last executing test programs: 20m42.447121868s ago: executing program 1 (id=218): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000de173610ef171e7206de01020301090212000100000000090400000002060000"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0x1d, 0x0, &(0x7f0000000080)="2b206d074843b387737ea49da2aa6d080000001b66fcb58357bd881ce4", 0x0, 0x4, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="3a0004000000a7212277"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m38.333376452s ago: executing program 1 (id=223): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) 20m37.054514745s ago: executing program 32 (id=201): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 20m29.766629646s ago: executing program 1 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004282, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000190001002cbd700000000082c15476a1b090e105000000"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) sendmsg$nl_netfilter(r3, 0x0, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x0, 0xc4b0}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 20m25.835831841s ago: executing program 1 (id=233): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) rt_sigqueueinfo(r0, 0x5, &(0x7f0000000840)={0x1a, 0xd1f, 0xfffffff9}) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) 20m24.676268074s ago: executing program 1 (id=234): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 20m22.613045895s ago: executing program 1 (id=236): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xa, 0xfffffffc}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) 20m6.565930095s ago: executing program 33 (id=236): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xa, 0xfffffffc}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) 18m51.210065905s ago: executing program 3 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r5, &(0x7f00000039c0)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 18m49.699533125s ago: executing program 3 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) pselect6(0x40, &(0x7f0000000040)={0x4, 0x2, 0x3, 0x90cb, 0x676c54ed, 0x7, 0xc7, 0x4}, 0x0, 0x0, &(0x7f00000001c0), 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 18m48.331068045s ago: executing program 3 (id=357): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xff19) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 18m46.722151059s ago: executing program 3 (id=360): syz_open_dev$vim2m(&(0x7f00000002c0), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) 18m45.056614724s ago: executing program 3 (id=362): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca6433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84222000000005335001db43a5c000000000000000024000000000000000000e75a812ded5297d531afbf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cbc30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a3830007462b5543f2c1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f401058690350000000000000000000000000025902e4a196fb169780000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad39e42a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e80b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d575a83f33e75011ed8b48a2f52a03ec09c277b596d5eb491b6b380533be019894e7fc1a414ae38f1f448a7f6423bb12169d6f41665c5edfa3b47acd4d23b826d15361528d7c5a27e1120ca9537c8c8cccbb3ae86a91894372120488b82ecad3538899e53a36844aa515ebdbb1cd69a33b584f8e1c796827703f3894c93dd5a77607cb6c1191b89b303c1381f3e6016bf6c0e710750b43eb9a8fd0d7d71492ac43baec4994396f0fdfe7cecf248b88ba9406c7b8e5ec4882d52a0cd4b9b1c8327e811e6ba2572ff5a59dc8c5c90464aa3942b4a256e8a513155fae5b3ebcc47d2e1a8768c2da219f47595f83239688ef9f55937c9e3447fb532cabc44bd5b805356cf12b89514"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r5}, 0x4) 18m43.602360871s ago: executing program 3 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @val=@netfilter}, 0x40) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7e20009058f"], 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) 18m28.484246402s ago: executing program 34 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @val=@netfilter}, 0x40) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7e20009058f"], 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) 15m41.844914856s ago: executing program 0 (id=558): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x3940, 0x0, &(0x7f0000010080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 15m40.869325916s ago: executing program 0 (id=560): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 15m34.913110238s ago: executing program 0 (id=567): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 15m32.670016152s ago: executing program 0 (id=569): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) sendmsg$inet_sctp(r7, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 15m30.774000103s ago: executing program 0 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x2, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f00000000c0), 0x4) mlockall(0x2) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r6, 0xc) 15m27.278953092s ago: executing program 0 (id=572): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb}) syz_open_dev$dri(0x0, 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 15m12.206063425s ago: executing program 35 (id=572): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb}) syz_open_dev$dri(0x0, 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 2m56.066871861s ago: executing program 2 (id=2626): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2m55.900951532s ago: executing program 2 (id=2629): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005cc0)=[{&(0x7f00000001c0)=ANY=[], 0x28}, {&(0x7f0000001640)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) 2m55.670257312s ago: executing program 2 (id=2634): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9000}, 0x4040004) 2m55.527104812s ago: executing program 2 (id=2637): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 2m55.460830971s ago: executing program 2 (id=2638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x200, 0xb81, 0x0, 0x0}) 2m54.614325255s ago: executing program 2 (id=2649): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000002840), 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 2m54.344659668s ago: executing program 36 (id=2649): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000002840), 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 19.099794114s ago: executing program 9 (id=4066): epoll_create1(0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdffd, 0x10800, 0x0, 0x2e9}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 18.996142218s ago: executing program 9 (id=4068): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r1 = fanotify_init(0x40, 0x40000) readv(r1, &(0x7f0000000940)=[{&(0x7f0000000280)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.789405592s ago: executing program 9 (id=4069): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x9, 0x4}}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x108, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x8001) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) 18.634318972s ago: executing program 9 (id=4070): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f00000001c0)='./file2\x00', 0x0) 18.622703189s ago: executing program 9 (id=4071): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='contention_end\x00', r1, 0x0, 0x3}, 0x18) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1132e88, 0x4) 16.656522764s ago: executing program 9 (id=4083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)='\x00\x00', 0x2}], 0x2}}], 0x2, 0x8004) 16.31565298s ago: executing program 37 (id=4083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)='\x00\x00', 0x2}], 0x2}}], 0x2, 0x8004) 3.89647041s ago: executing program 5 (id=4185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffffd}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 3.682827967s ago: executing program 5 (id=4186): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000f80)={0x0, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.677492917s ago: executing program 6 (id=4188): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1e8, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x4, 0x1, [0xa82, 0xe94, 0x4, 0x0, 0x4, 0x9, 0x5, 0x1ff, 0x0, 0x2, 0x8, 0x4, 0x3, 0x7, 0x80, 0x40], 0x6}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0xd, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[], 0x98) 3.339594419s ago: executing program 6 (id=4190): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.046365485s ago: executing program 6 (id=4195): r0 = epoll_create1(0x0) r1 = userfaultfd(0x1) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) 2.839281713s ago: executing program 8 (id=4197): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x7f8404caeb85699d}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.768690518s ago: executing program 6 (id=4200): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000dc0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xbc1, &(0x7f0000002b40)=ANY=[], 0x0) 2.666938832s ago: executing program 4 (id=4201): socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2.550283213s ago: executing program 8 (id=4202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}}, 0xf0}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000005902"]) 2.541343512s ago: executing program 6 (id=4203): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd}) 2.24644565s ago: executing program 6 (id=4206): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.154398214s ago: executing program 8 (id=4207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25990b000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) 2.071309563s ago: executing program 8 (id=4208): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2.030182731s ago: executing program 4 (id=4209): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) readv(r0, &(0x7f0000002300)=[{&(0x7f0000000080)=""/59, 0x3b}, {0x0}], 0x2) 1.85032137s ago: executing program 7 (id=4210): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xe8, 0x30, 0x7, 0x2, 0x4, 0x5, 0x6, 0xa, 0xa, 0x5, 0x0, 0x7, 0x2, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r1, 0x3}, 0x8) 1.815322697s ago: executing program 7 (id=4211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1.739783037s ago: executing program 7 (id=4212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000dc0)={0xa, 0x0, [{0x40000000, 0x0, 0x0, 0xfff, 0xe80, 0x9, 0xffff}, {0x0, 0x3, 0x3, 0x40, 0x6, 0xb6a, 0x6}, {0x7, 0x1, 0x1, 0x8, 0x6d, 0xa}, {0x2, 0x60, 0x7, 0x2, 0x9, 0x8, 0x800}, {0x40000000, 0x4, 0x2, 0x7, 0x1, 0x7f2b, 0x1}, {0x80000007, 0x8, 0x2, 0x9, 0x1, 0x6, 0x7}, {0x7, 0x5, 0x0, 0x3, 0x2}, {0x10000000f, 0x0, 0x2, 0xd0, 0x1, 0x6, 0x3}, {0xc0000000, 0xff, 0x6, 0x8001, 0x5, 0x9, 0xe7}, {0x6, 0x4, 0x4, 0x1, 0x800, 0x5, 0x34000000}]}) 1.709428677s ago: executing program 4 (id=4213): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1.470163089s ago: executing program 4 (id=4214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001b00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x5) r6 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) 1.35422537s ago: executing program 5 (id=4215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c0c4}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 1.264572914s ago: executing program 5 (id=4216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x62d2, &(0x7f00000004c0)={0x0, 0x108b896, 0x10, 0x0, 0x237}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0xffffd000) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000000)={0x80, 0xfffffffb, 0x5}, 0x0) 1.13194914s ago: executing program 5 (id=4217): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.13131301s ago: executing program 8 (id=4218): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8481, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002d40)={0x2020}, 0x2020) 336.064194ms ago: executing program 7 (id=4219): r0 = socket(0x1, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x80000005}) epoll_pwait(r1, &(0x7f0000000040), 0x6, 0x6, 0x0, 0x1e) 314.121526ms ago: executing program 7 (id=4220): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r0, 0x8) 189.55861ms ago: executing program 4 (id=4221): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) sendmmsg$unix(r3, &(0x7f0000008300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)='A', 0x1}], 0x1, 0x0, 0x0, 0x20040000}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)="cd2a", 0x2}], 0x1}}], 0x2, 0x10) 64.007734ms ago: executing program 7 (id=4222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='sys_exit\x00', r1}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 46.139186ms ago: executing program 8 (id=4223): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 580.9µs ago: executing program 5 (id=4224): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000500)={0x50, 0x4, 0x1d, {0x12, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x7, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}}) 0s ago: executing program 4 (id=4225): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x1, 0x1, 0x4, 0x5, 0x40, 0x9, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.258028][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.440924][ T7578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.440944][ T7578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.509412][ T5877] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1275.156484][ T5877] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1275.156511][ T5877] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1275.156535][ T5877] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.156552][ T5877] usb 6-1: config 220 has no interface number 2 [ 1275.156630][ T5877] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1275.156655][ T5877] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1275.156672][ T5877] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1275.156688][ T5877] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1275.169359][ T5877] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1275.169387][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.169405][ T5877] usb 6-1: Product: syz [ 1275.169417][ T5877] usb 6-1: Manufacturer: syz [ 1275.169430][ T5877] usb 6-1: SerialNumber: syz [ 1275.423632][T14846] netlink: 'syz.8.2487': attribute type 1 has an invalid length. [ 1275.521522][ T5877] usb 6-1: selecting invalid altsetting 0 [ 1275.529073][ T5877] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1275.529109][ T5877] uvcvideo 6-1:220.0: No valid video chain found. [ 1275.593316][ T5877] usb 6-1: selecting invalid altsetting 0 [ 1275.593354][ T5877] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1275.619292][ T5877] usb 6-1: USB disconnect, device number 2 [ 1276.485162][T14871] bridge0: port 3(vlan2) entered blocking state [ 1276.492201][T14871] bridge0: port 3(vlan2) entered disabled state [ 1276.492477][T14871] vlan2: entered allmulticast mode [ 1276.492491][T14871] bridge0: entered allmulticast mode [ 1277.432796][T14871] vlan2: left allmulticast mode [ 1277.432817][T14871] bridge0: left allmulticast mode [ 1277.793796][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2511'. [ 1278.101582][T14909] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1278.101636][T14909] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1278.101683][T14909] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1278.101730][T14909] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1278.101776][T14909] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1278.101820][T14909] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 1278.101865][T14909] comedi comedi3: 8255: I/O port conflict (0x11,4) [ 1278.101910][T14909] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 1278.101954][T14909] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1278.102000][T14909] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1278.102044][T14909] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1278.102098][T14909] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1278.102143][T14909] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1278.102187][T14909] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1278.102270][T14909] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1278.102315][T14909] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 1278.102359][T14909] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1278.102406][T14909] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1278.102532][T14909] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 1278.102623][T14909] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1278.102667][T14909] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 1278.102762][T14909] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1278.102807][T14909] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1279.677398][T14932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2527'. [ 1280.037996][T12821] Bluetooth: hci4: command 0x1003 tx timeout [ 1280.045489][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1280.436492][T14282] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1280.555074][T14968] macvlan2: entered promiscuous mode [ 1280.807060][T14282] usb 9-1: Using ep0 maxpacket: 32 [ 1281.658492][T14282] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.658524][T14282] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.658562][T14282] usb 9-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1281.658584][T14282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.765929][T14282] usb 9-1: config 0 descriptor?? [ 1282.294312][T14282] redragon 0003:0C45:760B.000A: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.8-1/input0 [ 1282.458967][T14282] usb 9-1: USB disconnect, device number 30 [ 1282.702113][T14982] fido_id[14982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1283.124128][T14998] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2556'. [ 1283.490683][T15006] nbd: must specify a size in bytes for the device [ 1285.127341][ T7570] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1285.127819][ T7570] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1285.144316][T14230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1285.274564][T14230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1285.364181][T14230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1288.646775][T15110] syz.6.2606 (15110): /proc/15109/oom_adj is deprecated, please use /proc/15109/oom_score_adj instead. [ 1289.472119][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1291.011175][ T5913] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1291.018958][T15164] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2630'. [ 1291.161104][ T5913] usb 7-1: Using ep0 maxpacket: 8 [ 1291.163896][ T5913] usb 7-1: config 0 has an invalid interface number: 88 but max is 3 [ 1291.163919][ T5913] usb 7-1: config 0 has an invalid interface number: 250 but max is 3 [ 1291.163937][ T5913] usb 7-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 1291.163955][ T5913] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 1291.163973][ T5913] usb 7-1: config 0 has no interface number 0 [ 1291.163988][ T5913] usb 7-1: config 0 has no interface number 1 [ 1291.164031][ T5913] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1291.164047][ T5913] usb 7-1: config 0 interface 250 has no altsetting 0 [ 1291.164077][ T5913] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 1291.164098][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.215083][ T5913] usb 7-1: config 0 descriptor?? [ 1291.458303][ T5913] usb 7-1: string descriptor 0 read error: -71 [ 1291.539417][ T5913] usb 7-1: USB disconnect, device number 2 [ 1291.564803][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2636'. [ 1291.872291][T15184] xt_limit: Overflow, try lower: 271964/0 [ 1293.946255][ T9660] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.946356][ T9660] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 1294.701370][T12821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1294.717856][T12821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1294.733598][T12821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1294.744504][T12821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1294.757382][T12821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1294.828091][ T9660] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.828124][ T9660] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 1294.988811][T15249] lo speed is unknown, defaulting to 1000 [ 1295.377707][ T9660] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.377741][ T9660] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 1295.712844][T15285] program syz.5.2688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1295.743662][ T9660] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.743689][ T9660] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 1296.039094][ T5877] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1296.200448][T15257] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1296.214053][T15249] chnl_net:caif_netlink_parms(): no params data found [ 1296.227054][ T5877] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1296.227079][ T5877] usb 9-1: config 1 has no interface number 0 [ 1296.227132][ T5877] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 1296.227154][ T5877] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1296.227172][ T5877] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1296.227193][ T5877] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 36, changing to 9 [ 1296.287842][ T5877] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1296.287871][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.287887][ T5877] usb 9-1: Product: syz [ 1296.287900][ T5877] usb 9-1: Manufacturer: syz [ 1296.287912][ T5877] usb 9-1: SerialNumber: syz [ 1296.326771][T15287] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1296.345104][ T5877] usb 9-1: Error in usbnet_get_endpoints (-22) [ 1296.362203][T15257] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1296.362231][T15257] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.362249][T15257] usb 8-1: Product: syz [ 1296.362262][T15257] usb 8-1: Manufacturer: syz [ 1296.362274][T15257] usb 8-1: SerialNumber: syz [ 1296.503886][T15257] usb 8-1: config 0 descriptor?? [ 1296.523241][T15257] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1296.563912][T15257] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1296.566525][ T5877] usb 9-1: USB disconnect, device number 31 [ 1296.568955][T15257] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1296.569002][T15257] usb 8-1: media controller created [ 1296.634907][T15257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1296.828246][ T5806] Bluetooth: hci2: command tx timeout [ 1296.884829][T15257] DVB: Unable to find symbol mt352_attach() [ 1297.019211][T15257] DVB: Unable to find symbol nxt6000_attach() [ 1297.019226][T15257] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1297.024817][T15257] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15 [ 1297.029369][T15257] dvb-usb: schedule remote query interval to 1000 msecs. [ 1297.029390][T15257] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1297.029405][T15257] dvb-usb: bulk message failed: -22 (7/0) [ 1297.029420][T15257] dvb-usb: bulk message failed: -22 (7/0) [ 1297.032505][T15257] usb 8-1: USB disconnect, device number 2 [ 1297.201182][T15325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1297.201199][T15325] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.201258][T15325] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.201290][T15325] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.245642][T15325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1297.362916][T15327] bond0: Caught tx_queue_len zero misconfig [ 1297.478546][T15257] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1298.633889][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1298.923052][ T5806] Bluetooth: hci2: command tx timeout [ 1299.430686][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2715'. [ 1299.712049][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.712135][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.814005][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2722'. [ 1300.926453][ T9660] bridge_slave_1: left allmulticast mode [ 1300.926480][ T9660] bridge_slave_1: left promiscuous mode [ 1300.926722][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.998644][ T5806] Bluetooth: hci2: command tx timeout [ 1301.014962][ T9660] bridge_slave_0: left allmulticast mode [ 1301.014988][ T9660] bridge_slave_0: left promiscuous mode [ 1301.015255][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.081931][T15387] netlink: 'syz.8.2728': attribute type 19 has an invalid length. [ 1303.066143][ T5806] Bluetooth: hci2: command tx timeout [ 1303.436300][ T9660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.495446][ T9660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.517523][ T9660] bond0 (unregistering): Released all slaves [ 1304.395414][ T9660] bond1 (unregistering): (slave veth3): Releasing active interface [ 1304.395464][ T9660] vlan2: entered promiscuous mode [ 1304.517199][ T9660] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1304.557721][ T9660] bond1 (unregistering): Released all slaves [ 1304.573047][ T9660] bond2 (unregistering): Released all slaves [ 1304.854407][T15249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.854544][T15249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.854777][T15249] bridge_slave_0: entered allmulticast mode [ 1304.862912][T15249] bridge_slave_0: entered promiscuous mode [ 1304.886836][T15249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.886964][T15249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.887195][T15249] bridge_slave_1: entered allmulticast mode [ 1304.896171][T15249] bridge_slave_1: entered promiscuous mode [ 1305.692859][T15249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.809420][T15249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.369084][T15449] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2755'. [ 1307.831502][T15475] program syz.7.2767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1307.918648][T15249] team0: Port device team_slave_0 added [ 1307.921305][T15459] bond0: option ad_select: unable to set because the bond device is up [ 1307.964713][T15249] team0: Port device team_slave_1 added [ 