last executing test programs: 16.254817417s ago: executing program 3 (id=3831): unshare(0x2a060400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2001, r0}, 0x0) 16.04436934s ago: executing program 3 (id=3833): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 10.606110005s ago: executing program 3 (id=3844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000280)="753f9fda948427db13c5033b47745a154b5985f7f5ddfbcdc5fccd842abb1aa61df656b676e3e776c5e6c6377257ec24623219c5733a792934e2c3b473193e95ddbb93dc713b46ec44cd973d892df597e110e280c718b3ac363d686df674868109ffe92e8f6e7db2c0a1ffbf721fabb2dd4f68a35f06515c642a205dcc001a0c0134ff27fef48cdde679abec7c66a8b084c19eca1097b664c9b45900b3f1a2620dde0e6bdfc194215843bab8fce6f38535f2ce06f76b4d104b5302945ed6f7b5592553bdab59be11a81a3599d6b7eb68fea05c2a82207a506a09f9b2e06d4b5dfc249a8321124552846955584fce", 0xee}, {&(0x7f00000000c0)="691cd72fccc96582f6e1ccc75a88cf73202a263793f0d69961a66d8f75c9434d29f3954a527f17324d8bf903250c632c21e9ecb1ecc64e8eeac393dc7a7e8bd1a0", 0x41}, {&(0x7f0000000380)="4fafa373f968daaa32fbde956d2c167bb56f7561f95d94287ca44c744d1ffcb1e469de19b517cceeba1588c806b7b4c0c575a36adece3b33fb4bf1a89bc24708c1af7c9bcb29f83689b6980d2842d2bd5ca7398faa8fb238f96dc0e2bdcb657cb67d107b6965e5528da0a70bebb4c9be3b2cad9e931fe37be3e4ef40c9a1b40079ea174623e7de2d34f3e8d319351103b55eb8f6f0cbd5bc916cc00fe2ff816a6c88b4b974fdb3829618f1d600035cd7b6ca8a5154aa960604dbbb3d056ecfd53ba6b6a7e157d08a1b595ffee0c008288bd89d", 0xd3}, {&(0x7f0000000480)="9e545c21e1cb26c15a308859f1600a344e085932285afde3372344530e037f69083ad32135b0da256f5b3829144acbc6ecc0d97153c857dea8fce688b34718db3da2af6b07c1f3ec5f6faa9d6b1a8c1328b380d9bf7ca41df05e4048cf61e24dfeac91bc923b9f3763f8f74da168e8fe52392bef37746361029b4f23ad19cb27eeb50c3686dc1c535e03cb778f4a7c75993da0c2a2c2dd13a7ef13472481b7ee6b7ce171e763eb060115570265edef29f730227e2caab946e35afdd8e7d1373cbd95185511c2e2164e98d6d79d6df50f0afe76f64a6f2d65617a", 0xda}, {&(0x7f00000006c0)="74ca13f48e1b943eab555d87a967e89a4c704e91695cfef9619953b67ea18f51cde7b774769c23f1b797d71e44e5384d2c9a4aad1b3289e65b5a31e873c2ef00675ed028d4829364f795179190b10b279b714b2219ed2a4c1873c0b6d418d64baad856b4e89d1c8da3d6d5be38ab70576e58276742017535a006a122995aeee573e0b84380a8730600f1f1c92f17f4844dacfc82cb3ab098580a212663ca3f7375d9730980712588da93aa6ecc3cacce4b014386f7", 0xb5}], 0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mprotect(&(0x7f00001b1000/0x4000)=nil, 0x4000, 0x4) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 9.892910796s ago: executing program 2 (id=3846): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchmodat(0xffffffffffffffff, 0x0, 0x82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r3) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[], 0xc8) 9.027254857s ago: executing program 3 (id=3847): r0 = socket$tipc(0x1e, 0x5, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x178) rename(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.924326153s ago: executing program 2 (id=3849): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 7.58946074s ago: executing program 3 (id=3850): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x15de, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000050000000500000002000000", @ANYRESHEX, @ANYBLOB='\x00'/18, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="000000000000136dc1fa000000000000000000ebff00000000000000bac9e600"], 0x50) timer_create(0x0, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5dc, 0x0, 0x0, 0x0) 7.562359172s ago: executing program 2 (id=3851): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000010c0)={'\x00', 0x4, 0x0, 0x2, 0x10001, 0x1, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) llistxattr(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), 0x0, &(0x7f0000000040)}) 6.594107358s ago: executing program 0 (id=3852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_open_procfs$pagemap(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x5, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x1, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x2, 0x0, 0x0, 0x63c, 0x10, 0xa, 0x7f, 0x0, 0x0, 0x5, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4010000], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x3, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x1, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r1}, 0x14) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xd}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 5.924228946s ago: executing program 2 (id=3853): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 4.977933301s ago: executing program 1 (id=3855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.908150485s ago: executing program 1 (id=3856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000280)="753f9fda948427db13c5033b47745a154b5985f7f5ddfbcdc5fccd842abb1aa61df656b676e3e776c5e6c6377257ec24623219c5733a792934e2c3b473193e95ddbb93dc713b46ec44cd973d892df597e110e280c718b3ac363d686df674868109ffe92e8f6e7db2c0a1ffbf721fabb2dd4f68a35f06515c642a205dcc001a0c0134ff27fef48cdde679abec7c66a8b084c19eca1097b664c9b45900b3f1a2620dde0e6bdfc194215843bab8fce6f38535f2ce06f76b4d104b5302945ed6f7b5592553bdab59be11a81a3599d6b7eb68fea05c2a82207a506a09f9b2e06d4b5dfc249a8321124552846955584fce", 0xee}, {&(0x7f00000000c0)="691cd72fccc96582f6e1ccc75a88cf73202a263793f0d69961a66d8f75c9434d29f3954a527f17324d8bf903250c632c21e9ecb1ecc64e8eeac393dc7a7e8bd1a0", 0x41}, {&(0x7f0000000380)="4fafa373f968daaa32fbde956d2c167bb56f7561f95d94287ca44c744d1ffcb1e469de19b517cceeba1588c806b7b4c0c575a36adece3b33fb4bf1a89bc24708c1af7c9bcb29f83689b6980d2842d2bd5ca7398faa8fb238f96dc0e2bdcb657cb67d107b6965e5528da0a70bebb4c9be3b2cad9e931fe37be3e4ef40c9a1b40079ea174623e7de2d34f3e8d319351103b55eb8f6f0cbd5bc916cc00fe2ff816a6c88b4b974fdb3829618f1d600035cd7b6ca8a5154aa960604dbbb3d056ecfd53ba6b6a7e157d08a1b595ffee0c008288bd89d", 0xd3}, {&(0x7f0000000480)="9e545c21e1cb26c15a308859f1600a344e085932285afde3372344530e037f69083ad32135b0da256f5b3829144acbc6ecc0d97153c857dea8fce688b34718db3da2af6b07c1f3ec5f6faa9d6b1a8c1328b380d9bf7ca41df05e4048cf61e24dfeac91bc923b9f3763f8f74da168e8fe52392bef37746361029b4f23ad19cb27eeb50c3686dc1c535e03cb778f4a7c75993da0c2a2c2dd13a7ef13472481b7ee6b7ce171e763eb060115570265edef29f730227e2caab946e35afdd8e7d1373cbd95185511c2e2164e98d6d79d6df50f0afe76f64a6f2d65617a", 0xda}, {&(0x7f00000006c0)="74ca13f48e1b943eab555d87a967e89a4c704e91695cfef9619953b67ea18f51cde7b774769c23f1b797d71e44e5384d2c9a4aad1b3289e65b5a31e873c2ef00675ed028d4829364f795179190b10b279b714b2219ed2a4c1873c0b6d418d64baad856b4e89d1c8da3d6d5be38ab70576e58276742017535a006a122995aeee573e0b84380a8730600f1f1c92f17f4844dacfc82cb3ab098580a212663ca3f7375d9730980712588da93aa6ecc3cacce4b014386f7", 0xb5}], 0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mprotect(&(0x7f00001b1000/0x4000)=nil, 0x4000, 0x4) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 4.31253389s ago: executing program 0 (id=3857): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchmodat(0xffffffffffffffff, 0x0, 0x82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r3) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[], 0xc8) 2.76315529s ago: executing program 1 (id=3858): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 2.76259637s ago: executing program 3 (id=3859): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.613294968s ago: executing program 2 (id=3860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000937000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 1.614723756s ago: executing program 0 (id=3861): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x10, 0x2}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x54, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x40000000, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.604715087s ago: executing program 2 (id=3862): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/80, 0x50}, {0x0}], 0x2) 1.465545735s ago: executing program 1 (id=3863): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 797.710314ms ago: executing program 1 (id=3864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r4, 0x5, 0x4) 719.478029ms ago: executing program 0 (id=3865): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_open_procfs$pagemap(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x5, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x1, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x2, 0x0, 0x0, 0x63c, 0x10, 0xa, 0x7f, 0x0, 0x0, 0x5, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4010000], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x3, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x1, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r1}, 0x14) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xd}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 246.048326ms ago: executing program 1 (id=3866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)="b3"}) 165.059811ms ago: executing program 0 (id=3867): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 0s ago: executing program 0 (id=3868): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) kernel console output (not intermixed with test programs): ce, different from the descriptor's value: 66 [ 898.680298][ T8586] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 898.720288][ T8586] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 898.761929][ T8586] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 898.790344][ T8586] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 898.810604][ T8586] usb 1-1: Product: syz [ 898.814821][ T8586] usb 1-1: Manufacturer: syz [ 898.881418][ T8586] cdc_wdm 1-1:1.0: skipping garbage [ 898.886689][ T8586] cdc_wdm 1-1:1.0: skipping garbage [ 898.911691][ T28] audit: type=1326 audit(1771132547.967:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.1.1324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff7659bf79 code=0x0 [ 898.964433][ T8586] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 899.010283][ T8586] cdc_wdm 1-1:1.0: Unknown control protocol [ 899.019535][ T28] audit: type=1326 audit(1771132548.047:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.1.1324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff7659bf79 code=0x0 [ 899.215642][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 899.215744][ T8586] usb 1-1: USB disconnect, device number 6 [ 899.222617][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 899.234334][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 899.482266][ T5834] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 899.671897][ T5834] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 899.680098][ T5834] usb 3-1: config 0 has no interface number 0 [ 899.688387][ T5834] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 899.713028][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.742598][ T5834] usb 3-1: Product: syz [ 899.746853][ T5834] usb 3-1: Manufacturer: syz [ 899.782332][ T5834] usb 3-1: SerialNumber: syz [ 899.821270][ T5834] usb 3-1: config 0 descriptor?? [ 900.029957][ T5834] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 900.081464][ T5834] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 900.131195][ T5834] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 900.153442][ T5834] usb 3-1: media controller created [ 900.304876][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.341015][T10341] program syz.1.1335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.412250][ T5154] usb 3-1: USB disconnect, device number 6 [ 910.610255][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 910.735036][T10376] program syz.0.1346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 910.816765][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 910.843487][ T23] usb 2-1: config 0 has no interface number 0 [ 910.883930][ T23] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 910.895350][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.922967][ T23] usb 2-1: Product: syz [ 910.931261][ T23] usb 2-1: Manufacturer: syz [ 910.935899][ T23] usb 2-1: SerialNumber: syz [ 911.001578][ T23] usb 2-1: config 0 descriptor?? [ 911.251900][ T23] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 911.393178][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 911.479207][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 911.558748][ T23] usb 2-1: media controller created [ 911.754799][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 912.766917][ T23] usb 2-1: USB disconnect, device number 12 [ 915.630036][T10402] syz.3.1353 (10402) used greatest stack depth: 18248 bytes left [ 920.350477][ T8242] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 920.591600][ T8242] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 920.603645][ T8242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.653968][ T8242] usb 3-1: config 0 descriptor?? [ 920.694589][ T8242] cp210x 3-1:0.0: cp210x converter detected [ 921.122489][ T8242] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 921.167014][ T8242] usb 3-1: cp210x converter now attached to ttyUSB0 [ 921.446803][ T9] usb 3-1: USB disconnect, device number 7 [ 921.519175][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 921.541730][ T9] cp210x 3-1:0.0: device disconnected [ 921.710412][ T8242] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 921.912185][ T8242] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 921.940998][ T8242] usb 1-1: config 0 has no interface number 0 [ 921.995443][ T8242] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 922.039189][ T8242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.071599][ T8242] usb 1-1: Product: syz [ 922.075836][ T8242] usb 1-1: Manufacturer: syz [ 922.091324][ T8242] usb 1-1: SerialNumber: syz [ 922.112625][ T8242] usb 1-1: config 0 descriptor?? [ 922.335975][ T8242] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 922.367135][ T8242] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 922.399057][ T8242] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 922.412043][ T8242] usb 1-1: media controller created [ 922.719317][ T8242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.643806][ T8242] usb 1-1: USB disconnect, device number 7 [ 927.910257][ T5855] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 929.154978][ T5855] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 929.174391][ T5855] usb 1-1: config 0 has no interface number 0 [ 929.213390][ T5855] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 929.230224][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.253095][ T5855] usb 1-1: Product: syz [ 929.257311][ T5855] usb 1-1: Manufacturer: syz [ 929.272281][ T5855] usb 1-1: SerialNumber: syz [ 929.353771][ T5855] usb 1-1: config 0 descriptor?? [ 929.563302][ T5855] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 929.605585][ T5855] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 929.642710][ T5855] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 929.677656][ T5855] usb 1-1: media controller created [ 929.749450][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 931.255971][ T9] usb 1-1: USB disconnect, device number 8 [ 931.944340][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.950778][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.538570][T10372] syz.2.1345 (10372) used greatest stack depth: 17736 bytes left [ 936.311940][T10497] program syz.2.1370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 938.176542][ T5774] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 938.434351][ T5774] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 938.450203][ T5774] usb 1-1: config 0 has no interface number 0 [ 938.472099][ T5774] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 938.495537][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.270269][ T5774] usb 1-1: Product: syz [ 939.300221][ T5774] usb 1-1: Manufacturer: syz [ 939.304881][ T5774] usb 1-1: SerialNumber: syz [ 939.421415][ T5774] usb 1-1: config 0 descriptor?? [ 939.630058][ T5774] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 939.667294][ T5774] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 939.725001][ T5774] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 939.780258][ T5774] usb 1-1: media controller created [ 939.831418][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.332472][ T5774] usb 1-1: USB disconnect, device number 9 [ 944.580317][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1394'. [ 944.820349][ T5776] Bluetooth: hci4: command 0x1003 tx timeout [ 944.827925][ T9570] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 949.360297][ T5834] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 949.633072][ T5834] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 949.670318][ T5834] usb 1-1: config 0 has no interface number 0 [ 949.687072][ T5834] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 949.762714][ T5834] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 949.802913][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.828400][ T5834] usb 1-1: Product: syz [ 949.859754][ T5834] usb 1-1: Manufacturer: syz [ 949.868431][ T5834] usb 1-1: SerialNumber: syz [ 950.011815][ T5834] usb 1-1: config 0 descriptor?? [ 950.017540][T10561] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 950.092426][T10567] random: crng reseeded on system resumption [ 950.677909][ T5834] usb-storage 1-1:0.20: USB Mass Storage device detected [ 950.836915][ T5834] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 950.960365][ T5834] scsi host1: usb-storage 1-1:0.20 [ 951.240343][ T5834] usb 1-1: USB disconnect, device number 10 [ 952.156315][T10581] loop2: detected capacity change from 0 to 7 [ 952.168018][T10581] Dev loop2: unable to read RDB block 7 [ 952.180251][T10581] loop2: AHDI p1 p2 p3 [ 952.200538][T10581] loop2: partition table partially beyond EOD, truncated [ 952.215726][T10581] loop2: p1 start 1818582900 is beyond EOD, truncated [ 952.262059][T10581] loop2: p3 start 335544320 is beyond EOD, truncated [ 953.874072][T10587] program syz.1.1401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 955.953164][T10600] overlayfs: failed to clone upperpath [ 957.045916][T10612] loop2: detected capacity change from 0 to 7 [ 957.089413][T10612] Dev loop2: unable to read RDB block 7 [ 957.100783][T10612] loop2: AHDI p1 p2 p3 [ 957.105037][T10612] loop2: partition table partially beyond EOD, truncated [ 957.123532][T10612] loop2: p1 start 1818582900 is beyond EOD, truncated [ 957.136620][T10612] loop2: p3 start 335544320 is beyond EOD, truncated [ 959.320927][T10643] loop2: detected capacity change from 0 to 7 [ 959.343263][T10643] Dev loop2: unable to read RDB block 7 [ 959.348897][T10643] loop2: AHDI p1 p2 p3 [ 959.388393][T10643] loop2: partition table partially beyond EOD, truncated [ 959.420884][T10643] loop2: p1 start 1818582900 is beyond EOD, truncated [ 959.449131][T10643] loop2: p3 start 335544320 is beyond EOD, truncated [ 964.700708][ T5834] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 964.900320][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 964.915952][ T5834] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 964.929876][ T5834] usb 3-1: config 0 has no interface number 0 [ 965.776198][ T5834] usb 3-1: config 0 interface 196 has no altsetting 0 [ 965.808006][ T5834] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 965.826662][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.888460][ T5834] usb 3-1: Product: syz [ 965.894902][ T5834] usb 3-1: Manufacturer: syz [ 965.917967][ T5834] usb 3-1: SerialNumber: syz [ 965.951678][ T5834] usb 3-1: config 0 descriptor?? [ 966.167634][ T5834] ipheth 3-1:0.196: Unable to find endpoints [ 966.196732][ T5834] usb 3-1: USB disconnect, device number 8 [ 968.750325][T10710] 9pnet_virtio: no channels available for device syz [ 975.562610][ T5855] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 975.772424][ T5855] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 975.897985][ T5855] usb 1-1: config 0 has no interface number 0 [ 975.907167][ T5855] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 975.916973][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.930224][ T5855] usb 1-1: Product: syz [ 975.934440][ T5855] usb 1-1: Manufacturer: syz [ 975.951775][ T5855] usb 1-1: SerialNumber: syz [ 975.958765][ T5855] usb 1-1: config 0 descriptor?? [ 976.793625][ T5855] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 977.185265][ T5855] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 977.232567][ T5855] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 977.252926][ T5855] usb 1-1: media controller created [ 977.346235][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 978.378735][ T5774] usb 1-1: USB disconnect, device number 11 [ 979.333143][T10751] program syz.1.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.544129][T10801] loop2: detected capacity change from 0 to 7 [ 987.619911][T10801] Dev loop2: unable to read RDB block 7 [ 987.659064][T10802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1473'. [ 987.671033][T10801] loop2: AHDI p1 p2 p3 [ 987.695088][T10801] loop2: partition table partially beyond EOD, truncated [ 987.746407][T10801] loop2: p1 start 1818582900 is beyond EOD, truncated [ 987.800480][T10801] loop2: p3 start 335544320 is beyond EOD, truncated [ 988.666220][ T5139] Dev loop2: unable to read RDB block 7 [ 989.520456][ T5139] loop2: AHDI p1 p2 p3 [ 989.534934][ T5139] loop2: partition table partially beyond EOD, truncated [ 989.560502][ T5139] loop2: p1 start 1818582900 is beyond EOD, truncated [ 989.567330][ T5139] loop2: p3 start 335544320 is beyond EOD, truncated [ 990.400855][T10814] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 993.608403][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.617720][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.902116][T10827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1487'. [ 995.394192][T10838] program syz.0.1491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1001.079019][T10888] program syz.2.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.878399][T10945] loop2: detected capacity change from 0 to 7 [ 1007.920319][T10945] Dev loop2: unable to read RDB block 7 [ 1007.925955][T10945] loop2: unable to read partition table [ 1007.958790][T10945] loop2: partition table beyond EOD, truncated [ 1007.980250][T10945] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1011.180384][T10967] sp0: Synchronizing with TNC [ 1016.755778][T11010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1545'. [ 1017.241761][T11017] loop2: detected capacity change from 0 to 7 [ 1017.318376][T10975] Dev loop2: unable to read RDB block 7 [ 1017.335787][T10975] loop2: unable to read partition table [ 1017.372528][T10975] loop2: partition table beyond EOD, truncated [ 1017.920332][T11017] Dev loop2: unable to read RDB block 7 [ 1017.961440][T11017] loop2: unable to read partition table [ 1017.967367][T11017] loop2: partition table beyond EOD, truncated [ 1018.036387][T11017] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1024.029138][T11066] program syz.2.1560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1024.798246][T11074] sp0: Synchronizing with TNC [ 1032.190226][T11120] can0: slcan on pty20. [ 1033.981801][T11115] can0 (unregistered): slcan off pty20. [ 1047.193644][T11240] sd 0:0:1:0: device reset [ 1052.011843][T11259] loop2: detected capacity change from 0 to 7 [ 1052.071013][T11259] Dev loop2: unable to read RDB block 7 [ 1052.130232][T11259] loop2: AHDI p1 p2 [ 1052.134238][T11259] loop2: partition table partially beyond EOD, truncated [ 1052.200415][T11259] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1054.940733][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.947107][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.491110][T11298] loop2: detected capacity change from 0 to 7 [ 1059.540327][T11298] Dev loop2: unable to read RDB block 7 [ 1059.545985][T11298] loop2: AHDI p1 p2 [ 1059.549910][T11298] loop2: partition table partially beyond EOD, truncated [ 1059.606596][T11298] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1059.808982][ T28] audit: type=1326 audit(1771132708.857:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.1.1627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff7659bf79 code=0x0 [ 1068.668684][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 1068.774482][T11364] program syz.1.1642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1068.965334][T11368] loop2: detected capacity change from 0 to 7 [ 1068.972573][T11368] Dev loop2: unable to read RDB block 7 [ 1068.980827][T11368] loop2: AHDI p1 p2 [ 1068.985007][T11368] loop2: partition table partially beyond EOD, truncated [ 1068.993464][T11368] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1072.016977][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 1072.779133][T11402] program syz.0.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1074.093568][T11411] loop2: detected capacity change from 0 to 7 [ 1074.134687][T11196] Dev loop2: unable to read RDB block 7 [ 1074.166781][T11196] loop2: AHDI p1 p2 [ 1074.183282][T11196] loop2: partition table partially beyond EOD, truncated [ 1074.228551][T11196] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1074.284163][T11411] Dev loop2: unable to read RDB block 7 [ 1074.316747][T11411] loop2: AHDI p1 p2 [ 1074.336765][T11411] loop2: partition table partially beyond EOD, truncated [ 1074.366175][T11411] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1075.919715][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 1076.226112][T11438] program syz.0.1667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1082.333254][T11467] program syz.0.1676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1085.946062][ T8586] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1086.210233][ T8586] usb 1-1: Using ep0 maxpacket: 32 [ 1086.221059][ T8586] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 1086.237845][ T8586] usb 1-1: config 0 has no interface number 0 [ 1086.925092][ T8586] usb 1-1: config 0 interface 182 has no altsetting 0 [ 1086.939795][ T8586] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1086.949717][ T8586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.960300][ T8586] usb 1-1: Product: syz [ 1086.980588][ T8586] usb 1-1: Manufacturer: syz [ 1087.023044][ T8586] usb 1-1: SerialNumber: syz [ 1087.077944][ T8586] usb 1-1: config 0 descriptor?? [ 1087.106847][ T8586] hub 1-1:0.182: bad descriptor, ignoring hub [ 1087.126769][ T8586] hub: probe of 1-1:0.182 failed with error -5 [ 1087.334375][ T8586] kaweth 1-1:0.182: Firmware present in device. [ 1087.673559][ T8586] kaweth 1-1:0.182: Statistics collection: 0 [ 1087.736432][ T8586] kaweth 1-1:0.182: Multicast filter limit: 0 [ 1087.839747][ T8586] kaweth 1-1:0.182: MTU: 0 [ 1087.910988][ T8586] kaweth 1-1:0.182: Read MAC address 00:00:00:00:00:00 [ 1087.961362][ T8586] kaweth: probe of 1-1:0.182 failed with error -5 [ 1088.051488][ T8586] usb 1-1: USB disconnect, device number 12 [ 1088.327645][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 1108.618524][T11624] program syz.1.1719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1117.119762][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.126864][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.562981][ T28] audit: type=1326 audit(1771132769.617:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1120.681356][ T28] audit: type=1326 audit(1771132769.637:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1120.778037][ T28] audit: type=1326 audit(1771132769.637:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1120.874905][ T28] audit: type=1326 audit(1771132769.637:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1122.120199][ T28] audit: type=1326 audit(1771132769.647:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1123.440202][ T28] audit: type=1326 audit(1771132769.647:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1123.499662][T11702] loop2: detected capacity change from 0 to 7 [ 1123.524578][ T28] audit: type=1326 audit(1771132769.647:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1123.590182][ T28] audit: type=1326 audit(1771132769.647:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1123.593059][T11702] Dev loop2: unable to read RDB block 7 [ 1124.462280][ T28] audit: type=1326 audit(1771132769.647:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1124.490218][T11702] loop2: AHDI p1 p2 p3 [ 1124.494413][T11702] loop2: partition table partially beyond EOD, truncated [ 1124.570193][ T28] audit: type=1326 audit(1771132769.657:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f34aeb9bf79 code=0x7ffc0000 [ 1124.630527][T11702] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1124.680698][T11702] loop2: p3 start 335544320 is beyond EOD, truncated [ 1130.533839][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1746'. [ 1136.832970][T11773] loop2: detected capacity change from 0 to 7 [ 1136.840539][T11773] Dev loop2: unable to read RDB block 7 [ 1136.846213][T11773] loop2: AHDI p1 p2 p3 [ 1136.852927][T11773] loop2: partition table partially beyond EOD, truncated [ 1136.860686][T11773] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1136.867585][T11773] loop2: p3 start 335544320 is beyond EOD, truncated [ 1142.350360][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1143.691138][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1143.699201][ T9] usb 3-1: config 0 has no interface number 0 [ 1143.911294][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1143.928982][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.954043][ T9] usb 3-1: Product: syz [ 1143.958261][ T9] usb 3-1: Manufacturer: syz [ 1143.969951][ T9] usb 3-1: SerialNumber: syz [ 1144.692455][ T9] usb 3-1: config 0 descriptor?? [ 1145.751212][ T9] dvb_usb_ec168: probe of 3-1:0.1 failed with error -71 [ 1145.823565][ T9] usb 3-1: USB disconnect, device number 9 [ 1150.618149][T11838] loop2: detected capacity change from 0 to 7 [ 1150.679063][T11812] Dev loop2: unable to read RDB block 7 [ 1150.693629][T11812] loop2: AHDI p1 p2 p3 [ 1150.710420][T11812] loop2: partition table partially beyond EOD, truncated [ 1150.737567][T11812] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1150.764949][T11812] loop2: p3 start 335544320 is beyond EOD, truncated [ 1150.793458][T11838] Dev loop2: unable to read RDB block 7 [ 1150.820435][T11838] loop2: AHDI p1 p2 p3 [ 1150.838930][T11838] loop2: partition table partially beyond EOD, truncated [ 1150.871041][T11838] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1150.877878][T11838] loop2: p3 start 335544320 is beyond EOD, truncated [ 1151.471050][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1152.866964][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1152.878963][ T9] usb 1-1: config 0 has no interface number 0 [ 1152.948576][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1152.979595][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.997079][ T9] usb 1-1: Product: syz [ 1153.012655][ T9] usb 1-1: Manufacturer: syz [ 1153.017385][ T9] usb 1-1: SerialNumber: syz [ 1153.025560][ T9] usb 1-1: config 0 descriptor?? [ 1153.148614][T11853] program syz.2.1792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1153.337128][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1153.520006][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1153.574591][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1153.713000][ T9] usb 1-1: media controller created [ 1153.735247][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.774782][T11856] delete_channel: no stack [ 1153.945452][ T9] usb 1-1: USB disconnect, device number 13 [ 1154.578934][T11871] loop2: detected capacity change from 0 to 7 [ 1154.711839][T11862] Dev loop2: unable to read RDB block 7 [ 1154.765375][T11862] loop2: AHDI p1 p2 p3 [ 1154.814676][T11862] loop2: partition table partially beyond EOD, truncated [ 1154.905759][T11862] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1154.930954][T11862] loop2: p3 start 335544320 is beyond EOD, truncated [ 1154.952866][T11871] Dev loop2: unable to read RDB block 7 [ 1154.958534][T11871] loop2: AHDI p1 p2 p3 [ 1154.979069][T11871] loop2: partition table partially beyond EOD, truncated [ 1154.996456][T11871] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1155.003377][T11871] loop2: p3 start 335544320 is beyond EOD, truncated [ 1170.551744][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1171.220719][ T9570] Bluetooth: hci3: command 0x0406 tx timeout [ 1173.413638][T12000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1841'. [ 1173.523969][T12002] program syz.1.1842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1175.750644][T12027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1852'. [ 1178.375207][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.624162][T12057] program syz.1.1866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1184.746773][ T5154] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1184.980850][ T5154] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1185.010296][ T5154] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.019268][ T5154] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.060294][ T5154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.071207][ T5154] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.090171][ T5154] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.125419][ T5154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.137931][ T5154] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.166068][ T5154] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.200121][ T5154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.211697][ T5154] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.240146][ T5154] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.280109][ T5154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.301192][ T5154] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.330468][ T5154] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.360163][ T5154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.371420][ T5154] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.393924][ T5154] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.415142][ T5154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.436535][ T5154] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.460217][ T5154] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.500094][ T5154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.511602][ T5154] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.530104][ T5154] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.580291][ T5154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1185.595296][ T5154] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1185.604675][ T5154] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1185.630216][ T5154] usb 3-1: Product: syz [ 1185.634443][ T5154] usb 3-1: Manufacturer: syz [ 1185.650099][ T5154] usb 3-1: SerialNumber: syz [ 1185.665685][ T5154] usb 3-1: config 0 descriptor?? [ 1185.685465][ T5154] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1185.854996][ T8242] usb 3-1: USB disconnect, device number 10 [ 1185.897984][ T8242] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1185.980150][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1186.236621][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1186.289702][ T9] usb 1-1: config 0 has no interface number 0 [ 1186.307988][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1186.347283][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.373919][ T9] usb 1-1: Product: syz [ 1186.401287][ T9] usb 1-1: Manufacturer: syz [ 1186.405942][ T9] usb 1-1: SerialNumber: syz [ 1186.440700][ T9] usb 1-1: config 0 descriptor?? [ 1187.492549][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1187.515112][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1187.550324][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1187.558469][ T9] usb 1-1: media controller created [ 1187.662480][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1188.607131][ T9] usb 1-1: USB disconnect, device number 14 [ 1190.810242][T12143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1892'. [ 1191.581076][T12149] loop2: detected capacity change from 0 to 7 [ 1191.591315][T12149] Dev loop2: unable to read RDB block 7 [ 1191.597741][T12149] loop2: unable to read partition table [ 1191.626284][T12149] loop2: partition table beyond EOD, truncated [ 1191.660348][T12149] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1194.840116][T11330] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1195.075612][T11330] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1195.094554][T11330] usb 3-1: config 0 has no interface number 0 [ 1195.130560][T11330] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1195.150174][T11330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.209604][T11330] usb 3-1: Product: syz [ 1195.220337][T11330] usb 3-1: Manufacturer: syz [ 1195.224992][T11330] usb 3-1: SerialNumber: syz [ 1195.261751][T11330] usb 3-1: config 0 descriptor?? [ 1195.500518][T11330] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1195.546139][T11330] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1195.590340][T11330] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1195.598421][T11330] usb 3-1: media controller created [ 1195.733990][T11330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1196.020307][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1196.840161][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1196.861441][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1196.900688][ T9] usb 1-1: config 0 has no interface number 0 [ 1196.901903][T11330] usb 3-1: USB disconnect, device number 11 [ 1196.906848][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1196.974904][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1196.989871][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.012867][ T9] usb 1-1: Product: syz [ 1197.017099][ T9] usb 1-1: Manufacturer: syz [ 1197.050079][ T9] usb 1-1: SerialNumber: syz [ 1197.081516][ T9] usb 1-1: config 0 descriptor?? [ 1197.151189][T12186] loop2: detected capacity change from 0 to 7 [ 1197.171630][T12186] Dev loop2: unable to read RDB block 7 [ 1197.177249][T12186] loop2: unable to read partition table [ 1197.201387][T12186] loop2: partition table beyond EOD, truncated [ 1197.221461][T12186] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1198.805518][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1198.830203][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1198.848114][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1198.880320][ T9] f81534: probe of 1-1:0.12 failed with error -71 [ 1198.939940][ T9] usb 1-1: USB disconnect, device number 15 [ 1202.712648][T12217] loop2: detected capacity change from 0 to 7 [ 1202.748860][T11951] Dev loop2: unable to read RDB block 7 [ 1202.762533][T11951] loop2: unable to read partition table [ 1202.768453][T11951] loop2: partition table beyond EOD, truncated [ 1202.820637][T12217] Dev loop2: unable to read RDB block 7 [ 1202.861062][T12217] loop2: unable to read partition table [ 1202.884615][T12217] loop2: partition table beyond EOD, truncated [ 1202.920322][T12217] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1211.815317][T12260] loop2: detected capacity change from 0 to 7 [ 1211.842317][T12260] Dev loop2: unable to read RDB block 7 [ 1211.850432][T12260] loop2: unable to read partition table [ 1211.856276][T12260] loop2: partition table beyond EOD, truncated [ 1211.889692][T12260] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1212.381946][T10102] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1212.701890][T10102] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1212.710261][T10102] usb 1-1: config 0 has no interface number 0 [ 1212.720148][T10102] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1212.729627][T10102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.775589][T10102] usb 1-1: Product: syz [ 1212.883621][T10102] usb 1-1: Manufacturer: syz [ 1213.405860][T10102] usb 1-1: SerialNumber: syz [ 1213.424261][T10102] usb 1-1: config 0 descriptor?? [ 1214.503249][T10102] dvb_usb_ec168: probe of 1-1:0.1 failed with error -110 [ 1214.588311][ T5154] usb 1-1: USB disconnect, device number 16 [ 1215.138137][T12274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1933'. [ 1232.223172][T12380] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1968'. [ 1236.770118][T11330] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1238.632020][T11330] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1238.650124][T11330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.670870][T11330] usb 2-1: config 0 descriptor?? [ 1238.698583][T11330] cp210x 2-1:0.0: cp210x converter detected [ 1239.858114][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.988050][T11330] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1240.031066][T11330] cp210x 2-1:0.0: querying part number failed [ 1240.062527][T11330] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1240.103019][T11330] usb 2-1: USB disconnect, device number 13 [ 1240.127305][T11330] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1240.159956][T11330] cp210x 2-1:0.0: device disconnected [ 1240.315103][T12425] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1980'. [ 1242.090259][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1242.283345][ T23] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1242.950473][ T23] usb 3-1: config 0 has no interface number 0 [ 1242.978351][ T23] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1243.096754][ T23] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1243.150888][ T23] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1243.193157][ T23] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1243.230236][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.273691][ T23] usb 3-1: Product: syz [ 1243.277925][ T23] usb 3-1: Manufacturer: syz [ 1243.302414][ T23] usb 3-1: SerialNumber: syz [ 1243.340943][ T23] usb 3-1: config 0 descriptor?? [ 1243.346705][T12435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1243.377614][ T23] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1243.405855][ T23] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1243.440365][ T23] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1244.371355][ T23] usb 3-1: USB disconnect, device number 12 [ 1244.391619][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1245.232455][ T23] cyberjack 3-1:0.69: device disconnected [ 1246.290640][T12458] overlayfs: failed to clone upperpath [ 1247.359217][T12469] loop2: detected capacity change from 0 to 7 [ 1247.380757][T12469] loop2: [ 1247.383770][T12469] loop2: partition table partially beyond EOD, truncated [ 1258.060251][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 1258.286210][T12532] ieee802154 phy0 wpan0: encryption failed: -22 [ 1261.332575][T12559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2023'. [ 1264.412463][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 1279.261521][T12654] overlay: ./file1 is not a directory [ 1285.436979][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 1286.724992][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1290.050199][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 1298.988668][T12769] bond1: entered allmulticast mode [ 1299.023325][T12769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1301.008372][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.727573][T12830] tipc: Started in network mode [ 1309.738685][T12830] tipc: Node identity ac14140f, cluster identity 4711 [ 1309.765999][T12830] tipc: New replicast peer: 255.255.255.255 [ 1309.783417][T12830] tipc: Enabled bearer , priority 10 [ 1309.794735][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'. [ 1309.807151][T12833] tipc: Disabling bearer [ 1338.250305][T13004] input: syz1 as /devices/virtual/input/input9 [ 1346.381008][T13066] overlayfs: failed to resolve './file1': -2 [ 1355.860495][ T8242] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1356.266261][ T8242] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1356.290044][ T8242] usb 2-1: config 1 has no interface number 0 [ 1356.299545][ T8242] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8 [ 1356.316279][ T8242] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 1356.326619][ T8242] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 230, changing to 11 [ 1356.345557][ T8242] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1356.358131][ T8242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.371093][ T8242] usb 2-1: Product: syz [ 1356.375304][ T8242] usb 2-1: Manufacturer: syz [ 1356.385323][ T8242] usb 2-1: SerialNumber: syz [ 1356.397193][T13131] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1356.413694][T13131] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1356.430295][ T8242] usb 2-1: Error in usbnet_get_endpoints (-22) [ 1357.197767][ T5154] usb 2-1: USB disconnect, device number 14 [ 1362.024733][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.525934][T13194] input: syz1 as /devices/virtual/input/input10 [ 1368.490571][T13197] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2224'. [ 1368.915509][T13201] overlayfs: failed to resolve './file0': -2 [ 1371.579750][T13223] ======================================================= [ 1371.579750][T13223] WARNING: The mand mount option has been deprecated and [ 1371.579750][T13223] and is ignored by this kernel. Remove the mand [ 1371.579750][T13223] option from the mount to silence this warning. [ 1371.579750][T13223] ======================================================= [ 1372.908844][T13235] overlayfs: failed to resolve './file0': -2 [ 1373.444989][T13236] overlay: ./file1 is not a directory [ 1374.169872][T13238] input: syz1 as /devices/virtual/input/input11 [ 1380.099442][T13276] input: syz1 as /devices/virtual/input/input12 [ 1392.956321][T13344] overlayfs: failed to resolve './file0': -2 [ 1408.203793][T13445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2291'. [ 1408.217249][T13445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1408.225142][T13445] IPv6: NLM_F_CREATE should be set when creating new route [ 1408.405578][T13445] ref_ctr_offset mismatch. inode: 0xcbd offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 1418.357670][T13524] 8021q: VLANs not supported on ipvlan1 [ 1424.267697][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.130081][ T8242] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1432.330005][ T8242] usb 3-1: Using ep0 maxpacket: 32 [ 1432.349466][ T8242] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1432.358874][ T8242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.399399][ T8242] usb 3-1: Product: syz [ 1432.403712][ T8242] usb 3-1: Manufacturer: syz [ 1432.408315][ T8242] usb 3-1: SerialNumber: syz [ 1432.431157][ T8242] usb 3-1: config 0 descriptor?? [ 1432.721360][T13594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.742690][T13594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.798475][ T8242] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 1432.808752][ T8242] 3c 7b e6 e7 e2 06 63 20 [ 1432.828159][ T8242] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 1433.037262][ T8242] usb 3-1: USB disconnect, device number 13 [ 1440.174659][ T9570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1440.191482][T13652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1440.218870][T13652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1440.232256][T13652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1440.242147][T13652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1440.249476][T13652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1442.305486][T13649] chnl_net:caif_netlink_parms(): no params data found [ 1442.560030][ T5776] Bluetooth: hci1: command tx timeout [ 1443.502522][T13649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.520013][T13649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.527300][T13649] bridge_slave_0: entered allmulticast mode [ 1443.562065][T13649] bridge_slave_0: entered promiscuous mode [ 1443.620962][T13649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.630076][T13649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.637321][T13649] bridge_slave_1: entered allmulticast mode [ 1443.713489][T13649] bridge_slave_1: entered promiscuous mode [ 1443.989272][T13684] input: syz1 as /devices/virtual/input/input13 [ 1444.761896][T13649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.783149][T13649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.882795][T13649] team0: Port device team_slave_0 added [ 1444.891912][T13649] team0: Port device team_slave_1 added [ 1444.923514][T13649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.931348][T13649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.957459][T13649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.971252][T13649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.978653][T13649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.011506][T13649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.062473][ T5776] Bluetooth: hci1: command tx timeout [ 1445.090727][T13649] hsr_slave_0: entered promiscuous mode [ 1446.370367][T13649] hsr_slave_1: entered promiscuous mode [ 1446.393211][T13649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1446.404595][T13649] Cannot create hsr debugfs directory [ 1447.720625][ T5776] Bluetooth: hci1: command tx timeout [ 1447.993931][T13649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.093690][T13649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.272519][T13649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.442791][T13649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.729092][T13652] Bluetooth: hci1: command tx timeout [ 1450.976159][T13649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1450.991174][T13649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1451.009844][T13649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1451.150020][T13649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1452.285156][T13649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.623732][T13649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.925483][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.932713][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.016273][T13733] input: syz1 as /devices/virtual/input/input14 [ 1454.230313][T10358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.237523][T10358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.200303][ T8242] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1456.390315][ T8242] usb 3-1: Using ep0 maxpacket: 32 [ 1456.404685][ T8242] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1456.419662][ T8242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.437780][T13649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.440057][ T8242] usb 3-1: Product: syz [ 1456.448779][ T8242] usb 3-1: Manufacturer: syz [ 1456.471159][ T8242] usb 3-1: SerialNumber: syz [ 1456.486150][ T8242] usb 3-1: config 0 descriptor?? [ 1456.508648][ T8242] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1457.324289][ T8242] usb 3-1: USB disconnect, device number 14 [ 1457.467300][T13649] veth0_vlan: entered promiscuous mode [ 1457.509114][T13649] veth1_vlan: entered promiscuous mode [ 1457.579301][T13649] veth0_macvtap: entered promiscuous mode [ 1457.597189][T13649] veth1_macvtap: entered promiscuous mode [ 1457.626347][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.644743][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.656841][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.678001][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.689389][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.706162][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.716394][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.737268][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.756538][T13649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.784214][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.802463][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.815781][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.828879][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.840031][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.851085][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.861609][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.880202][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.911742][T13649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.955021][T13649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.982643][T13649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.998616][T13649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.012257][T13649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.348054][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.371839][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.440389][T12280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.448260][T12280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.115723][T13652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1463.129161][T13652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1463.139283][T13652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1463.151668][T13652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1463.160745][T13652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1463.168199][T13652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1464.732019][T13795] overlayfs: failed to clone upperpath [ 1465.129585][T13786] chnl_net:caif_netlink_parms(): no params data found [ 1465.230385][T13652] Bluetooth: hci4: command tx timeout [ 1465.630355][T13786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.637703][T13786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.467750][T13786] bridge_slave_0: entered allmulticast mode [ 1466.475346][T13786] bridge_slave_0: entered promiscuous mode [ 1466.484553][T13786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.491944][T13786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.499161][T13786] bridge_slave_1: entered allmulticast mode [ 1466.511223][T13786] bridge_slave_1: entered promiscuous mode [ 1466.562693][T13786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.623170][T13786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.750465][T13786] team0: Port device team_slave_0 added [ 1466.781259][T13786] team0: Port device team_slave_1 added [ 1466.879001][T13786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.030476][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.321704][ T5776] Bluetooth: hci4: command tx timeout [ 1467.648645][T13786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.833220][T13786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.853407][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.982209][T13786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.210923][T13786] hsr_slave_0: entered promiscuous mode [ 1468.247522][T13786] hsr_slave_1: entered promiscuous mode [ 1468.554211][T13786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1468.580033][T13786] Cannot create hsr debugfs directory [ 1469.380093][ T5776] Bluetooth: hci4: command tx timeout [ 1470.601907][T13786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.980342][ T5776] Bluetooth: hci4: command tx timeout [ 1472.227888][T13786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.535792][T13786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.981510][T13786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.763371][T13786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1474.832704][T13786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1474.884199][T13786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1474.957097][T13786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1476.227305][T13786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.303418][T13786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.361686][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.368861][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.422553][T10358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.429748][T10358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.072073][T13786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.359686][T13786] veth0_vlan: entered promiscuous mode [ 1479.549233][T13786] veth1_vlan: entered promiscuous mode [ 1480.547442][T13786] veth0_macvtap: entered promiscuous mode [ 1480.581033][T13786] veth1_macvtap: entered promiscuous mode [ 1480.653430][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.675452][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.706720][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.759335][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.787594][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.860094][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.882614][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.905871][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.980404][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.991253][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.011559][T13786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.301504][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.330082][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.384350][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.396632][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.407301][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.418392][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.430171][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.441065][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.452123][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.463948][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.475887][T13786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.492664][T13786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.502593][T13786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.527030][T13786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.567986][T13786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.095528][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.104814][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.283855][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.301109][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.921352][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.388952][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1486.420736][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1486.430383][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1486.441040][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1486.448724][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1486.457018][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1488.018010][T13927] chnl_net:caif_netlink_parms(): no params data found [ 1488.500774][ T5776] Bluetooth: hci0: command tx timeout [ 1488.611917][T13927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.619011][T13927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.720242][T13927] bridge_slave_0: entered allmulticast mode [ 1488.726946][T13927] bridge_slave_0: entered promiscuous mode [ 1488.754009][T13927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.813651][T13927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.870392][T13927] bridge_slave_1: entered allmulticast mode [ 1488.877770][T13927] bridge_slave_1: entered promiscuous mode [ 1489.026615][T13927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.195482][T13927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.297033][T13927] team0: Port device team_slave_0 added [ 1489.306598][T13927] team0: Port device team_slave_1 added [ 1489.351552][T13927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.360265][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.388240][T13927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.405438][T13927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.413566][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.441027][T13927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.536011][T13927] hsr_slave_0: entered promiscuous mode [ 1489.549797][T13927] hsr_slave_1: entered promiscuous mode [ 1489.622538][T13927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1489.630312][T13927] Cannot create hsr debugfs directory [ 1490.590281][ T5776] Bluetooth: hci0: command tx timeout [ 1492.365415][T13927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.629484][T13927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.445880][ T5776] Bluetooth: hci0: command tx timeout [ 1494.551607][T13927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.798061][T13961] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1494.809765][T13961] VFS: Can't find a romfs filesystem on dev nullb0. [ 1494.809765][T13961] [ 1495.471104][ T5776] Bluetooth: hci0: command tx timeout [ 1495.864454][T13927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.485498][T13927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1496.556664][T13927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1496.609323][T13927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1496.671241][T13927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1497.103565][T13927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.173758][T13927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.206239][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.213472][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.273404][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.280553][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.427341][T13927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1497.619188][T13984] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2422'. [ 1497.905447][T13927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.086264][T13927] veth0_vlan: entered promiscuous mode [ 1498.116284][T13927] veth1_vlan: entered promiscuous mode [ 1499.532173][T13927] veth0_macvtap: entered promiscuous mode [ 1499.578373][T13927] veth1_macvtap: entered promiscuous mode [ 1499.633730][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.652143][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.667873][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.682810][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.697408][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.711411][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.728575][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.740314][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.757041][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.769033][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.788458][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.799361][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.822679][T13927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.849727][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.874191][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.893293][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.904283][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.924338][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.938468][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.957180][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.967827][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.985534][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.000891][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.019006][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.050556][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.063511][T13927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.086992][T13927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.108070][T13927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.118128][T13927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.131054][T13927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.296500][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.330664][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.381514][T10358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.397155][T10358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.463801][T14006] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2434'. [ 