last executing test programs: 22m27.257364081s ago: executing program 2 (id=653): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808006}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[], 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x803, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001580)="ad56b6c5820fae9d6dcd3292ea54c7be8a4e5af4c796222dc6e53d5bf2ef915d564c90c200", 0x25) accept4(r4, 0x0, 0x0, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x4) 22m21.231650091s ago: executing program 2 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(0x0, 0x14927e, 0x68) faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x112, 0x2200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) readv(r3, &(0x7f0000000080), 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 22m19.781162643s ago: executing program 2 (id=666): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) 22m19.534150838s ago: executing program 2 (id=667): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x18b) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x4040044) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x8040, 0xd8) 22m18.742162755s ago: executing program 2 (id=670): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080)="05d3628eda29", 0x6, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) recvmmsg(r0, &(0x7f0000006a80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10022, 0x0) 22m18.05762776s ago: executing program 2 (id=673): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x4b, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x60, 0x1, 0x2c, {0x2c, 0x3, "9d3eb2ca2442c45cc88810c13c5bd2facbe1ad6aaead5fb2694d63e252de3cbdc9c0c69bc2b6fd17158a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 22m17.542987341s ago: executing program 32 (id=673): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x4b, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x60, 0x1, 0x2c, {0x2c, 0x3, "9d3eb2ca2442c45cc88810c13c5bd2facbe1ad6aaead5fb2694d63e252de3cbdc9c0c69bc2b6fd17158a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 21m39.204161331s ago: executing program 1 (id=744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfa1, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xf8d, 0x0, @opaque="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"}}}, 0xfaf) 21m38.585172445s ago: executing program 1 (id=747): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x800000, &(0x7f0000000280)={[{@nodelalloc}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@i_version}, {@noload}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x30d, 0xf7, 0x0, 0x6b, 0x0, @local}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@oldalloc}, {@quota}, {@quota}, {@usrjquota}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x1a5c42, 0x120) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) 21m35.930391322s ago: executing program 1 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) 21m35.539625631s ago: executing program 1 (id=752): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x18b) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000140)=0x9e46, 0x4) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0xee01, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f00000001c0)={0x0}}, 0x4040044) 21m33.970817735s ago: executing program 1 (id=754): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 21m31.043344948s ago: executing program 1 (id=761): syz_mount_image$udf(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x46f, &(0x7f0000000540)="$eJzs299PW2Ucx/HPc2i7M0a0MIZuWUwTE0cwAgUZbKgJDjHGDeZY8cYsYVCwrlBCwcCyKLf7A3alN14sMV4si//DovEP0LhkXuj0xpvezSs153BOz2npBlra0u39SqCnp9+e85znx3m+T9MKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIb78z1p80jS4FAACop8npS/0DzP8AADxTLrP+BwAAeJYYWfpNRu/PFMwF9/k2+3xmeX0jNT5R+W2HjfvOFjfe+bOTA4OvD50eHvEfn/z+/XZcU9OXxxLncksrq+l8Pj2fSC1n5nLz6T0fodr3l+txKyCxdG19fmEhnxjoHSx5eSP+x6EjXfHR0zOppB+bGp+YmA7FRKL/++w7PC7Dj8nSmzLqs++YSUmWqq+LXfpOrR12L6LHvYjU+IR7IdnM7PKa86LxK8IqrZOYX0d1aIuqWJJTLhPbnzVbVJZekdEPnQUzJanFr4dX3Q+G91SeRog4S1dJ3WqCNjvADsnSFRnd64vrolevbvvHpBuNLhxqLiJLd2R06q2C+cC9Hzjjybltnp9JvLe8kAvFGuONqGafH+rpgN+bbFmadEd8wVxqdGFQd06ylJZRavRTN6+Qm5c+Pzp8oufDcIbxwi7HcWJ7vcG1lzk5GkodTINyCEi2sfRQRo9+tt3n3f4cIG3909iioR6Mpfsyyq0X3KVReF3aElrfFzX73F/b8h+2z+VWNlczix+vVXy91R67ml9bnZ2r/PL22rXkdrjbOrZKUWPpCxl99e7XxfN6a4BIeeztN4Ky2d75i8Vw+81z259n+HPI8YHO8HbFIv+H/Mj2zttS3SUjxHj3/4UrL3pr/1bt6INe3DEZfXTrpBdnxZwgv5PE3f/2Qiab7ndi/5ZRx/d+rPsxk3Nk19EgNunErsro5r3S2CNebGcQO+DE/iSjBz9Wjj0WxA46sRsyyj9I+LGtTuxLXmxXENs7l8vO16yCDzhn/H8no0/6EsZvy9LxH4y22zeC8b5VfqDHjPlqx388tG/L64e/e/01skt/vSmjzT9P+tfj9hX/ttLu/g/6a1ZG394qjfUXih1BbHLPFdsknPaPyKh96G6xbrw68J4GrRZu/xPlvaNG7d8e2hf3zhvbn0uHpPzm9Wuz2Wx6lQ022GCjuNHoOxPqwZn//5LRrz33i/mON/+3bT8L8r9HnwXz/9nyA9Vo/u8I7TvrZSPRiGSvLa1EuyQ7v3n9tczS7GJ6Mb08PDhyZmjwTHIkGvNzu2Cr6qp6KjntPyuj1NQ3xfVZaf5XOf9vLT9Qjdr/aGhfa0m+UvWlw2v/hIw2Ht4trqOflP/766zul7cfi+OzRu3fGdoX987btj+XDgAAAAAAAAAAAAAAAABNLWos/SKji1cjxv9t1F6+/7fjB1M1+v5XV2jffJ1+r1B1pQIAAAAAAAAAADSQJUtfyuiUCuZzZ0ebdCH8iKfavwEAAP//M8EfQQ==") 21m29.422778203s ago: executing program 33 (id=761): syz_mount_image$udf(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x46f, &(0x7f0000000540)="$eJzs299PW2Ucx/HPc2i7M0a0MIZuWUwTE0cwAgUZbKgJDjHGDeZY8cYsYVCwrlBCwcCyKLf7A3alN14sMV4si//DovEP0LhkXuj0xpvezSs153BOz2npBlra0u39SqCnp9+e85znx3m+T9MKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIb78z1p80jS4FAACop8npS/0DzP8AADxTLrP+BwAAeJYYWfpNRu/PFMwF9/k2+3xmeX0jNT5R+W2HjfvOFjfe+bOTA4OvD50eHvEfn/z+/XZcU9OXxxLncksrq+l8Pj2fSC1n5nLz6T0fodr3l+txKyCxdG19fmEhnxjoHSx5eSP+x6EjXfHR0zOppB+bGp+YmA7FRKL/++w7PC7Dj8nSmzLqs++YSUmWqq+LXfpOrR12L6LHvYjU+IR7IdnM7PKa86LxK8IqrZOYX0d1aIuqWJJTLhPbnzVbVJZekdEPnQUzJanFr4dX3Q+G91SeRog4S1dJ3WqCNjvADsnSFRnd64vrolevbvvHpBuNLhxqLiJLd2R06q2C+cC9Hzjjybltnp9JvLe8kAvFGuONqGafH+rpgN+bbFmadEd8wVxqdGFQd06ylJZRavRTN6+Qm5c+Pzp8oufDcIbxwi7HcWJ7vcG1lzk5GkodTINyCEi2sfRQRo9+tt3n3f4cIG3909iioR6Mpfsyyq0X3KVReF3aElrfFzX73F/b8h+2z+VWNlczix+vVXy91R67ml9bnZ2r/PL22rXkdrjbOrZKUWPpCxl99e7XxfN6a4BIeeztN4Ky2d75i8Vw+81z259n+HPI8YHO8HbFIv+H/Mj2zttS3SUjxHj3/4UrL3pr/1bt6INe3DEZfXTrpBdnxZwgv5PE3f/2Qiab7ndi/5ZRx/d+rPsxk3Nk19EgNunErsro5r3S2CNebGcQO+DE/iSjBz9Wjj0WxA46sRsyyj9I+LGtTuxLXmxXENs7l8vO16yCDzhn/H8no0/6EsZvy9LxH4y22zeC8b5VfqDHjPlqx388tG/L64e/e/01skt/vSmjzT9P+tfj9hX/ttLu/g/6a1ZG394qjfUXih1BbHLPFdsknPaPyKh96G6xbrw68J4GrRZu/xPlvaNG7d8e2hf3zhvbn0uHpPzm9Wuz2Wx6lQ022GCjuNHoOxPqwZn//5LRrz33i/mON/+3bT8L8r9HnwXz/9nyA9Vo/u8I7TvrZSPRiGSvLa1EuyQ7v3n9tczS7GJ6Mb08PDhyZmjwTHIkGvNzu2Cr6qp6KjntPyuj1NQ3xfVZaf5XOf9vLT9Qjdr/aGhfa0m+UvWlw2v/hIw2Ht4trqOflP/766zul7cfi+OzRu3fGdoX987btj+XDgAAAAAAAAAAAAAAAABNLWos/SKji1cjxv9t1F6+/7fjB1M1+v5XV2jffJ1+r1B1pQIAAAAAAAAAADSQJUtfyuiUCuZzZ0ebdCH8iKfavwEAAP//M8EfQQ==") 17m49.148852664s ago: executing program 4 (id=1228): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1ffffc, 0x68d, 0x0, 0x0, 0x0, 0xfffffffe}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 17m43.210428542s ago: executing program 4 (id=1240): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xcfce, 0x3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900)}) 17m39.461176234s ago: executing program 4 (id=1249): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) 17m39.299657497s ago: executing program 4 (id=1251): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x18b) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x4040044) openat$dir(0xffffffffffffff9c, 0x0, 0x8040, 0xd8) 17m38.734012819s ago: executing program 4 (id=1253): syz_open_dev$usbfs(0x0, 0x77, 0x3501) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5a2e, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)="94", 0x1) sendto$inet(r0, &(0x7f0000000500)="01a4acc737eb8a35ba1bb58bcf7e9c22593cefea8aac33046c8a9bc30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1dbd78682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a89", 0xbc, 0x0, 0x0, 0x0) 17m32.192941381s ago: executing program 4 (id=1260): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x80800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17m31.797142999s ago: executing program 34 (id=1260): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x80800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m24.840946109s ago: executing program 3 (id=1483): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000f, 0x204031, 0xffffffffffffffff, 0x50728000) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) 15m23.490159788s ago: executing program 3 (id=1486): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c696f636861727365743d6b6f69382d722c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c636f6465706167653d3737352c636865636b3d7374726963742c757466383d302c6e6f6e756d7461696c3d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c706f73697861636c2c6673636f6e746578743d756e636f6e66696e65645f752c736d61636b6673666c6f6f723d2f2c005180f4e7b2da8c3f2fe272df26ff9ca497387fc9af57e51670999e8bc199be03b478bd734a1ad4517930c37f173275bdc3477cead3e348e86c54d3ca19a73e96d5a4291dd83fea6bbb7174e668baf7433889e34758bb3912cc9bc2a7ba3aa69a690fb8eb216f6b745f04820178e7f761ffed80089b4de7af9454bd3090b041d1f2dcc5c701e57f46d7d89b1aa4c23f1d50d917e60289798c1f369da19dc49d2561339d7d350c1f5d5aacc33f3556cf815b7daf9d797e9fc3c697f6ce491f3a74e248fded5ff32bd81ee1cd00a1d65c4e0eafef812fb1fe9a44b8821caa94e146f937602e632be3541c334742"], 0xff, 0x28e, &(0x7f0000000f40)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = io_uring_setup(0x7f06, &(0x7f0000000200)={0x0, 0x81c, 0x80, 0x1, 0x299}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}], 0x0, 0x1}, 0x20) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r3, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) 15m21.877349243s ago: executing program 3 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf10, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAKE={0x34, 0x61, 0x0, 0x800b0, 0x5122, &(0x7f0000000800)=[{&(0x7f0000000500)="edb2dbf276d91a5155ad9dc739cb02fe3007bd2ca0836766fc94c60d9dacb26d3283c004b41bf4a5c44c312b3e57235331f3b40dff16827ebf0ce04d23b59cdffca5cee702d1583c82a4fb59b47ff3ae8fdd092f47b2203ec3de", 0x5a}, {&(0x7f00000007c0)="2d510a29459686e74975fb4a2bc70ce75e08ddd6ce7cdf9e61d56fb80e01591e7b8390260bfe5090b31e733f88830c", 0x2f}], 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x80000001}}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000100000000000000da0b000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b706ccc1000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000020000007baaf0ff00000000ae8900000000000007081b00f8ffffffbf8420000000000007040000f0ffffffc7f7ff000800000018260000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000600)={'comedi_parport\x00', [0x7c, 0x5, 0x0, 0xc, 0x12, 0x4, 0x100003, 0x7, 0x5, 0xeb44, 0x4, 0x1, 0x1, 0x20003, 0x352216e9, 0x8, 0x83, 0x800007, 0x1000003, 0x1b18, 0xab, 0x0, 0x100, 0xffffffff, 0x8, 0xfffffff9, 0x3b, 0x80c, 0x800099d, 0x664, 0xfffffff8]}) 15m20.700619829s ago: executing program 3 (id=1488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x6, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=0x0], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000"], 0x38}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15m16.115468388s ago: executing program 3 (id=1494): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 15m12.862981448s ago: executing program 3 (id=1500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x808006}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[], 0x50) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x803, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000181100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001580)="ad56b6c5820fae9d6dcd3292ea54c7be8a4e5af4c796222dc6e53d5bf2ef915d564c90c200", 0x25) accept4(r5, 0x0, 0x0, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x4) 14m57.582568549s ago: executing program 35 (id=1500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x808006}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[], 0x50) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x803, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000181100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001580)="ad56b6c5820fae9d6dcd3292ea54c7be8a4e5af4c796222dc6e53d5bf2ef915d564c90c200", 0x25) accept4(r5, 0x0, 0x0, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x4) 17.896411369s ago: executing program 6 (id=3612): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x202181, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) pselect6(0x40, &(0x7f0000000240)={0x7, 0xfffffffffffffffb, 0x1ff, 0x81, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) 12.157446698s ago: executing program 6 (id=3620): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/107, 0x6b) socket$kcm(0x2, 0xa, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) 11.055404702s ago: executing program 6 (id=3622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.725530379s ago: executing program 0 (id=3623): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 10.671318401s ago: executing program 6 (id=3624): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) lseek(r1, 0x3, 0x0) 10.476070035s ago: executing program 0 (id=3625): syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1}, 0x38) 10.321581889s ago: executing program 5 (id=3627): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0xff24, 0x4d, 0x1ff80, 0x6, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xfffffffd, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0xfffffffe, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x4, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xfffffffc, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0xc, 0x5, 0x80000001, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x6, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x6, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x1, 0xfffffff9, 0x6, 0x3, 0xc0, 0x0, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x7, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x8, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0x400b, 0x30b1d693, 0x1, 0x5, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x6, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) unshare(0x22020600) r5 = open(0x0, 0x0, 0x0) fcntl$lock(r5, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 10.009376585s ago: executing program 0 (id=3628): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x202181, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) pselect6(0x40, &(0x7f0000000240)={0x7, 0xfffffffffffffffb, 0x1ff, 0x81, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) 9.244337263s ago: executing program 5 (id=3629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x1, 0x0, 0x10000001, 0xff7ffffb, 0x2}) 9.028076427s ago: executing program 6 (id=3631): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x56, 0x6, 0x0}) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0205710, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf", 0x4}], 0x1}], 0x1, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280)=0x6, 0x4) sendto$inet_nvme_of_msg(r5, &(0x7f0000000380)={@data_h2c={{0x6, 0x4, 0x18, 0x0, 0x8}, 0x6, 0x2, 0x3, 0x9, "a381c5e8"}, @val=&(0x7f0000000300)}, 0x88, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r6, 0x1, 0x3) 6.451479455s ago: executing program 5 (id=3634): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x40000fb, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001380)={0x0, 0x0, "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", "7dabecfe536c6e2b78f1a944ace9ce39da751c1ce0bb4a83990ffac0c3f3bc46c7f2c9ea9f868e319e49eea14eb427b3463f4077108891b4bb53a1c1079d7f6f23d3c11aa52d87c0a688dbb3879eea7e69584ac9542136324ae437a9e5079e295bc29bdb88115875a5909435ea0e407e83c1c258914b9ae17cd47dd5864b238de3ecaadd3acb0477804b53cd3178f3819020d22176feee75afea9de6cffc6548f17a80c4a11509dc44c4e70722cf75314bada8a642bf9c1c777b639d5798617ce0762cdacae5f0cfc2a771098c828bda02ab22b7729c35251d6804c4d8f59caf92b7735eaf233ff43bb9e4476f73b79f82184f0db8265c59d66c63acd384f50db6ca2200dc20c909d7657cc253dd4a16a0fb5c5c27a61cd9d715c0655082487cd49195f5b8fb1408c43f7769d98d100cf82e2a7f9c195d6229b15701b9296df0c4fdc1835dadac44b467a967d6eb55b979c60f06906dbae092b23c0ba220fb74365214c987b7ff0a5610c0b72e9b3398a2f6f9986299e817dd70d23f65eaf3682c15a7069f0ecd942b13f03009132700261f3dda59520000be3baacacd7b4044142c576c28122e9f07fec4569b582e7ea3827c467a889c055b07dd629590762f8beee57a6800d76ee913c2b73d93b56b290cc6881be85f7db2beb6ec133ff58a6cf8f80917ab9aaf60cdaa803ef3999d2de1fae4f2c487ea9e9239176fb2a4e26752af4c675a62ae203df5a08dd96f3556282d74e0998365f83820921145d89e45679792c155ccde544b9a6474a66b2a131042f99f544db464eaefc817cf8692325628b5f30ac416eda95a72c12c08766df30b7f94c223df2a977717612ca9d26565c46372fe9933d23cf7e8f47159d6ea536ff485d13a981a50d083aaeae1fa8b6ce0991ff0ca8760cc1120f48d9e3aa76c8cb78e31c389e8cdd5f7cd89834bd3e83ae207e113a68899ee3269b8f9a99d5ff6ab8d5e4479833fa8a95e39828a413e5d0558d3fd4296ef3dc771d60ff9f14e4776c602e1534366e8490361219857d4ea01531f60dfc9058be86406c186ab3f1a6f0806214a9afeb3797da33c8b17ada69bf9fba1cbae86995be6e4e3ef8f0ff9f10c0377d92a84db4d38ee5650ab8203f759d169460d6941ad149c1fda49671e0a2ef67be947580f735a1055fde2866ff11dde49886e49315f3cce6e08ab8264e1dc4f639a8251562df7b73abe4190f4e7a05dccfb44a65acbf4ab424acec1c2ec098ed8704992a1476b3ced2d68804828ef9ad9ffd892b9aa11bbf7d929b5ec7db37c53f338b8cdcb4a617d623768f0ea653a7678f19134abe32242fc12e3eeca50c2c2a559c5a59152652c30fcb1297d628c699b8944f6d64591d225803bd7c09e41eadbb2682fa3b2643e3b0e9954e78593970d673396f25d2a6147b894ae445353201f1b74d05863a54ad5b202ab428237a628485e544ed2ab22df0e94f420249600fcd38be82eec5c146fde758962f1e47260ecec3b19e0ee597f5c720b1ee0b94f1b04c45555ed0a268cd3427136b6c9a6dbb6f2d94e66f4ae82dfdc6b61b6a4c9e81aa760a111e0b1d55b5bcfcb3b3efe83d878f1e30766ec91e76e05d58124c2c43465386c11cd4988b166538341d56d2cbce3f716eed667013eaa7ae77d3d4f3ee9c75bd179974e2930516bdf887893419d932b8ff852d8eb5643e885ad891aa00f68a895d78df5a761d74660c8eaf595e150ae9902ab3b16836ba5ae4f9d2584eb59c8a1c1268c5d9161d4f6b169c84ba7c4882330509fe5a89b51e219491d7fda3c2a647be076342ff277b62567faa8b90aa63a105c4ee835a9ae39a1c7b02968f007b3875536631e6c994df422d996eb10535905fc5606be25eb4f65d337b5c7d5363e7a0287b15446735f3e419918208facba5bae90d2ccedb17a3dd71440d96a6c56f1a380c5308577655d5770776eb4034786f5d040e4554cdbcfb2172808b3c52ad15db79813ea665fa6ea6ad02d76134d0831a893f0d071827abcbfb484cc56522744d44988ad9c97c6c6c5bd871b26979fe7a0f9ab9432472eec121692f3c122463311197c4b2a89e279855f476a349d411ad7c46923c34fefa05b3f27839819d6f0d9a396cb949549299dfd16a503d95cb800b6137ddf8873045d01047490d285aeb3d64e9986b61d8fc10e110fe80e87bddc88181ebcc779e80c546e5e9cf99f3c8d4b995e2610c60b62396e5ec64c45597ab69ff52c388edffd8cff1bb306be4338659f130d71e3fce09fe85dc79369dc493f45038bc7b25e61b48df1e7105fa68443d4773034b1e3005c9e2eb83e0214838f5a24a69cfc5d53440356e3efa39a65aeb56eb73ec04213041543cca6192bdd130a1f094718f5066e9483cb01582fbe7bd56206274c209875a65e1abd46d5c7b426f30e523c8faee065e8bd387751bcfb547a606e852d70ea8e84d6c88933c4f8888120acada53db9c47fd6466a8ba3892bbda705255ccd17221f9987f03ef1174e11b311d2986787c571767d70abe230077e5d67000645fa942f0388255e9a0a1a361e33403830d177baa5c09b7d653e5f5e7f85b16f7deea51cf89ea5db5310b73e0c76aeec8f4e9336008873d1b70c1874ecdda2572ba450873ee4565d29e001f0f626ba007cbbdb13c24373df117932bcb9b02ead071abf332bf86dae8eb9ec82b0d1fb610d684ca6e23f933878a1fbf4719bbed5f43f5457b0e8ecfaa023d4a1be1c12f7f7dbda4b8247a8a0dc325a7d7e4789b10e27fd403d27b0e8018a6986dc43fe606072df12b40c60c79bf73a9e586ca9ac071d94682f432d4791a151a1562f209c55789e54afa82640cbd8e2efe0c69717756a30d8cdde77121e935a9c3f21c2e41152e47871c0cbc58879c4eaa879d89855efa2eb08166410a48dc53ac58c54131cd7ee55524abb3677165544bf01acc597773bab57e6db7342cf6222ae6f260daea5723d35cf8f7e7eeadb4bd4559f4be9a6f3970f5c407487ca8af7fc5fe200582f19e15ac4920a34777a87a714b67c0f8ecbc421490050672998ee8433993b0276785c2dca34faf92717139377dd5e9b7bc713f327990eef1797282c007abb61f35a085d6e2b245f3f37e112a219f397e038a1deec23f2e02235e54431a6ea669b18e5509dcd342cd60199bb8d26febcffa09851b720e456f51ce03a55c9fdf10a737758d3dd93f6471008e0167134a16bbc6afbc8d30354d5f7eb37f9bc9d8509eefbd9250e368ef3f560c38b415a5ab8b0ff36b8959279ae6dd33de4088779bad860248067210cf90825a84bb9c4fdab5cc51edb7e802f009876f16ca6e97f5cf711f1c2717efd6d8c0a28d3ccf325d0c50bc4250d8095ccfb8f5da7ed07d3af176a14800822a48f49e75ffd6527faec5e1d6980222d144ead99bbe74ce64e86497084bdc7668fc787187436a2172aa79271fad2a5880ab066248942636cac2fb1c79b66f9501a078b8306cf57a65fb27b99ecb3cb540461302e08cda296ae72f4fbe452cc346c12dfef9673dfae0526cf44ddbd4b5cee1859b26bb6ef336709a683d8e5ef998551e98e7cf82abe3c4562235f44cd7eb7cae9cf25f20e690f7bb63fb2a469b035af537633c0aacac5834a2b22890e10c0f77ad2a4c2eba2cc3aca650b967f3189b34dc63fe79110a40e2307a351c8f9c35e9b5f54c9e80e3d9b000b6d441c495811f0793d88841c54b034c4f069d490125709cb2beab7dd45094937cc8feb95fa5ab7a408353f43f7769b20807991acb069c90f73b31082ffe942b16725b79a436a936d9a67ade35e8931a1565f310935f1ea35879a4350bc9ce5c7408a502473e6fc3a7a288e4d129fc6c124dcda811ba4ff88e2e8cfb0d57993d65d7fbeffcb7fe8d742be4ab1247a361644e5a2345d0500642230aee1247e82fc0e12b84583062bed2948148baf2e1c99aa71f3dfb01d7a168ef7b38cb1964ebf928b682dbdeeacfc713ee5a54a481d952bd59749d36b9498a7daab1066dd689bc8f0be3ae6c2913560cbc1a8a26dd21c1c2c7ad626a694871b09e4821a17867bda81e4be41d3677c76c6fd897af906fbd44148701f4ffd2772f926092642ab0eeafe9f638308b8cd576d441195f6097fef62226444672ef58811bdb9fecfd6bfa1e89a9ea6b98e715a2c770d2e5bae608ce5a5e69bdce184da41512c3f559b2363c8de2e76c1fb1208538e682182a8a9ed4d0ae6f16f7559e1683061fc2a0adb422cff7f10648c5e85480fca9d3496fd5680acd24e7918a3bf8ea598386deabbd30b4c32fbe51d759ac447d888b7ef7dceb49ac2f6ea2bb52f8db5c0ba61f6b800a3c20de73ca080e5e69d133f2d2f3b735ddf6d8eee1cb4ca14d594183e4302e7f70a035bb25a2b0b8688b03635214559144cad533f75fcec4fff28b148f0aa010bc500271034108046c720c87d3be5bfa7ff9b892aa28c6e85300d043038b89f3df27e1f72c630e81cc4eb8d716ece98f80e605afeda5c90430f114b605b14166f93ab18912d6ddc1a2161c721d6791169e15efc4219e33a423bb4a92e671ca5a82ffef88b551e0d5e5ea6dd741a8b8d3859f085808d27fcc030d3726ab97439d9e30540a9137e8f21ac27d7974b8a54d3d9b0e9da73ff1195cb0fb3dfe5fe230d1af03de1e7b20b6c720322690f411a04158123e51aa40fdd1404746d7f2f071fd90ea9f225a6ddbedac86080221b94da24deb2e6c48268b496728cd3038cbb315dabec76c55e7315c5f90e4f5488e78a2c68095c167c5bba68ad2eb8323058115ad0b47f2d9f4500dbae57cee19a1cf4eb761da126c30734d279b7173ccd7128d4bd8a362714cb542b7a5522c5648e3687c5e9b40a6d0a942d2bc9f50d37bf5633f522ec333a2751ebb27e1e7c77419145ba51ac194877c19d3c794d9cb0faf527223263be90aa38ccb5aeb0293c5ded194e4ef5b2c718336884e8888204892d9bdcf83d4ee49441d1c6c97beaa9d75b3d286c6e9e9c8f4cdaaaf6ad56ec72ef718069784cce2c89a3f96a624072e4c8f4b5cc1e65c1f45c99b259bd8d720af8338b431ff723f89d4636861d176d7d1205ca7d1e4b070e0e1fd6f36a5c6447935a35423e4449cb777f34a723d0590d6804ab25051a85ed18adfe67f80a289434bc274d27d1b140a292f0641e3501e5f3d450bbdf345c2cfac1950f4e86e13ede02d2b2be220caaa44712a7e652b02b509662aba6ebf128a0e843b99924ad5c983ae27743df16f493446460ea3b664c0c04863598e81f8a267a9dfa6fc87d8306926dca86bd998f3fe165b9b5335c58fa91b14dd5f02c15da45d1e6e769c8794f6b38c014269ae4dd1ff5f657571afd988df6dad39ade28a4521d26259001186a0756ba9adc7bb6b0aea2cbcc276856544e6ec283"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000043c0)={r1, 0x0, "e51a13c7ec40223d73205202762673481bab63e9b80cd147f4e32971b8a14091514661174574909cda29ba35f76e3ef5b1382143430fb63e55df968632138c21f3672759428d0db825f1601cd068763a252da9b6e00c68cce18f55a7075ee34d3d20be017d42e085121a06c3221632691abc63bcb5b877418ac14117d4e5aa730de188fc83d971055e06ee9af7930d210c378800433f8ebf3bd05d41731d931b9378a6dcb80562372e2065d5d26bdc0ae4726e7db00ff14ac5cd62b9997cf682a4852db71ce774e9bb8140559bf3ac4bf7ff011454eccb82312e1208e8eb038e1771308db0e20e0ec12f1356d13ba29cd1925e255902d3e3533c53ed27f0687d", "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"}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) 6.21296069s ago: executing program 5 (id=3635): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) 6.067167884s ago: executing program 0 (id=3636): syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1}, 0x38) 6.066325734s ago: executing program 7 (id=3637): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0xff24, 0x4d, 0x1ff80, 0x6, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xfffffffd, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0xfffffffe, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x4, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xfffffffc, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0xc, 0x5, 0x80000001, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x6, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x6, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x1, 0xfffffff9, 0x6, 0x3, 0xc0, 0x0, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x7, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x8, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0x400b, 0x30b1d693, 0x1, 0x5, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x6, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) unshare(0x22020600) r4 = open(0x0, 0x0, 0x0) fcntl$lock(r4, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 4.944189219s ago: executing program 0 (id=3638): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r1 = dup(r0) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x20004800) recvmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000280)=""/148, 0x94}], 0x2}, 0x2100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4040, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000020000000240012800c0001006d6163766c616e00140002800800030002000000080001001000000008000500", @ANYRES32=r2, @ANYBLOB="732537f918afc8a4965f57876c6db9e716f0366d919ad1a07841d1497cb4d469226a3fb60308d163a6a74ed15ada4c3a14bab410147804585fc9d6c2d973dd19f6d11f204e574b160ac38e2b7c10fcee92ccc1fcfea09ed553a57ea502bad88649710f1c64aff579d7639eed018eba47a7659c38aaa67f189d01a8b0cd6dfe80268ae2d8503edd03ef641dae0881574dcf76caf47080fd7d9878b79cb5a2ded27bf9d20313248c9c3cee8ecd16ed4246ea8061aaca6fc09d809cc13cb3df159dab5aa4f1"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.746927093s ago: executing program 7 (id=3639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.824622106s ago: executing program 0 (id=3640): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 2.66864703s ago: executing program 7 (id=3641): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 1.394423108s ago: executing program 7 (id=3642): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.035525916s ago: executing program 5 (id=3643): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa3) syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x204000) socket$rds(0x15, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1a43) shutdown(r3, 0x2) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000003c0), 0x66) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 996.401677ms ago: executing program 6 (id=3644): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x202181, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) pselect6(0x40, &(0x7f0000000240)={0x7, 0xfffffffffffffffb, 0x1ff, 0x81, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) 951.017198ms ago: executing program 7 (id=3645): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x40000fb, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001380)={0x0, 0x0, "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", "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"}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) 795.229042ms ago: executing program 5 (id=3646): syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1}, 0x38) 0s ago: executing program 7 (id=3647): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0xff24, 0x4d, 0x1ff80, 0x6, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xfffffffd, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0xfffffffe, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x4, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xfffffffc, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0xc, 0x5, 0x80000001, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x6, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x6, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x1, 0xfffffff9, 0x6, 0x3, 0xc0, 0x0, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x7, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x8, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0x400b, 0x30b1d693, 0x1, 0x5, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x6, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) unshare(0x22020600) r4 = open(0x0, 0x0, 0x0) fcntl$lock(r4, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) kernel console output (not intermixed with test programs): /rc0 [ 1191.568558][T15900] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input10 [ 1191.740462][T15900] dvb-usb: schedule remote query interval to 100 msecs. [ 1191.754206][T15900] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1191.796528][T15900] usb 1-1: USB disconnect, device number 10 [ 1191.852649][ T9778] dvb-usb: error -19 while querying for an remote control event. [ 1192.037940][T15900] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1196.640367][ T5155] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1196.880560][ T5155] usb 1-1: Using ep0 maxpacket: 16 [ 1196.933061][T16437] netlink: 'syz.5.2545': attribute type 4 has an invalid length. [ 1196.933989][ T5155] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1196.951243][T16437] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2545'. [ 1197.001656][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.030403][ T5155] usb 1-1: Product: syz [ 1197.035215][ T5155] usb 1-1: Manufacturer: syz [ 1197.039929][ T5155] usb 1-1: SerialNumber: syz [ 1197.055442][T11688] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1197.072630][ T5155] usb 1-1: config 0 descriptor?? [ 1197.333746][T11688] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1197.411086][T11688] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.467476][T11688] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1197.583334][T11688] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.710425][ T5155] usb 1-1: can't set config #0, error -71 [ 1197.715188][T11688] usb 8-1: config 0 descriptor?? [ 1197.759467][ T5155] usb 1-1: USB disconnect, device number 11 [ 1197.792189][T11688] usb 8-1: Found UVC 0.00 device (10c4:ea90) [ 1197.829758][T11688] usb 8-1: No valid video chain found. [ 1198.186822][T11689] usb 8-1: USB disconnect, device number 13 [ 1199.158110][T16456] loop5: detected capacity change from 0 to 256 [ 1199.207315][T16456] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 1200.762070][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2555'. [ 1201.230498][ T5155] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1201.450897][ T5155] usb 1-1: Using ep0 maxpacket: 16 [ 1201.485981][ T5155] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1201.495546][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.507619][ T5155] usb 1-1: Product: syz [ 1201.530024][ T5155] usb 1-1: Manufacturer: syz [ 1201.555585][ T5155] usb 1-1: SerialNumber: syz [ 1201.638032][ T5155] usb 1-1: config 0 descriptor?? [ 1201.652718][ T5155] usb 1-1: selecting invalid altsetting 1 [ 1201.658793][ T5155] technisat-usb2: could not set alternate setting to 0 [ 1201.677819][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.685084][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.724131][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.731427][T16477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.739045][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.746281][T16477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.779829][T16477] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2560'. [ 1201.879170][ T5155] technisat-usb2: firmware version: 0.0 [ 1201.910271][ T5155] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1202.278589][ T5155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1202.309169][ T5155] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1202.319083][ T5155] usb 1-1: media controller created [ 1202.324683][ T5155] technisat-usb2: i2c-error: out failed 53 = -22 [ 1202.331391][ T5155] dvb-usb: MAC address reading failed. [ 1202.569261][T16467] technisat-usb2: i2c-error: out failed 00 = -22 [ 1203.129444][ T5155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1203.203334][T16491] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2565'. [ 1203.378752][ T5155] DVB: Unable to find symbol stv090x_attach() [ 1203.387997][ T5155] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1205.123874][T16503] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2567'. [ 1205.291709][T16503] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2567'. [ 1205.628145][T16508] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2568'. [ 1205.645723][ T5155] rc_core: IR keymap rc-technisat-usb2 not found [ 1205.682053][ T5155] Registered IR keymap rc-empty [ 1205.710001][ T5155] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1205.765317][ T5155] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 1206.051226][ T5155] dvb-usb: schedule remote query interval to 100 msecs. [ 1206.181170][ T5155] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1206.265112][T15900] dvb-usb: error -71 while querying for an remote control event. [ 1206.325163][ T5155] usb 1-1: USB disconnect, device number 12 [ 1206.534791][T16521] netlink: 'syz.0.2572': attribute type 12 has an invalid length. [ 1206.561253][ T5155] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1206.589304][T16521] netlink: 'syz.0.2572': attribute type 29 has an invalid length. [ 1206.660743][T16521] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1206.727548][T16525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.735872][T16525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.796787][T16526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.804079][T16526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.811739][T16526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.819033][T16526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.862610][T16525] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2574'. [ 1209.202566][T16550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2582'. [ 1209.265340][ T5155] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1209.360026][T16550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2582'. [ 1209.480377][ T5155] usb 6-1: Using ep0 maxpacket: 32 [ 1209.491347][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.518992][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.542346][ T5155] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1209.566668][ T5155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.597705][ T5155] usb 6-1: config 0 descriptor?? [ 1211.620410][ T5155] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 1211.627391][ T5155] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 1211.721830][ T5155] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 1211.752452][ T5155] ft260: probe of 0003:0403:6030.0004 failed with error -71 [ 1211.760098][T16569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.768131][T16569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.809441][ T5155] usb 6-1: USB disconnect, device number 26 [ 1211.867365][T16573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.874565][T16573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.882042][T16573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.889149][T16573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.935812][T16569] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2588'. [ 1212.000858][T16576] loop5: detected capacity change from 0 to 8 [ 1212.121024][T16579] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1212.151153][T16576] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1212.159238][T16576] SQUASHFS error: Failed to read block 0x91: -5 [ 1212.166583][T16576] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1212.174124][T16576] SQUASHFS error: Unable to read inode 0x13f [ 1217.731176][T16608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.738595][T16608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.776646][T16608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.783909][T16608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.791772][T16608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.798975][T16608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.861550][T16608] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2601'. [ 1217.890501][T11689] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1218.176574][T11689] usb 6-1: Using ep0 maxpacket: 32 [ 1218.339983][T11689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.428643][T11689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.548162][T11689] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1218.598950][T11689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.633873][T11689] usb 6-1: config 0 descriptor?? [ 1221.101059][T11689] usbhid 6-1:0.0: can't add hid device: -71 [ 1221.108065][T11689] usbhid: probe of 6-1:0.0 failed with error -71 [ 1221.170347][T11689] usb 6-1: USB disconnect, device number 27 [ 1221.325683][T16635] syzkaller0: entered promiscuous mode [ 1221.353427][T16635] syzkaller0: entered allmulticast mode [ 1223.865912][T16654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.873360][T16654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.926183][T16656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.933547][T16656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.941095][T16656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.948272][T16656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.045446][T16654] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2613'. [ 