1308.773259][T15249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.773276][T15249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.773300][T15249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.800699][T15249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.800716][T15249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.800741][T15249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.911308][ T37] audit: type=1326 audit(6055082054.090:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15508 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1308.911356][ T37] audit: type=1326 audit(6055082054.090:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15508 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1308.927641][ T37] audit: type=1326 audit(6055082054.110:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15508 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1309.152676][ T9660] hsr_slave_0: left promiscuous mode [ 1309.192285][ T9660] hsr_slave_1: left promiscuous mode [ 1309.193320][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.193345][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.212066][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1309.265627][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.265654][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.362064][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 1309.366302][ T44] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1309.366327][ T44] usb 7-1: config 0 has no interface number 0 [ 1309.366372][ T44] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1309.366395][ T44] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1309.370278][ T44] usb 7-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1309.370304][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.370321][ T44] usb 7-1: Product: syz [ 1309.370334][ T44] usb 7-1: Manufacturer: syz [ 1309.370346][ T44] usb 7-1: SerialNumber: syz [ 1309.391549][ T44] usb 7-1: config 0 descriptor?? [ 1309.507470][ T44] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1309.601854][ T37] audit: type=1326 audit(6055082054.780:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15508 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1309.601907][ T37] audit: type=1326 audit(6055082054.780:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15508 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1309.663383][ T37] audit: type=1326 audit(6055082054.850:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15508 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1309.663432][ T37] audit: type=1326 audit(6055082054.850:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15508 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1309.668642][ T9660] batadv0: left allmulticast mode [ 1309.669507][ T9660] batadv0: left promiscuous mode [ 1309.685713][ T9660] veth1_macvtap: left promiscuous mode [ 1309.685821][ T9660] veth0_macvtap: left promiscuous mode [ 1309.686186][ T9660] veth1_vlan: left promiscuous mode [ 1309.686379][ T9660] veth0_vlan: left promiscuous mode [ 1309.834718][ T44] usb 7-1: USB disconnect, device number 3 [ 1310.073866][T15526] udevd[15526]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1311.191131][T14282] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1311.362218][T14282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1311.362249][T14282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.362276][T14282] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1311.362288][T14282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.366000][T14282] usb 7-1: config 0 descriptor?? [ 1311.415841][T14282] hub 7-1:0.0: USB hub found [ 1311.614251][T14282] hub 7-1:0.0: 1 port detected [ 1312.020360][T14282] usb 7-1: USB disconnect, device number 4 [ 1314.009661][ T5884] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1314.160725][ T9660] team0 (unregistering): Port device team_slave_1 removed [ 1314.199820][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 1314.204073][ T5884] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1314.204097][ T5884] usb 7-1: config 0 has no interface number 0 [ 1314.206394][ T5884] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1314.206417][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.206427][ T5884] usb 7-1: Product: syz [ 1314.206434][ T5884] usb 7-1: Manufacturer: syz [ 1314.206441][ T5884] usb 7-1: SerialNumber: syz [ 1314.214209][ T5884] usb 7-1: config 0 descriptor?? [ 1314.297807][ T5884] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1314.297846][ T5884] usb 7-1: selecting invalid altsetting 1 [ 1314.297860][ T5884] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1314.331784][ T5884] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1314.332020][ T5884] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1314.332547][ T5884] usb 7-1: media controller created [ 1314.393859][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1314.511660][ T9660] team0 (unregistering): Port device team_slave_0 removed [ 1315.478380][ T5884] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1315.478424][ T5884] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1315.489130][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1315.538066][ T5884] usb 7-1: USB disconnect, device number 5 [ 1315.699177][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1317.458765][T15513] tipc: Started in network mode [ 1317.458793][T15513] tipc: Node identity ff, cluster identity 4711 [ 1317.458835][T15513] tipc: Enabling of bearer rejected, failed to enable media [ 1317.851495][T13255] team0: Port device syz_tun removed [ 1317.931511][T15257] lo speed is unknown, defaulting to 1000 [ 1317.931540][T15257] infiniband syz2: ib_query_port failed (-19) [ 1318.542538][T15249] hsr_slave_0: entered promiscuous mode [ 1318.543774][T15249] hsr_slave_1: entered promiscuous mode [ 1318.544658][T15249] debugfs: 'hsr0' already exists in 'hsr' [ 1318.544681][T15249] Cannot create hsr debugfs directory [ 1319.137310][T15586] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2807'. [ 1319.505021][ T6644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1319.552199][ T6644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1319.569817][ T6644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1319.629360][ T6644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1319.631459][ T6644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1319.810330][ T9660] IPVS: stop unused estimator thread 0... [ 1320.341635][T15619] netpci0: tun_chr_ioctl cmd 1074025672 [ 1320.341657][T15619] netpci0: ignored: set checksum enabled [ 1320.526439][ T5877] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1320.679553][ T9660] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.695616][ T5877] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1320.695673][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.698261][ T5877] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1320.698288][ T5877] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1320.698304][ T5877] usb 6-1: Manufacturer: syz [ 1320.743150][ T5877] usb 6-1: config 0 descriptor?? [ 1320.756463][ T5913] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1320.888630][ T5877] rc_core: IR keymap rc-hauppauge not found [ 1320.888650][ T5877] Registered IR keymap rc-empty [ 1320.890402][ T5877] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1320.893716][ T5877] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 1320.916342][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 1320.918584][ T5913] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 1320.918606][ T5913] usb 7-1: config 0 has no interface number 0 [ 1320.918649][ T5913] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1320.918671][ T5913] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1320.918692][ T5913] usb 7-1: config 0 interface 126 has no altsetting 0 [ 1320.921638][ T5913] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1320.921661][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.921678][ T5913] usb 7-1: Product: syz [ 1320.921690][ T5913] usb 7-1: Manufacturer: syz [ 1320.921702][ T5913] usb 7-1: SerialNumber: syz [ 1320.948052][ T5913] usb 7-1: config 0 descriptor?? [ 1320.949073][T15625] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1320.949249][T15625] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1321.052368][ T5877] usb 6-1: USB disconnect, device number 3 [ 1321.099400][T15630] wireguard0: entered promiscuous mode [ 1321.099426][T15630] wireguard0: entered allmulticast mode [ 1321.298573][T12821] Bluetooth: hci2: command 0x0405 tx timeout [ 1321.393039][ T5913] ir_usb 7-1:0.126: IR Dongle converter detected [ 1321.531791][ T9660] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.583820][T15249] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1321.591373][ T5913] usb 7-1: IRDA class descriptor not found, device not bound [ 1321.630620][T15249] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1321.804465][T12821] Bluetooth: hci4: command tx timeout [ 1321.838002][ T5913] usb 7-1: USB disconnect, device number 6 [ 1322.086405][ T9660] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.191464][T15249] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1322.283815][T15249] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1322.632645][ T9660] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.138224][T15596] chnl_net:caif_netlink_parms(): no params data found [ 1323.854730][T12821] Bluetooth: hci4: command tx timeout [ 1325.124277][ T5913] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1325.276703][ T5913] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1325.276723][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.280899][ T5913] usb 6-1: config 0 descriptor?? [ 1325.340660][ T5913] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1325.756893][ T5913] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 1325.936466][T12821] Bluetooth: hci4: command tx timeout [ 1326.158305][ T5913] gspca_cpia1: usb_control_msg 02, error -71 [ 1326.163880][ T5913] gspca_cpia1: usb_control_msg 05, error -71 [ 1326.163908][ T5913] cpia1 6-1:0.0: unexpected systemstate: 00 [ 1326.167756][ T5913] usb 6-1: USB disconnect, device number 4 [ 1326.516396][ T9660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.575221][ T9660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.615927][ T9660] bond0 (unregistering): Released all slaves [ 1328.012985][T12821] Bluetooth: hci4: command tx timeout [ 1328.272662][T15257] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1328.452524][T15257] usb 6-1: Using ep0 maxpacket: 16 [ 1328.468988][T15257] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1328.469004][T15257] usb 6-1: config 0 has no interface number 0 [ 1328.469079][T15257] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1328.469103][T15257] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1328.471084][T15257] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1328.471109][T15257] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1328.471126][T15257] usb 6-1: Product: syz [ 1328.471139][T15257] usb 6-1: SerialNumber: syz [ 1328.538070][T15257] usb 6-1: config 0 descriptor?? [ 1328.558789][T15257] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1328.573578][T15257] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input17 [ 1328.740715][T15596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.743125][T15596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.743313][T15596] bridge_slave_0: entered allmulticast mode [ 1328.769012][T15596] bridge_slave_0: entered promiscuous mode [ 1328.802501][T15596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.802643][T15596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.802880][T15596] bridge_slave_1: entered allmulticast mode [ 1328.806924][T15596] bridge_slave_1: entered promiscuous mode [ 1328.924361][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.930750][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.930999][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.931235][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.931469][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.931698][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.931938][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.932173][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.932404][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.932645][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1328.950215][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1328.950230][ T5884] usb 6-1: USB disconnect, device number 5 [ 1329.059174][ T5884] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1329.289481][T15596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.295300][T15596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.492586][T15761] sp0: Synchronizing with TNC [ 1329.716198][T15596] team0: Port device team_slave_0 added [ 1329.719546][T15596] team0: Port device team_slave_1 added [ 1329.728684][T15249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.901940][T15257] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1330.051665][T15257] usb 6-1: Using ep0 maxpacket: 8 [ 1330.055950][T15257] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1330.055973][T15257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.055983][T15257] usb 6-1: Product: syz [ 1330.055990][T15257] usb 6-1: Manufacturer: syz [ 1330.055997][T15257] usb 6-1: SerialNumber: syz [ 1330.060564][T15257] usb 6-1: config 0 descriptor?? [ 1330.106317][T15257] gspca_main: se401-2.14.0 probing 047d:5003 [ 1330.490029][T15596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.490046][T15596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.490071][T15596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.542469][T15596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.542480][T15596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.542495][T15596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.727192][T15257] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 1330.930867][T15257] usb 6-1: USB disconnect, device number 6 [ 1332.239181][T15796] netlink: 'syz.5.2875': attribute type 5 has an invalid length. [ 1332.281731][T15798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2876'. [ 1332.316925][T15596] hsr_slave_0: entered promiscuous mode [ 1332.318253][T15596] hsr_slave_1: entered promiscuous mode [ 1332.319196][T15596] debugfs: 'hsr0' already exists in 'hsr' [ 1332.319219][T15596] Cannot create hsr debugfs directory [ 1332.353341][T15249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.695418][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.695637][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.891488][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.891727][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.039111][ T5972] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1335.208009][ T5972] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1335.208037][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.208055][ T5972] usb 7-1: Product: syz [ 1335.208067][ T5972] usb 7-1: Manufacturer: syz [ 1335.208080][ T5972] usb 7-1: SerialNumber: syz [ 1336.140678][ T5972] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1336.140742][ T5972] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1336.142525][ T5972] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1336.216439][ T5972] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1336.253297][ T5972] usb 7-1: USB disconnect, device number 7 [ 1336.448564][T15249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1336.832340][T15596] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1337.027801][T15596] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1337.154061][T15596] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1337.296575][T15596] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1337.609487][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 1337.615129][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 1337.912884][T15249] veth0_vlan: entered promiscuous mode [ 1337.985066][T15249] veth1_vlan: entered promiscuous mode [ 1338.184258][T15249] veth0_macvtap: entered promiscuous mode [ 1338.222458][T15249] veth1_macvtap: entered promiscuous mode [ 1338.342498][T15596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.429457][T15249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.506480][T15249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.604551][T15596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.604880][ T3601] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.614201][ T3601] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.617465][ T3601] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.620679][ T1133] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.648814][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.648972][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.685124][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.685264][ T7566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.542437][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.542457][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.757340][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.757358][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.086674][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1340.142479][T15973] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1340.142495][T15973] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1340.142506][T15973] overlayfs: missing 'lowerdir' [ 1340.257209][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1340.257234][ T10] usb 6-1: config 0 has no interface number 0 [ 1340.259639][ T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1340.259664][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.259681][ T10] usb 6-1: Product: syz [ 1340.259694][ T10] usb 6-1: Manufacturer: syz [ 1340.259707][ T10] usb 6-1: SerialNumber: syz [ 1340.285281][ T10] usb 6-1: config 0 descriptor?? [ 1340.412662][T15596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.530651][ T10] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1340.583566][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1340.583989][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1340.584042][ T10] usb 6-1: media controller created [ 1340.720032][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1340.893488][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1341.116305][ T10] usb 6-1: USB disconnect, device number 7 [ 1341.276515][ T5877] hid_parser_main: 74 callbacks suppressed [ 1341.276536][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276566][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276590][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276612][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276635][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276657][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276681][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276702][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276724][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.276749][ T5877] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1341.384197][ T5877] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1341.617345][T16001] fido_id[16001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1341.728446][T15596] veth0_vlan: entered promiscuous mode [ 1341.793241][T15596] veth1_vlan: entered promiscuous mode [ 1342.040510][T15596] veth0_macvtap: entered promiscuous mode [ 1342.061924][T15596] veth1_macvtap: entered promiscuous mode [ 1342.210649][T15596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.311777][T15596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.454588][ T3485] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.473934][ T3485] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.498253][ T7566] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.555340][ T7566] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.940963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.118992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.558280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.922358][T16044] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1344.644471][T12821] Bluetooth: hci5: command 0x1003 tx timeout [ 1344.646575][ T5806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1344.800029][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.800049][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.135466][T16058] macsec1: entered allmulticast mode [ 1345.135488][T16058] macsec0: entered allmulticast mode [ 1345.135499][T16058] veth1_macvtap: entered allmulticast mode [ 1345.159353][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.159372][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.258552][T16063] netem: change failed [ 1345.632183][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.371139][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.995038][T16098] binder: 16096:16098 ioctl c00c620f 0 returned -14 [ 1348.024565][T16139] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2987'. [ 1348.824097][T16154] loop2: detected capacity change from 0 to 3 [ 1349.273965][T16154] Dev loop2: unable to read RDB block 3 [ 1349.274000][T16154] loop2: AHDI p1 p2 p3 [ 1349.274032][T16154] loop2: partition table partially beyond EOD, truncated [ 1349.309794][T16154] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1349.309822][T16154] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1349.421678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.575701][T14282] kernel read not supported for file /dsp1 (pid: 14282 comm: kworker/1:0) [ 1351.600522][T16213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.603791][T16213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.139244][T16213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.157735][T16213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.379501][T16213] veth1_macvtap: left allmulticast mode [ 1353.175317][T16213] macsec0: left allmulticast mode [ 1353.227556][ T7564] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.405640][ T7564] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.406217][ T7564] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.406254][ T7564] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.804082][T14230] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1353.982246][T14230] usb 7-1: config 0 has an invalid interface number: 104 but max is 0 [ 1353.982279][T14230] usb 7-1: config 0 has no interface number 0 [ 1353.982309][T14230] usb 7-1: config 0 interface 104 has no altsetting 0 [ 1353.995513][T14230] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1353.995543][T14230] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.995559][T14230] usb 7-1: Product: syz [ 1353.995572][T14230] usb 7-1: Manufacturer: syz [ 1353.995584][T14230] usb 7-1: SerialNumber: syz [ 1354.039796][T14230] usb 7-1: config 0 descriptor?? [ 1354.080399][T14230] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1354.135929][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3038'. [ 1354.206426][T16267] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3041'. [ 1354.226204][T16269] program syz.7.3037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1354.261983][T14230] gspca_vc032x: reg_r err -71 [ 1354.262027][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262037][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262046][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262054][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262062][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262071][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262079][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262086][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262094][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262102][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262109][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262117][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262126][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262133][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262141][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262149][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262157][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262165][T14230] gspca_vc032x: I2c Bus Busy Wait 00 [ 1354.262176][T14230] gspca_vc032x: Unknown sensor... [ 1354.262261][T14230] vc032x 7-1:0.104: probe with driver vc032x failed with error -22 [ 1354.290687][T16271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3041'. [ 1354.348090][T14230] usb 7-1: USB disconnect, device number 8 [ 1356.790014][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3055'. [ 1357.043339][T16340] gtp0: entered promiscuous mode [ 1357.043364][T16340] gtp0: entered allmulticast mode [ 1357.490200][T16355] program syz.8.3063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1357.991573][T16378] tun0: tun_chr_ioctl cmd 1074025681 [ 1358.882662][T16415] input: syz1 as /devices/virtual/input/input19 [ 1359.235179][T14282] kernel write not supported for file /adsp1 (pid: 14282 comm: kworker/1:0) [ 1359.462774][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3099'. [ 1359.465227][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3099'. [ 1359.668959][T16445] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3105'. [ 1359.878994][T16454] netlink: 'syz.5.3108': attribute type 11 has an invalid length. [ 1359.879015][T16454] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.3108'. [ 1360.446806][T14230] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1360.550979][T16478] veth0_vlan: entered allmulticast mode [ 1360.602472][T16478] veth0_vlan: left promiscuous mode [ 1360.603679][T16478] veth0_vlan: entered promiscuous mode [ 1360.606648][T14230] usb 10-1: Using ep0 maxpacket: 32 [ 1360.609261][T14230] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1360.609284][T14230] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1360.609303][T14230] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1360.609321][T14230] usb 10-1: config 1 has no interface number 0 [ 1360.609382][T14230] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1360.609407][T14230] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1360.609445][T14230] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1360.609465][T14230] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.691442][T14230] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1360.922089][T14230] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1361.936938][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.937024][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.023211][T16490] netlink: 19 bytes leftover after parsing attributes in process `syz.8.3125'. [ 1362.035879][ T5973] snd_usb_pod 10-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1362.254180][ T5886] usb 10-1: USB disconnect, device number 2 [ 1362.257451][ T5886] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1363.369743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.419949][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.837332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.171430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.340782][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.813880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.966267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.160856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.639056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.722890][ T5884] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1367.875585][ T5884] usb 10-1: Using ep0 maxpacket: 16 [ 1367.942785][ T5884] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.942815][ T5884] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.942835][ T5884] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1367.942867][ T5884] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1367.942887][ T5884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.013977][ T5884] usb 10-1: config 0 descriptor?? [ 1368.085917][T16642] netlink: 'syz.6.3189': attribute type 9 has an invalid length. [ 1368.312624][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 1368.497320][ T5884] nzxt-smart2 0003:1E71:2009.000C: item fetching failed at offset 0/5 [ 1368.498182][ T5884] nzxt-smart2 0003:1E71:2009.000C: probe with driver nzxt-smart2 failed with error -22 [ 1368.692865][ T5884] usb 10-1: USB disconnect, device number 3 [ 1369.829452][ T37] audit: type=1326 audit(6055082115.040:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16673 comm="syz.6.