1505.570863][T13652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1505.581291][T13652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1505.591797][T13652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1505.600007][T13652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1505.630023][T13652] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1505.650179][T13652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1508.519996][ T5776] Bluetooth: hci3: command tx timeout [ 1510.845041][ T5776] Bluetooth: hci3: command tx timeout [ 1510.990043][T14030] chnl_net:caif_netlink_parms(): no params data found [ 1512.313333][T14030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.351946][T14030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.390262][T14030] bridge_slave_0: entered allmulticast mode [ 1512.422185][T14030] bridge_slave_0: entered promiscuous mode [ 1512.453912][T14030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.480633][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.487935][T14030] bridge_slave_1: entered allmulticast mode [ 1512.531375][T14030] bridge_slave_1: entered promiscuous mode [ 1512.604531][T14030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.648139][T14030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.735995][T14030] team0: Port device team_slave_0 added [ 1512.802548][T14030] team0: Port device team_slave_1 added [ 1512.868745][T14030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.917690][ T5776] Bluetooth: hci3: command tx timeout [ 1512.923471][T14030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.040275][T14030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.146477][T14030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.176333][T14030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.275782][T14030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.464720][T14030] hsr_slave_0: entered promiscuous mode [ 1513.471584][T14030] hsr_slave_1: entered promiscuous mode [ 1513.478000][T14030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.485856][T14030] Cannot create hsr debugfs directory [ 1515.581156][ T5776] Bluetooth: hci3: command tx timeout [ 1515.781595][T14094] input: syz1 as /devices/virtual/input/input15 [ 1517.697605][T14030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.079886][T14030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.427303][T14030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.753244][T14030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.432495][T14030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1522.514576][T14030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1522.664841][T14030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1522.988655][T14030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1523.415117][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1523.415130][ T28] audit: type=1326 audit(1771133172.467:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c99bf79 code=0x7ffc0000 [ 1523.477550][T14030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.504640][ T28] audit: type=1326 audit(1771133172.507:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c99bf79 code=0x7ffc0000 [ 1523.544160][T14030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.583087][ T28] audit: type=1326 audit(1771133172.517:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1c6c99bf79 code=0x7ffc0000 [ 1523.771991][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.779187][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.829195][ T28] audit: type=1326 audit(1771133172.557:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c99bf79 code=0x7ffc0000 [ 1523.975848][ T28] audit: type=1326 audit(1771133172.567:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.3.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c6c95c84e code=0x7ffc0000 [ 1524.101428][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.108882][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.522275][ T28] audit: type=1326 audit(1771133172.727:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.3.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1c6c99bf79 code=0x7ffc0000 [ 1527.774624][T14030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.836944][T14030] veth0_vlan: entered promiscuous mode [ 1528.870417][T14030] veth1_vlan: entered promiscuous mode [ 1528.951463][T14174] overlayfs: failed to resolve './file1': -2 [ 1529.024991][T14030] veth0_macvtap: entered promiscuous mode [ 1529.074225][T14030] veth1_macvtap: entered promiscuous mode [ 1529.242736][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.270151][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.292518][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.320546][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.380058][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.430005][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.500293][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.533512][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.589989][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.855226][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.893428][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.041028][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.756949][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.768824][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.829408][T14030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.935411][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.994550][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.049970][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.079948][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.089804][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.132856][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.170141][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.209918][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.230032][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.269490][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.280480][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.420176][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.452838][T14030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.479894][T14030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.529231][T14030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.561322][T14030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.600229][T14030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.629682][T14030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.651796][T14030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.098284][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.128145][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.865794][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.916845][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.110800][T14208] overlayfs: failed to resolve './file1': -2 [ 1536.948268][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2486'. [ 1538.249924][ T28] audit: type=1326 audit(1771133187.287:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a39bf79 code=0x7ffc0000 [ 1538.330036][ T28] audit: type=1326 audit(1771133187.287:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a39bf79 code=0x7ffc0000 [ 1538.610757][T14233] input: syz1 as /devices/virtual/input/input16 [ 1541.781157][T14244] overlayfs: failed to resolve './file1': -2 [ 1547.342583][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.619420][T14269] input: syz1 as /devices/virtual/input/input17 [ 1548.790648][ T8242] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1549.627686][ T8242] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1549.655423][ T8242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.695178][ T8242] usb 2-1: Product: syz [ 1549.702053][ T8242] usb 2-1: Manufacturer: syz [ 1549.706796][ T8242] usb 2-1: SerialNumber: syz [ 1549.714336][ T8242] usb 2-1: config 0 descriptor?? [ 1551.618748][ T8242] cx82310_eth: probe of 2-1:0.0 failed with error -22 [ 1551.628299][ T8242] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1551.640395][ T8242] usb 2-1: USB disconnect, device number 15 [ 1555.230414][T14322] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2511'. [ 1560.008943][T14357] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2523'. [ 1562.382233][T14381] input: syz1 as /devices/virtual/input/input18 [ 1565.346295][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 1567.339790][T14400] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1571.934710][T14428] input: syz1 as /devices/virtual/input/input19 [ 1578.682839][T14454] autofs4:pid:14454:autofs_fill_super: called with bogus options [ 1579.102380][T14457] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2553'. [ 1584.509917][T14290] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1585.543223][T14290] usb 1-1: Using ep0 maxpacket: 16 [ 1585.574504][T14290] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1585.590164][T14290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.605590][T14290] usb 1-1: Product: syz [ 1585.610821][T14290] usb 1-1: Manufacturer: syz [ 1585.615435][T14290] usb 1-1: SerialNumber: syz [ 1585.646379][T14290] r8152-cfgselector 1-1: config 0 descriptor?? [ 1587.026659][T14290] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1587.061753][T14290] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 1587.245840][T14506] input: syz1 as /devices/virtual/input/input20 [ 1589.943716][T13652] Bluetooth: hci4: command 0x0406 tx timeout [ 1592.750365][T14540] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2574'. [ 1593.590313][T14544] input: syz1 as /devices/virtual/input/input21 [ 1598.260086][T11571] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1598.451887][T11571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1598.477932][T11571] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1598.499981][T11571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1598.509770][T11571] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1598.587298][T11571] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1598.592241][T14577] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2585'. [ 1598.619975][T11571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.657667][T11571] usb 2-1: config 0 descriptor?? [ 1598.999205][T11571] hdpvr 2-1:0.0: firmware version 0x0 dated [ 1599.029879][T11571] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1599.625031][T14589] input: syz1 as /devices/virtual/input/input22 [ 1600.540145][T11571] hdpvr 2-1:0.0: Could not setup controls [ 1600.557533][T11571] hdpvr 2-1:0.0: registering videodev failed [ 1600.667205][T11571] hdpvr: probe of 2-1:0.0 failed with error -71 [ 1600.800573][T11571] usb 2-1: USB disconnect, device number 16 [ 1602.013659][T14290] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1602.240016][T14290] usb 1-1: Using ep0 maxpacket: 32 [ 1602.262302][T14290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.284585][T14290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.305166][T14290] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1602.339936][T14290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.380837][T14290] usb 1-1: config 0 descriptor?? [ 1604.605633][T14290] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 1604.723924][T14290] ft260: probe of 0003:0403:6030.0002 failed with error -71 [ 1604.740120][T14290] usb 1-1: USB disconnect, device number 18 [ 1605.626890][T14627] input: syz1 as /devices/virtual/input/input23 [ 1607.790537][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.642843][T14642] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2595'. [ 1610.059452][T13652] Bluetooth: hci0: command 0x0406 tx timeout [ 1611.988127][T14658] input: syz1 as /devices/virtual/input/input24 [ 1613.519926][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1613.720114][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1613.748838][ T23] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 1613.851085][ T23] usb 3-1: config 0 has no interface number 0 [ 1613.966986][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1614.092254][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.236448][ T23] usb 3-1: Product: syz [ 1614.303709][ T23] usb 3-1: Manufacturer: syz [ 1614.328950][ T23] usb 3-1: SerialNumber: syz [ 1614.391361][ T23] usb 3-1: config 0 descriptor?? [ 1614.442802][ T23] dw2102: su3000_identify_state [ 1614.478408][ T23] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1614.511311][ T23] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1614.533344][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 1614.651528][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1614.678788][ T23] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1614.688875][ T23] usb 3-1: media controller created [ 1614.690436][T14663] dvb-usb: bulk message failed: -22 (3/0) [ 1614.836860][T14663] dw2102: i2c transfer failed. [ 1614.921481][T14663] dvb-usb: bulk message failed: -22 (4/0) [ 1615.099885][T14663] dw2102: i2c transfer failed. [ 1615.116425][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1615.161144][ T23] dw2102: i2c transfer failed. [ 1615.166474][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1615.983019][ T23] dw2102: i2c transfer failed. [ 1615.988410][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1616.818808][ T23] dw2102: i2c transfer failed. [ 1616.826075][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1616.832659][ T23] dw2102: i2c transfer failed. [ 1616.837466][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1616.843272][ T23] dw2102: i2c transfer failed. [ 1616.848469][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1616.855326][ T23] dw2102: i2c transfer failed. [ 1616.862694][ T23] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1616.886327][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1616.918022][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1616.924075][ T23] dw2102: command 0x0e transfer failed. [ 1616.930647][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1616.936403][ T23] dw2102: command 0x0e transfer failed. [ 1618.419133][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1618.440092][ T23] dw2102: command 0x0e transfer failed. [ 1618.445904][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1618.452935][ T23] dw2102: command 0x0e transfer failed. [ 1618.460222][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1618.465985][ T23] dw2102: command 0x51 transfer failed. [ 1618.510386][ T23] DVB: Unable to find symbol ds3000_attach() [ 1618.516452][ T23] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1618.536628][T14694] overlayfs: missing 'lowerdir' [ 1618.649889][ T23] rc_core: IR keymap rc-su3000 not found [ 1618.655596][ T23] Registered IR keymap rc-empty [ 1618.711367][ T23] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1618.756208][ T23] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input25 [ 1618.802933][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 1618.840061][ T23] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1618.846191][ T23] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1619.661717][T14290] dvb-usb: bulk message failed: -22 (1/0) [ 1619.667828][T14290] dw2102: i2c transfer failed. [ 1619.740456][ T23] usb 3-1: USB disconnect, device number 15 [ 1619.924746][ T23] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1621.283823][T14715] input: syz1 as /devices/virtual/input/input26 [ 