1227.232858][ T9778] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1227.430353][ T9778] usb 6-1: Using ep0 maxpacket: 32 [ 1227.445719][ T9778] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.458000][ T9778] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1227.475334][ T9778] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1227.489281][ T5155] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1227.507762][ T9778] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1227.521159][ T9778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.529300][ T9778] usb 6-1: Product: syz [ 1227.539132][ T9778] usb 6-1: Manufacturer: syz [ 1227.548559][ T9778] usb 6-1: SerialNumber: syz [ 1227.574622][ T9778] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1227.586330][ T9778] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1227.591121][T11688] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1227.605714][ T9778] imon:imon_probe: failed to initialize context! [ 1227.620994][ T9778] imon 6-1:155.0: unable to register, err -19 [ 1227.721296][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 1227.728749][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.740433][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.751202][ T5155] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1227.775480][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.788670][ T5155] usb 1-1: config 0 descriptor?? [ 1227.790338][T11688] usb 8-1: Using ep0 maxpacket: 32 [ 1227.820422][T11688] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 1227.833947][T11688] usb 8-1: language id specifier not provided by device, defaulting to English [ 1227.851224][T11688] usb 8-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice= 0.40 [ 1227.866361][T11688] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.875947][T11688] usb 8-1: Product: syz [ 1227.880356][T11688] usb 8-1: Manufacturer: ᨍ敻鄆䏐⨍屛塈橡胵 [ 1227.887107][T11688] usb 8-1: SerialNumber: syz [ 1228.124944][T11688] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1228.133105][T11688] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1228.158186][T11688] usb 8-1: USB disconnect, device number 14 [ 1228.209978][ T5155] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 1228.217783][ T5155] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 1228.227439][T16600] udevd[16600]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1228.406394][ T5155] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 1228.607341][ T5155] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1228.818494][ T5155] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 1228.828631][ T5155] ft260 0003:0403:6030.0005: failed to retrieve status: -5 [ 1228.910647][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.918015][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.080892][ T5155] ft260 0003:0403:6030.0005: failed to reset I2C controller: -71 [ 1229.611724][T16705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.619022][T16705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.626688][T16705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.635096][T16705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.670906][ T9778] usb 6-1: USB disconnect, device number 28 [ 1229.762028][T16705] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2624'. [ 1230.175146][T16724] syzkaller0: entered promiscuous mode [ 1230.190365][T16724] syzkaller0: entered allmulticast mode [ 1230.454221][ T5155] usb 1-1: USB disconnect, device number 13 [ 1232.277532][T16736] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1232.286556][T16736] overlayfs: missing 'lowerdir' [ 1232.379381][T16738] mmap: syz.0.2633 (16738) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1232.880295][T16731] netlink: 'syz.5.2632': attribute type 4 has an invalid length. [ 1233.094535][T16731] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2632'. [ 1234.306585][T16755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2638'. [ 1234.455354][T16759] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.480441][T16759] binder: 16757:16759 ioctl 4018620d 200000000040 returned -16 [ 1234.550387][T11689] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1234.679209][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2641'. [ 1234.884900][T16769] netlink: 'syz.6.2643': attribute type 4 has an invalid length. [ 1234.893042][T16769] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2643'. [ 1234.950647][T11689] usb 6-1: Using ep0 maxpacket: 32 [ 1234.962643][T11689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.984094][T11689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.997403][T11689] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1235.016852][T11689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.033809][T11689] usb 6-1: config 0 descriptor?? [ 1235.292402][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2648'. [ 1235.490959][T11689] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 1235.498262][T11689] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 1235.506000][T16792] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2651'. [ 1235.707058][T16797] netlink: 'syz.0.2653': attribute type 4 has an invalid length. [ 1235.715264][T16797] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2653'. [ 1235.786903][T11689] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 1235.980704][T11689] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1236.231094][T16798] binder: BINDER_SET_CONTEXT_MGR already set [ 1236.272940][T16798] binder: 16793:16798 ioctl 4018620d 200000000040 returned -16 [ 1236.284526][T11689] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 1236.294890][T11689] ft260 0003:0403:6030.0006: failed to retrieve status: -5 [ 1236.505381][T11689] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 1236.567674][T11689] usb 6-1: USB disconnect, device number 29 [ 1236.625049][T16808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1236.788185][T16813] syzkaller0: entered promiscuous mode [ 1236.800581][T16813] syzkaller0: entered allmulticast mode [ 1237.157065][T16824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2662'. [ 1237.398698][T16835] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2667'. [ 1238.053682][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2669'. [ 1238.070021][T16845] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.079523][T16845] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.088310][T16845] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.097087][T16845] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.127241][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2669'. [ 1238.137000][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2669'. [ 1239.226396][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.233518][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.838431][T11689] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1240.010038][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2671'. [ 1240.073039][T11689] usb 1-1: Using ep0 maxpacket: 32 [ 1240.083642][T11689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.104939][T11689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.122768][T11689] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1240.132628][T16862] netlink: 'syz.6.2673': attribute type 12 has an invalid length. [ 1240.135891][T11689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.168708][T11689] usb 1-1: config 0 descriptor?? [ 1240.190226][T16862] netlink: 'syz.6.2673': attribute type 29 has an invalid length. [ 1240.240273][T16862] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2673'. [ 1240.434868][T16864] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2674'. [ 1240.604982][T11689] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 1240.640463][T11689] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 1240.804761][T11689] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 1241.127392][T11689] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1241.308529][T11689] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 1241.417613][T11689] ft260 0003:0403:6030.0007: failed to retrieve status: -5 [ 1241.621486][T11689] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 1241.667129][T11689] usb 1-1: USB disconnect, device number 14 [ 1242.171417][T16895] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2684'. [ 1242.851201][T16904] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1246.107259][T16921] syzkaller0: entered promiscuous mode [ 1246.135688][T16921] syzkaller0: entered allmulticast mode [ 1246.478005][T16928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2696'. [ 1247.590324][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 1248.531088][T16951] syzkaller0: entered promiscuous mode [ 1248.536691][T16951] syzkaller0: entered allmulticast mode [ 1248.572302][T16953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2706'. [ 1248.880416][T11689] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1249.107015][T11689] usb 8-1: Using ep0 maxpacket: 32 [ 1249.232022][T11689] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.530222][T11689] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.540031][T11689] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1249.559728][T11689] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.577404][T11689] usb 8-1: config 0 descriptor?? [ 1250.064586][T11689] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 1250.084335][T11689] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 1250.910342][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2711'. [ 1251.450846][T11689] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 1251.571272][T11689] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1251.773352][T11689] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 1251.800058][T11689] ft260 0003:0403:6030.0008: failed to retrieve status: -5 [ 1251.949675][T16984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2717'. [ 1252.006819][T11689] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 1252.056286][T11689] usb 8-1: USB disconnect, device number 15 [ 1252.774581][T16994] syzkaller0: entered promiscuous mode [ 1252.793453][T16994] syzkaller0: entered allmulticast mode [ 1255.971018][T17033] overlayfs: failed to clone lowerpath [ 1256.005073][T17033] overlayfs: failed to clone lowerpath [ 1257.100476][ T8] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1257.960293][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1257.967552][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.980631][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.990770][ T8] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1257.999848][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.020302][ T8] usb 6-1: config 0 descriptor?? [ 1258.238551][T17059] overlayfs: failed to clone lowerpath [ 1258.247316][T17059] overlayfs: failed to clone lowerpath [ 1258.463626][ T8] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 1258.481427][ T8] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 1258.650734][ T8] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 1258.869972][ T8] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1259.072610][ T8] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 1259.084179][ T8] ft260 0003:0403:6030.0009: failed to retrieve status: -5 [ 1259.291003][ T8] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 1260.159635][ T8] usb 6-1: USB disconnect, device number 30 [ 1260.398199][T17082] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1260.407174][T17082] overlayfs: missing 'lowerdir' [ 1263.049226][ T5155] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1263.281251][ T5155] usb 6-1: Using ep0 maxpacket: 32 [ 1263.325019][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.385396][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.473170][ T5155] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1263.502979][ T5155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.537177][ T5155] usb 6-1: config 0 descriptor?? [ 1263.884720][T17113] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1263.893592][T17113] overlayfs: missing 'lowerdir' [ 1263.996329][ T5155] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1264.018006][ T5155] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1264.197136][ T5155] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 1264.580474][ T5155] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1264.769322][ T5155] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 1264.781272][ T5155] ft260 0003:0403:6030.000A: failed to retrieve status: -5 [ 1265.003573][ T5155] ft260 0003:0403:6030.000A: failed to reset I2C controller: -71 [ 1265.042329][ T5155] usb 6-1: USB disconnect, device number 31 [ 1265.779978][T17137] netlink: 592 bytes leftover after parsing attributes in process `syz.0.2772'. [ 1266.539884][T17153] loop0: detected capacity change from 0 to 256 [ 1266.572356][T17153] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 1268.410993][T17162] netlink: 592 bytes leftover after parsing attributes in process `syz.6.2781'. [ 1268.600286][ T5155] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1268.970539][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 1268.991875][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.720359][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2782'. [ 1270.477301][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.487194][ T5155] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1270.496908][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.509276][ T5155] usb 1-1: config 0 descriptor?? [ 1270.996308][ T5155] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 1271.032047][ T5155] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 1272.388297][ T5155] ft260 0003:0403:6030.000B: failed to retrieve chip version [ 1272.440837][ T5155] ft260: probe of 0003:0403:6030.000B failed with error -71 [ 1272.451973][ T5155] usb 1-1: USB disconnect, device number 15 [ 1272.548440][T17197] netlink: 592 bytes leftover after parsing attributes in process `syz.7.2791'. [ 1277.834346][T17234] netlink: 'syz.6.2804': attribute type 1 has an invalid length. [ 1277.844085][T17234] netlink: 'syz.6.2804': attribute type 2 has an invalid length. [ 1278.315542][ T9778] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1278.504209][ T9778] usb 1-1: Using ep0 maxpacket: 32 [ 1278.523528][ T9778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.546451][ T9778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.570007][ T9778] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1278.579223][ T9778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.607240][ T9778] usb 1-1: config 0 descriptor?? [ 1279.059538][ T9778] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 1279.068939][ T9778] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 1279.267589][ T9778] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 1279.471115][ T9778] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1279.683824][ T9778] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 1279.914157][ T9778] usb 1-1: USB disconnect, device number 16 [ 1280.558221][T17251] loop0: detected capacity change from 0 to 256 [ 1280.578401][T17251] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 1282.233072][T17232] netlink: 592 bytes leftover after parsing attributes in process `syz.5.2803'. [ 1282.769920][T17272] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.776161][T17272] binder: 17271:17272 ioctl 4018620d 200000000040 returned -16 [ 1282.805411][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2817'. [ 1282.820307][ T5837] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1282.910430][ T9778] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1283.049983][T17279] netlink: 592 bytes leftover after parsing attributes in process `syz.6.2818'. [ 1283.061167][ T5837] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1283.113276][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.193274][ T9778] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1283.217578][ T5837] usb 8-1: Product: syz [ 1283.244322][ T5837] usb 8-1: Manufacturer: syz [ 1283.254797][ T9778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.291378][ T5837] usb 8-1: SerialNumber: syz [ 1283.335065][ T9778] usb 6-1: Product: syz [ 1283.401556][ T9778] usb 6-1: Manufacturer: syz [ 1283.416107][ T5837] usb 8-1: config 0 descriptor?? [ 1283.475096][ T9778] usb 6-1: SerialNumber: syz [ 1283.648833][ T9778] usb 6-1: config 0 descriptor?? [ 1284.327240][ T5837] usb 8-1: Firmware version (0.0) predates our first public release. [ 1284.352139][ T5837] usb 8-1: Please update to version 0.2 or newer [ 1284.639506][ T9778] usb 6-1: f81604_read: reg: 105 failed: -EPIPE [ 1284.666904][ T9778] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 1284.777241][ T9778] f81604: probe of 6-1:0.0 failed with error -32 [ 1285.000365][ T5837] usb 8-1: USB disconnect, device number 16 [ 1285.691106][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2827'. [ 1285.729316][T11204] usb 6-1: USB disconnect, device number 32 [ 1287.399581][T17317] netlink: 592 bytes leftover after parsing attributes in process `syz.0.2829'. [ 1288.421269][T11204] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1288.723677][T17339] overlayfs: failed to clone lowerpath [ 1288.769700][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 1288.785737][T17340] overlayfs: failed to clone lowerpath [ 1288.909660][T11204] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1288.940783][T11204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.958631][T11204] usb 8-1: Product: syz [ 1288.977161][T11204] usb 8-1: Manufacturer: syz [ 1288.991287][T11204] usb 8-1: SerialNumber: syz [ 1289.027075][T11204] usb 8-1: config 0 descriptor?? [ 1289.450422][T11688] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1289.867195][T11204] usb 8-1: f81604_read: reg: 105 failed: -EPIPE [ 1290.303357][T11204] f81604 8-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 1290.311047][T11204] f81604: probe of 8-1:0.0 failed with error -32 [ 1290.492791][T11688] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.523447][T11688] usb 1-1: config 0 has no interfaces? [ 1290.559092][T11688] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1290.577292][T11688] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1290.628189][T11688] usb 1-1: Product: syz [ 1290.653624][T11688] usb 1-1: Manufacturer: syz [ 1290.678458][T11688] usb 1-1: SerialNumber: syz [ 1290.703821][T11688] usb 1-1: config 0 descriptor?? [ 1290.994875][T11688] usb 1-1: USB disconnect, device number 17 [ 1291.158546][T11204] usb 8-1: USB disconnect, device