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1369.830017][ T37] audit: type=1326 audit(6055082115.040:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16673 comm="syz.6.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1369.830284][ T37] audit: type=1326 audit(6055082115.040:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16673 comm="syz.6.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1370.550319][T16701] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3216'. [ 1372.850272][T15813] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1373.004075][T15813] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 1373.004101][T15813] usb 10-1: config 0 has no interface number 0 [ 1373.017092][T15813] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1373.017121][T15813] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.017138][T15813] usb 10-1: Product: syz [ 1373.017151][T15813] usb 10-1: Manufacturer: syz [ 1373.017163][T15813] usb 10-1: SerialNumber: syz [ 1373.039361][T15813] usb 10-1: config 0 descriptor?? [ 1373.074420][T14230] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1373.220078][T14230] usb 6-1: Using ep0 maxpacket: 16 [ 1373.228294][T14230] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1373.228374][T14230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.228393][T14230] usb 6-1: Product: syz [ 1373.228405][T14230] usb 6-1: Manufacturer: syz [ 1373.228418][T14230] usb 6-1: SerialNumber: syz [ 1373.309692][T14230] usb 6-1: config 0 descriptor?? [ 1373.350103][T14230] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1373.705847][T15813] asix 10-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1373.706318][T15813] asix 10-1:0.251: probe with driver asix failed with error -524 [ 1373.956835][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3287'. [ 1373.964765][ T10] usb 10-1: USB disconnect, device number 4 [ 1374.136814][T14230] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 1374.201178][T14230] usb 6-1: USB disconnect, device number 8 [ 1374.241996][ T37] audit: type=1326 audit(6055082119.443:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1374.242288][ T37] audit: type=1326 audit(6055082119.453:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1374.245496][ T37] audit: type=1326 audit(6055082119.453:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1374.245754][ T37] audit: type=1326 audit(6055082119.453:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1374.246193][ T37] audit: type=1326 audit(6055082119.453:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1374.246452][ T37] audit: type=1326 audit(6055082119.453:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1374.246824][ T37] audit: type=1326 audit(6055082119.453:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16866 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1374.523976][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3296'. [ 1374.561927][T16881] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3297'. [ 1375.519687][T16912] ptrace attach of "./syz-executor exec"[15596] was attempted by "\x09   [ 1376.387557][T16947] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1376.886336][T16949] ipvlan2: entered allmulticast mode [ 1376.886882][T16949] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1377.052571][T16966] program syz.6.3337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1377.140166][T16970] program syz.5.3338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1377.539090][T16984] netlink: 'syz.6.3345': attribute type 4 has an invalid length. [ 1377.749772][T16994] netlink: 47 bytes leftover after parsing attributes in process `syz.5.3350'. [ 1377.749785][T16994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3350'. [ 1377.749797][T16994] netlink: 47 bytes leftover after parsing attributes in process `syz.5.3350'. [ 1378.379663][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3364'. [ 1378.777272][ T5886] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1378.815163][ T10] kernel read not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 1378.943220][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.943246][ T5886] usb 9-1: config 0 has no interfaces? [ 1378.966340][ T5886] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1378.966365][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.966380][ T5886] usb 9-1: Product: syz [ 1378.966392][ T5886] usb 9-1: Manufacturer: syz [ 1378.966403][ T5886] usb 9-1: SerialNumber: syz [ 1379.018409][ T5886] usb 9-1: config 0 descriptor?? [ 1379.071826][T17057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.144797][T17062] loop6: detected capacity change from 0 to 515899392 [ 1379.230988][T17031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.231538][T17031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.235924][ T5972] usb 9-1: USB disconnect, device number 32 [ 1379.357030][ T5886] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1379.519202][ T5886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.519268][ T5886] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1379.519280][ T5886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.522327][ T5886] usb 10-1: config 0 descriptor?? [ 1379.709295][ T5884] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1379.850367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.876833][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 1379.892588][ T5884] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1379.892613][ T5884] usb 7-1: config 0 has no interface number 0 [ 1379.892720][ T5884] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1379.892745][ T5884] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1379.952440][ T5886] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 1379.958988][ T5884] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1379.959010][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.959025][ T5884] usb 7-1: Product: syz [ 1379.959037][ T5884] usb 7-1: Manufacturer: syz [ 1379.959048][ T5884] usb 7-1: SerialNumber: syz [ 1379.978556][ T5884] usb 7-1: config 0 descriptor?? [ 1380.038978][ T5886] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.000D/input/input20 [ 1380.296537][ T5972] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1380.339102][ T5886] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1380.358591][ T5886] usb 10-1: USB disconnect, device number 5 [ 1380.421148][ T5884] radio-si470x 7-1:0.35: DeviceID=0x8249 ChipID=0x5d00 [ 1380.446610][ T5972] usb 6-1: Using ep0 maxpacket: 16 [ 1380.448950][ T5972] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.448977][ T5972] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.448998][ T5972] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1380.449022][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1380.449054][ T5972] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1380.449073][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.533193][ T5972] usb 6-1: config 0 descriptor?? [ 1380.811448][ T5884] radio-si470x 7-1:0.35: software version 130, hardware version 73 [ 1381.342843][ T5884] radio-si470x 7-1:0.35: si470x_set_report: usb_control_msg returned -110 [ 1381.348733][ T5884] radio-si470x 7-1:0.35: submitting int urb failed (-90) [ 1381.357788][ T5884] radio-si470x 7-1:0.35: si470x_set_report: usb_control_msg returned -32 [ 1381.551964][ T5884] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -22 [ 1381.590896][ T5884] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 1381.758579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1381.767495][ T5972] hid (null): report_id 3702638396 is invalid [ 1381.861133][T15813] usb 7-1: USB disconnect, device number 9 [ 1381.971004][ T5972] usb 6-1: USB disconnect, device number 9 [ 1382.382004][T17131] netlink: 'syz.6.3408': attribute type 2 has an invalid length. [ 1382.422643][T17133] netlink: 'syz.7.3409': attribute type 25 has an invalid length. [ 1382.422663][T17133] netlink: 'syz.7.3409': attribute type 7 has an invalid length. [ 1382.422674][T17133] netlink: 'syz.7.3409': attribute type 1 has an invalid length. [ 1382.422686][T17133] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3409'. [ 1382.429198][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.495422][T16329] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1382.532979][T17137] program syz.7.3411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1382.647238][T16329] usb 9-1: Using ep0 maxpacket: 32 [ 1382.651759][T16329] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.651811][T16329] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1382.651851][T16329] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1382.651870][T16329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.709706][T16329] usb 9-1: config 0 descriptor?? [ 1382.723370][T16329] hub 9-1:0.0: bad descriptor, ignoring hub [ 1382.723408][T16329] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1383.025595][T16329] usb 9-1: USB disconnect, device number 33 [ 1383.867311][T17178] vxcan1: entered allmulticast mode [ 1383.875738][T17178] vxcan1: left allmulticast mode [ 1385.163020][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3449'. [ 1385.291052][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3452'. [ 1385.370654][T17231] misc userio: Begin command sent, but we're already running [ 1386.007217][T15813] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1386.153760][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1386.173549][T15813] usb 10-1: Using ep0 maxpacket: 16 [ 1386.175931][T15813] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1386.178286][T15813] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1386.178309][T15813] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.178327][T15813] usb 10-1: Product: syz [ 1386.178339][T15813] usb 10-1: Manufacturer: syz [ 1386.178351][T15813] usb 10-1: SerialNumber: syz [ 1386.187630][T15813] usb 10-1: config 0 descriptor?? [ 1386.254539][T15813] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1386.254581][T15813] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1386.308866][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1386.315647][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1386.315745][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1386.315766][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.342904][ T10] usb 6-1: config 0 descriptor?? [ 1386.343665][ T5972] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1387.542464][ T5972] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 1387.542491][ T5972] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1387.542510][ T5972] usb 9-1: config 150 has no interface number 0 [ 1387.542610][ T5972] usb 9-1: config 150 interface 204 has no altsetting 0 [ 1387.567638][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1387.679433][ T5972] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1387.680152][ T5972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.680173][ T5972] usb 9-1: Product: syz [ 1387.680187][ T5972] usb 9-1: Manufacturer: syz [ 1387.680200][ T5972] usb 9-1: SerialNumber: syz [ 1387.720402][ T10] usb 6-1: USB disconnect, device number 10 [ 1387.918372][T15813] em28xx 10-1:0.0: chip ID is em2710/2820 [ 1388.019848][ T5972] xr_serial 9-1:150.204: skipping garbage [ 1388.019906][ T5972] xr_serial 9-1:150.204: xr_serial converter detected [ 1388.362126][T15813] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1388.362155][T15813] em28xx 