1621.748359][T14719] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2621'. [ 1626.372464][ T5776] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1626.390742][ T5776] CPU: 1 PID: 5776 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1626.398348][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1626.408423][ T5776] Workqueue: hci0 hci_rx_work [ 1626.413133][ T5776] Call Trace: [ 1626.416424][ T5776] [ 1626.419368][ T5776] dump_stack_lvl+0x18c/0x250 [ 1626.424071][ T5776] ? show_regs_print_info+0x20/0x20 [ 1626.429289][ T5776] ? load_image+0x400/0x400 [ 1626.433827][ T5776] sysfs_create_dir_ns+0x26e/0x2a0 [ 1626.438957][ T5776] ? sysfs_warn_dup+0xa0/0xa0 [ 1626.443647][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 1626.448867][ T5776] kobject_add_internal+0x61c/0xcc0 [ 1626.454094][ T5776] kobject_add+0x164/0x240 [ 1626.458524][ T5776] ? __rwlock_init+0x150/0x150 [ 1626.463307][ T5776] ? kobject_init+0x1e0/0x1e0 [ 1626.467996][ T5776] ? _raw_spin_unlock+0x28/0x40 [ 1626.472863][ T5776] ? get_device_parent+0x366/0x390 [ 1626.477999][ T5776] device_add+0x408/0xc20 [ 1626.482354][ T5776] hci_conn_add_sysfs+0xd5/0x1e0 [ 1626.487314][ T5776] le_conn_complete_evt+0xf5d/0x1540 [ 1626.492629][ T5776] ? hci_event_packet+0x4cb/0x1270 [ 1626.497774][ T5776] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1626.504045][ T5776] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1626.509703][ T5776] ? skb_pull_data+0xfb/0x200 [ 1626.514400][ T5776] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1626.520318][ T5776] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 1626.526757][ T5776] ? hci_remote_host_features_evt+0x150/0x150 [ 1626.532846][ T5776] hci_event_packet+0x7ba/0x1270 [ 1626.537820][ T5776] ? bis_list+0x290/0x290 [ 1626.542602][ T5776] ? lockdep_hardirqs_on+0x98/0x150 [ 1626.547837][ T5776] ? hci_send_to_monitor+0xd7/0x4f0 [ 1626.553065][ T5776] hci_rx_work+0x43a/0xd60 [ 1626.557513][ T5776] ? process_scheduled_works+0x96f/0x15d0 [ 1626.563287][ T5776] process_scheduled_works+0xa5d/0x15d0 [ 1626.568882][ T5776] ? assign_work+0x430/0x430 [ 1626.573497][ T5776] ? assign_work+0x3d0/0x430 [ 1626.578112][ T5776] worker_thread+0xa55/0xfc0 [ 1626.582752][ T5776] kthread+0x2fa/0x390 [ 1626.586841][ T5776] ? pr_cont_work+0x560/0x560 [ 1626.591542][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 1626.596149][ T5776] ret_from_fork+0x48/0x80 [ 1626.600583][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 1626.605188][ T5776] ret_from_fork_asm+0x11/0x20 [ 1626.609988][ T5776] [ 1626.638989][ T5776] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1627.460348][ T5776] Bluetooth: hci0: failed to register connection device [ 1630.984821][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 1632.506681][T14772] input: syz1 as /devices/virtual/input/input27 [ 1633.650252][T14776] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2633'. [ 1638.715593][T14798] overlayfs: missing 'lowerdir' [ 1640.162290][T14809] input: syz1 as /devices/virtual/input/input28 [ 1648.028225][T14842] overlayfs: missing 'lowerdir' [ 1648.832167][T14853] input: syz1 as /devices/virtual/input/input29 [ 1653.511608][T14873] overlayfs: missing 'lowerdir' [ 1659.475253][T14907] input: syz1 as /devices/virtual/input/input30 [ 1660.526010][T14916] overlayfs: missing 'workdir' [ 1663.870824][ T8586] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1665.289063][T14941] input: syz1 as /devices/virtual/input/input31 [ 1666.645073][T14947] netlink: 95 bytes leftover after parsing attributes in process `syz.3.2692'. [ 1668.644245][T14958] lo: entered promiscuous mode [ 1669.270691][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.420963][T14964] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2697'. [ 1673.071416][T14976] overlayfs: missing 'workdir' [ 1674.950273][T14988] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2707'. [ 1678.780959][T15004] input: syz1 as /devices/virtual/input/input32 [ 1679.292825][T15010] overlayfs: missing 'workdir' [ 1680.719270][T15021] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2717'. [ 1682.622206][T15035] input: syz1 as /devices/virtual/input/input33 [ 1684.234928][T15047] overlayfs: missing 'lowerdir' [ 1684.529856][ T28] audit: type=1326 audit(1771133333.557:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a39bf79 code=0x7ffc0000 [ 1684.639894][ T28] audit: type=1326 audit(1771133333.557:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a39bf79 code=0x7ffc0000 [ 1684.673724][T15052] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2726'. [ 1684.719138][ T28] audit: type=1326 audit(1771133333.557:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbf4a39bf79 code=0x7ffc0000 [ 1686.031961][ T28] audit: type=1326 audit(1771133333.557:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a39bf79 code=0x7ffc0000 [ 1686.129927][ T28] audit: type=1326 audit(1771133333.557:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a39bf79 code=0x7ffc0000 [ 1686.190013][ T28] audit: type=1326 audit(1771133333.567:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbf4a39bf79 code=0x7ffc0000 [ 1686.227136][ T28] audit: type=1326 audit(1771133333.567:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf4a33d399 code=0x7ffc0000 [ 1686.268054][ T28] audit: type=1326 audit(1771133333.567:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf4a33d399 code=0x7ffc0000 [ 1687.569923][ T28] audit: type=1326 audit(1771133333.567:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf4a33d399 code=0x7ffc0000 [ 1687.616497][ T28] audit: type=1326 audit(1771133333.567:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf4a33d399 code=0x7ffc0000 [ 1688.071841][T15067] input: syz1 as /devices/virtual/input/input34 [ 1690.461577][T15079] overlayfs: missing 'lowerdir' [ 1690.711465][T15084] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2737'. [ 1692.578889][T15096] input: syz1 as /devices/virtual/input/input35 [ 1696.071451][T15116] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1696.310759][T15118] overlayfs: missing 'lowerdir' [ 1697.175859][T15124] loop2: detected capacity change from 0 to 7 [ 1697.194056][T15062] Dev loop2: unable to read RDB block 7 [ 1697.199684][T15062] loop2: AHDI p2 [ 1697.210269][T15062] loop2: partition table partially beyond EOD, truncated [ 1697.250664][T15124] Dev loop2: unable to read RDB block 7 [ 1697.270134][T15124] loop2: AHDI p2 [ 1697.273853][T15124] loop2: partition table partially beyond EOD, truncated [ 1699.471390][T15143] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1699.509654][T15143] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1699.894655][T15154] input: syz1 as /devices/virtual/input/input36 [ 1705.941070][T15179] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1705.970136][T15179] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1706.005798][T15182] input: syz1 as /devices/virtual/input/input37 [ 1707.467435][ T8242] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1707.621192][T15195] input: syz1 as /devices/virtual/input/input38 [ 1707.735747][ T8242] usb 4-1: Using ep0 maxpacket: 32 [ 1708.296699][ T8242] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1708.504067][ T8242] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1708.515212][ T8242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.532207][ T8242] usb 4-1: config 0 descriptor?? [ 1708.960777][ T8242] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 1709.009094][ T8242] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 1709.059919][ T8242] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 1709.079813][ T8242] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 1709.105467][ T8242] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 1709.142881][ T8242] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v0.03 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 1709.264101][ T8242] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-71) [ 1709.338685][ T8242] corsair-psu: probe of 0003:1B1C:1C09.0003 failed with error -71 [ 1709.446462][ T8242] usb 4-1: USB disconnect, device number 4 [ 1710.108548][T15210] fido_id[15210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1710.217716][T15222] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1710.237868][T15222] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1713.085848][T15235] input: syz1 as /devices/virtual/input/input39 [ 1713.539892][T13652] Bluetooth: hci0: command 0x0406 tx timeout [ 1719.099062][T15276] input: syz1 as /devices/virtual/input/input40 [ 1721.870794][T15288] Bluetooth: MGMT ver 1.22 [ 1723.177601][ T5776] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1725.030578][T15312] input: syz1 as /devices/virtual/input/input41 [ 1729.720040][T15336] binder: 15329:15336 ioctl c00c620f 200000000300 returned -22 [ 1731.563800][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1732.853352][T15348] syz_tun: refused to change device tx_queue_len [ 1733.739108][T15366] input: syz1 as /devices/virtual/input/input42 [ 1740.029856][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1741.010005][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1741.057046][ T23] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1741.081311][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.119885][ T23] usb 3-1: Product: syz [ 1741.141402][ T23] usb 3-1: Manufacturer: syz [ 1741.156306][ T23] usb 3-1: SerialNumber: syz [ 1741.175883][ T23] usb 3-1: config 0 descriptor?? [ 1741.203997][ T23] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1741.407361][ T23] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 1741.441874][ T23] visor: probe of 3-1:0.0 failed with error -71 [ 1741.466981][ T23] usb 3-1: USB disconnect, device number 16 [ 1743.367331][T15416] overlay: ./file1 is not a directory [ 1751.920232][T15457] overlay: ./file1 is not a directory [ 1761.954370][T15502] overlay: ./file1 is not a directory [ 1769.111560][T15536] overlay: ./file1 is not a directory [ 1777.478430][T15577] input: syz1 as /devices/virtual/input/input43 [ 1779.135110][T15588] overlay: ./file1 is not a directory [ 1789.928703][T15648] input: syz1 as /devices/virtual/input/input44 [ 1793.304115][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.835295][T15660] overlay: ./file1 is not a directory [ 1799.628439][T15690] input: syz1 as /devices/virtual/input/input45 [ 1803.153276][T15708] overlay: ./file1 is not a directory [ 1809.338821][T15730] input: syz1 as /devices/virtual/input/input46 [ 1813.681619][T15744] overlay: ./file1 is not a directory [ 1818.370723][ T5154] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1818.586204][ T5154] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1818.617516][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.639781][ T5154] usb 1-1: Product: syz [ 1818.647931][ T5154] usb 1-1: Manufacturer: syz [ 1818.662810][ T5154] usb 1-1: SerialNumber: syz [ 1818.898396][T15762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.943331][T15762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.001798][ T5154] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1819.050266][ T5154] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1819.089810][ T5154] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1819.100050][T15762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.112530][ T5154] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1819.124915][ T5154] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1819.134523][T15762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.151654][ T5154] lan78xx: probe of 1-1:1.0 failed with error -32 [ 1819.252267][ T5154] usb 1-1: USB disconnect, device number 19 [ 1822.945498][T15788] overlay: ./file1 is not a directory [ 1826.730230][T15803] input: syz1 as /devices/virtual/input/input47 [ 1831.465749][T15823] overlay: ./file1 is not a directory [ 1837.696811][T15851] overlay: ./file1 is not a directory [ 1839.314240][T15859] input: syz1 as /devices/virtual/input/input48 [ 1846.483919][T15899] overlay: ./file1 is not a directory [ 1852.845696][T15932] overlay: ./file1 is not a directory [ 1853.600736][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.678221][T15935] input: syz1 as /devices/virtual/input/input49 [ 1858.845385][T15961] Bluetooth: MGMT ver 1.22 [ 1859.320112][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1859.571368][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1859.618617][ T23] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1859.729755][ T23] usb 4-1: config 179 has no interface number 0 [ 1859.736859][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1859.829876][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1859.841547][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1859.860292][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1859.879881][ T23] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1859.919782][ T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1859.950230][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.982834][T15965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1860.702046][ T8586] usb 4-1: USB disconnect, device number 5 [ 1860.702082][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1870.280504][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3018'. [ 1881.734674][T16086] batman_adv: batadv0: Adding interface: gretap1 [ 1881.741170][T16086] batman_adv: batadv0: Interface activated: gretap1 [ 1883.216740][T16093] overlay: ./file1 is not a directory [ 1887.589509][T16125] trusted_key: syz.2.3051 sent an empty control message without MSG_MORE. [ 1888.929661][ C0] sched: RT throttling activated [ 1892.411596][T16132] overlay: ./file1 is not a directory [ 1896.861075][T16155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3060'. [ 1897.224922][ T8586] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1897.248126][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3053'. [ 1897.531228][ T8586] usb 2-1: Using ep0 maxpacket: 16 [ 1897.609963][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1899.040264][ T8586] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1899.049420][ T8586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.070168][ T8586] usb 2-1: Product: syz [ 1899.074383][ T8586] usb 2-1: Manufacturer: syz [ 1899.091049][ T8586] usb 2-1: SerialNumber: syz [ 1899.114182][ T8586] usb 2-1: config 0 descriptor?? [ 1899.371620][ T8586] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1899.385171][ T8586] usb 2-1: Detected FT232H [ 1899.393534][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.419751][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.429557][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1900.776887][ T8586] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1900.832196][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1900.851209][ T8586] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1900.869974][ T8586] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1900.890645][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.906787][ T8586] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1900.941217][ T9] usb 1-1: config 0 descriptor?? [ 1900.974294][ T8586] usb 2-1: USB disconnect, device number 17 [ 1902.007187][T16177] overlay: ./file1 is not a directory [ 1902.039563][ T8586] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1902.214186][ T8586] ftdi_sio 2-1:0.0: device disconnected [ 1902.221598][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1902.227649][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 1902.254576][ T9] usb 1-1: USB disconnect, device number 20 [ 1906.800330][T16211] overlay: ./file1 is not a directory [ 1908.077404][T16221] input: syz1 as /devices/virtual/input/input52 [ 1911.623942][T16243] overlay: ./file1 is not a directory [ 1913.320766][T16253] input: syz1 as /devices/virtual/input/input53 [ 1915.162460][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.874589][T16290] input: syz1 as /devices/virtual/input/input54 [ 1922.169288][T16295] overlay: ./file1 is not a