number 17 [ 1293.426659][T17411] dlm: no locking on control device [ 1293.532962][T17413] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1294.650279][T15900] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1294.860226][T15900] usb 6-1: Using ep0 maxpacket: 8 [ 1294.872789][T15900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.883299][T15900] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.902499][T15900] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1294.912068][T15900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.920687][T15900] usb 6-1: Product: syz [ 1294.924987][T15900] usb 6-1: Manufacturer: syz [ 1294.929952][T15900] usb 6-1: SerialNumber: syz [ 1294.963232][T15900] usb 6-1: config 0 descriptor?? [ 1296.166193][T15900] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1296.711973][T15900] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1296.732726][T15900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.760284][T15900] usb 8-1: Product: syz [ 1296.764493][T15900] usb 8-1: Manufacturer: syz [ 1296.778679][T15900] usb 8-1: SerialNumber: syz [ 1296.822403][T15900] usb 8-1: config 0 descriptor?? [ 1297.164391][ T8] usb 6-1: USB disconnect, device number 33 [ 1297.450982][T15900] usb 8-1: f81604_read: reg: 105 failed: -EPIPE [ 1297.467056][T15900] f81604 8-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 1297.496146][T15900] f81604: probe of 8-1:0.0 failed with error -32 [ 1297.863139][T17472] loop0: detected capacity change from 0 to 256 [ 1297.872609][T17472] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 1299.505677][ T8] usb 8-1: USB disconnect, device number 18 [ 1300.674623][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.681507][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.462952][T17506] loop5: detected capacity change from 0 to 256 [ 1302.488866][T17506] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 1305.920285][T11688] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1306.240794][T11688] usb 6-1: Using ep0 maxpacket: 8 [ 1306.249330][T11688] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.267684][T11688] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1306.294755][T11688] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1306.317075][T11688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.372862][T11688] usb 6-1: Product: syz [ 1306.379857][T11688] usb 6-1: Manufacturer: syz [ 1306.388897][T11688] usb 6-1: SerialNumber: syz [ 1306.403980][T11688] usb 6-1: config 0 descriptor?? [ 1306.720558][ T5837] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1306.947077][ T5837] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1306.957655][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.966780][ T5837] usb 1-1: Product: syz [ 1306.971551][ T5837] usb 1-1: Manufacturer: syz [ 1306.976264][ T5837] usb 1-1: SerialNumber: syz [ 1307.117934][ T5837] usb 1-1: config 0 descriptor?? [ 1307.219034][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2906'. [ 1308.356759][T17558] binder: BINDER_SET_CONTEXT_MGR already set [ 1308.362897][T17558] binder: 17557:17558 ioctl 4018620d 200000000040 returned -16 [ 1308.444927][T15900] usb 6-1: USB disconnect, device number 34 [ 1308.461192][ T5837] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 1308.467509][ T5837] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 1308.540599][ T5837] f81604: probe of 1-1:0.0 failed with error -32 [ 1311.490051][ T8] usb 1-1: USB disconnect, device number 18 [ 1312.326763][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2916'. [ 1313.723043][T17586] netlink: 'syz.0.2917': attribute type 4 has an invalid length. [ 1313.731035][T17586] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2917'. [ 1313.913615][T17592] binder: BINDER_SET_CONTEXT_MGR already set [ 1313.919666][T17592] binder: 17591:17592 ioctl 4018620d 200000000040 returned -16 [ 1314.213711][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 1314.551322][ T8] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1314.896704][ T8] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1314.906698][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.914813][ T8] usb 8-1: Product: syz [ 1314.919006][ T8] usb 8-1: Manufacturer: syz [ 1314.923673][ T8] usb 8-1: SerialNumber: syz [ 1314.932073][ T8] usb 8-1: config 0 descriptor?? [ 1315.831662][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2926'. [ 1316.070286][ T8] usb 8-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1316.111245][ T8] f81604 8-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 1316.119012][ T8] f81604: probe of 8-1:0.0 failed with error -121 [ 1316.524794][ T5837] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1316.722174][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.743339][ T5837] usb 1-1: config 0 has no interfaces? [ 1316.754387][ T5837] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1316.764485][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1316.778589][ T5837] usb 1-1: Product: syz [ 1316.783502][ T5837] usb 1-1: Manufacturer: syz [ 1316.788346][ T5837] usb 1-1: SerialNumber: syz [ 1316.803412][ T5837] usb 1-1: config 0 descriptor?? [ 1316.861404][ T5155] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1317.091818][ T8] usb 1-1: USB disconnect, device number 19 [ 1317.317633][T11204] usb 8-1: USB disconnect, device number 19 [ 1317.557738][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2933'. [ 1317.686919][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1317.696975][ T5155] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1317.707274][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1317.717045][ T5155] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1317.729777][ T5155] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1317.738991][ T5155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.749088][ T5155] usb 6-1: Product: syz [ 1317.753592][ T5155] usb 6-1: Manufacturer: syz [ 1317.758230][ T5155] usb 6-1: SerialNumber: syz [ 1317.788433][ T5155] usb 6-1: config 0 descriptor?? [ 1317.812873][ T5155] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1318.048146][ T5155] scsi host1: usb-storage 6-1:0.0 [ 1318.217908][ T5155] usb 6-1: USB disconnect, device number 35 [ 1318.816471][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2938'. [ 1320.010999][T17662] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1320.020534][T17662] overlayfs: missing 'lowerdir' [ 1320.879956][T17666] loop0: detected capacity change from 0 to 8 [ 1320.906097][T17666] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1320.914347][T17666] SQUASHFS error: Failed to read block 0x91: -5 [ 1320.921049][T17666] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1320.928407][T17666] SQUASHFS error: Unable to read inode 0x13f [ 1321.883465][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2944'. [ 1323.017861][ T5155] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1323.172583][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2948'. [ 1323.414055][ T5155] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1323.422841][ T5155] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.437381][ T5155] usb 1-1: config 0 has no interfaces? [ 1323.452837][ T5155] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1323.484307][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.511424][ T5155] usb 1-1: config 0 descriptor?? [ 1323.766743][ T8] usb 1-1: USB disconnect, device number 20 [ 1323.819045][T17694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1323.827856][T17694] overlayfs: missing 'lowerdir' [ 1324.365309][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 1327.968709][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2962'. [ 1328.409914][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2964'. [ 1330.262393][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 1330.655224][T17760] syz.7.2970: attempt to access beyond end of device [ 1330.655224][T17760] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1330.676459][T17760] FAT-fs (nbd7): unable to read boot sector [ 1330.831293][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2972'. [ 1331.517693][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1332.787529][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1332.798199][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1334.436461][T17797] syz.5.2982: attempt to access beyond end of device [ 1334.436461][T17797] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1334.449480][T17797] FAT-fs (nbd5): unable to read boot sector [ 1334.881207][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802de57800: rx timeout, send abort [ 1334.895221][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802de57800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1334.912191][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802de56400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1335.874960][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2985'. [ 1336.200243][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c9c1400: rx timeout, send abort [ 1336.208800][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c9c1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1336.223369][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c9c0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1336.732367][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1337.471640][T17818] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1337.480527][T17818] overlayfs: missing 'lowerdir' [ 1337.736639][T17827] overlayfs: failed to clone lowerpath [ 1337.810033][T17828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1337.820234][T17828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1338.283269][T17827] overlayfs: failed to clone lowerpath [ 1339.773566][T17847] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1339.782356][T17847] overlayfs: missing 'lowerdir' [ 1341.630049][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'. [ 1341.690404][T17870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3006'. [ 1341.721626][T17870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3006'. [ 1343.559732][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3010'. [ 1343.869064][T17890] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1345.473226][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3016'. [ 1354.170223][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3018'. [ 1354.180683][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3018'. [ 1356.376751][T17968] netlink: 'syz.7.3035': attribute type 4 has an invalid length. [ 1356.386643][T17968] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3035'. [ 1358.947307][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3044'. [ 1358.966762][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3044'. [ 1360.121026][T18011] binder: 18008:18011 ioctl 4018620d 0 returned -22 [ 1360.969122][T18004] block device autoloading is deprecated and will be removed. [ 1360.987843][T18004] syz.5.3048: attempt to access beyond end of device [ 1360.987843][T18004] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1362.107649][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.115378][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.793254][T18036] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1362.847784][T18036] kvm: pic: non byte read [ 1362.854113][T18036] kvm: pic: level sensitive irq not supported [ 1362.854401][T18036] kvm: pic: non byte read [ 1362.867863][T18036] kvm: pic: level sensitive irq not supported [ 1362.868013][T18036] kvm: pic: non byte read [ 1362.880732][T18036] kvm: pic: level sensitive irq not supported [ 1362.880825][T18036] kvm: pic: non byte read [ 1366.470244][T18100] netlink: 'syz.0.3080': attribute type 4 has an invalid length. [ 1366.478136][T18100] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3080'. [ 1370.118597][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023b02c00: rx timeout, send abort [ 1370.127316][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023b02c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1370.141892][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023b00c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1371.425433][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023b01c00: rx timeout, send abort [ 1371.434457][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023b01c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1371.449061][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023b02800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1372.618960][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.626309][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.670880][T18172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.678088][T18172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.685554][T18172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.692695][T18172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.730735][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023b00800: rx timeout, send abort [ 1372.739205][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023b00800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1372.753761][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023b01400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1374.610267][T15900] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1374.823681][T15900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.848299][T15900] usb 1-1: config 0 has no interfaces? [ 1374.869346][T15900] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1374.886632][T15900] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1374.909694][T15900] usb 1-1: Product: syz [ 1374.927120][T15900] usb 1-1: Manufacturer: syz [ 1374.939331][T15900] usb 1-1: SerialNumber: syz [ 1374.968978][T15900] usb 1-1: config 0 descriptor?? [ 1375.205472][T15900] usb 1-1: USB disconnect, device number 21 [ 1375.476151][T18205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.483546][T18205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.557965][T18206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.565224][T18206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.572908][T18206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.580185][T18206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.910055][T18218] loop0: detected capacity change from 0 to 256 [ 1376.947291][T18218] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 1378.953294][T18241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.960652][T18241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.011563][T18243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.018825][T18243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.026444][T18243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.033673][T18243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.070407][ T5837] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1379.336766][ T5837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.360407][ T5837] usb 8-1: config 0 has no interfaces? [ 1379.384279][ T5837] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1379.442203][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1379.451699][ T5837] usb 8-1: Product: syz [ 1379.456004][ T5837] usb 8-1: Manufacturer: syz [ 1379.460764][ T5837] usb 8-1: SerialNumber: syz [ 1379.534417][ T5837] usb 8-1: config 0 descriptor?? [ 1379.787808][ T5837] usb 8-1: USB disconnect, device number 20 [ 1381.339701][T18267] loop5: detected capacity change from 0 to 256 [ 1381.369375][T18267] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 1383.026181][T18280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.033619][T18280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.080507][T18280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.087716][T18280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.095293][T18280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.102459][T18280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.395708][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 1384.413216][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 1384.442237][T18300] vlan2: entered promiscuous mode [ 1384.447340][T18300] batadv0: entered promiscuous mode [ 1384.670362][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1385.389263][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 1385.400365][T18293] ceph: No mds server is up or the cluster is laggy [ 1385.408724][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 1385.540687][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1385.547853][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1385.601931][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1385.626862][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.676306][ T8] usb 1-1: config 0 descriptor?? [ 1385.904722][T18297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.921982][T18297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.949673][ T8] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1387.977194][ T8] usb 1-1: USB disconnect, device number 22 [ 1388.142876][T18324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.150308][T18324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.182278][T18326] syz.5.3150: attempt to access beyond end of device [ 1388.182278][T18326] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1388.205492][T18327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.212781][T18327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.220483][T18327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.227716][T18327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.573637][T18338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1389.587385][T18338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1389.602040][T18338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1389.610958][T18338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1389.647443][T18338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1389.664007][T18338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1390.569146][ T6348] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.679455][T18351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.686947][T18351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.705206][T18355] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1390.714202][T18355] overlayfs: missing 'lowerdir' [ 1391.540181][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.547385][T18354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.554804][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.561927][T18354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.701853][T18338] Bluetooth: hci0: command tx timeout [ 1392.214325][ T6348] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.265506][T18366] syz.5.3162: attempt to access beyond end of device [ 1392.265506][T18366] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1392.343844][ T6348] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.383776][ T6348] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.821434][T18338] Bluetooth: hci0: command tx timeout [ 1394.107488][T18336] chnl_net:caif_netlink_parms(): no params data found [ 1394.216903][T18387] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1394.225851][T18387] overlayfs: missing 'lowerdir' [ 1395.664388][T18391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.671732][T18391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.707212][T18395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.714479][T18395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.721947][T18395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.729058][T18395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.860619][T18338] Bluetooth: hci0: command tx timeout [ 1396.459332][T18336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.553449][T18336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.661079][T18336] bridge_slave_0: entered allmulticast mode [ 1396.871606][T18336] bridge_slave_0: entered promiscuous mode [ 1396.880670][T18336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.887923][T18336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.911049][T18336] bridge_slave_1: entered allmulticast mode [ 1396.918633][T18336] bridge_slave_1: entered promiscuous mode [ 1396.930967][ T6348] tipc: Left network mode [ 1397.082680][T18336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.172889][T18416] syz.5.3175: attempt to access beyond end of device [ 1397.172889][T18416] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1397.298533][T18336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.458535][T18336] team0: Port device team_slave_0 added [ 1397.492798][T18336] team0: Port device team_slave_1 added [ 1397.680387][T18336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.687410][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.779507][T18336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.805689][T18336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.822238][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.851384][T18336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.882778][T17282] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1397.941790][T18338] Bluetooth: hci0: command tx timeout [ 1397.967243][T18437] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1397.976468][T18437] overlayfs: missing 'lowerdir' [ 1398.143968][T17282] usb 1-1: Using ep0 maxpacket: 32 [ 1398.276307][T17282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.342413][T17282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1398.415795][T17282] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1398.532678][T17282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.628309][T17282] usb 1-1: config 0 descriptor?? [ 1398.759143][T18336] hsr_slave_0: entered promiscuous mode [ 1398.771196][T18336] hsr_slave_1: entered promiscuous mode [ 1399.027728][T18441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.035112][T18441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.107277][T18442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.114560][T18442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.122286][T18442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.129493][T18442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.150485][T17282] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 1399.157446][T17282] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 1399.342762][T17282] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 1400.203023][T17282] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1400.299869][T17282] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 1400.822390][T18429] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0007, size 0, write) [ 1400.841328][T15900] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 1401.798645][T17282] usb 1-1: USB disconnect, device number 23 [ 1401.925053][ T6348] hsr_slave_0: left promiscuous mode [ 1402.016979][ T6348] hsr_slave_1: left promiscuous mode [ 1402.043313][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.070955][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.111716][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.119202][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.181591][T18471] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1402.190488][T18471] overlayfs: missing 'lowerdir' [ 1402.307482][ T6348] bridge_slave_1: left allmulticast mode [ 1402.394916][ T6348] bridge_slave_1: left promiscuous mode [ 1402.481341][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.531233][ T6348] bridge_slave_0: left allmulticast mode [ 1402.536959][ T6348] bridge_slave_0: left promiscuous mode [ 1403.013832][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.390654][ T6348] veth1_macvtap: left promiscuous mode [ 1405.497615][ T6348] veth0_macvtap: left promiscuous mode [ 1405.505624][ T6348] veth1_vlan: left promiscuous mode [ 1406.080480][T15900] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1406.144782][ T6348] team0 (unregistering): Port device geneve0 removed [ 1406.278443][T15900] usb 8-1: Using ep0 maxpacket: 32 [ 1406.317696][T15900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.340926][T15900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.377670][T15900] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1406.389033][T15900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.416925][T15900] usb 8-1: config 0 descriptor?? [ 1406.952588][T15900] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 1406.959562][T15900] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 1407.136988][T15900] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 1407.337592][T15900] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1407.560277][T15900] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 1407.815123][T18500] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0007, size 0, write) [ 1407.851941][T15900] usb 8-1: USB disconnect, device number 21 [ 1407.975193][ T6348] team0 (unregistering): Port device team_slave_1 removed [ 1408.052977][ T6348] team0 (unregistering): Port device team_slave_0 removed [ 1408.127737][ T6348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.263724][ T6348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.302745][ T6348] bond0 (unregistering): Released all slaves [ 1411.732990][T18477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.740820][T18477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.801056][T18480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.808288][T18480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.815847][T18480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.823077][T18480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.935096][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3202'. [ 1411.950593][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3202'. [ 1416.226276][T18566] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3211'. [ 1416.244577][T18566] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3211'. [ 1417.135364][T18336] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1417.191266][T18336] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1417.244329][T18336] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1417.284999][T18336] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1417.543823][T18336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.584773][T18583] usb usb8: usbfs: process 18583 (syz.5.3213) did not claim interface 0 before use [ 1417.626568][T18336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.709819][T10248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.716976][T10248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.773947][T10248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.782315][T10248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.832972][T18597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.840366][T18597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.923787][T18597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.930987][T18597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.938532][T18597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.945700][T18597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.190027][T18336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.295090][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3219'. [ 1420.310570][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3219'. [ 1420.761185][T18336] veth0_vlan: entered promiscuous mode [ 1420.886393][T18336] veth1_vlan: entered promiscuous mode [ 1421.062998][T18336] veth0_macvtap: entered promiscuous mode [ 1421.549767][T18336] veth1_macvtap: entered promiscuous mode [ 1421.888436][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.937709][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.950139][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.970225][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.992155][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.008659][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.023008][T18336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.039121][T18652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.046456][T18652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.142666][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.157602][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.177237][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.195612][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.208974][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.220400][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.233922][T18336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.253902][T18653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.261244][T18653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.268791][T18653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.276015][T18653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1423.565520][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.574827][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.939999][T18336] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.963458][T18336] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.990176][T18336] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.998959][T18336] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.027014][T18692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.034429][T18692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.084360][T18693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.091819][T18693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.099420][T18693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.106694][T18693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.856552][T10248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.917856][T10248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.002334][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.020706][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.751094][T15900] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1432.821702][T18745] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1432.953424][T15900] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.970439][T15900] usb 7-1: config 0 has no interfaces? [ 1432.991705][T15900] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1433.012969][T15900] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1433.038396][T15900] usb 7-1: Product: syz [ 1433.052309][T15900] usb 7-1: Manufacturer: syz [ 1433.066076][T15900] usb 7-1: SerialNumber: syz [ 1433.081143][T15900] usb 7-1: config 0 descriptor?? [ 1433.175217][T18747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.182495][T18747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.268212][T18751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.275445][T18751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.282893][T18751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.290136][T18751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.391215][T11204] usb 7-1: USB disconnect, device number 17 [ 1435.244854][T11689] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1435.466565][T11689] usb 7-1: Using ep0 maxpacket: 16 [ 1435.500385][T11689] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1435.509802][T11689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.519705][T11689] usb 7-1: Product: syz [ 1435.536793][T11689] usb 7-1: Manufacturer: syz [ 1435.541884][T11689] usb 7-1: SerialNumber: syz [ 1435.562737][T11689] usb 7-1: config 0 descriptor?? [ 1435.576158][T11689] usb 7-1: selecting invalid altsetting 1 [ 1435.582472][T11689] technisat-usb2: could not set alternate setting to 0 [ 1435.779038][T11689] technisat-usb2: firmware version: 0.0 [ 1435.787053][T11689] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1436.208926][T11689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1436.223065][T11689] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1436.238934][T11689] usb 7-1: media controller created [ 1436.246563][T11689] technisat-usb2: i2c-error: out failed 53 = -22 [ 1436.255439][T11689] dvb-usb: MAC address reading failed. [ 1436.314752][T11689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1436.405187][T18777] technisat-usb2: i2c-error: out failed 00 = -22 [ 1436.469645][T11689] DVB: Unable to find symbol stv090x_attach() [ 1436.477000][T11689] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1436.570934][T11689] rc_core: IR keymap rc-technisat-usb2 not found [ 1436.577343][T11689] Registered IR keymap rc-empty [ 1436.584451][T11689] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1436.598231][T11689] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input20 [ 1436.627014][T11689] dvb-usb: schedule remote query interval to 100 msecs. [ 1436.635384][T11689] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1436.670741][T11689] usb 7-1: USB disconnect, device number 18 [ 1436.795684][T11689] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1440.283985][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'. [ 1440.374874][T18797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1440.382099][T18797] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1440.453588][T18797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1440.459658][T18797] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1440.554604][T18797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1440.560906][T18797] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1440.599330][T18797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1440.606100][T18797] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1440.632876][T18797] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1440.778028][T18799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.785432][T18799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.848491][T18802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.855781][T18802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.863413][T18802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.870627][T18802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.940339][T15900] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1441.159941][T15900] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.172173][T15900] usb 8-1: config 0 has no interfaces? [ 1441.205769][T15900] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1441.215498][T15900] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1441.232579][T15900] usb 8-1: Product: syz [ 1441.253775][T15900] usb 8-1: Manufacturer: syz [ 1441.272246][T15900] usb 8-1: SerialNumber: syz [ 1441.304844][T15900] usb 8-1: config 0 descriptor?? [ 1441.510677][T11204] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1441.642802][T11688] usb 8-1: USB disconnect, device number 22 [ 1443.190397][T18338] Bluetooth: hci3: command 0x0406 tx timeout [ 1443.196694][T18338] Bluetooth: hci4: command 0x0406 tx timeout [ 1443.204374][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1443.210846][T18338] Bluetooth: hci0: command 0x0c1a tx timeout [ 1443.220601][T11204] usb 7-1: Using ep0 maxpacket: 16 [ 1443.281627][T11204] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1443.300800][T11204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.308860][T11204] usb 7-1: Product: syz [ 1443.330392][T11204] usb 7-1: Manufacturer: syz [ 1443.335068][T11204] usb 7-1: SerialNumber: syz [ 1443.364397][T11204] usb 7-1: config 0 descriptor?? [ 1443.385505][T11204] usb 7-1: selecting invalid altsetting 1 [ 1443.396681][T11204] technisat-usb2: could not set alternate setting to 0 [ 1443.590270][T11204] technisat-usb2: firmware version: 0.0 [ 1443.596004][T11204] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1444.005681][T11204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1444.070899][T11204] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1444.127202][T11204] usb 7-1: media controller created [ 1444.169756][T11204] technisat-usb2: i2c-error: out failed 53 = -22 [ 1444.262679][T18809] technisat-usb2: i2c-error: out failed 00 = -22 [ 1444.285658][T11204] dvb-usb: MAC address reading failed. [ 1444.902266][T11204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1445.173838][T11204] DVB: Unable to find symbol stv090x_attach() [ 1445.184207][T11204] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1445.220781][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1445.226864][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1445.233000][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1445.239158][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 1445.460254][T11204] rc_core: IR keymap rc-technisat-usb2 not found [ 1445.477514][T11204] Registered IR keymap rc-empty [ 1445.489273][T11204] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1445.502711][T11204] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input21 [ 1445.535942][T11204] dvb-usb: schedule remote query interval to 100 msecs. [ 1445.558756][T11204] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1445.599405][T11204] usb 7-1: USB disconnect, device number 19 [ 1445.735846][T11204] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1446.608905][T18856] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1447.302983][T18836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1448.548783][T18834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.556270][T18834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.577070][T18837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.584269][T18837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.591866][T18837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.598994][T18837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.607299][T18837] bridge0: entered promiscuous mode [ 1448.612728][T18837] bridge0: entered allmulticast mode [ 1448.630691][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3263'. [ 1450.661238][T18870] binder: 18864:18870 ioctl 4018620d 0 returned -22 [ 1450.930807][T11204] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1451.180403][T11204] usb 8-1: Using ep0 maxpacket: 16 [ 1451.329416][T11204] usb 8-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1451.468949][T11204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.568114][T11204] usb 8-1: Product: syz [ 1451.580213][T11204] usb 8-1: Manufacturer: syz [ 1451.598476][T11204] usb 8-1: SerialNumber: syz [ 1451.634867][T11204] usb 8-1: config 0 descriptor?? [ 1451.689402][T11204] usb 8-1: selecting invalid altsetting 1 [ 1451.706342][T11204] technisat-usb2: could not set alternate setting to 0 [ 1451.874489][T11204] technisat-usb2: firmware version: 0.0 [ 1451.899205][T11204] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1452.524576][T11204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1452.623872][T11204] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1452.664912][T11204] usb 8-1: media controller created [ 1452.682313][T11204] technisat-usb2: i2c-error: out failed 53 = -22 [ 1452.688859][T11204] dvb-usb: MAC address reading failed. [ 1452.751969][T11204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1452.774856][T18885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.782422][T18885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.275590][T18885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.282917][T18885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.290694][T18885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.298032][T18885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.341145][T11689] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1454.488028][T11204] DVB: Unable to find symbol stv090x_attach() [ 1454.501598][T11204] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1454.546674][T11689] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.568519][T11689] usb 1-1: config 0 has no interfaces? [ 1454.588585][T11689] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1454.604106][T11689] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1454.689371][T18899] binder: 18897:18899 ioctl 4018620d 0 returned -22 [ 1454.734714][T11689] usb 1-1: Product: syz [ 1454.739042][T11689] usb 1-1: Manufacturer: syz [ 1454.743982][T11689] usb 1-1: SerialNumber: syz [ 1454.752157][T11689] usb 1-1: config 0 descriptor?? [ 1454.828096][T11204] rc_core: IR keymap rc-technisat-usb2 not found [ 1455.050876][ T5155] usb 1-1: USB disconnect, device number 24 [ 1455.569683][T11204] Registered IR keymap rc-empty [ 1455.576387][T11204] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1455.589230][T11204] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input22 [ 1455.623009][T11204] dvb-usb: schedule remote query interval to 100 msecs. [ 1455.640880][T11204] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1455.684355][T11204] usb 8-1: USB disconnect, device number 23 [ 1455.951384][T11204] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1456.210470][T15900] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1456.323858][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3280'. [ 1456.402296][T15900] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1456.435647][T15900] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1456.476382][T15900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1456.499263][T15900] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1456.543671][T15900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.629520][T18912] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1456.641390][T15900] usb 1-1: config 0 descriptor?? [ 1456.676159][T18904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1457.123987][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.136786][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.148662][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.161710][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.169338][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.180042][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.194824][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.205685][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.214163][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.222217][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.229825][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.237952][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.252658][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.263109][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.273854][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.313171][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.331217][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.338770][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.355484][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.364869][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.376997][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.384941][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.392778][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.404291][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.417250][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.425291][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.433183][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.441851][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1457.454251][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.299338][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.307286][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.315161][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.323155][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.331009][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.338531][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.346815][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.354922][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.362776][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.371880][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.379425][T15900] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 1458.421092][T15900] holtek_mouse 0003:04D9:A072.000F: hidraw0: USB HID v0.86 Device [HID 04d9:a072] on usb-dummy_hcd.0-1/input0 [ 1458.462089][T15900] usb 1-1: USB disconnect, device number 25 [ 1458.604894][T18931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.612299][T18931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.652372][T18931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.659584][T18931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.667045][T18931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.674270][T18931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.880582][T18936] binder: 18934:18936 ioctl 4018620d 0 returned -22 [ 1459.061427][T18928] fido_id[18928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1459.087584][T18938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3292'. [ 1460.000529][T18940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3292'. [ 1461.855401][T18954] comedi: valid board names for 8255 driver are: [ 1462.018689][T18954] 8255 [ 1462.178605][T18954] comedi: valid board names for vmk80xx driver are: [ 1462.187995][T18954] vmk80xx [ 1462.192735][T18954] comedi: valid board names for usbduxsigma driver are: [ 1462.219791][T18954] usbduxsigma [ 1462.279266][T18954] comedi: valid board names for usbduxfast driver are: [ 1462.459663][T18954] usbduxfast [ 1462.658827][T18954] comedi: valid board names for usbdux driver are: [ 1462.720518][T18954] usbdux [ 1462.723488][T18954] comedi: valid board names for ni6501 driver are: [ 1462.788540][T18954] ni6501 [ 1462.797087][T18954] comedi: valid board names for dt9812 driver are: [ 1462.826936][T18954] dt9812 [ 1462.832938][T18954] comedi: valid board names for ni_labpc_cs driver are: [ 1462.855804][T18954] ni_labpc_cs [ 1462.877128][T18954] comedi: valid board names for ni_daq_700 driver are: [ 1462.910495][T18954] ni_daq_700 [ 1462.920154][T18954] comedi: valid board names for labpc_pci driver are: [ 1462.927438][T18954] labpc_pci [ 1462.931867][T18954] comedi: valid board names for adl_pci9118 driver are: [ 1463.117475][T18954] pci9118dg [ 1463.122645][T18954] pci9118hg [ 1463.126542][T18954] pci9118hr [ 1463.130237][T18954] comedi: valid board names for 8255_pci driver are: [ 1463.143600][T18954] 8255_pci [ 1463.146764][T18954] comedi: valid board names for s526 driver are: [ 1463.156210][T18954] s526 [ 1463.159100][T18954] comedi: valid board names for multiq3 driver are: [ 1463.912077][T18954] multiq3 [ 1463.915143][T18954] comedi: valid board names for pcmuio driver are: [ 1463.960229][T18954] pcmuio48 [ 1463.963393][T18954] pcmuio96 [ 1463.966498][T18954] comedi: valid board names for pcmmio driver are: [ 1464.003583][T18954] pcmmio [ 1464.021780][T18954] comedi: valid board names for pcmda12 driver are: [ 1464.028668][T18972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.036014][T18972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.050202][T18954] pcmda12 [ 1464.053294][T18954] comedi: valid board names for pcmad driver are: [ 1464.059777][T18954] pcmad12 [ 1464.084566][T18954] pcmad16 [ 1464.103246][T18954] comedi: valid board names for ni_labpc driver are: [ 1464.110006][T18954] lab-pc-1200 [ 1464.112286][T18975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.120613][T18975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.128165][T18975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.135359][T18975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.145487][T18954] lab-pc-1200ai [ 1464.149062][T18954] lab-pc+ [ 1464.232011][T18978] binder: 18976:18978 ioctl c0306201 0 returned -14 [ 1464.264855][T18954] comedi: valid board names for atmio16 driver are: [ 1464.279919][T18954] atmio16 [ 1464.321433][T18954] atmio16d [ 1464.350905][T18954] comedi: valid board names for ni_at_ao driver are: [ 1464.445625][T18954] at-ao-6 [ 1464.448690][T18954] at-ao-10 [ 1464.542097][T18954] comedi: valid board names for ni_at_a2150 driver are: [ 1464.608091][T18954] ni_at_a2150 [ 1464.652268][T18954] comedi: valid board names for adq12b driver are: [ 1465.330722][T18954] adq12b [ 1465.333811][T18954] comedi: valid board names for mpc624 driver are: [ 1465.360661][T18954] mpc624 [ 1465.376487][T18954] comedi: valid board names for c6xdigio driver are: [ 1465.418675][T18954] c6xdigio [ 1465.443851][T18954] comedi: valid board names for aio_iiro_16 driver are: [ 1465.570300][T18954] aio_iiro_16 [ 1465.573836][T18954] comedi: valid board names for aio_aio12_8 driver are: [ 1465.581054][T18954] aio_aio12_8 [ 1465.674919][T18954] aio_ai12_8 [ 1465.678245][T18954] aio_ao12_4 [ 1465.699982][T18954] comedi: valid board names for fl512 driver are: [ 1465.708235][T18954] fl512 [ 1465.713824][T18954] comedi: valid board names for dmm32at driver are: [ 1465.720576][T18954] dmm32at [ 1465.723707][T18954] comedi: valid board names for dt282x driver are: [ 1465.733855][T18954] dt2821 [ 1465.740265][T18954] dt2821-f [ 1465.743519][T18954] dt2821-g [ 1465.746713][T18954] dt2823 [ 1465.756349][T18954] dt2824-pgh [ 1465.770423][T18954] dt2824-pgl [ 1465.773754][T18954] dt2825 [ 1465.776685][T18954] dt2827 [ 1465.779635][T18954] dt2828 [ 1465.803126][T18954] dt2829 [ 1465.806110][T18954] dt21-ez [ 1465.809130][T18954] dt23-ez [ 1465.834281][T18954] dt24-ez [ 1465.837345][T18954] dt24-ez-pgl [ 1465.856269][T18954] comedi: valid board names for dt2817 driver are: [ 1465.868128][T18954] dt2817 [ 1465.880482][T18954] comedi: valid board names for dt2815 driver are: [ 1465.887050][T18954] dt2815 [ 1465.889980][T18954] comedi: valid board names for dt2814 driver are: [ 1465.920210][T18954] dt2814 [ 1465.925048][T18954] comedi: valid board names for dt2811 driver are: [ 1465.944840][T18954] dt2811-pgh [ 1465.959302][T18954] dt2811-pgl [ 1466.102569][T18954] comedi: valid board names for dt2801 driver are: [ 1466.138992][T18954] dt2801 [ 1466.150604][T18954] comedi: valid board names for das6402 driver are: [ 1466.530307][T11689] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1466.736902][T11689] usb 6-1: device descriptor read/64, error -71 [ 1466.972255][T18954] das6402-12 [ 1466.975610][T18954] das6402-16 [ 1466.978889][T18954] comedi: valid board names for das1800 driver are: [ 1467.022629][T18954] das-1701st [ 1467.025956][T18954] das-1701st-da [ 1467.036575][T18954] das-1702st [ 1467.046669][T18954] das-1702st-da [ 1467.083505][T18954] das-1702hr [ 1467.091672][T18954] das-1702hr-da [ 1467.104079][T18954] das-1701ao [ 1467.109878][T18954] das-1702ao [ 1467.117527][T18954] das-1801st [ 1467.126468][T18954] das-1801st-da [ 1467.132535][T18954] das-1802st [ 1467.139244][T18954] das-1802st-da [ 1467.147844][T11689] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1467.156171][T18954] das-1802hr [ 1467.159594][T18954] das-1802hr-da [ 1467.163702][T18954] das-1801hc [ 1467.167101][T18954] das-1802hc [ 1467.170954][T18954] das-1801ao [ 1467.174833][T18954] das-1802ao [ 1467.178231][T18954] comedi: valid board names for das800 driver are: [ 1467.189742][T18954] das-800 [ 1467.197131][T18954] cio-das800 [ 1467.203392][T18954] das-801 [ 1467.210981][T18954] cio-das801 [ 1467.217972][T18954] das-802 [ 1467.226106][T18954] cio-das802 [ 1467.234117][T18954] cio-das802/16 [ 1467.241722][T18954] comedi: valid board names for isa-das08 driver are: [ 1467.258804][T18954] isa-das08 [ 1467.265639][T18954] das08-pgm [ 1467.281324][T18954] das08-pgh [ 1467.328601][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1467.339240][T18954] das08-pgl [ 1467.350371][T18954] das08-aoh [ 1467.353664][T11689] usb 6-1: device descriptor read/64, error -71 [ 1467.365730][T18954] das08-aol [ 1467.374642][T18954] das08-aom [ 1467.388771][T18954] das08/jr-ao [ 1467.402429][T18954] das08jr-16-ao [ 1467.419127][T18954] pc104-das08 [ 1467.439315][T18954] das08jr/16 [ 1467.458258][T18954] comedi: valid board names for das16m1 driver are: [ 1467.475105][T18954] das16m1 [ 1467.478154][T18954] comedi: valid board names for dac02 driver are: [ 1467.500998][T11689] usb usb6-port1: attempt power cycle [ 1467.516643][T18954] dac02 [ 1467.519541][T18954] comedi: valid board names for rti802 driver are: [ 1467.541405][T18954] rti802 [ 1467.544375][T18954] comedi: valid board names for rti800 driver are: [ 1467.570444][T18954] rti800 [ 1467.575840][T18954] rti815 [ 1467.590155][T18954] comedi: valid board names for pcm3724 driver are: [ 1467.610121][T18954] pcm3724 [ 1467.617857][T18954] comedi: valid board names for pcl818 driver are: [ 1467.638082][T18954] pcl818l [ 1467.654192][T18954] pcl818h [ 1467.657231][T18954] pcl818hd [ 1467.678522][T18954] pcl818hg [ 1467.688645][T18954] pcl818 [ 1467.698735][T18954] pcl718 [ 1467.710099][T18954] pcm3718 [ 1467.713181][T18954] comedi: valid board names for pcl816 driver are: [ 1467.743704][T18954] pcl816 [ 1467.752917][T18954] pcl814b [ 1467.769608][T18954] comedi: valid board names for pcl812 driver are: [ 1467.784096][T18954] pcl812 [ 1467.799931][T18954] pcl812pg [ 1467.810010][T18954] acl8112pg [ 1467.824662][T18954] acl8112dg [ 1467.827880][T18954] acl8112hg [ 1467.860013][T18954] a821pgl [ 1467.871995][T18954] a821pglnda [ 1467.882086][T18954] a821pgh [ 1467.889498][T18954] a822pgl [ 1467.902346][T18954] a822pgh [ 1467.912801][T18954] a823pgl [ 1467.925894][T18954] a823pgh [ 1467.928947][T18954] pcl813 [ 1467.940253][T11689] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1467.949912][T18954] pcl813b [ 1467.971595][T18954] acl8113 [ 1467.974664][T18954] iso813 [ 1467.977593][T18954] acl8216 [ 1468.003750][T18954] a826pg [ 1468.006736][T18954] comedi: valid board names for pcl730 driver are: [ 1468.014460][T11689] usb 6-1: device descriptor read/8, error -71 [ 1468.038269][T18954] pcl730 [ 1468.046026][T18954] iso730 [ 1468.048986][T18954] acl7130 [ 1468.067393][T18954] pcm3730 [ 1468.085190][T18954] pcl725 [ 1468.098357][T18954] p8r8dio [ 1468.105666][T18954] acl7225b [ 1468.108789][T18954] p16r16dio [ 1468.126672][T18954] pcl733 [ 1468.129652][T18954] pcl734 [ 1468.150570][T18954] opmm-1616-xt [ 1468.154064][T18954] pearl-mm-p [ 1468.164863][T18954] ir104-pbf [ 1468.184892][T18954] comedi: valid board names for pcl726 driver are: [ 1468.193459][T18954] pcl726 [ 1468.196429][T18954] pcl727 [ 1468.205703][T18954] pcl728 [ 1468.210799][T18954] acl6126 [ 1468.213844][T18954] acl6128 [ 1468.216962][T18954] comedi: valid board names for pcl724 driver are: [ 1468.228875][T18954] pcl724 [ 1468.233272][T18954] pcl722 [ 1468.236225][T18954] pcl731 [ 1468.249793][T18954] acl7122 [ 1468.269834][T18954] acl7124 [ 1468.274231][T18954] pet48dio [ 1468.277365][T18954] pcmio48 [ 1468.294387][T18954] onyx-mm-dio [ 1468.297901][T18954] comedi: valid board names for pcl711 driver are: [ 1468.300391][T11689] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1468.313307][T18954] pcl711 [ 1468.316256][T18954] pcl711b [ 1468.329509][T18954] acl8112hg [ 1468.355601][T18954] acl8112dg [ 1468.358858][T18954] comedi: valid board names for amplc_pc263 driver are: [ 1468.376044][T18954] pc263 [ 1468.378946][T18954] comedi: valid board names for amplc_pc236 driver are: [ 1468.386114][T11689] usb 6-1: device descriptor read/8, error -71 [ 1468.413319][T18954] pc36at [ 1468.416303][T18954] comedi: valid board names for amplc_dio200 driver are: [ 1468.443838][T18954] pc212e [ 1468.456068][T18954] pc214e [ 1468.459600][T18954] pc215e [ 1468.463071][T18954] pc218e [ 1468.466120][T18954] pc272e [ 1468.469728][T18954] comedi: valid board names for comedi_parport driver are: [ 1468.479867][T18954] comedi_parport [ 1468.484241][T18954] comedi: valid board names for comedi_test driver are: [ 1468.500467][T11689] usb usb6-port1: unable to enumerate USB device [ 1468.514637][T18954] comedi_test [ 1468.518062][T18954] comedi: valid board names for comedi_bond driver are: [ 1468.538899][T18954] comedi_bond [ 1468.954518][T19012] ceph: No mds server is up or the cluster is laggy [ 1468.999710][ T1204] libceph: connect (1)[c::]:6789 error -101 [ 1469.098271][ T1204] libceph: mon0 (1)[c::]:6789 connect error [ 