10-1:0.0: board has no eeprom [ 1388.453507][T15813] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1388.453547][T15813] em28xx 10-1:0.0: dvb set to bulk mode. [ 1388.455183][ T5973] em28xx 10-1:0.0: Binding DVB extension [ 1388.587232][ T5972] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1388.587290][ T5972] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1388.609720][T15813] usb 10-1: USB disconnect, device number 6 [ 1388.618286][ T5972] usb 9-1: USB disconnect, device number 34 [ 1388.626144][T15813] em28xx 10-1:0.0: Disconnecting em28xx [ 1388.638227][ T5972] xr_serial 9-1:150.204: device disconnected [ 1388.780253][ T5973] em28xx 10-1:0.0: Registering input extension [ 1388.795442][T15813] em28xx 10-1:0.0: Closing input extension [ 1388.958088][T15813] em28xx 10-1:0.0: Freeing device [ 1389.035744][T17287] sp0: Synchronizing with TNC [ 1389.140818][T17291] netlink: 'syz.9.3480': attribute type 3 has an invalid length. [ 1389.140839][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3480'. [ 1389.554701][T17313] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.3490'. [ 1389.580821][T17315] netlink: 'syz.9.3491': attribute type 10 has an invalid length. [ 1389.631689][T17315] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1389.762608][ T5972] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1389.915373][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 1389.932775][ T5972] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1389.932803][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.932827][ T5972] usb 6-1: Product: syz [ 1389.932840][ T5972] usb 6-1: Manufacturer: syz [ 1389.932852][ T5972] usb 6-1: SerialNumber: syz [ 1389.944724][ T5972] usb 6-1: config 0 descriptor?? [ 1389.966281][ T5972] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1389.966331][ T5972] usb 6-1: setting power ON [ 1389.966350][ T5972] dvb-usb: bulk message failed: -22 (2/0) [ 1389.977412][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1389.978182][ T5972] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1389.978233][ T5972] usb 6-1: media controller created [ 1390.070258][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1390.131365][ T5972] usb 6-1: selecting invalid altsetting 6 [ 1390.131386][ T5972] usb 6-1: digital interface selection failed (-22) [ 1390.131401][ T5972] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1390.135563][ T5972] usb 6-1: setting power OFF [ 1390.135584][ T5972] dvb-usb: bulk message failed: -22 (2/0) [ 1390.135600][ T5972] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1390.135611][ T5972] (NULL device *): no alternate interface [ 1390.188023][T17311] dvb-usb: bulk message failed: -22 (3/0) [ 1390.188048][T17311] dvb-usb: bulk message failed: -22 (7/0) [ 1390.189301][T17311] dvb-usb: bulk message failed: -22 (3/0) [ 1390.257514][ T5972] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1390.268879][ T5972] usb 6-1: USB disconnect, device number 11 [ 1390.312862][T17332] netlink: 'syz.6.3499': attribute type 2 has an invalid length. [ 1391.101243][T17361] ip6gre1: entered promiscuous mode [ 1391.101268][T17361] ip6gre1: entered allmulticast mode [ 1391.105073][ T7568] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1391.105459][ T7568] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1391.141239][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1391.211251][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1391.566593][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1392.874473][T17396] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3526'. [ 1392.874496][T17396] netlink: 59 bytes leftover after parsing attributes in process `syz.8.3526'. [ 1392.874510][T17396] netlink: 59 bytes leftover after parsing attributes in process `syz.8.3526'. [ 1395.110539][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1396.120497][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3545'. [ 1396.887559][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1396.887578][ T37] audit: type=1326 audit(6055082142.104:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17452 comm="syz.9.3551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd00c42f749 code=0x0 [ 1398.317516][T15813] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1399.128241][ T37] audit: type=1326 audit(6055082144.355:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17468 comm="syz.7.3556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82f3a1f749 code=0x0 [ 1399.399928][T15813] usb 6-1: Using ep0 maxpacket: 32 [ 1399.405378][T15813] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1399.405404][T15813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.424150][T15813] usb 6-1: config 0 descriptor?? [ 1399.645598][T15813] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1399.654483][T15813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1399.665628][T15813] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1399.665684][T15813] usb 6-1: media controller created [ 1399.813190][T15813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1399.936798][T15813] az6027: usb out operation failed. (-71) [ 1399.954107][T15813] az6027: usb out operation failed. (-71) [ 1399.954132][T15813] stb0899_attach: Driver disabled by Kconfig [ 1399.954142][T15813] az6027: no front-end attached [ 1399.954142][T15813] [ 1399.955068][T15813] az6027: usb out operation failed. (-71) [ 1399.955082][T15813] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1399.960395][T15813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 1399.968038][T15813] dvb-usb: schedule remote query interval to 400 msecs. [ 1399.968057][T15813] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1399.977564][T15813] usb 6-1: USB disconnect, device number 12 [ 1400.292830][T15813] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1402.212073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.372226][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.541457][T17536] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.3585'. [ 1402.558278][T17532] blkio.reset_stats is deprecated [ 1403.157392][T17557] netlink: 'syz.6.3593': attribute type 6 has an invalid length. [ 1403.335108][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1403.405357][T16329] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1403.575060][T16329] usb 10-1: Using ep0 maxpacket: 16 [ 1403.577384][T16329] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1403.577407][T16329] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.577424][T16329] usb 10-1: config 0 has no interface number 0 [ 1403.580079][T16329] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1403.580104][T16329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.580121][T16329] usb 10-1: Product: syz [ 1403.580133][T16329] usb 10-1: Manufacturer: syz [ 1403.580145][T16329] usb 10-1: SerialNumber: syz [ 1403.666650][T16329] usb 10-1: config 0 descriptor?? [ 1403.672678][T16329] uvcvideo 10-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1403.672706][T16329] uvcvideo 10-1:0.105: No valid video chain found. [ 1403.913647][T15813] usb 10-1: USB disconnect, device number 7 [ 1404.555622][T15813] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1404.704339][T15813] usb 9-1: Using ep0 maxpacket: 16 [ 1404.708419][T15813] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 1404.708444][T15813] usb 9-1: config 0 has no interface number 0 [ 1404.708490][T15813] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1404.708513][T15813] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1404.713005][T15813] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1404.713031][T15813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.713049][T15813] usb 9-1: Product: syz [ 1404.713061][T15813] usb 9-1: Manufacturer: syz [ 1404.713074][T15813] usb 9-1: SerialNumber: syz [ 1404.721787][T15813] usb 9-1: config 0 descriptor?? [ 1404.722831][T17586] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1404.723029][T17586] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1404.857648][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.046331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.500071][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.859486][T17586] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1405.859611][T17586] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1406.417517][T17610] input: syz0 as /devices/virtual/input/input24 [ 1406.478341][T15813] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1406.478368][T15813] asix 9-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1406.478659][T15813] asix 9-1:0.251: probe with driver asix failed with error -71 [ 1406.493697][T15813] usb 9-1: USB disconnect, device number 35 [ 1406.714596][T16329] kernel write not supported for file /comedi4 (pid: 16329 comm: kworker/1:3) [ 1407.632841][ T5973] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1407.795278][ T5973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.795302][ T5973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1407.795321][ T5973] usb 6-1: config 1 has no interface number 0 [ 1407.795369][ T5973] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.795393][ T5973] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1407.799463][ T5973] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1407.799490][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.799508][ T5973] usb 6-1: Product: syz [ 1407.799521][ T5973] usb 6-1: Manufacturer: syz [ 1407.799533][ T5973] usb 6-1: SerialNumber: syz [ 1408.684710][ T5973] cdc_ncm 6-1:1.1: SET_NTB_FORMAT failed [ 1408.705322][ T5973] cdc_ncm 6-1:1.1: bind() failure [ 1408.743540][ T5973] usb 6-1: USB disconnect, device number 13 [ 1408.856941][T17688] loop5: detected capacity change from 0 to 7 [ 1408.942733][T17688] Dev loop5: unable to read RDB block 7 [ 1408.942788][T17688] loop5: unable to read partition table [ 1408.943014][T17688] loop5: partition table beyond EOD, truncated [ 1408.943030][T17688] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 1409.713926][T17733] netlink: 400 bytes leftover after parsing attributes in process `syz.8.3670'. [ 1409.741827][ T5884] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1409.901702][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1409.910880][ T5884] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1409.910908][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.910926][ T5884] usb 6-1: Product: syz [ 1409.910939][ T5884] usb 6-1: Manufacturer: syz [ 1409.910951][ T5884] usb 6-1: SerialNumber: syz [ 1409.958138][T17743] pim6reg1: entered allmulticast mode [ 1409.961890][ T5884] usb 6-1: config 0 descriptor?? [ 1409.983104][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 1410.462105][ T5884] gspca_se401: Bayer format not supported! [ 1410.786619][T15813] usb 6-1: USB disconnect, device number 14 [ 1411.167262][ T37] audit: type=1326 audit(6055082156.401:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17770 comm="syz.6.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1411.167850][ T37] audit: type=1326 audit(6055082156.401:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17770 comm="syz.6.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1411.226960][ T37] audit: type=1326 audit(6055082156.461:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17770 comm="syz.6.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1411.227498][ T37] audit: type=1326 audit(6055082156.461:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17770 comm="syz.6.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1411.227542][ T37] audit: type=1326 audit(6055082156.461:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17770 comm="syz.6.