last executing test programs: 15.43150913s ago: executing program 3 (id=3931): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000300)={0x980902, 0x72a}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x104) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 14.191643453s ago: executing program 2 (id=3935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) alarm(0x8000000000000001) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x67e) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000023c0)={0x1c, r3, 0x1, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x86}, 0x4010) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) write$6lowpan_control(r4, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 11.175366739s ago: executing program 3 (id=3938): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a80)}, {&(0x7f0000000000)="a1540d2d205bffa0cf9387e4f2fd23f4d7e96b29ecf0f5e13284d7f7e395803b63d9f180af223a0786269065a66d272a333695eb3189298eb9c6a634d4f531c0e02ccb903b2dfbc3200149941d74a8f12bd988cf88bdb51b8fcb43f5bc21ca674c65db0d48e41c8d5a4e24e4277c563d97874090958abaced121fa752f5109c77a0ea71184ede060ade67071cfb342df3b4367b3a319785bdcb495497d4835537934249bef612df74e39d1bf093be2954461ebd3984ea6f038950a6fee0bbd88e6ef8f67012916a3d097ecbd9c60be4aad500dc1b3546575648c4b552b2761ab3efdc848032bb07d087c7ebab20b461ce72c127051d591e360", 0xf9}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000100)}, {0x0}], 0x5, 0x5, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fanotify_init(0xf00, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x1) 10.952737667s ago: executing program 2 (id=3939): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) getpid() syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x82, 0x1, 'k'}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.624698788s ago: executing program 0 (id=3942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) keyctl$join(0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 7.854652825s ago: executing program 3 (id=3943): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f00000000000000000000006a3f7860d3"], 0x20) 7.73343412s ago: executing program 1 (id=3944): bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f}}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x725da000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 7.393128472s ago: executing program 0 (id=3945): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xff5d, &(0x7f0000000240)=0x7834bcc6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x104600, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) memfd_secret(0x80000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000240)={0x1, @sdr={0x56555959, 0xfffffff7}}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x6, 0xfffffffd}, 0x58) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6092c01f00442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa242065580000000000000021000086dd080088be43"], 0x0) socket$packet(0x11, 0x3, 0x300) 7.350749233s ago: executing program 2 (id=3946): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000300)={0x980902, 0x72a}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x104) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 6.352802468s ago: executing program 1 (id=3947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) alarm(0x8000000000000001) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x67e) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000023c0)={0x1c, r3, 0x1, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x86}, 0x4010) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) write$6lowpan_control(r4, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 6.200235023s ago: executing program 0 (id=3948): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x0, 0x200102, 0x8, 'syz0\x00', 0x210002}) 4.521144922s ago: executing program 3 (id=3949): signalfd(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000a00)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 4.520668382s ago: executing program 0 (id=3950): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) 3.389988101s ago: executing program 0 (id=3951): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a80)}, {&(0x7f0000000000)="a1540d2d205bffa0cf9387e4f2fd23f4d7e96b29ecf0f5e13284d7f7e395803b63d9f180af223a0786269065a66d272a333695eb3189298eb9c6a634d4f531c0e02ccb903b2dfbc3200149941d74a8f12bd988cf88bdb51b8fcb43f5bc21ca674c65db0d48e41c8d5a4e24e4277c563d97874090958abaced121fa752f5109c77a0ea71184ede060ade67071cfb342df3b4367b3a319785bdcb495497d4835537934249bef612df74e39d1bf093be2954461ebd3984ea6f038950a6fee0bbd88e6ef8f67012916a3d097ecbd9c60be4aad500dc1b3546575648c4b552b2761ab3efdc848032bb07d087c7ebab20b461ce72c127051d591e360", 0xf9}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000100)}, {0x0}], 0x5, 0x5, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fanotify_init(0xf00, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x1) 2.84787112s ago: executing program 1 (id=3952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) syz_open_dev$vbi(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mremap(&(0x7f00005ed000/0x2000)=nil, 0x2000, 0x600000, 0x6, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe) 2.134394515s ago: executing program 2 (id=3953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) keyctl$join(0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 2.102277356s ago: executing program 3 (id=3954): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308433219872eeda0c235f8be3088a880", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.918759413s ago: executing program 1 (id=3955): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 1.729690879s ago: executing program 1 (id=3956): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xff5d, &(0x7f0000000240)=0x7834bcc6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x104600, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) memfd_secret(0x80000) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000240)={0x1, @sdr={0x56555959, 0xfffffff7}}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x6, 0xfffffffd}, 0x58) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6092c01f00442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa242065580000000000000021000086dd080088be43"], 0x0) socket$packet(0x11, 0x3, 0x300) 303.731889ms ago: executing program 1 (id=3957): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f00000000000000000000006a3f7860d3"], 0x20) 264.273581ms ago: executing program 2 (id=3958): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@link_local, @local, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_uc={0x8847, {[], @ipv4=@igmp={{0x5, 0x4, 0x2, 0x9, 0x1c, 0x67, 0x0, 0x2, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2}, {0x13, 0xa4, 0x0, @remote}}}}}}, 0x0) 225.200072ms ago: executing program 3 (id=3959): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) 263.37µs ago: executing program 0 (id=3960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) alarm(0x8000000000000001) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x67e) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000023c0)={0x1c, r3, 0x1, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x86}, 0x4010) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) write$6lowpan_control(r4, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 0s ago: executing program 2 (id=3961): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x1, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): ce batadv_slave_1 (retrying later): interface not active [ 1002.303438][T13397] usb 3-1: config 5 interface 75 has no altsetting 0 [ 1002.322876][T13397] usb 3-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1002.323755][T13772] Bluetooth: hci3: command tx timeout [ 1002.453641][T13397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.511825][T13397] usb 3-1: Product: syz [ 1002.517463][T13397] usb 3-1: Manufacturer: syz [ 1002.531059][T13397] usb 3-1: SerialNumber: syz [ 1003.041350][T15097] dvmrp1: entered allmulticast mode [ 1003.169789][T15094] dvmrp1: left allmulticast mode [ 1003.393888][T15018] hsr_slave_0: entered promiscuous mode [ 1003.414561][T15018] hsr_slave_1: entered promiscuous mode [ 1003.434125][T15018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.441746][T15018] Cannot create hsr debugfs directory [ 1003.939013][T15101] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1004.286500][ T3463] hsr_slave_0: left promiscuous mode [ 1004.393669][ T3463] hsr_slave_1: left promiscuous mode [ 1004.395516][T13772] Bluetooth: hci3: command tx timeout [ 1004.555526][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.656979][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.781972][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.924781][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.999015][ T3463] bridge_slave_1: left allmulticast mode [ 1005.021605][ T3463] bridge_slave_1: left promiscuous mode [ 1005.057111][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.098801][ T3463] bridge_slave_0: left allmulticast mode [ 1005.139601][ T3463] bridge_slave_0: left promiscuous mode [ 1005.179497][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.541035][ T3463] veth1_macvtap: left promiscuous mode [ 1005.568579][ T3463] veth0_macvtap: left promiscuous mode [ 1005.602093][ T3463] veth1_vlan: left promiscuous mode [ 1005.684792][ T3463] veth0_vlan: left promiscuous mode [ 1006.247844][T13397] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1006.258777][T13397] gspca_sunplus: reg_w_riv err -71 [ 1006.265508][T13397] sunplus: probe of 3-1:5.75 failed with error -71 [ 1006.274461][T13397] usb 3-1: USB disconnect, device number 32 [ 1006.852499][T15143] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1007.584940][T15140] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1007.945760][ T3463] bond10 (unregistering): Released all slaves [ 1008.793156][T15153] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1009.301306][ T3463] bond9 (unregistering): Released all slaves [ 1011.099193][ T3463] bond8 (unregistering): Released all slaves [ 1011.449051][ T3463] bond7 (unregistering): Released all slaves [ 1011.695207][T15178] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1012.425331][ T3463] bond6 (unregistering): Released all slaves [ 1012.627114][T15180] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1012.721439][ T3463] bond5 (unregistering): Released all slaves [ 1012.773533][T15177] syz.1.2389 (15177): drop_caches: 2 [ 1013.015759][ T3463] bond4 (unregistering): Released all slaves [ 1013.627275][ T3463] bond3 (unregistering): Released all slaves [ 1013.912477][ T3463] bond2 (unregistering): Released all slaves [ 1014.117858][T15190] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1014.301362][ T3463] bond1 (unregistering): Released all slaves [ 1015.878325][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 1015.988488][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 1016.094231][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.183343][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.180729][ T3463] bond0 (unregistering): Released all slaves [ 1017.302120][T15151] dvmrp1: entered allmulticast mode [ 1017.312739][T15151] dvmrp1: left allmulticast mode [ 1017.367416][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 1017.378059][T15181] netlink: 'syz.1.2389': attribute type 20 has an invalid length. [ 1017.396794][T15181] netlink: 'syz.1.2389': attribute type 21 has an invalid length. [ 1017.737807][T15206] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1018.015376][T15212] siw: device registration error -23 [ 1018.738467][ T3463] IPVS: stop unused estimator thread 0... [ 1019.950760][T15232] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1020.370008][T15018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1020.575121][T15018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1021.484249][T15018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1021.615222][T15018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1021.820198][T15252] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1021.979912][T15242] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 1021.989162][T15242] veth0_vlan: left promiscuous mode [ 1021.996301][T15242] veth0_vlan: entered promiscuous mode [ 1022.002892][T15242] team0: Device veth0_vlan failed to register rx_handler [ 1022.056703][T15018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.091605][T15018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.154170][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.161374][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.204564][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.212195][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.692090][T15018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.836112][T15018] veth0_vlan: entered promiscuous mode [ 1022.848447][T15273] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1022.875096][T15018] veth1_vlan: entered promiscuous mode [ 1022.972570][T15018] veth0_macvtap: entered promiscuous mode [ 1022.986370][T15018] veth1_macvtap: entered promiscuous mode [ 1023.007854][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.018744][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.054581][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.074217][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.095579][T15018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.103066][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 1023.133965][T15257] netlink: 'syz.2.2408': attribute type 20 has an invalid length. [ 1023.141847][T15257] netlink: 'syz.2.2408': attribute type 21 has an invalid length. [ 1023.187598][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.206719][T15279] syz.2.2408 (15279): drop_caches: 2 [ 1023.222331][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.246085][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.256958][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.272213][T15018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.300034][T15018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.326014][T15018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.349802][T15018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.368809][T15018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.609630][ T8667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.638457][ T8667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.903259][ T8667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.931548][ T8667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.310166][T15329] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1025.580004][T15334] siw: device registration error -23 [ 1027.656371][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1027.670541][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1027.679814][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1027.695147][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1027.709354][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1027.717054][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1027.749883][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 1027.759857][T15348] netlink: 'syz.0.2418': attribute type 20 has an invalid length. [ 1027.768235][T15348] netlink: 'syz.0.2418': attribute type 21 has an invalid length. [ 1027.802550][T15348] syz.0.2418 (15348): drop_caches: 2 [ 1027.841986][T15344] lo speed is unknown, defaulting to 1000 [ 1028.213247][T15359] tipc: Started in network mode [ 1028.227830][T15359] tipc: Node identity be7bba2f95a1, cluster identity 4711 [ 1028.236769][T15359] tipc: Enabled bearer , priority 0 [ 1028.287390][T15360] syzkaller0: entered promiscuous mode [ 1028.292903][T15360] syzkaller0: entered allmulticast mode [ 1028.491424][ T8667] tipc: Left network mode [ 1028.517679][T15344] chnl_net:caif_netlink_parms(): no params data found [ 1028.558936][T15359] tipc: Resetting bearer [ 1028.748950][T15358] tipc: Resetting bearer [ 1028.814590][T15358] tipc: Disabling bearer [ 1029.321456][T15344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.374071][T15344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.381364][T15344] bridge_slave_0: entered allmulticast mode [ 1029.643096][T15344] bridge_slave_0: entered promiscuous mode [ 1029.826332][ T5774] Bluetooth: hci1: command tx timeout [ 1030.168329][T15344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.202750][T15344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.243227][T15344] bridge_slave_1: entered allmulticast mode [ 1030.258967][T15344] bridge_slave_1: entered promiscuous mode [ 1031.478929][ T8667] bond2: (slave gretap1): Releasing active interface [ 