1470.006164][T19019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.013539][T19019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.247034][T19023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.254663][T19023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.262949][T19023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.270242][T19023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.462686][T19038] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1476.636556][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1478.315781][T19089] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1480.970006][T19115] usb usb8: usbfs: process 19115 (syz.5.3341) did not claim interface 0 before use [ 1485.016227][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.022733][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.100962][T19150] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1487.109729][T19150] overlayfs: missing 'lowerdir' [ 1491.446668][T19171] usb usb7: usbfs: process 19171 (syz.6.3355) did not claim interface 0 before use [ 1492.324810][T13661] Bluetooth: hci1: Frame reassembly failed (-84) [ 1492.358101][T19199] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1492.368869][T19199] overlayfs: missing 'lowerdir' [ 1494.087360][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3364'. [ 1495.650193][T18338] Bluetooth: hci1: command 0x1003 tx timeout [ 1495.662686][T18836] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1499.162297][T19244] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1501.574305][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3375'. [ 1505.314413][T19290] autofs4:pid:19290:autofs_fill_super: called with bogus options [ 1506.699920][T19302] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1506.841864][T15900] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1506.858686][T19312] binder: BINDER_SET_CONTEXT_MGR already set [ 1506.865967][T19312] binder: 19309:19312 ioctl 4018620d 200000000040 returned -16 [ 1507.010157][T15900] usb 8-1: device descriptor read/64, error -71 [ 1507.370154][T15900] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1507.872612][T15900] usb 8-1: device descriptor read/64, error -71 [ 1507.911953][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3396'. [ 1508.805516][T15900] usb usb8-port1: attempt power cycle [ 1509.233925][T15900] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1509.309361][T15900] usb 8-1: device descriptor read/8, error -71 [ 1509.604743][T15900] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 1510.267900][T15900] usb 8-1: device descriptor read/8, error -71 [ 1510.410482][T15900] usb usb8-port1: unable to enumerate USB device [ 1511.038368][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3406'. [ 1513.106117][T19362] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1513.460353][ T9778] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1514.280139][ T1204] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1514.323936][ T9778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1514.359028][ T9778] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1515.334206][ T9778] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1515.343747][ T9778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.381974][ T9778] usb 1-1: Product: syz [ 1515.401380][ T9778] usb 1-1: Manufacturer: syz [ 1515.420443][ T1204] usb 6-1: device descriptor read/64, error -71 [ 1515.438463][ T9778] usb 1-1: can't set config #1, error -71 [ 1515.510381][ T9778] usb 1-1: USB disconnect, device number 26 [ 1515.830218][ T1204] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1517.338267][T19394] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1519.321138][ T1204] usb 6-1: device descriptor read/64, error -71 [ 1519.496158][ T1204] usb usb6-port1: attempt power cycle [ 1521.232551][T11204] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1522.291026][T11204] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1522.440373][T11204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.460113][T11204] usb 8-1: Product: syz [ 1522.469620][T11204] usb 8-1: Manufacturer: syz [ 1522.480248][T11204] usb 8-1: SerialNumber: syz [ 1522.507740][T11204] usb 8-1: config 0 descriptor?? [ 1522.572183][T11204] ch341 8-1:0.0: ch341-uart converter detected [ 1523.836345][T11204] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 1524.670223][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3427'. [ 1525.318222][ T5814] usb 8-1: USB disconnect, device number 28 [ 1525.354321][ T5814] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1525.362978][ T9778] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1525.391913][ T5814] ch341 8-1:0.0: device disconnected [ 1525.540185][ T9778] usb 6-1: device descriptor read/64, error -71 [ 1526.242160][ T9778] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1526.750139][ T9778] usb 6-1: device descriptor read/64, error -71 [ 1527.300399][ T9778] usb usb6-port1: attempt power cycle [ 1528.268382][T19455] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1531.481657][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3437'. [ 1532.295886][T19476] usb usb8: usbfs: process 19476 (syz.0.3438) did not claim interface 0 before use [ 1533.120267][T17282] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1533.790237][T17282] usb 7-1: device descriptor read/64, error -71 [ 1534.070307][T17282] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1534.262116][T17282] usb 7-1: device descriptor read/64, error -71 [ 1534.381087][T17282] usb usb7-port1: attempt power cycle [ 1535.130158][T17282] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1535.290845][T17282] usb 7-1: device descriptor read/8, error -71 [ 1536.060205][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3448'. [ 1536.912198][T17282] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1537.011098][T17282] usb 7-1: device descriptor read/8, error -71 [ 1537.069295][T19504] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1537.134377][T17282] usb usb7-port1: unable to enumerate USB device [ 1541.384273][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1541.421121][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1541.430932][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1541.466438][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1541.475081][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1541.484349][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1541.572945][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3453'. [ 1541.693830][T13659] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.722697][T13659] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.178389][T13659] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.439074][T13659] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.540404][T18836] Bluetooth: hci1: command tx timeout [ 1544.212913][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3457'. [ 1544.396201][T19549] binder: BINDER_SET_CONTEXT_MGR already set [ 1544.430949][T19549] binder: 19545:19549 ioctl 4018620d 200000000040 returned -16 [ 1544.770333][ T5814] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1544.859099][T19523] chnl_net:caif_netlink_parms(): no params data found [ 1545.048269][ T5814] usb 1-1: device descriptor read/64, error -71 [ 1545.338096][T13659] tipc: Left network mode [ 1545.620268][T18836] Bluetooth: hci1: command tx timeout [ 1546.425118][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.746188][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.990144][ T5814] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1547.490719][ T5814] usb 1-1: device descriptor read/64, error -71 [ 1547.700180][T18836] Bluetooth: hci1: command tx timeout [ 1547.714664][ T5814] usb usb1-port1: attempt power cycle [ 1550.029779][T18836] Bluetooth: hci1: command tx timeout [ 1552.003452][T19586] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 1555.106492][T19523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.133052][T19523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.149860][T19523] bridge_slave_0: entered allmulticast mode [ 1555.186732][T19523] bridge_slave_0: entered promiscuous mode [ 1555.237886][T19523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.257940][T19523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.265744][T19523] bridge_slave_1: entered allmulticast mode [ 1555.289086][T19523] bridge_slave_1: entered promiscuous mode [ 1555.311173][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1555.472974][T19609] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.524918][T19609] binder: 19607:19609 ioctl 4018620d 200000000040 returned -16 [ 1557.426670][T19523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.492597][T19523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.777323][T19523] team0: Port device team_slave_0 added [ 1557.825311][T19523] team0: Port device team_slave_1 added [ 1557.881021][ T5814] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1558.860518][ T5814] usb 7-1: device descriptor read/64, error -71 [ 1559.150145][ T5814] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1559.989787][T19523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.009075][T19523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.066249][ T5814] usb 7-1: device descriptor read/64, error -71 [ 1560.092992][T19523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.142035][T19523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.159194][T19523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.206006][ T5814] usb usb7-port1: attempt power cycle [ 1560.250423][T19523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.193598][T19523] hsr_slave_0: entered promiscuous mode [ 1563.370412][T19662] usb usb8: usbfs: process 19662 (syz.0.3478) did not claim interface 0 before use [ 1563.450981][T19523] hsr_slave_1: entered promiscuous mode [ 1563.510418][T19523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1563.518055][T19523] Cannot create hsr debugfs directory [ 1563.537315][T18836] block nbd6: Receive control failed (result -32) [ 1563.552519][T19659] nbd6: detected capacity change from 0 to 63 [ 1563.563456][T19664] block nbd6: NBD_DISCONNECT [ 1563.568135][T19664] block nbd6: Send disconnect failed -32 [ 1563.638208][T19664] block nbd6: shutting down sockets [ 1563.646206][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1563.660059][T15785] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1563.674120][T15785] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1563.685216][T15785] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1563.693168][T15785] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1563.702249][T15785] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1563.904056][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1563.913230][T15785] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1563.921241][T15785] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1563.929044][T15785] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1563.936854][T15785] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1563.945202][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1563.954344][T15785] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1563.962306][T15785] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1563.970485][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1563.979861][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1563.989265][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1563.999217][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1564.008652][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1564.017886][T19617] ldm_validate_partition_table(): Disk read failed. [ 1564.035558][T15785] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1564.046182][T19617] Dev nbd6: unable to read RDB block 0 [ 1564.067075][T19617] nbd6: unable to read partition table [ 1564.108779][T19617] ldm_validate_partition_table(): Disk read failed. [ 1564.232616][T19617] Dev nbd6: unable to read RDB block 0 [ 1564.260748][T19617] nbd6: unable to read partition table [ 1564.982968][T13659] bond0: left promiscuous mode [ 1565.030512][T13659] bond_slave_0: left promiscuous mode [ 1565.080564][T13659] bond_slave_1: left promiscuous mode [ 1565.191562][T13659] batadv0: left promiscuous mode [ 1565.263584][T13659] hsr_slave_0: left promiscuous mode [ 1565.296190][T13659] hsr_slave_1: left promiscuous mode [ 1565.341188][T13659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.348628][T13659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.394983][T13659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.431959][T13659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.490987][T13659] bridge_slave_1: left allmulticast mode [ 1565.496702][T13659] bridge_slave_1: left promiscuous mode [ 1565.533936][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.596253][T13659] bridge_slave_0: left allmulticast mode [ 1565.628907][T13659] bridge_slave_0: left promiscuous mode [ 1566.183027][T13659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.587683][T13659] veth1_macvtap: left promiscuous mode [ 1567.595632][T13659] veth0_macvtap: left promiscuous mode [ 1567.601866][T13659] veth1_vlan: left promiscuous mode [ 1567.607133][T13659] veth0_vlan: left promiscuous mode [ 1567.918088][T15900] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1568.203308][T15900] usb 1-1: no configurations [ 1568.207970][T15900] usb 1-1: can't read configurations, error -22 [ 1568.421393][T15900] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1568.683254][T15900] usb 1-1: no configurations [ 1568.688006][T15900] usb 1-1: can't read configurations, error -22 [ 1568.729294][T15900] usb usb1-port1: attempt power cycle [ 1569.220255][T15900] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1569.315081][T15900] usb 1-1: no configurations [ 1569.319774][T15900] usb 1-1: can't read configurations, error -22 [ 1569.856966][T15900] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1572.000279][T15900] usb 1-1: device not accepting address 33, error -71 [ 1572.016782][T15900] usb usb1-port1: unable to enumerate USB device [ 1574.884860][T13659] team0 (unregistering): Port device team_slave_1 removed [ 1575.045826][T13659] team0 (unregistering): Port device team_slave_0 removed [ 1575.336673][T13659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1575.579372][T19733] misc userio: The device must be registered before sending interrupts [ 1575.590396][T13659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.759702][T13659] bond0 (unregistering): Released all slaves [ 1578.801370][T19743] netlink: 'syz.7.3494': attribute type 10 has an invalid length. [ 1578.850313][T19743] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3494'. [ 1578.933801][T19743] team0: Port device geneve0 added [ 1581.234442][T19778] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1581.331243][T19778] kvm: pic: non byte read [ 1581.356317][T19778] kvm: pic: level sensitive irq not supported [ 1581.356446][T19778] kvm: pic: non byte read [ 1582.237108][T19778] kvm: pic: level sensitive irq not supported [ 1582.237298][T19778] kvm: pic: non byte read [ 1582.312278][T19778] kvm: pic: level sensitive irq not supported [ 1582.312370][T19778] kvm: pic: non byte read [ 1582.611177][T19795] misc userio: The device must be registered before sending interrupts [ 1582.637997][T19523] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1582.690588][T19523] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1582.706028][T19523] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1582.737270][T19523] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1583.238382][T19523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.399315][T19523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.556082][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.563299][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.665785][T13661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.672943][T13661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.314283][T19523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.362241][T19843] misc userio: The device must be registered before sending interrupts [ 1586.844272][T19523] veth0_vlan: entered promiscuous mode [ 1586.886876][T19523] veth1_vlan: entered promiscuous mode [ 1586.997893][T19523] veth0_macvtap: entered promiscuous mode [ 1587.557295][T19523] veth1_macvtap: entered promiscuous mode [ 1587.582878][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.593746][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.604315][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.614939][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.630946][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.645449][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.718220][T19523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.788044][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.843313][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.854774][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.868490][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.878832][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.889939][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.932698][T19523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.973640][T19523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.027434][T19523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.065501][T19523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.090097][T19523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.637607][ T6846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.675390][ T6846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.222532][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.262389][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.810110][ T5814] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1595.991963][ T5814] usb 7-1: no configurations [ 1595.997110][ T5814] usb 7-1: can't read configurations, error -22 [ 1596.160297][ T5814] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1596.350982][ T5814] usb 7-1: no configurations [ 1596.359230][ T5814] usb 7-1: can't read configurations, error -22 [ 1596.376261][ T5814] usb usb7-port1: attempt power cycle [ 1596.800317][ T5814] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1596.862935][ T5814] usb 7-1: no configurations [ 1596.867563][ T5814] usb 7-1: can't read configurations, error -22 [ 1597.030238][ T5814] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1597.101958][ T5814] usb 7-1: no configurations [ 1597.122554][ T5814] usb 7-1: can't read configurations, error -22 [ 1597.146968][ T5814] usb usb7-port1: unable to enumerate USB device [ 1601.809195][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 1603.230147][T15900] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1603.461366][T15900] usb 7-1: no configurations [ 1603.476174][T15900] usb 7-1: can't read