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1412.380478][ T5884] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 1412.534889][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1412.534936][ T5884] usb 9-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1412.534957][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.576298][ T5884] usb 9-1: config 0 descriptor?? [ 1412.577331][T17808] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1412.647152][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3709'. [ 1412.702057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.760017][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.803745][T17818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.983168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.021876][ T5884] hid_parser_main: 8 callbacks suppressed [ 1413.021897][ T5884] betop 0003:8380:1850.000F: unknown main item tag 0x3 [ 1413.021926][ T5884] betop 0003:8380:1850.000F: unknown main item tag 0x3 [ 1413.021950][ T5884] betop 0003:8380:1850.000F: item fetching failed at offset 3/5 [ 1413.027671][ T5884] betop 0003:8380:1850.000F: parse failed [ 1413.027738][ T5884] betop 0003:8380:1850.000F: probe with driver betop failed with error -22 [ 1413.214154][ T5886] usb 9-1: USB disconnect, device number 36 [ 1413.523113][T17829] tap0: tun_chr_ioctl cmd 35108 [ 1413.747314][T15813] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1413.900214][T15813] usb 7-1: Using ep0 maxpacket: 16 [ 1413.902710][T15813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.902738][T15813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.902775][T15813] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1413.902797][T15813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.926549][T15813] usb 7-1: config 0 descriptor?? [ 1414.356387][T15813] kye 0003:0458:5016.0010: control desc unexpectedly large [ 1414.368970][T15813] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0010/input/input25 [ 1414.465523][T15813] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0010/input/input26 [ 1414.504535][T15813] kye 0003:0458:5016.0010: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 1414.790740][T15813] usb 7-1: USB disconnect, device number 10 [ 1414.944386][T17871] support for the xor transformation has been removed. [ 1415.367665][T17886] input: syz1 as /devices/virtual/input/input27 [ 1415.563235][T17892] binder: binder_mmap: 17890 200000000000-200000b36000 bad vm_flags failed -1 [ 1415.840882][T17902] sctp: [Deprecated]: syz.6.3748 (pid 17902) Use of int in max_burst socket option deprecated. [ 1415.840882][T17902] Use struct sctp_assoc_value instead [ 1416.036121][T17905] binder: 17904:17905 ioctl 40046205 0 returned -22 [ 1416.255192][T17912] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3751'. [ 1416.712923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.398021][ T5886] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1417.557906][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1417.560492][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.560520][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.560539][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1417.560567][ T5886] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1417.560587][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.619416][ T5886] usb 6-1: config 0 descriptor?? [ 1418.229383][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229423][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229449][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229475][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229500][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229526][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229551][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229576][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229602][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.229627][ T5886] apple 0003:05AC:0247.0011: unknown main item tag 0x0 [ 1418.509813][ T5886] apple 0003:05AC:0247.0011: unexpected long global item [ 1418.543292][ T5886] apple 0003:05AC:0247.0011: parse failed [ 1418.558155][ T5886] apple 0003:05AC:0247.0011: probe with driver apple failed with error -22 [ 1418.699336][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1419.190362][ T5973] usb 6-1: USB disconnect, device number 15 [ 1419.445440][T15813] kernel write not supported for file bpf-prog (pid: 15813 comm: kworker/0:8) [ 1419.489487][ T5806] Bluetooth: hci2: command 0x0405 tx timeout [ 1419.896330][T17989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1420.153665][T18000] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3791'. [ 1420.326587][ T5973] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1420.493499][ T5973] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1420.493529][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.518915][ T5973] usb 7-1: config 0 descriptor?? [ 1421.570382][ T5973] usb 7-1: Cannot set autoneg [ 1421.570666][ T5973] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1421.604387][ T5973] usb 7-1: USB disconnect, device number 11 [ 1421.838869][T18055] netlink: 240 bytes leftover after parsing attributes in process `syz.8.3814'. [ 1422.093008][ T5886] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1422.200525][T18072] netlink: 'syz.7.3823': attribute type 2 has an invalid length. [ 1422.246076][ T5886] usb 10-1: Using ep0 maxpacket: 16 [ 1422.250045][ T5886] usb 10-1: config 0 has an invalid interface number: 147 but max is 0 [ 1422.250070][ T5886] usb 10-1: config 0 has no interface number 0 [ 1422.250115][ T5886] usb 10-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1422.250138][ T5886] usb 10-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1422.265060][ T5886] usb 10-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1422.265088][ T5886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.265105][ T5886] usb 10-1: Product: syz [ 1422.265119][ T5886] usb 10-1: Manufacturer: syz [ 1422.265131][ T5886] usb 10-1: SerialNumber: syz [ 1422.307614][ T5886] usb 10-1: config 0 descriptor?? [ 1422.327602][T18053] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1422.327787][T18053] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1422.606292][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.606360][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.665473][T18053] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1422.665730][T18053] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1422.813647][ T5886] net1080 10-1:0.147 usb0: register 'net1080' at usb-dummy_hcd.9-1, NetChip TurboCONNECT, be:04:58:33:0c:7a [ 1422.882842][T15813] usb 10-1: USB disconnect, device number 8 [ 1422.892726][T15813] net1080 10-1:0.147 usb0: unregister 'net1080' usb-dummy_hcd.9-1, NetChip TurboCONNECT [ 1423.337307][ T5886] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1424.544681][T15813] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1424.976863][T15813] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.976932][T15813] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.979275][T15813] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1424.979301][T15813] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1424.979319][T15813] usb 7-1: Product: syz [ 1424.979331][T15813] usb 7-1: SerialNumber: syz [ 1425.040116][ T5886] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1425.040134][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.040145][ T5886] usb 9-1: Product: syz [ 1425.040152][ T5886] usb 9-1: Manufacturer: syz [ 1425.040160][ T5886] usb 9-1: SerialNumber: syz [ 1425.090511][ T5886] usb 9-1: config 0 descriptor?? [ 1425.636786][ T5886] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1425.824296][ T5886] usb 9-1: USB disconnect, device number 37 [ 1426.066002][T15813] cdc_ncm 7-1:1.0: bind() failure [ 1426.121271][T15813] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 1426.135310][T15813] usb 7-1: USB disconnect, device number 12 [ 1427.976119][T18162] loop2: detected capacity change from 0 to 7 [ 1427.977071][T18162] Dev loop2: unable to read RDB block 7 [ 1427.977108][T18162] loop2: unable to read partition table [ 1427.977313][T18162] loop2: partition table beyond EOD, truncated [ 1427.977328][T18162] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1428.463748][T18173] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3866'. [ 1428.863437][ T5972] IPVS: starting estimator thread 0... [ 1428.956897][T18188] IPVS: using max 9 ests per chain, 21600 per kthread [ 1429.044262][ T5972] kernel write not supported for file /slabinfo (pid: 5972 comm: kworker/0:5) [ 1429.741881][ T5972] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1429.905622][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.905653][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.905673][ T5972] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1429.905713][ T5972] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1429.905733][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.923880][ T5972] usb 6-1: config 0 descriptor?? [ 1430.461228][ T5972] hid_parser_main: 835 callbacks suppressed [ 1430.461251][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.461281][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.463521][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.463550][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.463577][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.463602][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.463627][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.463652][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.463677][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.463702][ T5972] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1430.521161][ T5972] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1430.719361][T16329] usb 6-1: USB disconnect, device number 16 [ 1430.955949][T18254] batadv_slave_1: entered promiscuous mode [ 1430.957058][T18253] batadv_slave_1: left promiscuous mode [ 1433.304372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.148485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.705988][T18341] netlink: 'syz.8.3937': attribute type 4 has an invalid length. [ 1434.881564][T18349] loop6: detected capacity change from 0 to 7 [ 1434.887835][T18349] Dev loop6: unable to read RDB block 7 [ 1434.887880][T18349] loop6: unable to read partition table [ 1434.888096][T18349] loop6: partition table beyond EOD, truncated [ 1434.888112][T18349] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1435.119085][ T5886] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1435.366223][ T5886] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1435.366252][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.366269][ T5886] usb 9-1: Product: syz [ 1435.366281][ T5886] usb 9-1: Manufacturer: syz [ 1435.366293][ T5886] usb 9-1: SerialNumber: syz [ 1435.403918][ T5886] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1435.724750][ T5886] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1436.195464][ T5972] usb 9-1: USB disconnect, device number 38 [ 1436.438590][T16329] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1436.565034][T18390] netlink: 'syz.9.3960': attribute type 1 has an invalid length. [ 1436.565082][T18390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.591693][T16329] usb 7-1: Using ep0 maxpacket: 32 [ 1436.594167][T16329] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1436.594193][T16329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.620858][T16329] usb 7-1: config 0 descriptor?? [ 1436.626162][T16329] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1436.848626][ T5886] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1436.854767][ T5886] ath9k_htc: Failed to initialize the device [ 1436.885394][ T5972] usb 9-1: ath9k_htc: USB layer deinitialized [ 1436.994573][ T37] audit: type=1800 audit(6055082182.234:175): pid=18392 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.3961" name="file1" dev="tmpfs" ino=1160 res=0 errno=0 [ 1437.665933][T16329] gspca_nw80x: reg_w err -71 [ 1437.666039][T16329] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 1437.668789][T12821] block nbd5: Receive control failed (result -32) [ 1437.678727][T16329] usb 7-1: USB disconnect, device number 13 [ 1437.681997][T18394] block nbd5: shutting down sockets [ 1438.151641][T18425] batadv_slave_1: entered promiscuous mode [ 1438.152832][T18424] batadv_slave_1: left promiscuous mode [ 1438.712123][ T5972] kernel write not supported for file /uinput (pid: 5972 comm: kworker/0:5) [ 1439.117156][T15813] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1439.270270][T15813] usb 6-1: config 0 has no interfaces? [ 1439.273454][T15813] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1439.273479][T15813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.273498][T15813] usb 6-1: Product: syz [ 1439.273518][T15813] usb 6-1: Manufacturer: syz [ 1439.273530][T15813] usb 6-1: SerialNumber: syz [ 1439.307067][ T5972] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1439.324715][T15813] usb 6-1: config 0 descriptor?? [ 1439.469200][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.469231][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.469252][ T5972] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1439.469291][ T5972] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1439.469311][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.539404][ T5972] usb 7-1: config 0 descriptor?? [ 1439.637029][T18470] netlink: 'syz.8.3996': attribute type 1 has an invalid length. [ 1439.642258][ T5884] usb 6-1: USB disconnect, device number 17 [ 1439.969995][ T5972] hid_parser_main: 5 callbacks suppressed [ 1439.970017][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970047][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970071][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970095][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970120][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970147][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970171][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970197][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970220][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1439.970245][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1440.064392][ T5972] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1440.277181][ T5884] usb 7-1: USB disconnect, device number 14 [ 1440.706340][ T8933] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1440.818448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.856226][ T8933] usb 6-1: Using ep0 maxpacket: 32 [ 1440.996139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.478116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.728010][ T8933] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1441.728035][ T8933] usb 6-1: config 0 has no interface number 0 [ 1441.728066][ T8933] usb 6-1: too many endpoints for config 0 interface 