1031.509654][T15344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.556861][T15344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.766798][T15344] team0: Port device team_slave_0 added [ 1031.904132][ T5774] Bluetooth: hci1: command tx timeout [ 1031.933446][T15344] team0: Port device team_slave_1 added [ 1032.748517][T15344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.755941][T15344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.829252][T15344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.868166][T15344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.913874][T15344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.991101][T15344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.036739][T15427] tipc: Enabling of bearer rejected, failed to enable media [ 1033.135907][T15431] syzkaller0: entered promiscuous mode [ 1033.155316][T15431] syzkaller0: entered allmulticast mode [ 1033.201792][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'. [ 1033.244129][T15423] netlink: 'syz.0.2431': attribute type 20 has an invalid length. [ 1033.297876][T15429] syz.0.2431 (15429): drop_caches: 2 [ 1033.306967][T15423] netlink: 'syz.0.2431': attribute type 21 has an invalid length. [ 1033.744769][T15344] hsr_slave_0: entered promiscuous mode [ 1033.781714][T15344] hsr_slave_1: entered promiscuous mode [ 1033.975662][T15344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1034.004911][ T5774] Bluetooth: hci1: command tx timeout [ 1034.123207][T15344] Cannot create hsr debugfs directory [ 1034.479003][ T8667] hsr_slave_0: left promiscuous mode [ 1034.547825][ T8667] hsr_slave_1: left promiscuous mode [ 1034.790083][ T8667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.825230][ T8667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.843667][ T8667] bridge_slave_1: left allmulticast mode [ 1034.849622][ T8667] bridge_slave_1: left promiscuous mode [ 1034.887409][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.331599][ T8667] bridge_slave_0: left allmulticast mode [ 1035.685220][ T8667] bridge_slave_0: left promiscuous mode [ 1035.843933][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.084958][ T5774] Bluetooth: hci1: command tx timeout [ 1037.454543][ T8667] bond6 (unregistering): Released all slaves [ 1037.772094][ T8667] bond5 (unregistering): Released all slaves [ 1038.091850][ T8667] bond4 (unregistering): Released all slaves [ 1038.199653][T15483] syz.2.2442 (15483): drop_caches: 2 [ 1038.331187][ T8667] bond3 (unregistering): Released all slaves [ 1038.528361][ T8667] bond2 (unregistering): Released all slaves [ 1038.556199][ T8667] pim6reg (unregistering): left allmulticast mode [ 1038.801258][ T8667] bond1 (unregistering): Released all slaves [ 1039.417745][ T8667] team0 (unregistering): Port device team_slave_1 removed [ 1039.475709][ T8667] team0 (unregistering): Port device team_slave_0 removed [ 1039.538739][ T8667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.595488][ T8667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.005540][ T8667] bond0 (unregistering): Released all slaves [ 1040.202986][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 1040.222992][T15480] netlink: 'syz.2.2442': attribute type 20 has an invalid length. [ 1040.231296][T15480] netlink: 'syz.2.2442': attribute type 21 has an invalid length. [ 1040.299634][T15487] tipc: Enabling of bearer rejected, failed to enable media [ 1045.404193][T15547] tipc: Enabled bearer , priority 0 [ 1045.416154][ T8667] IPVS: stop unused estimator thread 0... [ 1045.425950][T15543] syzkaller0: entered promiscuous mode [ 1045.446331][T15543] syzkaller0: entered allmulticast mode [ 1045.668073][T15542] tipc: Resetting bearer [ 1045.771169][T15542] tipc: Disabling bearer [ 1045.900704][T15344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1045.946932][T15344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1045.976643][T15344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1046.022048][T15344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1046.300750][T15344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.371819][T15344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.399708][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.407036][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.461864][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.469125][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.213201][T15589] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1048.571708][T15344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.815644][T15344] veth0_vlan: entered promiscuous mode [ 1048.828636][T15344] veth1_vlan: entered promiscuous mode [ 1049.019378][T15344] veth0_macvtap: entered promiscuous mode [ 1049.042852][T15344] veth1_macvtap: entered promiscuous mode [ 1049.071091][T15344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.163891][T15344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.222497][T15344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.273051][T15593] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1049.277369][T15344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.298455][T15344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.315001][T15344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.326861][T15344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.337965][T15344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.348595][T15344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.358693][T15344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.371796][T15344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.453843][T15344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.492256][T15344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.520965][T15344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.585950][T15344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.635174][T15344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.666713][T15344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.704844][T15344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.470343][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.509098][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.615750][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.635628][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.710337][T15606] tipc: Enabled bearer , priority 0 [ 1050.734091][T15606] syzkaller0: entered promiscuous mode [ 1050.739619][T15606] syzkaller0: entered allmulticast mode [ 1050.859994][T15605] tipc: Resetting bearer [ 1050.966178][T15605] tipc: Disabling bearer [ 1052.595927][T15645] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1052.687411][T15648] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1054.627206][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.633561][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.650002][T15695] ªªªªªª: renamed from vlan0 (while UP) [ 1057.527837][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'. [ 1057.720165][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'. [ 1057.736350][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'. [ 1057.750190][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'. [ 1058.678518][T15714] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1059.041641][ T3484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.196434][T13772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1059.211185][T13772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1059.223448][T13772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1059.268831][ T3484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.334084][T13772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.343051][T13772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1059.351393][T13772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1059.676324][ T3484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.123118][ T3484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.179018][T15720] chnl_net:caif_netlink_parms(): no params data found [ 1061.426694][T13772] Bluetooth: hci0: command tx timeout [ 1061.734758][ T3484] tipc: Left network mode [ 1062.889288][T15773] misc userio: The device must be registered before sending interrupts [ 1062.908566][ T3484] bond1: (slave ip6erspan0): Releasing active interface [ 1063.203152][T15720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.260851][T15720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.284314][T15720] bridge_slave_0: entered allmulticast mode [ 1063.304563][T15720] bridge_slave_0: entered promiscuous mode [ 1063.445727][T15720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.472953][T15720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.482431][T15720] bridge_slave_1: entered allmulticast mode [ 1063.490154][T15720] bridge_slave_1: entered promiscuous mode [ 1063.504000][T13772] Bluetooth: hci0: command tx timeout [ 1063.789595][T15788] loop5: detected capacity change from 0 to 7 [ 1063.794134][T15720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.803553][T10558] Dev loop5: unable to read RDB block 7 [ 1063.815743][T10558] loop5: AHDI p1 p2 p3 [ 1063.820086][T10558] loop5: partition table partially beyond EOD, truncated [ 1063.843383][T15720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.854232][T10558] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1063.883297][T10558] loop5: p3 start 335544320 is beyond EOD, truncated [ 1063.894637][T15788] Dev loop5: unable to read RDB block 7 [ 1063.901855][T15788] loop5: AHDI p1 p2 p3 [ 1063.906409][T15788] loop5: partition table partially beyond EOD, truncated [ 1063.920466][T15788] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1063.934023][T15788] loop5: p3 start 335544320 is beyond EOD, truncated [ 1064.228807][T15720] team0: Port device team_slave_0 added [ 1064.320353][T15720] team0: Port device team_slave_1 added [ 1064.391329][T15720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.420109][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.524004][T15720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.645720][T15799] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1065.288083][T15720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.302629][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.328986][T15720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.471955][T15720] hsr_slave_0: entered promiscuous mode [ 1065.495993][T15720] hsr_slave_1: entered promiscuous mode [ 1065.525449][T15720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1065.550322][T15720] Cannot create hsr debugfs directory [ 1065.585684][T13772] Bluetooth: hci0: command tx timeout [ 1066.184024][ T3484] hsr_slave_0: left promiscuous mode [ 1066.199912][ T3484] hsr_slave_1: left promiscuous mode [ 1066.229347][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.248334][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.272263][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.293198][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.312685][ T3484] bridge_slave_1: left allmulticast mode [ 1066.323970][T10557] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1066.329023][ T3484] bridge_slave_1: left promiscuous mode [ 1066.344086][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.363415][ T3484] bridge_slave_0: left allmulticast mode [ 1066.377348][ T3484] bridge_slave_0: left promiscuous mode [ 1066.393329][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.469544][ T3484] veth1_macvtap: left promiscuous mode [ 1066.481617][ T3484] veth0_macvtap: left promiscuous mode [ 1066.493377][ T3484] veth1_vlan: left promiscuous mode [ 1066.546982][T10557] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 1066.572212][T10557] usb 1-1: config 5 has no interface number 0 [ 1066.592453][T10557] usb 1-1: config 5 interface 75 has no altsetting 0 [ 1066.619815][T10557] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1066.653834][T10557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.684954][T10557] usb 1-1: Product: syz [ 1066.689182][T10557] usb 1-1: Manufacturer: syz [ 1066.707811][T10557] usb 1-1: SerialNumber: syz [ 1067.120501][ T3484] bond4 (unregistering): Released all slaves [ 1067.292581][T15837] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1067.675673][T13772] Bluetooth: hci0: command tx timeout [ 1068.186967][ T3484] bond3 (unregistering): Released all slaves [ 1068.211636][T15840] misc userio: The device must be registered before sending interrupts [ 1068.507578][ T3484] bond2 (unregistering): Released all slaves [ 1068.805462][ T3484] bond1 (unregistering): Released all slaves [ 1069.546170][T10557] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1069.565946][T10557] gspca_sunplus: reg_w_riv err -71 [ 1069.571306][T10557] sunplus: probe of 1-1:5.75 failed with error -71 [ 1069.586393][T10557] usb 1-1: USB disconnect, device number 36 [ 1070.311847][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 1070.408601][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 1070.523395][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.586818][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.188017][ T3484] bond0 (unregistering): Released all slaves [ 1073.005780][ T3484] IPVS: stop unused estimator thread 0... [ 1073.601320][T15720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1073.636398][T15720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1073.674147][T15720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1073.719686][T15720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1073.886776][T15720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.951134][T15720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.986573][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.993825][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.031602][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.038871][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.112165][T15720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1074.561542][T15720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.668937][T15720] veth0_vlan: entered promiscuous mode [ 1074.719431][T15720] veth1_vlan: entered promiscuous mode [ 1074.794539][T15720] veth0_macvtap: entered promiscuous mode [ 1074.848100][T15720] veth1_macvtap: entered promiscuous mode [ 1074.909622][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.953208][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.063885][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.083852][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.123865][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.168004][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.220308][T15720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.292315][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.353835][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.383062][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.403773][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.424035][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.443760][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.535389][T15720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.615155][T15720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.673792][T15720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.682697][T15720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.703391][T15720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.063539][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.100839][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.316944][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.390198][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.467743][T15925] misc userio: The device must be registered before sending interrupts [ 1077.966876][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'. [ 1078.000651][T15934] netlink: 'syz.1.2515': attribute type 20 has an invalid length. [ 1078.044253][T15934] netlink: 'syz.1.2515': attribute type 21 has an invalid length. [ 1078.207074][T15934] syz.1.2515 (15934): drop_caches: 2 [ 1078.373797][T13261] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1078.587218][T13261] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 1078.622208][T13261] usb 1-1: config 5 has no interface number 0 [ 1078.650632][T13261] usb 1-1: config 5 interface 75 has no altsetting 0 [ 1078.687763][T13261] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1078.717363][T13261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.747772][T13261] usb 1-1: Product: syz [ 1078.752109][T13261] usb 1-1: Manufacturer: syz [ 1078.793906][T13261] usb 1-1: SerialNumber: syz [ 1079.637039][T15953] delete_channel: no stack [ 1080.885635][T15985] misc userio: The device must be registered before sending interrupts [ 1082.139000][T13261] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1082.174420][T13261] gspca_sunplus: reg_w_riv err -71 [ 1082.190389][T13261] sunplus: probe of 1-1:5.75 failed with error -71 [ 1082.208427][T13261] usb 1-1: USB disconnect, device number 37 [ 1082.976489][T16004] delete_channel: no stack [ 1083.355422][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1083.381920][T15992] netlink: 'syz.2.2527': attribute type 20 has an invalid length. [ 1083.420967][T15992] netlink: 'syz.2.2527': attribute type 21 has an invalid length. [ 1083.466799][T16003] syz.2.2527 (16003): drop_caches: 2 [ 1085.593943][T10557] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1085.733662][T16038] misc userio: The device must be registered before sending interrupts [ 1085.796015][T10557] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 1085.810065][T10557] usb 4-1: config 5 has no interface number 0 [ 1085.818162][T10557] usb 4-1: config 5 interface 75 has no altsetting 0 [ 1085.840058][T10557] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1085.850750][T10557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.860720][T10557] usb 4-1: Product: syz [ 1085.866389][T10557] usb 4-1: Manufacturer: syz [ 1085.871989][T10557] usb 4-1: SerialNumber: syz [ 1086.305769][T16044] delete_channel: no stack [ 1087.949469][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 1087.967631][T16053] netlink: 'syz.1.2542': attribute type 20 has an invalid length. [ 1087.977948][T16053] netlink: 'syz.1.2542': attribute type 21 has an invalid length. [ 1088.006476][T16053] syz.1.2542 (16053): drop_caches: 2 [ 1088.940029][T16073] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1089.785476][T10557] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1089.842742][T10557] gspca_sunplus: reg_w_riv err -71 [ 1089.865468][T10557] sunplus: probe of 4-1:5.75 failed with error -71 [ 1089.911587][T10557] usb 4-1: USB disconnect, device number 29 [ 1090.295265][T16085] delete_channel: no stack [ 1091.278842][T16098] misc userio: The device must be registered before sending interrupts [ 1094.404673][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 1094.419893][T16130] netlink: 'syz.0.2556': attribute type 20 has an invalid length. [ 1094.430781][T16130] netlink: 'syz.0.2556': attribute type 21 has an invalid length. [ 1094.479789][T16129] syz.0.2556 (16129): drop_caches: 2 [ 1095.321779][T16125] delete_channel: no stack [ 1095.422196][T16135] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1095.458156][T10557] IPVS: starting estimator thread 0... [ 1095.553959][T16141] IPVS: using max 20 ests per chain, 48000 per kthread [ 1095.793927][T13261] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1095.990679][T13261] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1096.007953][T13261] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 1096.019431][T13261] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.036639][T13261] usb 4-1: config 129 has no interface number 0 [ 1096.043237][T13261] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1096.061650][T13261] usb 4-1: config 129 interface 135 has no altsetting 0 [ 1096.078864][T13261] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1096.088653][T13261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.102983][T13261] usb 4-1: Product: syz [ 1096.108978][T13261] usb 4-1: Manufacturer: syz [ 1096.118824][T13261] usb 4-1: SerialNumber: syz [ 1097.669495][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 1098.572435][T13261] usb 4-1: USB disconnect, device number 30 [ 1100.736003][T16178] misc userio: The device must be registered before sending interrupts [ 1101.787564][T16183] delete_channel: no stack [ 1102.115290][T16190] loop3: detected capacity change from 0 to 8 [ 1102.324907][T16191] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1102.332832][T16191] SQUASHFS error: Failed to read block 0x0: -5 [ 1102.339209][T16191] SQUASHFS error: Failed to read block 0xff: -5 [ 1102.345606][T16191] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1102.353576][T16191] SQUASHFS error: Failed to read block 0x0: -5 [ 1102.360424][ T27] audit: type=1800 audit(1775213274.048:17): pid=16191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2575" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 1102.583772][ T5156] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1102.844272][ T5156] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1102.853270][ T5156] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1102.861972][ T5156] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.872383][ T5156] usb 3-1: config 129 has no interface number 0 [ 1102.878889][ T5156] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1102.892188][ T5156] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1102.902846][ T5156] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1102.913835][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.923256][ T5156] usb 3-1: Product: syz [ 1102.934108][ T5156] usb 3-1: Manufacturer: syz [ 1102.938760][ T5156] usb 3-1: SerialNumber: syz [ 1105.440737][ T5156] usb 3-1: USB disconnect, device number 33 [ 1105.762285][T16213] delete_channel: no stack [ 1106.200728][T16234] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1107.589918][T16241] loop1: detected capacity change from 0 to 8 [ 1107.771299][T16242] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1107.779371][T16242] SQUASHFS error: Failed to read block 0x0: -5 [ 1107.785720][T16242] SQUASHFS error: Failed to read block 0xff: -5 [ 1107.792039][T16242] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1107.800008][T16242] SQUASHFS error: Failed to read block 0x0: -5 [ 1107.810427][ T27] audit: type=1800 audit(1775213279.498:18): pid=16242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2588" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 1109.994081][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1110.178058][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1110.193121][ T23] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1110.203992][ T23] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.216466][ T23] usb 3-1: config 129 has no interface number 0 [ 1110.223305][ T23] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1110.240196][ T23] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1110.256026][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1110.265693][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.274325][ T23] usb 3-1: Product: syz [ 1110.278742][ T23] usb 3-1: Manufacturer: syz [ 1110.283630][ T23] usb 3-1: SerialNumber: syz [ 1110.532630][T16259] delete_channel: no stack [ 1111.448971][T16276] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1112.470542][ T23] usb 3-1: USB disconnect, device number 34 [ 1112.909043][T16295] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1112.937886][ T789] IPVS: starting estimator thread 0... [ 1114.213824][T16299] IPVS: using max 22 ests per chain, 52800 per kthread [ 1115.736046][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 1115.746244][T16300] netlink: 'syz.1.2602': attribute type 20 has an invalid length. [ 1115.764020][T16300] netlink: 'syz.1.2602': attribute type 21 has an invalid length. [ 1115.845512][T16300] syz.1.2602 (16300): drop_caches: 2 [ 1116.068008][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.074990][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.754676][T16328] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1118.398666][ T5156] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1118.452800][T16330] loop0: detected capacity change from 0 to 8 [ 1118.795919][T16338] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1118.804669][T16338] SQUASHFS error: Failed to read block 0x0: -5 [ 1118.811326][T16338] SQUASHFS error: Failed to read block 0xff: -5 [ 1118.818613][T16338] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1118.826634][T16338] SQUASHFS error: Failed to read block 0x0: -5 [ 1118.851144][ T27] audit: type=1800 audit(1775213290.518:19): pid=16338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2612" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 1118.894542][ T5156] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1118.980943][ T5156] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 1119.099012][ T5156] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.262621][ T5156] usb 4-1: config 129 has no interface number 0 [ 1119.387185][ T5156] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1119.400911][ T5156] usb 4-1: config 129 interface 135 has no altsetting 0 [ 1119.411077][ T5156] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1119.430181][ T5156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.438624][ T5156] usb 4-1: Product: syz [ 1119.443049][ T5156] usb 4-1: Manufacturer: syz [ 1119.448105][ T5156] usb 4-1: SerialNumber: syz [ 1119.682556][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 1119.702935][T16344] netlink: 'syz.2.2614': attribute type 20 has an invalid length. [ 1119.726512][T16344] netlink: 'syz.2.2614': attribute type 21 has an invalid length. [ 1119.843362][T16344] syz.2.2614 (16344): drop_caches: 2 [ 1119.884472][T16352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2616'. [ 1120.861031][ T5156] usb 4-1: USB disconnect, device number 31 [ 1121.931537][T16362] delete_channel: no stack [ 1122.533835][ T23] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1122.761647][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1122.781044][ T23] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 1122.791887][ T23] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.814110][ T23] usb 2-1: config 129 has no interface number 0 [ 1122.820765][ T23] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1122.838260][ T23] usb 2-1: config 129 interface 135 has no altsetting 0 [ 1122.868196][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1122.878897][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.889115][ T23] usb 2-1: Product: syz [ 1122.894341][ T23] usb 2-1: Manufacturer: syz [ 1122.900224][ T23] usb 2-1: SerialNumber: syz [ 1123.137508][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 1123.149744][T16388] netlink: 'syz.2.2625': attribute type 20 has an invalid length. [ 1123.157926][T16388] netlink: 'syz.2.2625': attribute type 21 has an invalid length. [ 1123.191015][T16388] syz.2.2625 (16388): drop_caches: 2 [ 1123.267603][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 1125.560601][ T23] usb 2-1: USB disconnect, device number 45 [ 1127.002217][T16441] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1127.002463][ T23] IPVS: starting estimator thread 0... [ 1127.123897][T16445] IPVS: using max 20 ests per chain, 48000 per kthread [ 1127.681943][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 1127.729626][T16424] netlink: 'syz.2.2637': attribute type 20 has an invalid length. [ 1127.752113][T16424] netlink: 'syz.2.2637': attribute type 21 has an invalid length. [ 1127.845882][T16443] syz.2.2637 (16443): drop_caches: 2 [ 1128.385242][ T789] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1128.577880][ T789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1128.591840][ T789] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1128.607870][ T789] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.618941][ T789] usb 1-1: config 129 has no interface number 0 [ 1128.625663][ T789] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1128.640414][ T789] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1128.650309][ T789] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1128.659946][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.668458][ T789] usb 1-1: Product: syz [ 1128.683943][ T789] usb 1-1: Manufacturer: syz [ 1128.723875][ T789] usb 1-1: SerialNumber: syz [ 1130.262296][T16490] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1131.114112][ T789] usb 1-1: USB disconnect, device number 38 [ 1133.344150][T16525] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1135.331099][ T5156] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1135.896775][ T5156] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1135.931790][ T5156] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1135.943028][ T5156] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.956754][ T5156] usb 1-1: config 129 has no interface number 0 [ 1135.964043][ T5156] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1135.977506][ T5156] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1136.006244][ T5156] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1136.033647][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.042589][ T5156] usb 1-1: Product: syz [ 1136.053041][ T5156] usb 1-1: Manufacturer: syz [ 1136.059412][ T5156] usb 1-1: SerialNumber: syz [ 1136.399970][T16546] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1136.532579][ T789] IPVS: starting estimator thread 0... [ 1136.723998][T16549] IPVS: using max 19 ests per chain, 45600 per kthread [ 1138.376989][ T5156] usb 1-1: USB disconnect, device number 39 [ 1140.204647][T16593] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1141.252509][T16600] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1141.533867][ T5156] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1141.727098][ T5156] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1141.741852][ T5156] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1141.751031][ T5156] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.763787][ T5156] usb 1-1: config 129 has no interface number 0 [ 1141.772892][ T5156] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1141.792845][ T5156] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1141.803614][ T5156] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1141.813477][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.821897][ T5156] usb 1-1: Product: syz [ 1141.826702][ T5156] usb 1-1: Manufacturer: syz [ 1141.831410][ T5156] usb 1-1: SerialNumber: syz [ 1144.259609][ T5156] usb 1-1: USB disconnect, device number 40 [ 1144.333041][T16645] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1145.679088][T16665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2701'. [ 1146.645431][T16676] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1147.641463][T13397] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1147.783948][ T5156] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1148.329105][ T5156] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 1148.340252][ T5156] usb 1-1: config 5 has no interface number 0 [ 1148.346871][ T5156] usb 1-1: config 5 interface 75 has no altsetting 0 [ 1148.366834][ T5156] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1148.376036][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.384849][ T5156] usb 1-1: Product: syz [ 1148.389035][ T5156] usb 1-1: Manufacturer: syz [ 1148.394769][ T5156] usb 1-1: SerialNumber: syz [ 1148.511809][T13397] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1148.527739][T13397] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1148.738472][T13397] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.749166][T13397] usb 3-1: config 129 has no interface number 0 [ 1148.755922][T13397] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1148.769797][T13397] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1148.793824][T13397] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1148.823776][T13397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.852234][T13397] usb 3-1: Product: syz [ 1148.861709][T13397] usb 3-1: Manufacturer: syz [ 1148.876554][T13397] usb 3-1: SerialNumber: syz [ 1149.577098][T16702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1150.381267][T13397] usb 3-1: USB disconnect, device number 35 [ 1150.856913][T16715] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1152.684345][ T5156] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1152.698330][ T5156] gspca_sunplus: reg_w_riv err -71 [ 1152.703562][ T5156] sunplus: probe of 1-1:5.75 failed with error -71 [ 1152.742842][ T5156] usb 1-1: USB disconnect, device number 41 [ 1154.077543][ T23] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1154.143935][T16747] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1154.553015][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 1154.987953][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1155.016201][ T23] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1155.042728][ T23] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.059033][ T23] usb 3-1: config 129 has no interface number 0 [ 1155.169018][ T23] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1155.182807][ T23] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1155.195132][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1155.210985][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.219180][ T23] usb 3-1: Product: syz [ 1155.223395][ T23] usb 3-1: Manufacturer: syz [ 1155.232181][ T23] usb 3-1: SerialNumber: syz [ 1155.332721][T16755] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1157.703306][ T23] usb 3-1: USB disconnect, device number 36 [ 1160.047039][T16802] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1161.762860][ T5156] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1162.847459][ T5156] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1162.859055][ T5156] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 1162.868117][ T5156] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.878978][ T5156] usb 2-1: config 129 has no interface number 0 [ 1162.885730][ T5156] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1162.992175][ T5156] usb 2-1: config 129 interface 135 has no altsetting 0 [ 1163.014372][ T5156] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1163.023599][ T5156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.036969][ T5156] usb 2-1: Product: syz [ 1163.042076][ T5156] usb 2-1: Manufacturer: syz [ 1163.053832][ T5156] usb 2-1: SerialNumber: syz [ 1164.524467][T16852] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1165.254057][ T5156] usb 2-1: USB disconnect, device number 46 [ 1165.794565][ T5156] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1166.016868][ T5156] usb 2-1: config 5 has an invalid interface number: 75 but max is 0 [ 1166.107982][ T5156] usb 2-1: config 5 has no interface number 0 [ 1166.123834][ T5156] usb 2-1: config 5 interface 75 has no altsetting 0 [ 1166.146101][ T5156] usb 2-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1166.165747][ T5156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.183785][ T5156] usb 2-1: Product: syz [ 1166.188081][ T5156] usb 2-1: Manufacturer: syz [ 1166.192701][ T5156] usb 2-1: SerialNumber: syz [ 1168.590337][ T5156] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1168.599727][ T5156] gspca_sunplus: reg_w_riv err -71 [ 1168.611918][ T5156] sunplus: probe of 2-1:5.75 failed with error -71 [ 1168.629307][ T5156] usb 2-1: USB disconnect, device number 47 [ 1169.169833][T16893] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1169.182269][ T5156] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1170.094241][ T5156] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1170.120114][ T5156] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 1170.133842][ T5156] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.154392][ T5156] usb 2-1: config 129 has no interface number 0 [ 1170.165281][ T5156] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1170.182889][ T5156] usb 2-1: config 129 interface 135 has no altsetting 0 [ 1170.199322][ T5156] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1170.227861][ T5156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.240788][ T5156] usb 2-1: Product: syz [ 1170.245502][ T5156] usb 2-1: Manufacturer: syz [ 1170.250208][ T5156] usb 2-1: SerialNumber: syz [ 1170.504366][T16903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2763'. [ 1171.456750][T16916] can0: slcan on ttyS3. [ 1172.401122][ T5156] usb 2-1: USB disconnect, device number 48 [ 1173.353972][T16909] can0 (unregistered): slcan off ttyS3. [ 1174.054136][ T789] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1174.115370][T16941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1174.385828][T16942] misc userio: The device must be registered before sending interrupts [ 1174.621461][ T789] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 1174.679128][ T789] usb 4-1: config 5 has no interface number 0 [ 1174.714035][ T789] usb 4-1: config 5 interface 75 has no altsetting 0 [ 1174.812922][ T789] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1174.835745][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.858239][ T789] usb 4-1: Product: syz [ 1174.862455][ T789] usb 4-1: Manufacturer: syz [ 1174.896489][ T789] usb 4-1: SerialNumber: syz [ 1175.323798][ T5156] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1175.515929][ T5156] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1175.534547][ T5156] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1175.548317][ T5156] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.572469][ T5156] usb 1-1: config 129 has no interface number 0 [ 1175.586398][ T5156] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1175.601995][ T5156] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1175.622854][ T5156] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1175.633280][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.642603][ T5156] usb 1-1: Product: syz [ 1175.647259][ T5156] usb 1-1: Manufacturer: syz [ 1175.652094][ T5156] usb 1-1: SerialNumber: syz [ 1177.508833][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.521030][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.540530][ T789] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1177.552492][ T789] gspca_sunplus: reg_w_riv err -71 [ 1177.599213][ T789] sunplus: probe of 4-1:5.75 failed with error -71 [ 1177.632377][ T789] usb 4-1: USB disconnect, device number 32 [ 1177.963878][ T5156] usb 1-1: USB disconnect, device number 42 [ 1178.436432][T17000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2783'. [ 1180.124625][T17008] misc userio: The device must be registered before sending interrupts [ 1181.822624][T13397] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1182.021416][T13397] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 1182.084110][T13397] usb 1-1: config 5 has no interface number 0 [ 1182.090648][T13397] usb 1-1: config 5 interface 75 has no altsetting 0 [ 1182.332094][T13397] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1182.358082][T13397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.381863][T13397] usb 1-1: Product: syz [ 1182.390702][T13397] usb 1-1: Manufacturer: syz [ 1182.396562][T13397] usb 1-1: SerialNumber: syz [ 1184.703945][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 1184.897490][T13397] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1184.929898][T13397] gspca_sunplus: reg_w_riv err -71 [ 1184.946638][T13397] sunplus: probe of 1-1:5.75 failed with error -71 [ 1184.992786][T13397] usb 1-1: USB disconnect, device number 43 [ 1185.310966][T17044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2793'. [ 1185.527923][T17046] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1188.324424][T17059] can0: slcan on ttyS3. [ 1188.534073][T17056] can0 (unregistered): slcan off ttyS3. [ 1188.780667][T17060] misc userio: The device must be registered before sending interrupts [ 1189.279673][T17084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2804'. [ 1190.153848][T10557] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1190.738565][T10557] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 1190.771080][T10557] usb 4-1: config 5 has no interface number 0 [ 1190.786856][T10557] usb 4-1: config 5 interface 75 has no altsetting 0 [ 1190.808595][T10557] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1190.818613][T10557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.904469][T10557] usb 4-1: Product: syz [ 1190.914997][T10557] usb 4-1: Manufacturer: syz [ 1190.919619][T10557] usb 4-1: SerialNumber: syz [ 1192.632981][T17108] misc userio: The device must be registered before sending interrupts [ 1194.040577][T17126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2815'. [ 1194.927044][T10557] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1194.956807][T10557] gspca_sunplus: reg_w_riv err -71 [ 1195.174501][T10557] sunplus: probe of 4-1:5.75 failed with error -71 [ 1195.191943][T10557] usb 4-1: USB disconnect, device number 33 [ 1196.251156][T17148] misc userio: The device must be registered before sending interrupts [ 1196.614636][T17150] ªªªªªª: renamed from vlan0 (while UP) [ 1198.893255][ T9846] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1199.177476][T17180] misc userio: The device must be registered before sending interrupts [ 1199.271776][ T9846] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 1199.327362][ T9846] usb 4-1: config 5 has no interface number 0 [ 1199.371406][ T9846] usb 4-1: config 5 interface 75 has no altsetting 0 [ 1199.402885][ T9846] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1199.442019][ T9846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.463843][ T9846] usb 4-1: Product: syz [ 1199.468071][ T9846] usb 4-1: Manufacturer: syz [ 1199.472685][ T9846] usb 4-1: SerialNumber: syz [ 1200.935787][ T9846] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1200.988210][ T9846] gspca_sunplus: reg_w_riv err -71 [ 1200.993445][ T9846] sunplus: probe of 4-1:5.75 failed with error -71 [ 1201.030014][ T9846] usb 4-1: USB disconnect, device number 34 [ 1203.271515][T17212] misc userio: The device must be registered before sending interrupts [ 1205.183865][T14998] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1205.329500][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 1205.343962][T17220] netlink: 'syz.0.2842': attribute type 20 has an invalid length. [ 1205.351916][T17220] netlink: 'syz.0.2842': attribute type 21 has an invalid length. [ 1205.373250][T17220] syz.0.2842 (17220): drop_caches: 2 [ 1205.386298][T14998] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 1205.398830][T14998] usb 4-1: config 5 has no interface number 0 [ 1205.405332][T14998] usb 4-1: config 5 interface 75 has no altsetting 0 [ 1205.458653][T14998] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1205.567237][T14998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.691285][T14998] usb 4-1: Product: syz [ 1205.757093][T14998] usb 4-1: Manufacturer: syz [ 1205.811828][T14998] usb 4-1: SerialNumber: syz [ 1206.183344][T17246] ªªªªªª: renamed from vlan0 (while UP) [ 1209.841847][T17265] misc userio: The device must be registered before sending interrupts [ 1211.126619][T14998] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1211.260764][T14998] gspca_sunplus: reg_w_riv err -32 [ 1211.376106][T14998] sunplus: probe of 4-1:5.75 failed with error -32 [ 1211.591111][ T23] usb 4-1: USB disconnect, device number 35 [ 1212.015883][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 1212.028155][T17278] netlink: 'syz.2.2857': attribute type 20 has an invalid length. [ 1212.037176][T17278] netlink: 'syz.2.2857': attribute type 21 has an invalid length. [ 1212.624629][T17278] syz.2.2857 (17278): drop_caches: 2 [ 1216.123793][ T5826] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1216.441426][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 1216.473918][T17335] netlink: 'syz.0.2873': attribute type 20 has an invalid length. [ 1216.494842][ T5826] usb 2-1: config 5 has an invalid interface number: 75 but max is 0 [ 1216.502330][T17335] netlink: 'syz.0.2873': attribute type 21 has an invalid length. [ 1216.503134][ T5826] usb 2-1: config 5 has no interface number 0 [ 1216.521176][ T5826] usb 2-1: config 5 interface 75 has no altsetting 0 [ 1216.530429][ T5826] usb 2-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1216.540400][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.548906][ T5826] usb 2-1: Product: syz [ 1216.553201][ T5826] usb 2-1: Manufacturer: syz [ 1216.557854][ T5826] usb 2-1: SerialNumber: syz [ 1217.547196][T17335] syz.0.2873 (17335): drop_caches: 2 [ 1218.202388][ T5826] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1218.213544][ T5826] gspca_sunplus: reg_w_riv err -71 [ 1218.223657][ T5826] sunplus: probe of 2-1:5.75 failed with error -71 [ 1218.242479][ T5826] usb 2-1: USB disconnect, device number 49 [ 1219.650182][T17380] input: syz1 as /devices/virtual/input/input14 [ 1224.749504][T17408] misc userio: Invalid payload size [ 1225.194064][T13397] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1225.395037][T13397] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 1225.405408][T13397] usb 4-1: config 5 has no interface number 0 [ 1225.411953][T13397] usb 4-1: config 5 interface 75 has no altsetting 0 [ 1225.428610][T13397] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 1225.438132][T13397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.447116][T13397] usb 4-1: Product: syz [ 1225.451681][T13397] usb 4-1: Manufacturer: syz [ 1225.456929][T13397] usb 4-1: SerialNumber: syz [ 1225.854045][T13397] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1225.860763][T13397] gspca_sunplus: reg_w_riv err -71 [ 1225.867128][T13397] sunplus: probe of 4-1:5.75 failed with error -71 [ 1225.880390][T13397] usb 4-1: USB disconnect, device number 36 [ 1228.965007][T17438] misc userio: Invalid payload size [ 1229.120722][T17456] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1229.713223][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2902'. [ 1229.722380][T17444] netlink: 'syz.3.2902': attribute type 20 has an invalid length. [ 1229.730752][T17444] netlink: 'syz.3.2902': attribute type 21 has an invalid length. [ 1229.817587][T17444] syz.3.2902 (17444): drop_caches: 2 [ 1231.753307][T17493] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1231.894427][T17497] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1233.929532][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2919'. [ 1233.943532][T17506] netlink: 'syz.1.2919': attribute type 20 has an invalid length. [ 1233.960804][T17506] netlink: 'syz.1.2919': attribute type 21 has an invalid length. [ 1234.136700][T17506] syz.1.2919 (17506): drop_caches: 2 [ 1235.187997][T17539] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1238.948978][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.955411][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.209438][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 1240.219679][T17571] netlink: 'syz.2.2937': attribute type 20 has an invalid length. [ 1240.227649][T17571] netlink: 'syz.2.2937': attribute type 21 has an invalid length. [ 1240.250817][T17571] syz.2.2937 (17571): drop_caches: 2 [ 1252.027962][T17685] can0: slcan on ttyS3. [ 1253.854670][T17675] can0 (unregistered): slcan off ttyS3. [ 1257.952485][T17739] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1258.979842][T17738] can0: slcan on ttyS3. [ 1259.566897][T17728] can0 (unregistered): slcan off ttyS3. [ 1259.699588][ T9846] libceph: connect (1)[c::]:6789 error -101 [ 1259.838227][ T9846] libceph: mon0 (1)[c::]:6789 connect error [ 1260.863736][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1260.923844][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1260.988446][T17747] ceph: No mds server is up or the cluster is laggy [ 1263.089243][T17780] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1263.916118][T17784] can0: slcan on ttyS3. [ 1265.034230][T17776] can0 (unregistered): slcan off ttyS3. [ 1268.970956][T17824] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1274.150331][T17880] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1275.689704][T17900] can0: slcan on ttyS3. [ 1276.255370][T17891] can0 (unregistered): slcan off ttyS3. [ 1277.294184][T17915] can0: slcan on ttyS3. [ 1279.254873][T17909] can0 (unregistered): slcan off ttyS3. [ 1280.499627][T17934] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1281.531064][T17946] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1287.383512][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1287.391800][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1287.657753][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1287.664088][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1288.738047][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1288.744177][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1288.751309][T18025] ceph: No mds server is up or the cluster is laggy [ 1291.661313][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1291.673961][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1291.955442][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1291.962246][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1291.996941][T18085] ceph: No mds server is up or the cluster is laggy [ 1292.400025][T18106] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1294.305666][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1294.319036][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1294.594901][T10557] libceph: connect (1)[c::]:6789 error -101 [ 1294.602380][T10557] libceph: mon0 (1)[c::]:6789 connect error [ 1295.115212][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1295.122650][T18133] ceph: No mds server is up or the cluster is laggy [ 