configurations, error -22 [ 1603.662587][T15900] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1603.860514][T18836] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1603.860681][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 1604.416474][T15900] usb 7-1: no configurations [ 1604.447853][T15900] usb 7-1: can't read configurations, error -22 [ 1604.490495][T15900] usb usb7-port1: attempt power cycle [ 1604.950373][T15900] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1605.821824][T15900] usb 7-1: no configurations [ 1605.840060][T15900] usb 7-1: can't read configurations, error -22 [ 1606.010349][T15900] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1606.310346][T15900] usb 7-1: device not accepting address 34, error -71 [ 1606.741683][T15900] usb usb7-port1: unable to enumerate USB device [ 1608.119383][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.125908][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.621692][T20091] nbd0: detected capacity change from 0 to 63 [ 1609.635275][T20091] block nbd0: NBD_DISCONNECT [ 1609.644570][T20091] block nbd0: Disconnected due to user request. [ 1609.651033][T20091] block nbd0: shutting down sockets [ 1609.730167][ T5814] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1610.260507][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 1610.338017][T18836] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1610.851767][ T5814] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1611.115075][ T5814] usb 7-1: can't read configurations, error -61 [ 1611.431113][ T5814] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1611.622613][ T5814] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1611.630727][ T5814] usb 7-1: can't read configurations, error -61 [ 1611.650928][ T5814] usb usb7-port1: attempt power cycle [ 1612.126481][ T5814] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1612.392249][ T5814] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1612.490357][ T5814] usb 7-1: can't read configurations, error -61 [ 1613.594864][T20118] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1615.456086][T20129] syz.0.3580: attempt to access beyond end of device [ 1615.456086][T20129] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1615.460146][ T5837] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1617.040131][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 1617.047141][ T5837] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 1617.055695][ T5837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.077647][ T5837] usb 8-1: config 0 has no interface number 0 [ 1617.115556][ T5837] usb 8-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1617.170281][ T5837] usb 8-1: config 0 interface 196 has no altsetting 0 [ 1617.300577][ T5837] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1617.360138][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.419361][ T5837] usb 8-1: Product: syz [ 1617.424034][ T5837] usb 8-1: Manufacturer: syz [ 1617.428763][ T5837] usb 8-1: SerialNumber: syz [ 1617.473943][ T5837] usb 8-1: config 0 descriptor?? [ 1621.226015][ T1204] usb 8-1: USB disconnect, device number 29 [ 1624.220179][T11204] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1624.265769][T20167] syz.0.3590: attempt to access beyond end of device [ 1624.265769][T20167] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1624.412835][T11204] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1624.421024][T11204] usb 7-1: can't read configurations, error -61 [ 1624.527547][T20175] Bluetooth: MGMT ver 1.22 [ 1624.590174][T11204] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1624.722094][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3591'. [ 1624.792747][T11204] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1624.808062][T11204] usb 7-1: can't read configurations, error -61 [ 1624.819002][T11204] usb usb7-port1: attempt power cycle [ 1625.290282][ T9778] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1625.475099][T11204] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1625.505483][ T9778] usb 1-1: Using ep0 maxpacket: 32 [ 1625.543179][ T9778] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1625.583586][ T9778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.672422][ T9778] usb 1-1: config 0 has no interface number 0 [ 1625.679025][ T9778] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1625.705037][T11204] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1625.730216][T11204] usb 7-1: can't read configurations, error -61 [ 1625.737850][ T9778] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1625.785915][ T9778] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1625.826032][ T9778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.868713][ T9778] usb 1-1: Product: syz [ 1625.881494][ T9778] usb 1-1: Manufacturer: syz [ 1625.886110][ T9778] usb 1-1: SerialNumber: syz [ 1625.903567][ T9778] usb 1-1: config 0 descriptor?? [ 1625.919032][T11204] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1625.973287][T11204] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1625.995989][T11204] usb 7-1: can't read configurations, error -61 [ 1626.010436][T11204] usb usb7-port1: unable to enumerate USB device [ 1630.448978][ T9778] usb 1-1: USB disconnect, device number 34 [ 1633.557062][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3608'. [ 1634.177101][T11204] IPVS: starting estimator thread 0... [ 1634.720408][T20248] IPVS: using max 14 ests per chain, 33600 per kthread [ 1635.383741][T11688] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1635.661577][T11688] usb 7-1: Using ep0 maxpacket: 32 [ 1635.716298][T11688] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1635.795740][T11688] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.907671][T11688] usb 7-1: config 0 has no interface number 0 [ 1636.010818][T11688] usb 7-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1636.172108][T11688] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1636.221432][T11688] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1636.258755][T11688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.290783][T11688] usb 7-1: Product: syz [ 1636.300464][T11688] usb 7-1: Manufacturer: syz [ 1636.305125][T11688] usb 7-1: SerialNumber: syz [ 1636.323604][T11688] usb 7-1: config 0 descriptor?? [ 1639.977233][T11688] usb 7-1: USB disconnect, device number 43 [ 1640.755426][T20285] netlink: 'syz.6.3620': attribute type 10 has an invalid length. [ 1640.763692][T20285] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3620'. [ 1641.022255][T20285] team0: Port device geneve0 added [ 1642.851708][T20307] misc userio: The device must be registered before sending interrupts [ 1643.190432][ T5155] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1644.570171][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 1645.551912][ T5155] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1645.562959][ T5155] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.573222][ T5155] usb 1-1: config 0 has no interface number 0 [ 1645.701852][ T5155] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1645.715043][ T5155] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1645.725656][ T5155] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1645.751008][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.766871][ T5155] usb 1-1: Product: syz [ 1645.769260][T20326] usb usb8: usbfs: process 20326 (syz.6.3631) did not claim interface 0 before use [ 1645.772453][ T5155] usb 1-1: Manufacturer: syz [ 1645.790100][ T5155] usb 1-1: SerialNumber: syz [ 1645.806831][ T5155] usb 1-1: config 0 descriptor?? [ 1646.069848][ T5155] usb 1-1: USB disconnect, device number 35 [ 1647.240552][T20340] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1651.322672][T20370] syz.5.3643: attempt to access beyond end of device [ 1651.322672][T20370] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1651.335540][T20370] FAT-fs (nbd5): unable to read boot sector [ 1652.320157][T19387] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1652.440534][T20383] ================================================================== [ 1652.448666][T20383] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 1652.456397][T20383] Read of size 8 at addr ffff888026c72818 by task syz.7.3647/20383 [ 1652.464365][T20383] [ 1652.466756][T20383] CPU: 1 PID: 20383 Comm: syz.7.3647 Not tainted syzkaller #0 [ 1652.474247][T20383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1652.484327][T20383] Call Trace: [ 1652.487636][T20383] [ 1652.490595][T20383] dump_stack_lvl+0x18c/0x250 [ 1652.495323][T20383] ? read_lock_is_recursive+0x20/0x20 [ 1652.500736][T20383] ? show_regs_print_info+0x20/0x20 [ 1652.505976][T20383] ? load_image+0x420/0x420 [ 1652.510520][T20383] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1652.516017][T20383] ? __virt_addr_valid+0x10c/0x380 [ 1652.521166][T20383] ? __virt_addr_valid+0x10c/0x380 [ 1652.526313][T20383] ? __virt_addr_valid+0x10c/0x380 [ 1652.531467][T20383] print_report+0xa8/0x210 [ 1652.535930][T20383] ? dvb_device_open+0xc9/0x360 [ 1652.540811][T20383] kasan_report+0x117/0x150 [ 1652.545348][T20383] ? chrdev_open+0x385/0x600 [ 1652.549972][T20383] ? dvb_device_open+0xc9/0x360 [ 1652.550225][T19387] usb 7-1: Using ep0 maxpacket: 32 [ 1652.554838][T20383] dvb_device_open+0xc9/0x360 [ 1652.564647][T20383] chrdev_open+0x58c/0x600 [ 1652.569072][T20383] ? cd_forget+0x160/0x160 [ 1652.573507][T20383] ? fsnotify_perm+0x3ed/0x5e0 [ 1652.578304][T20383] do_dentry_open+0x880/0x14b0 [ 1652.583094][T20383] ? cd_forget+0x160/0x160 [ 1652.587530][T20383] path_openat+0x284f/0x3270 [ 1652.592146][T20383] ? do_sys_openat2+0xda/0x1d0 [ 1652.596914][T20383] ? __x64_sys_openat+0x139/0x160 [ 1652.601955][T20383] ? verify_lock_unused+0x140/0x140 [ 1652.607159][T20383] ? do_filp_open+0x430/0x430 [ 1652.611867][T20383] do_filp_open+0x1f2/0x430 [ 1652.616374][T20383] ? vfs_tmpfile+0x480/0x480 [ 1652.621051][T20383] ? _raw_spin_unlock+0x28/0x40 [ 1652.625953][T20383] ? alloc_fd+0x590/0x640 [ 1652.630314][T20383] do_sys_openat2+0x134/0x1d0 [ 1652.634998][T20383] ? do_sys_open+0xe0/0xe0 [ 1652.639410][T20383] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1652.645401][T20383] ? lock_chain_count+0x20/0x20 [ 1652.650262][T20383] __x64_sys_openat+0x139/0x160 [ 1652.655136][T20383] do_syscall_64+0x55/0xb0 [ 1652.659553][T20383] ? clear_bhb_loop+0x40/0x90 [ 1652.664223][T20383] ? clear_bhb_loop+0x40/0x90 [ 1652.668892][T20383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1652.674785][T20383] RIP: 0033:0x7f459295e68e [ 1652.679216][T20383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1652.698823][T20383] RSP: 002b:00007f4593836b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1652.707241][T20383] RAX: ffffffffffffffda RBX: 00007f45938376c0 RCX: 00007f459295e68e [ 1652.715232][T20383] RDX: 0000000000040002 RSI: 00007f4593836c00 RDI: ffffffffffffff9c [ 1652.723200][T20383] RBP: 00007f4593836c00 R08: 0000000000000000 R09: 0000000000000000 [ 1652.731197][T20383] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1652.739162][T20383] R13: 00007f4592c26218 R14: 00007f4592c26180 R15: 00007fff7fab6748 [ 1652.747146][T20383] [ 1652.750187][T20383] [ 1652.752520][T20383] Allocated by task 1: [ 1652.756643][T20383] kasan_set_track+0x4e/0x70 [ 1652.761252][T20383] __kasan_kmalloc+0x8f/0xa0 [ 1652.765841][T20383] dvb_register_device+0x309/0x1df0 [ 1652.771035][T20383] dvb_register_frontend+0x62d/0x900 [ 1652.776317][T20383] vidtv_bridge_probe+0x9d6/0xf60 [ 1652.781370][T20383] platform_probe+0x13b/0x1c0 [ 1652.786063][T20383] really_probe+0x247/0xae0 [ 1652.790576][T20383] __driver_probe_device+0x1f5/0x390 [ 1652.795856][T20383] driver_probe_device+0x4f/0x420 [ 1652.800880][T20383] __driver_attach+0x444/0x6d0 [ 1652.805639][T20383] bus_for_each_dev+0x235/0x2b0 [ 1652.810498][T20383] bus_add_driver+0x340/0x630 [ 1652.815182][T20383] driver_register+0x23a/0x310 [ 1652.819941][T20383] vidtv_bridge_init+0x3d/0x70 [ 1652.824852][T20383] do_one_initcall+0x242/0x790 [ 1652.829667][T20383] do_initcall_level+0x13d/0x1f0 [ 1652.834618][T20383] do_initcalls+0x69/0xd0 [ 1652.838960][T20383] kernel_init_freeable+0x3d9/0x560 [ 1652.844209][T20383] kernel_init+0x1d/0x1c0 [ 1652.848552][T20383] ret_from_fork+0x48/0x80 [ 1652.852979][T20383] ret_from_fork_asm+0x11/0x20 [ 1652.857774][T20383] [ 1652.860097][T20383] Freed by task 20340: [ 1652.864162][T20383] kasan_set_track+0x4e/0x70 [ 1652.868751][T20383] kasan_save_free_info+0x28/0x40 [ 1652.873774][T20383] ____kasan_slab_free+0x126/0x1f0 [ 1652.878879][T20383] slab_free_freelist_hook+0x130/0x1a0 [ 1652.884328][T20383] __kmem_cache_free+0xba/0x1f0 [ 1652.889176][T20383] dvb_device_open+0x2d9/0x360 [ 1652.893935][T20383] chrdev_open+0x58c/0x600 [ 1652.898351][T20383] do_dentry_open+0x880/0x14b0 [ 1652.903112][T20383] path_openat+0x284f/0x3270 [ 1652.907719][T20383] do_filp_open+0x1f2/0x430 [ 1652.912215][T20383] do_sys_openat2+0x134/0x1d0 [ 1652.916901][T20383] __x64_sys_openat+0x139/0x160 [ 1652.921747][T20383] do_syscall_64+0x55/0xb0 [ 1652.926162][T20383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1652.932074][T20383] [ 1652.934416][T20383] The buggy address belongs to the object at ffff888026c72800 [ 1652.934416][T20383] which belongs to the cache kmalloc-256 of size 256 [ 1652.948516][T20383] The buggy address is located 24 bytes inside of [ 1652.948516][T20383] freed 256-byte region [ffff888026c72800, ffff888026c72900) [ 1652.962231][T20383] [ 1652.964562][T20383] The buggy address belongs to the physical page: [ 1652.970987][T20383] page:ffffea00009b1c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26c72 [ 1652.981130][T20383] head:ffffea00009b1c80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1652.990053][T20383] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1652.998027][T20383] page_type: 0xffffffff() [ 1653.002352][T20383] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 1653.010930][T20383] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1653.019497][T20383] page dumped because: kasan: bad access detected [ 1653.025897][T20383] page_owner tracks the page as allocated [ 1653.031601][T20383] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17327916033, free_ts 0 [ 1653.051312][T20383] post_alloc_hook+0x1c1/0x200 [ 1653.056173][T20383] get_page_from_freelist+0x2181/0x22a0 [ 1653.061769][T20383] __alloc_pages+0x1f0/0x460 [ 1653.066367][T20383] alloc_page_interleave+0x24/0x1e0 [ 1653.071565][T20383] alloc_slab_page+0x5d/0x180 [ 1653.076238][T20383] new_slab+0x87/0x2d0 [ 1653.080308][T20383] ___slab_alloc+0xc5c/0x12f0 [ 1653.084980][T20383] __kmem_cache_alloc_node+0x11f/0x250 [ 1653.090435][T20383] kmalloc_trace+0x2a/0xe0 [ 1653.094847][T20383] bus_add_driver+0x162/0x630 [ 1653.099529][T20383] driver_register+0x23a/0x310 [ 1653.104349][T20383] i2c_register_driver+0xba/0x160 [ 1653.109435][T20383] do_one_initcall+0x242/0x790 [ 1653.114204][T20383] do_initcall_level+0x13d/0x1f0 [ 1653.119154][T20383] do_initcalls+0x69/0xd0 [ 1653.123479][T20383] kernel_init_freeable+0x3d9/0x560 [ 1653.128673][T20383] page_owner free stack trace missing [ 1653.134031][T20383] [ 1653.136345][T20383] Memory state around the buggy address: [ 1653.141966][T20383] ffff888026c72700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1653.150026][T20383] ffff888026c72780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1653.158100][T20383] >ffff888026c72800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1653.166153][T20383] ^ [ 1653.170992][T20383] ffff888026c72880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1653.179055][T20383] ffff888026c72900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1653.187136][T20383] ================================================================== [ 1653.229827][T20383] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1653.237108][T20383] CPU: 1 PID: 20383 Comm: syz.7.3647 Not tainted syzkaller #0 [ 1653.244596][T20383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1653.254675][T20383] Call Trace: [ 1653.257981][T20383] [ 1653.260940][T20383] dump_stack_lvl+0x18c/0x250 [ 1653.265663][T20383] ? show_regs_print_info+0x20/0x20 [ 1653.270900][T20383] ? load_image+0x420/0x420 [ 1653.275439][T20383] panic+0x2ca/0x720 [ 1653.279362][T20383] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1653.285558][T20383] ? bpf_jit_dump+0xd0/0xd0 [ 1653.290113][T20383] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1653.296126][T20383] ? _raw_spin_unlock+0x40/0x40 [ 1653.301011][T20383] ? dvb_device_open+0xc9/0x360 [ 1653.305896][T20383] check_panic_on_warn+0x84/0xa0 [ 1653.310866][T20383] ? dvb_device_open+0xc9/0x360 [ 1653.315745][T20383] end_report+0x6f/0x130 [ 1653.320018][T20383] kasan_report+0x128/0x150 [ 1653.324584][T20383] ? chrdev_open+0x385/0x600 [ 1653.329207][T20383] ? dvb_device_open+0xc9/0x360 [ 1653.334099][T20383] dvb_device_open+0xc9/0x360 [ 1653.338810][T20383] chrdev_open+0x58c/0x600 [ 1653.343263][T20383] ? cd_forget+0x160/0x160 [ 1653.347712][T20383] ? fsnotify_perm+0x3ed/0x5e0 [ 1653.352511][T20383] do_dentry_open+0x880/0x14b0 [ 1653.357308][T20383] ? cd_forget+0x160/0x160 [ 1653.361759][T20383] path_openat+0x284f/0x3270 [ 1653.366386][T20383] ? do_sys_openat2+0xda/0x1d0 [ 1653.371185][T20383] ? __x64_sys_openat+0x139/0x160 [ 1653.376242][T20383] ? verify_lock_unused+0x140/0x140 [ 1653.381476][T20383] ? do_filp_open+0x430/0x430 [ 1653.386187][T20383] do_filp_open+0x1f2/0x430 [ 1653.390724][T20383] ? vfs_tmpfile+0x480/0x480 [ 1653.395353][T20383] ? _raw_spin_unlock+0x28/0x40 [ 1653.400234][T20383] ? alloc_fd+0x590/0x640 [ 1653.404603][T20383] do_sys_openat2+0x134/0x1d0 [ 1653.409311][T20383] ? do_sys_open+0xe0/0xe0 [ 1653.413757][T20383] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1653.419772][T20383] ? lock_chain_count+0x20/0x20 [ 1653.424651][T20383] __x64_sys_openat+0x139/0x160 [ 1653.429534][T20383] do_syscall_64+0x55/0xb0 [ 1653.433989][T20383] ? clear_bhb_loop+0x40/0x90 [ 1653.438691][T20383] ? clear_bhb_loop+0x40/0x90 [ 1653.443397][T20383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1653.449324][T20383] RIP: 0033:0x7f459295e68e [ 1653.453765][T20383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1653.473399][T20383] RSP: 002b:00007f4593836b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1653.481844][T20383] RAX: ffffffffffffffda RBX: 00007f45938376c0 RCX: 00007f459295e68e [ 1653.489842][T20383] RDX: 0000000000040002 RSI: 00007f4593836c00 RDI: ffffffffffffff9c [ 1653.497842][T20383] RBP: 00007f4593836c00 R08: 0000000000000000 R09: 0000000000000000 [ 1653.505835][T20383] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1653.513835][T20383] R13: 00007f4592c26218 R14: 00007f4592c26180 R15: 00007fff7fab6748 [ 1653.521839][T20383] [ 1653.525138][T20383] Kernel Offset: disabled [ 1653.529464][T20383] Rebooting in 86400 seconds..