directory [ 1924.527530][T16317] netlink: 'syz.0.3106': attribute type 11 has an invalid length. [ 1924.629835][ T8586] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1924.832139][ T8586] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.842575][ T8586] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1924.866498][ T8586] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 1924.896187][ T8586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.918101][ T8586] usb 3-1: Product: syz [ 1924.928246][ T8586] usb 3-1: Manufacturer: syz [ 1924.946913][ T8586] usb 3-1: SerialNumber: syz [ 1924.955120][ T8586] usb 3-1: config 0 descriptor?? [ 1924.962119][T16321] comedi comedi3: pcm3724: I/O port conflict (0x20024,16) [ 1925.203924][T13278] usb 3-1: USB disconnect, device number 17 [ 1925.924556][T16330] overlay: ./file1 is not a directory [ 1931.070847][T16356] tipc: Failed to remove unknown binding: 66,0,0/0:2846276207/2846276208 [ 1931.112306][T16356] tipc: Failed to remove unknown binding: 66,0,0/0:2846276207/2846276208 [ 1931.792448][T16362] overlay: ./file1 is not a directory [ 1932.539966][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1932.739812][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1932.749107][ T23] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1932.760106][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.769453][ T23] usb 2-1: Product: syz [ 1932.789732][ T23] usb 2-1: Manufacturer: syz [ 1932.794375][ T23] usb 2-1: SerialNumber: syz [ 1932.811849][ T23] usb 2-1: config 0 descriptor?? [ 1932.820678][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 1933.370315][ T23] gspca_se401: Bayer format not supported! [ 1933.493913][ T8586] usb 2-1: USB disconnect, device number 18 [ 1938.278854][T16402] overlay: ./file1 is not a directory [ 1939.472146][ T5776] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 1951.932609][T16489] autofs4:pid:16489:autofs_fill_super: called with bogus options [ 1962.166459][ T9] IPVS: starting estimator thread 0... [ 1962.400388][T16560] IPVS: using max 20 ests per chain, 48000 per kthread [ 1969.030692][T16594] kvm: pic: non byte write [ 1969.038623][T16594] kvm: pic: non byte write [ 1969.773342][T16598] overlay: ./file1 is not a directory [ 1969.778904][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1969.807814][T16594] kvm: pic: non byte write [ 1969.880680][T16594] kvm: pic: non byte write [ 1969.885359][T16594] kvm: pic: non byte write [ 1969.903152][T16594] kvm: pic: non byte write [ 1970.006340][ T23] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1970.020048][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.050522][ T23] usb 3-1: config 0 descriptor?? [ 1971.320180][ T23] cp210x 3-1:0.0: cp210x converter detected [ 1971.529998][ T23] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 1971.736153][ T23] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1971.812209][ T23] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1971.982226][ T23] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1972.206792][ T23] usb 3-1: USB disconnect, device number 18 [ 1972.299490][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1972.342340][ T23] cp210x 3-1:0.0: device disconnected [ 1975.476344][T16629] overlay: ./file1 is not a directory [ 1976.949321][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.214250][T16682] overlay: ./file1 is not a directory [ 1988.849834][ T5154] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1989.030020][ T5154] usb 1-1: Using ep0 maxpacket: 8 [ 1989.050104][ T5154] usb 1-1: config 162 has an invalid interface number: 166 but max is 0 [ 1989.068856][ T5154] usb 1-1: config 162 has no interface number 0 [ 1989.117424][ T5154] usb 1-1: config 162 interface 166 has no altsetting 0 [ 1989.147643][ T5154] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 1989.163337][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.203420][ T5154] usb 1-1: Product: syz [ 1989.237419][ T5154] usb 1-1: Manufacturer: syz [ 1989.260640][ T5154] usb 1-1: SerialNumber: syz [ 1991.062006][ T5154] appledisplay 1-1:162.166: Could not find int-in endpoint [ 1991.129838][ T5154] usbhid 1-1:162.166: couldn't find an input interrupt endpoint [ 1991.137245][ T5154] usb 1-1: USB disconnect, device number 21 [ 1991.254492][T16715] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1992.674516][T16720] overlay: ./file1 is not a directory [ 1993.160983][T16728] input: syz1 as /devices/virtual/input/input55 [ 1998.991977][T16758] overlay: ./file1 is not a directory [ 1999.090367][T16763] 9pnet_fd: Insufficient options for proto=fd [ 2004.514327][T16794] overlay: ./file1 is not a directory [ 2004.957703][T16798] team_slave_0: entered promiscuous mode [ 2004.964000][T16798] team_slave_1: entered promiscuous mode [ 2004.971230][T16798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2005.260584][T16800] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 2013.788783][T16849] input: syz1 as /devices/virtual/input/input56 [ 2015.952074][T16853] overlay: ./file1 is not a directory [ 2020.604402][T16891] overlay: ./file1 is not a directory [ 2024.299839][T16521] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 2025.439015][T16918] overlay: ./file1 is not a directory [ 2031.122252][T16956] input: syz1 as /devices/virtual/input/input57 [ 2037.873213][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2044.338672][T17044] libceph: resolve '0' (ret=-3): failed [ 2056.201189][T17104] input: syz1 as /devices/virtual/input/input59 [ 2065.579284][T17168] overlay: ./file1 is not a directory [ 2068.218952][T17207] overlay: ./file1 is not a directory [ 2069.262085][T17221] input: syz1 as /devices/virtual/input/input60 [ 2076.404951][T17267] input: syz1 as /devices/virtual/input/input61 [ 2083.119780][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2083.352682][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2083.369693][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.480084][ T9] usb 3-1: config 0 descriptor?? [ 2083.487375][ T9] cp210x 3-1:0.0: cp210x converter detected [ 2085.212310][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 2085.256155][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2085.289992][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 2085.312586][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2085.359951][ T9] usb 3-1: USB disconnect, device number 19 [ 2086.667997][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2086.714555][ T9] cp210x 3-1:0.0: device disconnected [ 2087.439400][T17340] input: syz1 as /devices/virtual/input/input62 [ 2092.577981][T17361] overlay: ./file1 is not a directory [ 2097.712496][T17386] overlay: ./file1 is not a directory [ 2099.328618][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.762051][T17461] binder: 17459:17461 ioctl c0306201 0 returned -14 [ 2107.745423][T17491] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2107.935016][T13652] Bluetooth: hci3: unexpected event for opcode 0x002d [ 2111.637500][T17518] input: syz0 as /devices/virtual/input/input63 [ 2111.935336][T17520] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2113.226034][T17527] input: syz1 as /devices/virtual/input/input64 [ 2116.910325][T17549] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2119.194227][T17559] overlay: ./file1 is not a directory [ 2122.997256][T17582] Bluetooth: hci0: unsupported parameter 255 [ 2123.037068][T17582] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2127.182885][T17609] overlay: ./file1 is not a directory [ 2131.107272][T17645] overlay: ./file1 is not a directory [ 2132.780223][ T5154] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2132.989828][ T5154] usb 3-1: Using ep0 maxpacket: 16 [ 2132.997030][ T5154] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 2133.019761][ T5154] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2133.062339][ T5154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2133.100620][ T5154] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2133.128552][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.169302][ T5154] usb 3-1: config 0 descriptor?? [ 2133.191493][ T5154] pxrc 3-1:0.0: Could not find endpoint [ 2133.197785][ T5154] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2133.925050][ T5154] usb 3-1: USB disconnect, device number 20 [ 2134.240494][T17675] overlay: ./file1 is not a directory [ 2135.051599][T17679] input: syz1 as /devices/virtual/input/input65 [ 2137.988467][T17706] overlay: ./file1 is not a directory [ 2142.279712][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2143.580129][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 2143.918301][ T9] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 2143.926555][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2143.949626][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2143.980035][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2143.989432][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.014452][ T9] usb 4-1: config 0 descriptor?? [ 2144.241543][ T9] pxrc 4-1:0.0: Could not find endpoint [ 2144.256299][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2144.721370][T13278] usb 4-1: USB disconnect, device number 6 [ 2145.831668][T17780] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2146.429948][T10102] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 2146.984351][T10102] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 2147.054729][T10102] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.097763][T10102] usb 1-1: config 0 has no interface number 0 [ 2147.110686][T10102] usb 1-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 2147.135014][T10102] usb 1-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2147.193064][T10102] usb 1-1: config 0 interface 113 has no altsetting 0 [ 2147.241318][T17793] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2147.269231][T10102] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2147.479735][T10102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.487859][T10102] usb 1-1: Product: syz [ 2148.200401][T10102] usb 1-1: Manufacturer: syz [ 2148.205083][T10102] usb 1-1: SerialNumber: syz [ 2148.319984][T17802] input: syz1 as /devices/virtual/input/input66 [ 2149.170598][T10102] usb 1-1: config 0 descriptor?? [ 2152.249656][T17824] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2152.359726][T10102] usb 1-1: can't set config #0, error -71 [ 2152.377715][T10102] usb 1-1: USB disconnect, device number 22 [ 2152.812429][T17833] input: syz0 as /devices/virtual/input/input67 [ 2155.955127][T13278] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2156.257730][T13278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.270094][T13278] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2156.368086][T13278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.649159][T13278] usb 3-1: config 0 descriptor?? [ 2156.775841][T13278] pwc: Askey VC010 type 2 USB webcam detected. [ 2156.839796][T13278] pwc: send_video_command error -71 [ 2156.845064][T13278] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2156.929739][T13278] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2156.996258][T13278] usb 3-1: USB disconnect, device number 21 [ 2159.067288][T17886] input: syz1 as /devices/virtual/input/input68 [ 2159.674235][T17894] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2159.858172][T17900] hub 8-0:1.0: USB hub found [ 2159.881743][T17900] hub 8-0:1.0: 1 port detected [ 2160.845534][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2163.639787][T17926] input: syz1 as /devices/virtual/input/input69 [ 2164.230232][T17934] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2164.343693][T17938] input: syz0 as /devices/virtual/input/input70 [ 2167.746650][T17961] input: syz1 as /devices/virtual/input/input71 [ 2168.332191][T17970] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2172.863657][T17990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2173.617199][T17996] input: syz1 as /devices/virtual/input/input72 [ 2173.661227][T17997] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2173.808172][T18003] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2173.990756][ T23] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 2179.340891][T18019] overlay: ./file1 is not a directory [ 2179.593880][ T23] usb 3-1: device descriptor read/all, error -71 [ 2181.925572][T18039] input: syz1 as /devices/virtual/input/input73 [ 2182.982609][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3637'. [ 2186.527418][T18074] input: syz1 as /devices/virtual/input/input74 [ 2191.922748][T18107] input: syz1 as /devices/virtual/input/input75 [ 2193.359701][T18118] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2193.422113][T18113] overlay: ./file1 is not a directory [ 2194.864544][T18130] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 2194.911811][T18130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2194.940758][T18130] bond1: (slave ip6gretap1): making interface the new active one [ 2194.950857][T18130] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2196.307476][T18130] veth3: entered promiscuous mode [ 2196.333037][T18130] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2197.899177][T18147] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2202.992956][T18165] input: syz1 as /devices/virtual/input/input76 [ 2207.223811][T18188] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 2219.781928][T18263] binder: BINDER_SET_CONTEXT_MGR already set [ 2219.788544][T18263] binder: 18262:18263 ioctl 4018620d 200000004a80 returned -16 [ 2222.183988][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2225.062441][T18306] binder: BINDER_SET_CONTEXT_MGR already set [ 2225.083225][T18306] binder: 18304:18306 ioctl 4018620d 200000004a80 returned -16 [ 2228.624680][T15781] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2230.349823][T15781] usb 3-1: Using ep0 maxpacket: 32 [ 2230.360181][T15781] usb 3-1: device descriptor read/all, error -71 [ 2234.840803][ T23] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 2235.086684][ T23] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 2235.220001][ T23] usb 1-1: config 0 has no interface number 0 [ 2235.322544][ T23] usb 1-1: config 0 interface 87 has no altsetting 0 [ 2235.360940][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=7d.82 [ 2235.389641][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.397699][ T23] usb 1-1: Product: syz [ 2235.459632][ T23] usb 1-1: Manufacturer: syz [ 2235.464756][ T23] usb 1-1: SerialNumber: syz [ 2235.492468][ T23] usb 1-1: config 0 descriptor?? [ 2235.705195][ T23] usb 1-1: USB disconnect, device number 23 [ 2237.764132][T18393] input: syz1 as /devices/virtual/input/input77 [ 2240.592187][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 2240.592274][ T28] audit: type=1326 audit(1771133889.637:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2240.741649][ T28] audit: type=1326 audit(1771133889.637:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2240.879756][ T28] audit: type=1326 audit(1771133889.637:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2241.169755][T16383] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2242.089943][ T28] audit: type=1326 audit(1771133889.647:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2242.117482][T18435] input: syz1 as /devices/virtual/input/input79 [ 2242.435399][ T28] audit: type=1326 audit(1771133889.647:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2242.493882][ T28] audit: type=1326 audit(1771133889.647:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2242.528024][T16383] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2242.532106][ T28] audit: type=1326 audit(1771133889.647:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2242.560206][T16383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.568232][T16383] usb 2-1: Product: syz [ 2242.569131][ T28] audit: type=1326 audit(1771133889.647:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2242.589528][T16383] usb 2-1: Manufacturer: syz [ 