1295.142831][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1296.763971][T18168] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1297.622170][T18179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.668670][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1297.684042][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1297.966434][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1298.044275][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1298.400866][T18182] ceph: No mds server is up or the cluster is laggy [ 1300.388476][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.395317][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.950318][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1300.973973][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1301.256883][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1301.295604][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1301.769914][T18232] ceph: No mds server is up or the cluster is laggy [ 1302.661054][T18258] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3122'. [ 1302.807240][T18258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3122'. [ 1305.451229][T18291] binder_alloc: 18288: binder_alloc_buf, no vma [ 1317.103094][ T27] audit: type=1800 audit(1775213488.788:20): pid=18438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3180" name="bus" dev="overlay" ino=1005 res=0 errno=0 [ 1321.850346][T18497] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1324.620783][T18553] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1327.289515][T18587] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1331.814975][T18620] can0: slcan on ttyS3. [ 1333.134761][T18613] can0 (unregistered): slcan off ttyS3. [ 1333.317702][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1333.327148][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1333.667245][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1333.673259][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1333.968508][T18628] ceph: No mds server is up or the cluster is laggy [ 1335.121831][T18656] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1335.128405][T18656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1335.158990][T18656] vhci_hcd vhci_hcd.0: Device attached [ 1335.424285][ T5156] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1336.350075][T18657] vhci_hcd: connection reset by peer [ 1336.515359][ T3450] vhci_hcd: stop threads [ 1336.519656][ T3450] vhci_hcd: release socket [ 1336.573887][ T3450] vhci_hcd: disconnect device [ 1337.798424][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1337.806616][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1338.094382][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1338.101820][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1338.567048][T18679] ceph: No mds server is up or the cluster is laggy [ 1339.407189][T18706] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1339.413765][T18706] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1339.446712][T18706] vhci_hcd vhci_hcd.0: Device attached [ 1339.476576][T18707] vhci_hcd: connection closed [ 1339.478049][ T1280] vhci_hcd: stop threads [ 1339.490536][ T1280] vhci_hcd: release socket [ 1339.495233][ T1280] vhci_hcd: disconnect device [ 1339.626452][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1339.640741][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1339.648006][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1339.657706][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1339.998319][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1340.089497][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1340.451480][T18712] ceph: No mds server is up or the cluster is laggy [ 1340.594119][ T5156] vhci_hcd: vhci_device speed not set [ 1340.614437][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1340.620849][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1340.817836][T10557] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1341.454163][T10557] usb 2-1: config 0 has no interfaces? [ 1341.459713][T10557] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1341.495700][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1341.505923][T10557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.518913][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1341.542964][T10557] usb 2-1: config 0 descriptor?? [ 1341.763795][ T23] usb 2-1: USB disconnect, device number 50 [ 1341.769852][T18733] ceph: No mds server is up or the cluster is laggy [ 1341.784243][T13397] libceph: connect (1)[c::]:6789 error -101 [ 1341.797776][T13397] libceph: mon0 (1)[c::]:6789 connect error [ 1342.648689][T18753] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1342.655266][T18753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1342.662981][T18753] vhci_hcd vhci_hcd.0: Device attached [ 1343.113925][T10557] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1343.404486][T18754] vhci_hcd: connection closed [ 1343.936885][ T8667] vhci_hcd: stop threads [ 1344.042125][ T8667] vhci_hcd: release socket [ 1344.072587][ T8667] vhci_hcd: disconnect device [ 1345.223924][T18771] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1347.862483][ T9846] libceph: connect (1)[c::]:6789 error -101 [ 1347.902590][ T9846] libceph: mon0 (1)[c::]:6789 connect error [ 1347.993208][T18788] binder: 18779:18788 ioctl c0046209 200000000000000 returned -22 [ 1348.325906][ T9846] libceph: connect (1)[c::]:6789 error -101 [ 1348.393533][ T9846] libceph: mon0 (1)[c::]:6789 connect error [ 1348.647574][T18782] ceph: No mds server is up or the cluster is laggy [ 1350.155435][T18791] Bluetooth: MGMT ver 1.22 [ 1350.233905][T10557] vhci_hcd: vhci_device speed not set [ 1350.615401][T18813] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1351.846202][T18822] can0: slcan on ttyS3. [ 1352.223955][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 1352.230129][T13772] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1352.865609][T18817] can0 (unregistered): slcan off ttyS3. [ 1352.963546][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1353.004197][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1353.146552][T18829] ceph: No mds server is up or the cluster is laggy [ 1354.225722][T18843] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1354.232298][T18843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1354.240274][T18843] vhci_hcd vhci_hcd.0: Device attached [ 1354.563970][ T5807] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1354.976895][T18844] vhci_hcd: connection reset by peer [ 1355.050417][ T3450] vhci_hcd: stop threads [ 1355.118363][ T3450] vhci_hcd: release socket [ 1355.179496][ T3450] vhci_hcd: disconnect device [ 1355.975432][T18863] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1357.122595][T18875] binder: BINDER_SET_CONTEXT_MGR already set [ 1357.129087][T18875] binder: 18871:18875 ioctl 4018620d 200000000040 returned -16 [ 1357.225054][ T9846] libceph: connect (1)[c::]:6789 error -101 [ 1357.231286][ T9846] libceph: mon0 (1)[c::]:6789 connect error [ 1358.699946][T18874] ceph: No mds server is up or the cluster is laggy [ 1358.707400][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1358.713453][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1359.128849][T18901] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1360.977264][ T5807] vhci_hcd: vhci_device speed not set [ 1362.243618][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.250054][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.428731][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1362.435406][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1362.531203][T18925] ceph: No mds server is up or the cluster is laggy [ 1362.575643][T18930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1362.582220][T18930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1362.590283][T18930] vhci_hcd vhci_hcd.0: Device attached [ 1362.694101][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 1362.700161][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 1363.336760][T18931] vhci_hcd: connection closed [ 1363.354609][ T5826] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1363.367483][ T3463] vhci_hcd: stop threads [ 1363.410758][ T3463] vhci_hcd: release socket [ 1363.462452][ T3463] vhci_hcd: disconnect device [ 1363.881787][T18936] binder: BINDER_SET_CONTEXT_MGR already set [ 1363.887913][T18936] binder: 18935:18936 ioctl 4018620d 200000000040 returned -16 [ 1364.143835][T18941] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1368.624087][ T5826] vhci_hcd: vhci_device speed not set [ 1370.380182][T18980] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1370.386749][T18980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1370.397202][T18980] vhci_hcd vhci_hcd.0: Device attached [ 1370.409465][T18981] vhci_hcd: connection closed [ 1370.523409][ T2936] vhci_hcd: stop threads [ 1370.665596][ T2936] vhci_hcd: release socket [ 1370.735468][ T2936] vhci_hcd: disconnect device [ 1370.812157][ T5826] usb 33-1: device descriptor read/64, error -110 [ 1370.823776][T18984] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1371.135062][ T5826] vhci_hcd: vhci_device speed not set [ 1373.108322][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1373.516606][T19024] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1373.523174][T19024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1373.531037][T19024] vhci_hcd vhci_hcd.0: Device attached [ 1373.547601][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1373.764101][T13261] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1373.812925][T19025] vhci_hcd: connection closed [ 1373.819438][T19019] ceph: No mds server is up or the cluster is laggy [ 1373.831968][ T2936] vhci_hcd: stop threads [ 1373.843488][ T2936] vhci_hcd: release socket [ 1373.869811][ T5156] libceph: connect (1)[c::]:6789 error -101 [ 1373.899352][ T9846] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 1373.938843][ T2936] vhci_hcd: disconnect device [ 1373.952781][ T5156] libceph: mon0 (1)[c::]:6789 connect error [ 1374.021225][T13261] usb 2-1: Using ep0 maxpacket: 16 [ 1374.090402][T13261] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.228965][T13261] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.366996][T13261] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1374.403561][T13261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.462543][T13261] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1375.574689][T13261] usb 2-1: USB disconnect, device number 51 [ 1375.951108][T19056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1375.957683][T19056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1375.965632][T19056] vhci_hcd vhci_hcd.0: Device attached [ 1376.828066][T19059] vhci_hcd: connection closed [ 1376.959674][ T59] vhci_hcd: stop threads [ 1377.050028][ T59] vhci_hcd: release socket [ 1377.184218][ T5826] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1377.278962][ T59] vhci_hcd: disconnect device [ 1378.273852][T13397] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1378.474969][T13397] usb 2-1: config 0 has no interfaces? [ 1378.481783][T13397] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1378.583003][T13397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.812231][T13397] usb 2-1: config 0 descriptor?? [ 1379.132116][T13397] usb 2-1: USB disconnect, device number 52 [ 1379.264594][ T9846] vhci_hcd: vhci_device speed not set [ 1382.473803][ T5826] vhci_hcd: vhci_device speed not set [ 1383.024045][T19134] can0: slcan on ttyS3. [ 1384.245042][T19126] can0 (unregistered): slcan off ttyS3. [ 1389.908754][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.163822][T13397] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1392.367455][T13397] usb 2-1: config 0 has no interfaces? [ 1392.377607][T13397] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1392.523784][T13397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.554836][T13397] usb 2-1: config 0 descriptor?? [ 1393.645658][T19139] usb 2-1: USB disconnect, device number 53 [ 1393.711852][T19219] random: crng reseeded on system resumption [ 1394.389783][T19225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.131402][T19234] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1395.198343][T19234] comedi comedi0: Minor 2 could not be opened [ 1397.895230][T19258] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1397.974547][T19258] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1398.027881][T19258] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1398.052595][T19258] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1398.071573][T19258] geneve2: entered promiscuous mode [ 1398.426488][T19273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.442451][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 1398.463022][T19263] netlink: 'syz.2.3402': attribute type 20 has an invalid length. [ 1398.472576][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3402'. [ 1398.530210][T19263] syz.2.3402 (19263): drop_caches: 2 [ 1398.707408][T19277] netlink: 'syz.0.3405': attribute type 7 has an invalid length. [ 1398.718155][T19277] netlink: 'syz.0.3405': attribute type 8 has an invalid length. [ 1402.429016][T19304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.238082][T19341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.206226][T19370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.981567][T19401] ªªªªªª: renamed from vlan0 (while UP) [ 1412.501146][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1412.512010][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1412.521324][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1412.531231][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1412.731257][T19411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.929647][T19412] can0: slcan on ttyS3. [ 1413.023887][T19218] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1413.242547][T19415] binder: 19414:19415 ioctl 4018620d 0 returned -22 [ 1413.252512][T19218] usb 2-1: config 0 has no interfaces? [ 1413.264706][T19218] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1413.275152][T19218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.294660][T19218] usb 2-1: config 0 descriptor?? [ 1413.547830][T14998] usb 2-1: USB disconnect, device number 54 [ 1413.565052][T19409] can0 (unregistered): slcan off ttyS3. [ 1415.101036][T19465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.470958][T19471] can0: slcan on ttyS3. [ 1416.111350][T19482] binder: 19480:19482 ioctl 4018620d 0 returned -22 [ 1416.144660][T19469] can0 (unregistered): slcan off ttyS3. [ 1417.454014][T19218] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1417.734688][T19218] usb 4-1: config 0 has no interfaces? [ 1417.740464][T19218] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1417.773845][T19218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.800193][T19218] usb 4-1: config 0 descriptor?? [ 1418.110472][T19218] usb 4-1: USB disconnect, device number 37 [ 1418.402640][T19520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.679673][T13772] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1418.691093][T13772] CPU: 0 PID: 13772 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1418.698859][T13772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1418.708949][T13772] Workqueue: hci3 hci_rx_work [ 1418.713683][T13772] Call Trace: [ 1418.716981][T13772] [ 1418.720024][T13772] dump_stack_lvl+0x18c/0x250 [ 1418.724740][T13772] ? show_regs_print_info+0x20/0x20 [ 1418.729977][T13772] ? load_image+0x400/0x400 [ 1418.734536][T13772] sysfs_create_dir_ns+0x26e/0x2a0 [ 1418.739685][T13772] ? sysfs_warn_dup+0xa0/0xa0 [ 1418.744396][T13772] ? do_raw_spin_unlock+0x121/0x230 [ 1418.749642][T13772] kobject_add_internal+0x61c/0xcc0 [ 1418.754882][T13772] kobject_add+0x164/0x240 [ 1418.759337][T13772] ? __rwlock_init+0x150/0x150 [ 1418.764137][T13772] ? kobject_init+0x1e0/0x1e0 [ 1418.768845][T13772] ? _raw_spin_unlock+0x28/0x40 [ 1418.773732][T13772] ? get_device_parent+0x366/0x390 [ 1418.778885][T13772] device_add+0x408/0xc20 [ 1418.783261][T13772] hci_conn_add_sysfs+0xd5/0x1e0 [ 1418.788236][T13772] le_conn_complete_evt+0xf5d/0x1540 [ 1418.793641][T13772] ? hci_event_packet+0x4cb/0x1270 [ 1418.798801][T13772] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1418.805074][T13772] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1418.810752][T13772] ? skb_pull_data+0xfb/0x200 [ 1418.815463][T13772] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1418.821653][T13772] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 1418.828107][T13772] ? hci_remote_host_features_evt+0x150/0x150 [ 1418.834202][T13772] hci_event_packet+0x7ba/0x1270 [ 1418.839173][T13772] ? bis_list+0x290/0x290 [ 1418.843530][T13772] ? lockdep_hardirqs_on+0x98/0x150 [ 1418.848756][T13772] ? hci_send_to_monitor+0xd7/0x4f0 [ 1418.853983][T13772] hci_rx_work+0x43a/0xd60 [ 1418.858435][T13772] ? process_scheduled_works+0x96f/0x15d0 [ 1418.864183][T13772] process_scheduled_works+0xa5d/0x15d0 [ 1418.869780][T13772] ? worker_attach_to_pool+0x380/0x380 [ 1418.875267][T13772] ? assign_work+0x3d2/0x5d0 [ 1418.879890][T13772] worker_thread+0xa55/0xfc0 [ 1418.884507][T13772] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1418.890420][T13772] ? _raw_spin_unlock+0x40/0x40 [ 1418.895334][T13772] kthread+0x2fa/0x390 [ 1418.899421][T13772] ? pr_cont_work+0x560/0x560 [ 1418.904131][T13772] ? kthread_blkcg+0xd0/0xd0 [ 1418.908752][T13772] ret_from_fork+0x48/0x80 [ 1418.913211][T13772] ? kthread_blkcg+0xd0/0xd0 [ 1418.917835][T13772] ret_from_fork_asm+0x11/0x20 [ 1418.922657][T13772] [ 1418.931493][T13772] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1418.946568][T13772] Bluetooth: hci3: failed to register connection device [ 1419.378209][T19543] can0: slcan on ttyS3. [ 1419.461758][T19546] binder: 19544:19546 ioctl 4018620d 0 returned -22 [ 1420.005509][T19560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3476'. [ 1420.095521][T19539] can0 (unregistered): slcan off ttyS3. [ 1420.641091][T19569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.257543][T19580] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1423.273570][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.280340][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.109372][T19612] can0: slcan on ttyS3. [ 1424.795450][T19608] can0 (unregistered): slcan off ttyS3. [ 1424.877310][T19616] binder: BINDER_SET_CONTEXT_MGR already set [ 1424.883337][T19616] binder: 19614:19616 ioctl 4018620d 200000000040 returned -16 [ 1425.165795][T19620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3487'. [ 1425.551169][T19622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.481139][T19644] can0: slcan on ttyS3. [ 1428.105980][T19634] can0 (unregistered): slcan off ttyS3. [ 1428.121699][T14998] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1428.353872][T14998] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1428.390056][T14998] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1428.442017][T14998] usb 3-1: config 220 descriptor has 1 excess byte, ignoring [ 1428.442826][T19654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.465125][T14998] usb 3-1: config 220 has no interface number 2 [ 1428.474779][T19653] binder: BINDER_SET_CONTEXT_MGR already set [ 1428.493928][T19653] binder: 19652:19653 ioctl 4018620d 200000000040 returned -16 [ 1428.511941][T14998] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1428.562281][T14998] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1428.587137][T14998] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1428.633893][T14998] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1428.678093][T14998] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1428.723235][T14998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.741145][T14998] usb 3-1: Product: syz [ 1428.750005][T14998] usb 3-1: Manufacturer: syz [ 1428.766883][T14998] usb 3-1: SerialNumber: syz [ 1429.047077][T14998] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1429.080747][T14998] usb 3-1: No valid video chain found. [ 1429.097090][T14998] usb 3-1: selecting invalid altsetting 0 [ 1429.130047][T14998] usb 3-1: selecting invalid altsetting 0 [ 1429.147670][T14998] usbtest: probe of 3-1:220.1 failed with error -22 [ 1429.193626][T14998] usb 3-1: USB disconnect, device number 37 [ 1430.356442][T19701] can0: slcan on ttyS3. [ 1431.186309][T19697] can0 (unregistered): slcan off ttyS3. [ 1431.291785][T19705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.368654][T19707] binder: BINDER_SET_CONTEXT_MGR already set [ 1431.389987][T19707] binder: 19706:19707 ioctl 4018620d 200000000040 returned -16 [ 1432.233754][ T23] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1432.445820][ T23] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1432.458914][ T23] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1432.475677][ T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.486723][ T23] usb 4-1: config 220 has no interface number 2 [ 1432.493408][ T23] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1432.511780][ T23] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1432.520190][ T23] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1432.532407][ T23] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1432.542869][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1432.555907][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.565318][ T23] usb 4-1: Product: syz [ 1432.569535][ T23] usb 4-1: Manufacturer: syz [ 1432.576845][ T23] usb 4-1: SerialNumber: syz [ 1432.800711][ T23] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1432.810209][ T23] usb 4-1: No valid video chain found. [ 1432.816839][ T23] usb 4-1: selecting invalid altsetting 0 [ 1432.945730][ T23] usb 4-1: selecting invalid altsetting 0 [ 1432.952009][ T23] usbtest: probe of 4-1:220.1 failed with error -22 [ 1432.969106][ T23] usb 4-1: USB disconnect, device number 38 [ 1432.991379][T19729] can0: slcan on ttyS3. [ 1433.218338][T19738] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3518'. [ 1433.305276][T19740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.631714][T19754] binder: 19753:19754 ioctl c0306201 0 returned -14 [ 1433.695517][T19727] can0 (unregistered): slcan off ttyS3. [ 1435.958655][T19794] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3531'. [ 1436.719728][T19798] can0: slcan on ttyS3. [ 1436.907898][T19804] binder: 19803:19804 ioctl c0306201 0 returned -14 [ 1436.931639][T19804] binder: BINDER_SET_CONTEXT_MGR already set [ 1436.943875][T19804] binder: 19803:19804 ioctl 4018620d 200000000040 returned -16 [ 1437.415888][T19796] can0 (unregistered): slcan off ttyS3. [ 1437.517354][T19826] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1437.534515][T19826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1437.738364][T19833] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3540'. [ 1438.750600][T19855] can0: slcan on ttyS3. [ 1438.858845][T19865] ±ÿ: renamed from lo (while UP) [ 1439.205137][T19852] can0 (unregistered): slcan off ttyS3. [ 1439.732751][T19875] binder: 19873:19875 ioctl c0306201 0 returned -14 [ 1439.805906][T19875] binder: BINDER_SET_CONTEXT_MGR already set [ 1439.811939][T19875] binder: 19873:19875 ioctl 4018620d 200000000040 returned -16 [ 1439.816966][T19878] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3551'. [ 1439.854226][T19878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3551'. [ 1440.188727][T19881] netlink: 'syz.3.3552': attribute type 6 has an invalid length. [ 1440.233524][T19881] netlink: 'syz.3.3552': attribute type 6 has an invalid length. [ 1441.233831][T13261] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1441.308975][T19895] can0: slcan on ttyS3. [ 1441.374052][T19892] can0 (unregistered): slcan off ttyS3. [ 1441.437467][T13261] usb 4-1: config 0 has no interfaces? [ 1441.443009][T13261] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1441.507215][T13261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.517792][T19896] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1441.543183][T13261] usb 4-1: config 0 descriptor?? [ 1441.830845][T13261] usb 4-1: USB disconnect, device number 39 [ 1442.087185][T19916] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1442.115842][T19916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1442.962531][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1442.986948][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1443.008894][T19932] binder: BINDER_SET_CONTEXT_MGR already set [ 1443.024331][T19932] binder: 19931:19932 ioctl 4018620d 200000000040 returned -16 [ 1443.426289][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1443.520366][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1443.550957][T19927] ceph: No mds server is up or the cluster is laggy [ 1444.291930][T19948] can0: slcan on ttyS3. [ 1444.373910][T19947] can0 (unregistered): slcan off ttyS3. [ 1444.785017][T19960] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1446.056106][T19970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.063398][T19970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.341019][T19982] fuse: Bad value for 'fd' [ 1448.363196][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1448.371683][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1448.687156][T19997] can0: slcan on ttyS3. [ 1448.706581][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1448.729411][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1448.765308][T19995] can0 (unregistered): slcan off ttyS3. [ 1448.898491][T19988] ceph: No mds server is up or the cluster is laggy [ 1449.225961][T20007] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1452.542546][T20042] can0: slcan on ttyS3. [ 1452.647606][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1452.664223][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1452.678441][T20040] can0 (unregistered): slcan off ttyS3. [ 1452.927291][T14998] libceph: connect (1)[c::]:6789 error -101 [ 1452.964822][T14998] libceph: mon0 (1)[c::]:6789 connect error [ 1453.263606][T20047] ceph: No mds server is up or the cluster is laggy [ 1453.598797][T20075] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1454.391552][ T23] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1454.573914][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1454.581256][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.591739][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1454.602724][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1454.612476][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1454.622220][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.636723][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1454.645905][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1454.654068][ T23] usb 3-1: Manufacturer: syz [ 1454.663738][ T23] usb 3-1: config 0 descriptor?? [ 1454.945299][ T23] rc_core: IR keymap rc-hauppauge not found [ 1454.954440][ T23] Registered IR keymap rc-empty [ 1454.959421][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.004186][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.035746][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1455.083265][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 1455.130857][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.173897][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.246841][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.270018][T19139] libceph: connect (1)[c::]:6789 error -101 [ 1455.287512][T19139] libceph: mon0 (1)[c::]:6789 connect error [ 1455.303857][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.354363][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.414719][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.443846][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.484581][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.523859][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.553951][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1455.574365][T19139] libceph: connect (1)[c::]:6789 error -101 [ 1455.580672][T19139] libceph: mon0 (1)[c::]:6789 connect error [ 1455.604885][ T23] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1455.621465][ T23] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1455.668916][ T23] usb 3-1: USB disconnect, device number 38 [ 1455.999452][T20102] ceph: No mds server is up or the cluster is laggy [ 1456.237620][T20124] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1459.007328][T20153] syzkaller0: entered promiscuous mode [ 1459.701290][T20177] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1463.362203][T20226] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1465.543914][ T5829] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1465.733936][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 1465.761215][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.772430][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1465.783770][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1465.793752][ T5829] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1465.804651][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1465.823833][ T5829] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1465.834527][ T5829] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1465.842637][ T5829] usb 4-1: Manufacturer: syz [ 1465.902750][ T5829] usb 4-1: config 0 descriptor?? [ 1466.234113][ T5829] rc_core: IR keymap rc-hauppauge not found [ 1466.246265][ T5829] Registered IR keymap rc-empty [ 1466.254144][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.283849][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.326286][ T5829] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1466.359182][ T5829] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 1466.400564][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.433934][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.482817][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.513892][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.548704][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.583886][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.635001][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.725536][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.754471][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.783819][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1466.869152][ T5829] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1466.878655][ T5829] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1466.936599][ T5829] usb 4-1: USB disconnect, device number 40 [ 1467.623717][T20278] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1468.823891][T14998] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1469.114013][T14998] usb 3-1: Using ep0 maxpacket: 32 [ 1469.121470][T14998] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1469.129812][T14998] usb 3-1: config 0 has no interface number 0 [ 1469.138639][T14998] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1469.147930][T14998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.169358][T14998] usb 3-1: Product: syz [ 1469.178503][T14998] usb 3-1: Manufacturer: syz [ 1469.188515][T14998] usb 3-1: SerialNumber: syz [ 1469.201800][T14998] usb 3-1: config 0 descriptor?? [ 1469.225454][T14998] smsc95xx v2.0.0 [ 1469.888857][T14998] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1470.879299][T14998] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1470.983224][T14998] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1471.064167][T14998] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 1471.200378][T14998] usb 3-1: USB disconnect, device number 39 [ 1471.723704][T20319] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1472.489178][T14998] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1472.798085][T14998] usb 2-1: Using ep0 maxpacket: 16 [ 1472.962251][T14998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.997742][T14998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1473.001768][T20327] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3672'. [ 1473.041751][T14998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1473.053353][T20327] ALSA: seq fatal error: cannot create timer (-22) [ 1473.071616][T14998] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1473.095377][T14998] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1473.126288][T14998] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1473.142664][T14998] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1473.162080][T14998] usb 2-1: Manufacturer: syz [ 1473.181750][T14998] usb 2-1: config 0 descriptor?? [ 1473.943874][T14998] rc_core: IR keymap rc-hauppauge not found [ 1473.949827][T14998] Registered IR keymap rc-empty [ 1473.962556][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1473.962927][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1473.994017][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1474.003799][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1474.044615][T14998] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1474.100727][T14998] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 1474.365357][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1474.372396][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1474.491450][T20334] ceph: No mds server is up or the cluster is laggy [ 1474.714434][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1474.754805][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1474.913952][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1475.607335][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1475.716249][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1475.753872][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1475.808069][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1475.911871][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1475.988375][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1476.125825][T20361] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1476.213908][ T5829] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1476.773402][T14998] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1476.773741][ T5829] usb 1-1: config 0 has no interfaces? [ 1476.805511][T14998] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1476.833961][ T5829] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1476.861450][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.864005][T14998] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1476.903035][T14998] usb 2-1: USB disconnect, device number 55 [ 1476.942203][ T5829] usb 1-1: config 0 descriptor?? [ 1477.477690][ T5829] usb 1-1: USB disconnect, device number 44 [ 1477.901826][T14998] libceph: connect (1)[c::]:6789 error -101 [ 1477.909232][T14998] libceph: mon0 (1)[c::]:6789 connect error [ 1478.174916][T14998] libceph: connect (1)[c::]:6789 error -101 [ 1478.181101][T14998] libceph: mon0 (1)[c::]:6789 connect error [ 1478.224157][T10557] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1478.702251][T14998] libceph: connect (1)[c::]:6789 error -101 [ 1478.743014][T14998] libceph: mon0 (1)[c::]:6789 connect error [ 1479.169723][T20376] ceph: No mds server is up or the cluster is laggy [ 1479.194100][T10557] usb 3-1: Using ep0 maxpacket: 16 [ 1479.294772][T10557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.313806][T10557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1479.351455][T10557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1479.383925][T10557] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1479.418446][T10557] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1479.451034][T10557] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1479.463877][T10557] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1479.483578][T20396] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3693'. [ 1479.502494][T10557] usb 3-1: Manufacturer: syz [ 1479.510730][T10557] usb 3-1: config 0 descriptor?? [ 1479.591632][T20397] random: crng reseeded on system resumption [ 1480.034236][T20396] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1480.123736][T10557] rc_core: IR keymap rc-hauppauge not found [ 1480.140056][T10557] Registered IR keymap rc-empty [ 1480.152796][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.193839][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.241763][T10557] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1480.266586][T10557] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 1480.293489][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.323973][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.333020][T20402] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1480.364510][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.397588][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.444604][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.494068][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.539120][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.593857][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.643874][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.683784][T10557] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1480.733462][T10557] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1480.760798][T10557] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1480.960366][T10557] usb 3-1: USB disconnect, device number 40 [ 1481.605100][T20418] program syz.2.3698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1483.692174][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1483.743123][T20429] ceph: No mds server is up or the cluster is laggy [ 1483.796728][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1484.024232][T20433] binder: BC_ACQUIRE_RESULT not supported [ 1484.030031][T20433] binder: 20432:20433 ioctl c0306201 2000000001c0 returned -22 [ 1484.709969][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.716920][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.144413][T13397] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1485.373447][T13397] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1485.383092][T13397] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1485.392868][T13397] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.406871][T13397] usb 1-1: config 220 has no interface number 2 [ 1485.426376][T13397] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1485.440661][T13397] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1485.451273][T13397] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1485.458432][T13397] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1485.515719][T13397] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1485.555208][T13397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.573955][T13397] usb 1-1: Product: syz [ 1485.578268][T13397] usb 1-1: Manufacturer: syz [ 1485.583000][T13397] usb 1-1: SerialNumber: syz [ 1485.921969][T13397] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1485.929076][T13397] usb 1-1: No valid video chain found. [ 1485.935120][T13397] usb 1-1: selecting invalid altsetting 0 [ 1485.977708][T13397] usb 1-1: selecting invalid altsetting 0 [ 1485.983581][T13397] usbtest: probe of 1-1:220.1 failed with error -22 [ 1485.994139][T13397] usb 1-1: USB disconnect, device number 45 [ 1487.142283][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1487.153118][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1487.342051][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1487.373478][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1487.449789][T20478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1487.456336][T20478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1487.464068][T20478] vhci_hcd vhci_hcd.0: Device attached [ 1487.473000][T20479] vhci_hcd: connection closed [ 1487.479963][ T8667] vhci_hcd: stop threads [ 1487.493754][ T8667] vhci_hcd: release socket [ 1487.504499][ T8667] vhci_hcd: disconnect device [ 1487.656821][T13261] libceph: connect (1)[c::]:6789 error -101 [ 1487.824560][T13261] libceph: mon0 (1)[c::]:6789 connect error [ 1487.833165][T20472] ceph: No mds server is up or the cluster is laggy [ 1488.004758][T20481] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1490.442430][T20510] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1490.582790][T20512] syzkaller0: entered promiscuous mode [ 1490.593915][T20512] syzkaller0: entered allmulticast mode [ 1492.149169][T20541] capability: warning: `syz.2.3734' uses 32-bit capabilities (legacy support in use) [ 1493.713125][T20561] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1498.740795][T20597] ±ÿ: renamed from lo (while UP) [ 1502.346841][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1502.363206][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1502.818729][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1502.842470][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1503.068205][T20615] ceph: No mds server is up or the cluster is laggy [ 1504.473539][T20645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1508.553870][T13397] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1508.818531][T13397] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1508.837058][T13397] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1509.004990][T20678] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1509.145013][T13397] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.165953][T13397] usb 2-1: config 220 has no interface number 2 [ 1509.172900][T13397] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1509.192680][T13397] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1509.200338][T13397] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1509.207827][T13397] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1509.249493][T13397] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1509.269829][T13397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.292457][T13397] usb 2-1: Product: syz [ 1509.306301][T13397] usb 2-1: Manufacturer: syz [ 1509.326179][T13397] usb 2-1: SerialNumber: syz [ 1509.587178][T13397] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1509.597237][T13397] usb 2-1: No valid video chain found. [ 1509.660971][T20672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.668433][T20672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.673835][T13397] usb 2-1: selecting invalid altsetting 0 [ 1509.680483][T20672] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1509.777490][T13397] usb 2-1: selecting invalid altsetting 0 [ 1509.793253][T13397] usbtest: probe of 2-1:220.1 failed with error -22 [ 1509.822774][T13397] usb 2-1: USB disconnect, device number 56 [ 1511.228970][T20700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.229133][T20714] can0: slcan on ttyS3. [ 1512.874029][T20709] can0 (unregistered): slcan off ttyS3. [ 1520.614047][T20816] can0: slcan on ttyS3. [ 1520.903955][T20806] can0 (unregistered): slcan off ttyS3. [ 1525.114655][T20877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.121849][T20877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.788243][T20900] can0: slcan on ttyS3. [ 1528.015206][T20896] can0 (unregistered): slcan off ttyS3. [ 1529.992978][T13772] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1532.533512][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1532.546573][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1532.893363][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1532.901947][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1533.121630][T20956] can0: slcan on ttyS3. [ 1533.295045][T20944] can0 (unregistered): slcan off ttyS3. [ 1533.358427][T20948] ceph: No mds server is up or the cluster is laggy [ 1534.114028][T13772] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1534.129395][T13772] Bluetooth: hci2: Injecting HCI hardware error event [ 1534.153730][T13772] Bluetooth: hci2: hardware error 0x00 [ 1535.769523][T20983] fuse: Bad value for 'fd' [ 1536.623790][T19218] libceph: connect (1)[c::]:6789 error -101 [ 1536.643995][T19218] libceph: mon0 (1)[c::]:6789 connect error [ 1536.904524][T19218] libceph: connect (1)[c::]:6789 error -101 [ 1536.913554][T19218] libceph: mon0 (1)[c::]:6789 connect error [ 1537.263814][T13772] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1537.371755][T20992] ceph: No mds server is up or the cluster is laggy [ 1537.559720][T21006] can0: slcan on ttyS3. [ 1537.846199][T20997] can0 (unregistered): slcan off ttyS3. [ 1538.586428][T21018] fuse: Bad value for 'fd' [ 1540.243815][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1540.260257][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1540.641628][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1540.648212][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1540.903255][T21047] ceph: No mds server is up or the cluster is laggy [ 1542.130634][T21076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.137972][T21076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.238595][T21090] can0: slcan on ttyS3. [ 1544.514328][T21074] can0 (unregistered): slcan off ttyS3. [ 1546.151225][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.157905][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.806079][T21143] netlink: 'syz.2.3864': attribute type 10 has an invalid length. [ 1548.352908][T21143] veth0_vlan: left promiscuous mode [ 1548.390117][T21143] veth0_vlan: entered promiscuous mode [ 1548.422449][T21143] team0: Device veth0_vlan failed to register rx_handler [ 1550.641894][T21177] can0: slcan on ttyS3. [ 1550.927788][T21163] can0 (unregistered): slcan off ttyS3. [ 1553.136637][T21203] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1553.195304][T21204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1554.349696][T21221] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1554.382390][T21221] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1555.891123][T21239] autofs4:pid:21239:autofs_fill_super: called with bogus options [ 1556.094026][T19139] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1556.280964][T21253] can0: slcan on ttyS3. [ 1556.295801][T19139] usb 1-1: config 0 has no interfaces? [ 1556.301457][T19139] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1556.343798][T19139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.383155][T19139] usb 1-1: config 0 descriptor?? [ 1556.695441][T21243] can0 (unregistered): slcan off ttyS3. [ 1556.736140][T14998] usb 1-1: USB disconnect, device number 46 [ 1558.223162][T21287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.503574][T21298] program syz.3.3890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1560.146308][T21316] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1560.195946][T21314] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1561.846699][T19218] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1562.043859][T19218] usb 4-1: Using ep0 maxpacket: 32 [ 1562.074566][T19218] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1562.084430][T19218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.093389][T19218] usb 4-1: Product: syz [ 1562.097996][T19218] usb 4-1: Manufacturer: syz [ 1562.102795][T19218] usb 4-1: SerialNumber: syz [ 1562.132866][T19218] usb 4-1: config 0 descriptor?? [ 1562.193847][T19218] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1564.068651][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 1564.181942][T21348] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1564.460536][T19218] gspca_ov534_9: reg_r err -110 [ 1564.873775][T19218] gspca_ov534_9: Unknown sensor 0000 [ 1564.873870][T19218] ov534_9: probe of 4-1:0.0 failed with error -22 [ 1565.316952][ T789] usb 4-1: USB disconnect, device number 41 [ 1565.753183][T21358] random: crng reseeded on system resumption [ 1566.606139][T21365] can0: slcan on ttyS3. [ 1567.805240][T21359] can0 (unregistered): slcan off ttyS3. [ 1568.408026][T21379] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1569.048922][T21392] tipc: Enabled bearer , priority 0 [ 1569.060011][T21392] syzkaller0: entered promiscuous mode [ 1569.066168][T21392] syzkaller0: entered allmulticast mode [ 1569.159164][T21392] tipc: Resetting bearer [ 1569.192012][T21390] tipc: Resetting bearer [ 1569.261049][T21390] tipc: Disabling bearer [ 1571.337031][T14998] libceph: connect (1)[c::]:6789 error -101 [ 1571.343124][T14998] libceph: mon0 (1)[c::]:6789 connect error [ 1571.706090][T21420] can0: slcan on ttyS3. [ 1572.555970][T21413] ceph: No mds server is up or the cluster is laggy [ 1572.670760][T21414] can0 (unregistered): slcan off ttyS3. [ 1576.035976][T21470] can0: slcan on ttyS3. [ 1576.666680][T21463] can0 (unregistered): slcan off ttyS3. [ 1577.063971][ T789] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1577.264701][ T789] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1577.274508][ T789] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1577.283485][ T789] usb 4-1: config 220 descriptor has 1 excess byte, ignoring [ 1577.291474][ T789] usb 4-1: config 220 has no interface number 2 [ 1577.298364][ T789] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1577.312150][ T789] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1577.319120][ T789] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1577.326544][ T789] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1577.349806][ T789] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1577.360094][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.368337][ T789] usb 4-1: Product: syz [ 1577.373070][ T789] usb 4-1: Manufacturer: syz [ 1577.377892][ T789] usb 4-1: SerialNumber: syz [ 1577.694208][ T789] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1577.715746][T21483] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1577.739525][ T789] usb 4-1: No valid video chain found. [ 1577.781281][ T789] usb 4-1: selecting invalid altsetting 0 [ 1577.858573][ T789] usb 4-1: selecting invalid altsetting 0 [ 1577.890209][ T789] usbtest: probe of 4-1:220.1 failed with error -22 [ 1577.923829][ T789] usb 4-1: USB disconnect, device number 42 [ 1581.048571][T21531] can0: slcan on ttyS3. [ 1582.105167][T21527] can0 (unregistered): slcan off ttyS3. [ 1583.624229][ T5829] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1583.825490][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.861585][ T5829] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1583.899241][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.957746][ T5829] usb 3-1: config 0 descriptor?? [ 