffffffffffffda RBX: 000055df9d4c4da0 RCX: 00007f40fe4346c5 [ 1844.456407][T20997] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1844.456422][T20997] RBP: 000055df9d363910 R08: 0000000000000000 R09: 0000000000000000 [ 1844.456436][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1844.456450][T20997] R13: 00007ffc783c07d0 R14: 0000000000000000 R15: 0000000000000000 [ 1844.456487][T20997] [ 1844.457347][T20997] Kernel Offset: disabled