2242.601148][T16383] usb 2-1: SerialNumber: syz [ 2243.424947][T16383] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2243.439431][ T28] audit: type=1326 audit(1771133889.647:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2243.503359][ T28] audit: type=1326 audit(1771133889.677:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8dcf9bf79 code=0x7ffc0000 [ 2243.592119][T10102] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2244.314457][T16383] usb 2-1: USB disconnect, device number 19 [ 2244.532305][T18450] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2244.677874][T10102] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2244.730332][T10102] ath9k_htc: Failed to initialize the device [ 2244.750589][T16383] usb 2-1: ath9k_htc: USB layer deinitialized [ 2251.512768][T18486] input: syz1 as /devices/virtual/input/input80 [ 2251.754244][T18489] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2255.566645][T18514] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 2258.206546][T18535] input: syz1 as /devices/virtual/input/input81 [ 2259.752861][T18551] overlayfs: failed to resolve './file1': -2 [ 2261.544405][T18567] input: syz1 as /devices/virtual/input/input82 [ 2261.738634][T18577] input: syz0 as /devices/virtual/input/input83 [ 2262.198335][T18583] overlayfs: failed to resolve './file1': -2 [ 2266.267247][T18614] overlayfs: failed to resolve './file1': -2 [ 2266.444793][T18620] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (47) [ 2266.640279][T18624] input: syz1 as /devices/virtual/input/input84 [ 2268.686149][T18618] overlay: ./file1 is not a directory [ 2273.050076][T18655] input: syz0 as /devices/virtual/input/input85 [ 2275.834806][T18665] overlay: ./file1 is not a directory [ 2276.032399][T18675] input: syz1 as /devices/virtual/input/input86 [ 2279.920412][ T2937] tipc: Subscription rejected, illegal request [ 2281.444488][T18715] input: syz1 as /devices/virtual/input/input87 [ 2284.634950][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2287.623492][T18768] input: syz1 as /devices/virtual/input/input88 [ 2291.987236][T18812] input: syz1 as /devices/virtual/input/input89 [ 2292.093879][T18816] binder: BINDER_SET_CONTEXT_MGR already set [ 2292.110588][T18816] binder: 18815:18816 ioctl 4018620d 200000004a80 returned -16 [ 2292.523016][T18822] ------------[ cut here ]------------ [ 2292.529014][T18822] WARNING: CPU: 1 PID: 18822 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.531017][ T2937] ------------[ cut here ]------------ [ 2292.540354][T18822] Modules linked in: [ 2292.546026][ T2937] WARNING: CPU: 0 PID: 2937 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.546069][ T2937] Modules linked in: [ 2292.550224][T18822] [ 2292.561113][ T2937] [ 2292.564919][T18822] CPU: 1 PID: 18822 Comm: syz.3.3859 Not tainted syzkaller #0 [ 2292.567232][ T2937] CPU: 0 PID: 2937 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 2292.569588][T18822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2292.569602][T18822] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.577048][ T2937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2292.577063][ T2937] Workqueue: events_unbound cfg80211_wiphy_work [ 2292.577093][ T2937] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.577113][ T2937] Code: 48 89 df e8 8a 05 d8 f7 e9 dc fc ff ff e8 90 dc 7f f7 eb 24 e8 89 dc 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 dc 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a dc 7f f7 48 8b 7c 24 08 4c 8b 7c [ 2292.577128][ T2937] RSP: 0018:ffffc9000bcf7200 EFLAGS: 00010283 [ 2292.577146][ T2937] RAX: ffffffff8a07332e RBX: 0000000000000001 RCX: 0000000000100000 [ 2292.577159][ T2937] RDX: ffffc9001837a000 RSI: 00000000000071be RDI: 00000000000071bf [ 2292.577171][ T2937] RBP: dffffc0000000000 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 2292.577184][ T2937] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: 0000000000000001 [ 2292.577197][ T2937] R13: ffff888060cf65d9 R14: ffff88807a992c70 R15: ffff88807a992ce8 [ 2292.577211][ T2937] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2292.584942][T18822] Code: 48 89 df e8 8a 05 d8 f7 e9 dc fc ff ff e8 90 dc 7f f7 eb 24 e8 89 dc 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 dc 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a dc 7f f7 48 8b 7c 24 08 4c 8b 7c [ 2292.584962][T18822] RSP: 0018:ffffc9000bdeee00 EFLAGS: 00010287 [ 2292.584983][T18822] RAX: ffffffff8a07332e RBX: 0000000000000001 RCX: 0000000000080000 [ 2292.584995][T18822] RDX: ffffc90012769000 RSI: 000000000000ad8c RDI: 000000000000ad8d [ 2292.585008][T18822] RBP: dffffc0000000000 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 2292.585022][T18822] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: 0000000000000001 [ 2292.585036][T18822] R13: ffff88807396e5d9 R14: ffff88807ef22c70 R15: ffff88807ef22ce8 [ 2292.585057][T18822] FS: 00007f1c6d7746c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2292.585075][T18822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2292.585088][T18822] CR2: 00007f1c6c986e80 CR3: 0000000069c29000 CR4: 00000000003506e0 [ 2292.585103][T18822] Call Trace: [ 2292.585112][T18822] [ 2292.595291][ T2937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2292.603986][T18822] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 2292.604021][T18822] ieee80211_csa_finalize+0x5a6/0xf20 [ 2292.604057][T18822] ? ieee80211_csa_finalize_work+0x140/0x140 [ 2292.604080][T18822] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 2292.604111][T18822] ieee80211_channel_switch+0xad5/0xe70 [ 2292.604147][T18822] ? ieee80211_csa_finalize+0xf20/0xf20 [ 2292.604177][T18822] ? mutex_lock_nested+0x20/0x20 [ 2292.604207][T18822] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 2292.604235][T18822] rdev_channel_switch+0xeb/0x240 [ 2292.604267][T18822] nl80211_channel_switch+0xae8/0x1120 [ 2292.604290][T18822] ? genl_family_rcv_msg_doit+0xce/0x310 [ 2292.604325][T18822] ? __mutex_trylock_common+0x159/0x260 [ 2292.604346][T18822] ? mutex_unlock+0x10/0x10 [ 2292.604372][T18822] ? nl80211_set_coalesce+0x1340/0x1340 [ 2292.614846][ T2937] CR2: 0000200000514ff4 CR3: 0000000067ac3000 CR4: 00000000003506f0 [ 2292.621284][T18822] ? __nla_parse+0x40/0x50 [ 2292.628230][ T2937] Call Trace: [ 2292.648024][T18822] ? nl80211_pre_doit+0x4f1/0x930 [ 2292.648066][T18822] genl_family_rcv_msg_doit+0x211/0x310 [ 2292.654130][ T2937] [ 2292.662692][T18822] ? end_current_label_crit_section+0x170/0x170 [ 2292.670371][ T2937] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 2292.678336][T18822] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2292.686383][ T2937] ieee80211_csa_finalize+0x5a6/0xf20 [ 2292.694358][T18822] ? bpf_lsm_capable+0x9/0x10 [ 2292.705063][ T2937] ? ieee80211_csa_finalize_work+0x140/0x140 [ 2292.724472][T18822] ? security_capable+0x89/0xb0 [ 2292.724516][T18822] genl_rcv_msg+0x619/0x7a0 [ 2292.724550][T18822] ? genl_bind+0x360/0x360 [ 2292.730639][ T2937] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 2292.730671][ T2937] ieee80211_channel_switch+0xad5/0xe70 [ 2292.730706][ T2937] ? ieee80211_csa_finalize+0xf20/0xf20 [ 2292.738654][T18822] ? nl80211_exit+0x30/0x30 [ 2292.746666][ T2937] ? rcu_is_watching+0x15/0xb0 [ 2292.754639][T18822] ? nl80211_set_coalesce+0x1340/0x1340 [ 2292.762656][ T2937] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 2292.770636][T18822] ? nl80211_pre_doit+0x930/0x930 [ 2292.770661][T18822] ? ref_tracker_free+0x690/0x840 [ 2292.779616][ T2937] ieee80211_ibss_process_chanswitch+0x9d6/0xd70 [ 2292.786166][T18822] netlink_rcv_skb+0x241/0x4d0 [ 2292.794236][ T2937] ? trace_drv_return_int+0x1c0/0x1c0 [ 2292.797410][T18822] ? genl_bind+0x360/0x360 [ 2292.800403][ T2937] ? cfg80211_find_elem_match+0x1bc/0x1f0 [ 2292.808321][T18822] ? netlink_ack+0x1180/0x1180 [ 2292.808365][T18822] ? __lock_acquire+0x7d40/0x7d40 [ 2292.808396][T18822] ? down_read+0x1ac/0x2e0 [ 2292.808426][T18822] genl_rcv+0x28/0x40 [ 2292.808451][T18822] netlink_unicast+0x751/0x8d0 [ 2292.808488][T18822] netlink_sendmsg+0x8d0/0xbf0 [ 2292.808525][T18822] ? netlink_getsockopt+0x590/0x590 [ 2292.808554][T18822] ? aa_sock_msg_perm+0x94/0x150 [ 2292.808579][T18822] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2292.808600][T18822] ? security_socket_sendmsg+0x80/0xa0 [ 2292.808619][T18822] ? netlink_getsockopt+0x590/0x590 [ 2292.808645][T18822] ____sys_sendmsg+0x5ba/0x960 [ 2292.808673][T18822] ? __asan_memset+0x22/0x40 [ 2292.808698][T18822] ? __sys_sendmsg_sock+0x30/0x30 [ 2292.808715][T18822] ? __import_iovec+0x5f2/0x850 [ 2292.808752][T18822] ? import_iovec+0x73/0xa0 [ 2292.815541][ T2937] ? mutex_lock_nested+0x20/0x20 [ 2292.821119][T18822] ___sys_sendmsg+0x2a6/0x360 [ 2292.826846][ T2937] ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80 [ 2292.833453][T18822] ? __sys_sendmsg+0x2a0/0x2a0 [ 2292.838885][ T2937] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 2292.844490][T18822] __se_sys_sendmsg+0x1c2/0x2b0 [ 2292.849356][ T2937] ? mark_lock+0x94/0x320 [ 2292.855163][T18822] ? __x64_sys_sendmsg+0x80/0x80 [ 2292.855202][T18822] ? lockdep_hardirqs_on+0x98/0x150 [ 2292.860247][ T2937] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2292.865665][T18822] do_syscall_64+0x55/0xa0 [ 2292.871308][ T2937] ? lock_chain_count+0x20/0x20 [ 2292.871330][ T2937] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2292.876850][T18822] ? clear_bhb_loop+0x40/0x90 [ 2292.881441][ T2937] ? kcov_remote_start+0x4cb/0x7e0 [ 2292.886897][T18822] ? clear_bhb_loop+0x40/0x90 [ 2292.894902][ T2937] ? lockdep_hardirqs_on+0x98/0x150 [ 2292.899305][T18822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2292.902661][ T2937] ? kcov_remote_start+0x8f/0x7e0 [ 2292.908978][T18822] RIP: 0033:0x7f1c6c99bf79 [ 2292.909002][T18822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2292.909019][T18822] RSP: 002b:00007f1c6d774028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2292.909049][T18822] RAX: ffffffffffffffda RBX: 00007f1c6cc15fa0 RCX: 00007f1c6c99bf79 [ 2292.909065][T18822] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 2292.909078][T18822] RBP: 00007f1c6ca327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.909091][T18822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2292.909104][T18822] R13: 00007f1c6cc16038 R14: 00007f1c6cc15fa0 R15: 00007ffdf690c788 [ 2292.909137][T18822] [ 2292.909148][T18822] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2292.909157][T18822] CPU: 1 PID: 18822 Comm: syz.3.3859 Not tainted syzkaller #0 [ 2292.909174][T18822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2292.909184][T18822] Call Trace: [ 2292.909190][T18822] [ 2292.909197][T18822] dump_stack_lvl+0x18c/0x250 [ 2292.909226][T18822] ? show_regs_print_info+0x20/0x20 [ 2292.909249][T18822] ? load_image+0x400/0x400 [ 2292.909283][T18822] panic+0x2dc/0x730 [ 2292.909308][T18822] ? bpf_jit_dump+0xd0/0xd0 [ 2292.909346][T18822] __warn+0x2e0/0x470 [ 2292.909362][T18822] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.909383][T18822] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.909399][T18822] report_bug+0x2be/0x4f0 [ 2292.909422][T18822] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.909445][T18822] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.909463][T18822] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 2292.909481][T18822] handle_bug+0xcf/0x120 [ 2292.909503][T18822] exc_invalid_op+0x1a/0x50 [ 2292.909525][T18822] asm_exc_invalid_op+0x1a/0x20 [ 2292.909541][T18822] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2292.909561][T18822] Code: 48 89 df e8 8a 05 d8 f7 e9 dc fc ff ff e8 90 dc 7f f7 eb 24 e8 89 dc 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 dc 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a dc 7f f7 48 8b 7c 24 08 4c 8b 7c [ 2292.909574][T18822] RSP: 0018:ffffc9000bdeee00 EFLAGS: 00010287 [ 2292.909588][T18822] RAX: ffffffff8a07332e RBX: 0000000000000001 RCX: 0000000000080000 [ 2292.909600][T18822] RDX: ffffc90012769000 RSI: 000000000000ad8c RDI: 000000000000ad8d [ 2292.909611][T18822] RBP: dffffc0000000000 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 2292.909624][T18822] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: 0000000000000001 [ 2292.909634][T18822] R13: ffff88807396e5d9 R14: ffff88807ef22c70 R15: ffff88807ef22ce8 [ 2292.909654][T18822] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 2292.909692][T18822] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 2292.909715][T18822] ieee80211_csa_finalize+0x5a6/0xf20 [ 2292.909740][T18822] ? ieee80211_csa_finalize_work+0x140/0x140 [ 2292.909760][T18822] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 2292.909786][T18822] ieee80211_channel_switch+0xad5/0xe70 [ 2292.909818][T18822] ? ieee80211_csa_finalize+0xf20/0xf20 [ 2292.909843][T18822] ? mutex_lock_nested+0x20/0x20 [ 2292.909869][T18822] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 2292.909892][T18822] rdev_channel_switch+0xeb/0x240 [ 2292.909920][T18822] nl80211_channel_switch+0xae8/0x1120 [ 2292.909939][T18822] ? genl_family_rcv_msg_doit+0xce/0x310 [ 2292.909970][T18822] ? __mutex_trylock_common+0x159/0x260 [ 2292.909987][T18822] ? mutex_unlock+0x10/0x10 [ 2292.910008][T18822] ? nl80211_set_coalesce+0x1340/0x1340 [ 2292.910072][T18822] ? __nla_parse+0x40/0x50 [ 2292.910100][T18822] ? nl80211_pre_doit+0x4f1/0x930 [ 2292.910124][T18822] genl_family_rcv_msg_doit+0x211/0x310 [ 2292.910149][T18822] ? end_current_label_crit_section+0x170/0x170 [ 2292.910174][T18822] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2292.910207][T18822] ? bpf_lsm_capable+0x9/0x10 [ 2292.910228][T18822] ? security_capable+0x89/0xb0 [ 2292.910257][T18822] genl_rcv_msg+0x619/0x7a0 [ 2292.910286][T18822] ? genl_bind+0x360/0x360 [ 2292.910307][T18822] ? nl80211_exit+0x30/0x30 [ 2292.910322][T18822] ? nl80211_set_coalesce+0x1340/0x1340 [ 2292.910341][T18822] ? nl80211_pre_doit+0x930/0x930 [ 2292.910359][T18822] ? ref_tracker_free+0x690/0x840 [ 2292.910388][T18822] netlink_rcv_skb+0x241/0x4d0 [ 2292.910410][T18822] ? genl_bind+0x360/0x360 [ 2292.910435][T18822] ? netlink_ack+0x1180/0x1180 [ 2292.910469][T18822] ? __lock_acquire+0x7d40/0x7d40 [ 2292.910496][T18822] ? down_read+0x1ac/0x2e0 [ 2292.910521][T18822] genl_rcv+0x28/0x40 [ 2292.910544][T18822] netlink_unicast+0x751/0x8d0 [ 2292.910576][T18822] netlink_sendmsg+0x8d0/0xbf0 [ 2292.910607][T18822] ? netlink_getsockopt+0x590/0x590 [ 2292.910632][T18822] ? aa_sock_msg_perm+0x94/0x150 [ 2292.910654][T18822] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2292.910672][T18822] ? security_socket_sendmsg+0x80/0xa0 [ 2292.910688][T18822] ? netlink_getsockopt+0x590/0x590 [ 2292.910712][T18822] ____sys_sendmsg+0x5ba/0x960 [ 2292.910735][T18822] ? __asan_memset+0x22/0x40 [ 2292.910757][T18822] ? __sys_sendmsg_sock+0x30/0x30 [ 2292.910771][T18822] ? __import_iovec+0x5f2/0x850 [ 2292.910803][T18822] ? import_iovec+0x73/0xa0 [ 2292.910830][T18822] ___sys_sendmsg+0x2a6/0x360 [ 2292.910852][T18822] ? __sys_sendmsg+0x2a0/0x2a0 [ 2292.910918][T18822] __se_sys_sendmsg+0x1c2/0x2b0 [ 2292.910937][T18822] ? __x64_sys_sendmsg+0x80/0x80 [ 2292.910970][T18822] ? lockdep_hardirqs_on+0x98/0x150 [ 2292.910992][T18822] do_syscall_64+0x55/0xa0 [ 2292.911011][T18822] ? clear_bhb_loop+0x40/0x90 [ 2292.911034][T18822] ? clear_bhb_loop+0x40/0x90 [ 2292.911053][T18822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2292.911070][T18822] RIP: 0033:0x7f1c6c99bf79 [ 2292.911082][T18822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2292.911096][T18822] RSP: 002b:00007f1c6d774028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2292.911113][T18822] RAX: ffffffffffffffda RBX: 00007f1c6cc15fa0 RCX: 00007f1c6c99bf79 [ 2292.911125][T18822] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 2292.911135][T18822] RBP: 00007f1c6ca327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.911145][T18822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2292.911155][T18822] R13: 00007f1c6cc16038 R14: 00007f1c6cc15fa0 R15: 00007ffdf690c788 [ 2292.911183][T18822] [ 2292.915251][T18822] Kernel Offset: disabled