1583.995862][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 1584.356989][T21569] program syz.0.3941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1585.020999][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1585.030830][ T5829] pwc: recv_control_msg error -32 req 02 val 2700 [ 1585.045018][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1585.052590][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 1585.060145][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 1585.074816][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 1585.093853][ T5829] pwc: recv_control_msg error -32 req 02 val 2000 [ 1585.103786][ T5829] pwc: recv_control_msg error -32 req 02 val 2100 [ 1585.117955][ T5829] pwc: recv_control_msg error -32 req 04 val 1500 [ 1585.139755][ T5829] pwc: recv_control_msg error -32 req 02 val 2500 [ 1585.174586][ T5829] pwc: recv_control_msg error -32 req 02 val 2400 [ 1585.184026][ T5829] pwc: recv_control_msg error -32 req 02 val 2600 [ 1585.203767][ T5829] pwc: recv_control_msg error -32 req 02 val 2900 [ 1585.214699][ T5829] pwc: recv_control_msg error -32 req 02 val 2800 [ 1585.425478][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 1585.456487][ T5829] pwc: Registered as video103. [ 1585.462884][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 1585.541117][ T5829] usb 3-1: USB disconnect, device number 41 [ 1585.882290][T21584] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1586.755477][T21596] can0: slcan on ttyS3. [ 1587.374072][T21590] can0 (unregistered): slcan off ttyS3. [ 1587.572831][T21602] ubi0: attaching mtd0 [ 1587.588115][T21602] ubi0 error: ubi_attach_mtd_dev: bad VID header (2097410) or data offsets (2097474) [ 1592.312416][T21662] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1592.614243][T21663] can0: slcan on ttyS3. [ 1593.205601][T21658] can0 (unregistered): slcan off ttyS3. [ 1594.343759][ C0] ------------[ cut here ]------------ [ 1594.349777][ C0] WARNING: CPU: 0 PID: 21677 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1594.359936][ C0] Modules linked in: [ 1594.363895][ C0] CPU: 0 PID: 21677 Comm: syz.0.3960 Not tainted syzkaller #0 [ 1594.371368][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1594.381553][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1594.387975][ C0] Code: 24 4c 89 e7 e8 4e d5 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 0e 83 f7 0f 0b e9 f6 f7 ff ff e8 bd 0e 83 f7 <0f> 0b e9 48 fb ff ff e8 b1 0e 83 f7 48 c7 c7 40 73 64 8e 4c 89 e6 [ 1594.408464][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1594.414675][ C0] RAX: ffffffff8a041163 RBX: ffffffff8a03ff66 RCX: ffff888028fd1e00 [ 1594.422850][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1594.430880][ C0] RBP: 0000000000000000 R08: ffff888028fd1e00 R09: 0000000000000003 [ 1594.439037][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802f80e3c0 [ 1594.447151][ C0] R13: dffffc0000000000 R14: ffff88802f80e8b0 R15: ffff88805bd88c24 [ 1594.455260][ C0] FS: 00007fc6985f76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1594.464319][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1594.470999][ C0] CR2: 000000110c386a22 CR3: 000000005ce78000 CR4: 00000000003506f0 [ 1594.479185][ C0] Call Trace: [ 1594.482542][ C0] [ 1594.485556][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1594.491213][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1594.496801][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1594.503710][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1594.509392][ C0] __iterate_interfaces+0x243/0x500 [ 1594.514754][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1594.521100][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1594.528502][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1594.534812][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1594.541917][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1594.547210][ C0] __hrtimer_run_queues+0x520/0xc40 [ 1594.552445][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1594.558504][ C0] ? hw_scan_work+0xf60/0xf60 [ 1594.563220][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1594.568488][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1594.574638][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1594.579876][ C0] handle_softirqs+0x280/0x820 [ 1594.584709][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1594.589507][ C0] ? do_softirq+0x1a0/0x1a0 [ 1594.594069][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1594.599305][ C0] __irq_exit_rcu+0xd3/0x190 [ 1594.603947][ C0] ? irq_exit_rcu+0x20/0x20 [ 1594.608490][ C0] irq_exit_rcu+0x9/0x20 [ 1594.612755][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1594.618448][ C0] [ 1594.621395][ C0] [ 1594.624369][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1594.630380][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1594.635758][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1594.655425][ C0] RSP: 0018:ffffc90004edf4a0 EFLAGS: 00000206 [ 1594.661531][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 479dfb6193285c00 [ 1594.669600][ C0] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c89a0 [ 1594.677649][ C0] RBP: ffffc90004edf5a8 R08: dffffc0000000000 R09: 1ffffffff22386b5 [ 1594.684417][T18986] ------------[ cut here ]------------ [ 1594.685684][ C0] R10: dffffc0000000000 R11: fffffbfff22386b6 R12: 1ffff920009dbea0 [ 1594.691427][T18986] WARNING: CPU: 1 PID: 18986 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1594.699372][ C0] R13: ffff8880782d1d98 R14: 0000000000000246 R15: dffffc0000000000 [ 1594.699416][ C0] ? __might_sleep+0xe0/0xe0 [ 1594.710743][T18986] Modules linked in: [ 1594.718413][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1594.718442][ C0] ? __unix_dgram_recvmsg+0xa04/0xd80 [ 1594.718474][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1594.718502][ C0] __mutex_lock+0x136/0xcc0 [ 1594.718521][ C0] ? __unix_dgram_recvmsg+0x1fc/0xd80 [ 1594.723086][T18986] [ 1594.723096][T18986] CPU: 1 PID: 18986 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1594.726990][ C0] ? put_pid+0xc7/0x120 [ 1594.727020][ C0] ? __unix_dgram_recvmsg+0x1fc/0xd80 [ 1594.732375][T18986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1594.737757][ C0] ? mutex_lock_nested+0x20/0x20 [ 1594.737783][ C0] ? __lock_acquire+0x1347/0x7d40 [ 1594.742778][T18986] Workqueue: phy12 ieee80211_csa_finalize_work [ 1594.747294][ C0] __unix_dgram_recvmsg+0x1fc/0xd80 [ 1594.753393][T18986] [ 1594.755005][ C0] ? unix_unhash+0x10/0x10 [ 1594.755033][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.755056][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1594.755083][ C0] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 1594.755107][ C0] ? mark_lock+0x94/0x320 [ 1594.755129][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 1594.755147][ C0] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 1594.755170][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 1594.755202][ C0] ____sys_recvmsg+0x4e8/0x5e0 [ 1594.755237][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1594.755274][ C0] ? import_iovec+0x73/0xa0 [ 1594.755298][ C0] ___sys_recvmsg+0x216/0x590 [ 1594.755326][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 1594.762951][T18986] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1594.767139][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1594.767168][ C0] ? __might_fault+0xc6/0x120 [ 1594.767187][ C0] ? __might_fault+0xaa/0x120 [ 1594.767210][ C0] do_recvmmsg+0x39a/0x870 [ 1594.767240][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1594.772574][T18986] Code: 48 89 df e8 da 9e d6 f7 e9 dc fc ff ff e8 e0 62 7e f7 eb 24 e8 d9 62 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 c8 62 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ba 62 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1594.782647][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1594.782668][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1594.782708][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 1594.787830][T18986] RSP: 0018:ffffc9000437f9c0 EFLAGS: 00010293 [ 1594.792693][ C0] ? do_recvmmsg+0x870/0x870 [ 1594.798851][T18986] [ 1594.804046][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.806389][T18986] RAX: ffffffff8a08b95e RBX: 0000000000000001 RCX: ffff88807d47bc00 [ 1594.810786][ C0] do_syscall_64+0x55/0xa0 [ 1594.815992][T18986] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1594.822117][ C0] ? clear_bhb_loop+0x40/0x90 [ 1594.827529][T18986] RBP: dffffc0000000000 R08: ffff88802f80d5af R09: 1ffff11005f01ab5 [ 1594.831802][ C0] ? clear_bhb_loop+0x40/0x90 [ 1594.836833][T18986] R10: dffffc0000000000 R11: ffffed1005f01ab6 R12: 0000000000000001 [ 1594.842180][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.847046][T18986] R13: ffff88802f80e5d9 R14: ffff88802d96ac70 R15: ffff88802d96ace8 [ 1594.851767][ C0] RIP: 0033:0x7fc69779c819 [ 1594.857691][T18986] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1594.861281][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.866144][T18986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1594.870711][ C0] RSP: 002b:00007fc6985f7028 EFLAGS: 00000246 [ 1594.878028][T18986] CR2: 00007f47bf7e7158 CR3: 000000002b355000 CR4: 00000000003506e0 [ 1594.882999][ C0] ORIG_RAX: 000000000000012b [ 1594.887708][T18986] Call Trace: [ 1594.892339][ C0] RAX: ffffffffffffffda RBX: 00007fc697a16180 RCX: 00007fc69779c819 [ 1594.896953][T18986] [ 1594.901755][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1594.921407][T18986] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1594.927294][ C0] RBP: 00007fc697832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1594.927309][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1594.927323][ C0] R13: 00007fc697a16218 R14: 00007fc697a16180 R15: 00007ffd50fb7d28 [ 1594.932937][T18986] ieee80211_csa_finalize+0x5a6/0xf20 [ 1594.937967][ C0] [ 1594.937978][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1594.937988][ C0] CPU: 0 PID: 21677 Comm: syz.0.3960 Not tainted syzkaller #0 [ 1594.938007][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1594.938018][ C0] Call Trace: [ 1594.938026][ C0] [ 1594.938033][ C0] dump_stack_lvl+0x18c/0x250 [ 1594.938067][ C0] ? show_regs_print_info+0x20/0x20 [ 1594.938094][ C0] ? load_image+0x400/0x400 [ 1594.938130][ C0] panic+0x2dc/0x730 [ 1594.938157][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1594.938193][ C0] __warn+0x2e0/0x470 [ 1594.938213][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1594.938239][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1594.938261][ C0] report_bug+0x2be/0x4f0 [ 1594.938278][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1594.938301][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1594.938323][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 1594.938346][ C0] handle_bug+0xcf/0x120 [ 1594.938364][ C0] exc_invalid_op+0x1a/0x50 [ 1594.938382][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1594.938403][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1594.938427][ C0] Code: 24 4c 89 e7 e8 4e d5 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 0e 83 f7 0f 0b e9 f6 f7 ff ff e8 bd 0e 83 f7 <0f> 0b e9 48 fb ff ff e8 b1 0e 83 f7 48 c7 c7 40 73 64 8e 4c 89 e6 [ 1594.938442][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1594.938458][ C0] RAX: ffffffff8a041163 RBX: ffffffff8a03ff66 RCX: ffff888028fd1e00 [ 1594.938472][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1594.938483][ C0] RBP: 0000000000000000 R08: ffff888028fd1e00 R09: 0000000000000003 [ 1594.938495][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802f80e3c0 [ 1594.938506][ C0] R13: dffffc0000000000 R14: ffff88802f80e8b0 R15: ffff88805bd88c24 [ 1594.938524][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1594.938548][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1594.938576][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1594.938600][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1594.938630][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1594.938657][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1594.938697][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1594.938726][ C0] __iterate_interfaces+0x243/0x500 [ 1594.938753][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1594.938775][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1594.938804][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1594.938826][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1594.938858][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1594.938881][ C0] __hrtimer_run_queues+0x520/0xc40 [ 1594.938901][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1594.938930][ C0] ? hw_scan_work+0xf60/0xf60 [ 1594.938956][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1594.938976][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1594.939007][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1594.939032][ C0] handle_softirqs+0x280/0x820 [ 1594.939056][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1594.939079][ C0] ? do_softirq+0x1a0/0x1a0 [ 1594.939101][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1594.939129][ C0] __irq_exit_rcu+0xd3/0x190 [ 1594.939148][ C0] ? irq_exit_rcu+0x20/0x20 [ 1594.939174][ C0] irq_exit_rcu+0x9/0x20 [ 1594.939190][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1594.939211][ C0] [ 1594.939217][ C0] [ 1594.939224][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1594.939247][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1594.939267][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1594.939282][ C0] RSP: 0018:ffffc90004edf4a0 EFLAGS: 00000206 [ 1594.939298][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 479dfb6193285c00 [ 1594.939308][ C0] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c89a0 [ 1594.939321][ C0] RBP: ffffc90004edf5a8 R08: dffffc0000000000 R09: 1ffffffff22386b5 [ 1594.939335][ C0] R10: dffffc0000000000 R11: fffffbfff22386b6 R12: 1ffff920009dbea0 [ 1594.939349][ C0] R13: ffff8880782d1d98 R14: 0000000000000246 R15: dffffc0000000000 [ 1594.939385][ C0] ? __might_sleep+0xe0/0xe0 [ 1594.939408][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1594.939431][ C0] ? __unix_dgram_recvmsg+0xa04/0xd80 [ 1594.939460][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1594.939485][ C0] __mutex_lock+0x136/0xcc0 [ 1594.939502][ C0] ? __unix_dgram_recvmsg+0x1fc/0xd80 [ 1594.939528][ C0] ? put_pid+0xc7/0x120 [ 1594.939555][ C0] ? __unix_dgram_recvmsg+0x1fc/0xd80 [ 1594.939584][ C0] ? mutex_lock_nested+0x20/0x20 [ 1594.939602][ C0] ? __lock_acquire+0x1347/0x7d40 [ 1594.939635][ C0] __unix_dgram_recvmsg+0x1fc/0xd80 [ 1594.939675][ C0] ? unix_unhash+0x10/0x10 [ 1594.939702][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.939724][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1594.939748][ C0] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 1594.939771][ C0] ? mark_lock+0x94/0x320 [ 1594.939790][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 1594.939807][ C0] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 1594.939827][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 1594.939858][ C0] ____sys_recvmsg+0x4e8/0x5e0 [ 1594.939888][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1594.939921][ C0] ? import_iovec+0x73/0xa0 [ 1594.939943][ C0] ___sys_recvmsg+0x216/0x590 [ 1594.939967][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 1594.940006][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1594.940033][ C0] ? __might_fault+0xc6/0x120 [ 1594.940050][ C0] ? __might_fault+0xaa/0x120 [ 1594.940071][ C0] do_recvmmsg+0x39a/0x870 [ 1594.940098][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1594.940128][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1594.940146][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1594.940182][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 1594.940201][ C0] ? do_recvmmsg+0x870/0x870 [ 1594.940223][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.940248][ C0] do_syscall_64+0x55/0xa0 [ 1594.940273][ C0] ? clear_bhb_loop+0x40/0x90 [ 1594.940294][ C0] ? clear_bhb_loop+0x40/0x90 [ 1594.940317][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.940338][ C0] RIP: 0033:0x7fc69779c819 [ 1594.940354][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.940368][ C0] RSP: 002b:00007fc6985f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1594.940387][ C0] RAX: ffffffffffffffda RBX: 00007fc697a16180 RCX: 00007fc69779c819 [ 1594.940400][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1594.940411][ C0] RBP: 00007fc697832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1594.940423][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1594.940434][ C0] R13: 00007fc697a16218 R14: 00007fc697a16180 R15: 00007ffd50fb7d28 [ 1594.940461][ C0] [ 1594.944488][ C0] Kernel Offset: disabled