51 altsetting 17: 253, using maximum allowed: 30 [ 1441.728122][ T8933] usb 6-1: config 0 interface 51 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1441.728147][ T8933] usb 6-1: config 0 interface 51 has no altsetting 0 [ 1441.761071][ T8933] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1441.761099][ T8933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.761116][ T8933] usb 6-1: Product: syz [ 1441.761129][ T8933] usb 6-1: Manufacturer: syz [ 1441.761142][ T8933] usb 6-1: SerialNumber: syz [ 1441.821517][ T8933] usb 6-1: config 0 descriptor?? [ 1441.825421][ T8933] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1441.885725][ T5886] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1442.037529][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 1442.040743][ T5886] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1442.040768][ T5886] usb 7-1: config 0 has no interface number 0 [ 1442.043763][ T5886] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1442.043787][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.043805][ T5886] usb 7-1: Product: syz [ 1442.043817][ T5886] usb 7-1: Manufacturer: syz [ 1442.043830][ T5886] usb 7-1: SerialNumber: syz [ 1442.121621][ T5886] usb 7-1: config 0 descriptor?? [ 1442.122733][ T8933] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1442.149883][ T5886] smsc95xx v2.0.0 [ 1442.151776][ T8933] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1442.355567][ T5972] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1442.454372][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1442.455155][T16329] usb 6-1: USB disconnect, device number 18 [ 1442.494549][T16329] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1442.506445][T16329] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1442.508896][T16329] quatech2 6-1:0.51: device disconnected [ 1442.522122][ T5972] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.522144][ T5972] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1442.550956][ T5972] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1442.550983][ T5972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.551001][ T5972] usb 10-1: Product: syz [ 1442.551013][ T5972] usb 10-1: Manufacturer: syz [ 1442.551025][ T5972] usb 10-1: SerialNumber: syz [ 1442.555559][ T5884] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1442.560093][ T5886] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1442.560116][ T5886] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1442.711288][ T5884] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1442.711317][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.720211][ T5884] usb 9-1: config 0 descriptor?? [ 1442.843497][ T5972] usb 10-1: 0:2 : does not exist [ 1442.871534][ T5972] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1442.919274][ T5972] usb 10-1: USB disconnect, device number 9 [ 1442.935532][ T5884] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1442.983861][ T5886] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1442.984355][ T5886] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1443.023770][ T5886] usb 7-1: USB disconnect, device number 15 [ 1443.223444][ T5884] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1443.223468][ T5884] [drm] Initialized udl on minor 2 [ 1443.461618][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4014'. [ 1443.495319][T14282] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1443.579231][ T5884] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1443.604482][ T5884] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1443.659032][ T5884] usb 9-1: USB disconnect, device number 39 [ 1443.665063][ T5886] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1443.665708][ T5886] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1443.691846][T14282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.691876][T14282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.691912][T14282] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1443.691932][T14282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.708656][T14282] usb 6-1: config 0 descriptor?? [ 1443.987892][T14282] usbhid 6-1:0.0: can't add hid device: -71 [ 1443.988007][T14282] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1444.006795][T14282] usb 6-1: USB disconnect, device number 19 [ 1444.884200][ T8933] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1445.044171][ T8933] usb 10-1: Using ep0 maxpacket: 32 [ 1445.046597][ T8933] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1445.046619][ T8933] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.048703][ T8933] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1445.051859][ T8933] usb 10-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1445.051883][ T8933] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.051901][ T8933] usb 10-1: Product: syz [ 1445.051914][ T8933] usb 10-1: Manufacturer: syz [ 1445.051926][ T8933] usb 10-1: SerialNumber: syz [ 1445.124075][T14282] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1445.130491][ T8933] usb 10-1: config 0 descriptor?? [ 1445.132905][ T8933] rndis_host 10-1:0.0: skipping garbage [ 1445.132919][ T8933] usb 10-1: bad CDC descriptors [ 1445.133629][ T8933] cdc_acm 10-1:0.0: skipping garbage [ 1445.133639][ T8933] cdc_acm 10-1:0.0: Control and data interfaces are not separated! [ 1445.133647][ T8933] cdc_acm 10-1:0.0: This needs exactly 3 endpoints [ 1445.133665][ T8933] cdc_acm 10-1:0.0: probe with driver cdc_acm failed with error -22 [ 1445.274194][T14282] usb 6-1: Using ep0 maxpacket: 32 [ 1445.281634][T14282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1445.281662][T14282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.281711][T14282] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1445.281732][T14282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.290212][T14282] usb 6-1: config 0 descriptor?? [ 1445.295971][T14282] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1445.299057][T14282] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1445.347684][T18519] netlink: 27 bytes leftover after parsing attributes in process `syz.9.4019'. [ 1445.349990][T14282] usb 10-1: USB disconnect, device number 10 [ 1445.356898][ T5884] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1445.499081][T16329] usb 6-1: USB disconnect, device number 20 [ 1445.510110][T16329] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1445.520478][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1445.520505][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.520524][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1445.520561][ T5884] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1445.520580][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.533608][ T5884] usb 7-1: config 0 descriptor?? [ 1445.735380][ T37] audit: type=1326 audit(6055082190.988:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.738124][ T37] audit: type=1326 audit(6055082190.988:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.738535][ T37] audit: type=1326 audit(6055082190.988:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.738632][ T37] audit: type=1326 audit(6055082190.988:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.739229][ T37] audit: type=1326 audit(6055082190.988:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.739563][ T37] audit: type=1326 audit(6055082190.988:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.739775][ T37] audit: type=1326 audit(6055082190.988:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.740237][ T37] audit: type=1326 audit(6055082190.988:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.740397][ T37] audit: type=1326 audit(6055082190.988:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.740556][ T37] audit: type=1326 audit(6055082190.988:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18550 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f3a1f749 code=0x7ffc0000 [ 1445.992744][ T5884] hid_parser_main: 5 callbacks suppressed [ 1445.992767][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992796][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992819][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992840][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992862][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992884][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992906][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992929][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992951][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1445.992973][ T5884] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1446.045683][ T5884] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1446.256128][ T5884] usb 7-1: USB disconnect, device number 16 [ 1446.470081][T18570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1446.949234][T18597] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 1447.303630][ T5884] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1447.452995][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 1447.467499][ T5884] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1447.467526][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.467543][ T5884] usb 7-1: Product: syz [ 1447.467555][ T5884] usb 7-1: Manufacturer: syz [ 1447.467567][ T5884] usb 7-1: SerialNumber: syz [ 1447.475038][ T5884] usb 7-1: config 0 descriptor?? [ 1447.891826][T18626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.902136][T18626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.911623][ T5884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1447.920696][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1447.921811][ T5884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1447.921862][ T5884] usb 7-1: media controller created [ 1447.966970][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1448.526201][T18602] dtv5100: wlen = 0, aborting. [ 1448.526261][ T5884] zl10353_read_register: readreg error (reg=127, ret==0) [ 1448.526297][ T5884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1448.526305][ T5884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1448.528677][ T5973] usb 7-1: USB disconnect, device number 17 [ 1448.615388][ T5973] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1448.656954][T18626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1448.672594][T18626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1448.752393][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1449.112688][T18644] input: syz1 as /devices/virtual/input/input29 [ 1449.973820][T15249] bond0: (slave syz_tun): Releasing backup interface [ 1450.133315][ T1133] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.730063][ T1133] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.730229][ T1133] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.730265][ T1133] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.230448][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1451.248271][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1451.269161][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1451.271707][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1451.272560][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1451.804637][T18693] overlay: filesystem on ./bus is read-only [ 1451.835579][T18698] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4094'. [ 1451.836906][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4093'. [ 1451.836937][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4093'. [ 1451.967875][T18698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.077038][T18698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.113367][T18698] bond0 (unregistering): Released all slaves [ 1452.283335][T18678] chnl_net:caif_netlink_parms(): no params data found [ 1452.308131][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4098'. [ 1452.439428][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4100'. [ 1452.862194][T18678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.862293][T18678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.862511][T18678] bridge_slave_0: entered allmulticast mode [ 1452.898223][T18678] bridge_slave_0: entered promiscuous mode [ 1452.910919][T18678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.911120][T18678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.911349][T18678] bridge_slave_1: entered allmulticast mode [ 1452.914264][T18678] bridge_slave_1: entered promiscuous mode [ 1452.950171][ T5884] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1453.112478][ T5884] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1453.112507][ T5884] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1453.112547][ T5884] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1453.112566][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.166093][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1453.166288][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1453.268461][ T5884] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1453.340949][ T5806] Bluetooth: hci2: command tx timeout [ 1453.424227][T18678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.429406][T18678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.456440][T14282] usb 6-1: USB disconnect, device number 21 [ 1453.784847][T18678] team0: Port device team_slave_0 added [ 1453.798166][T18678] team0: Port device team_slave_1 added [ 1453.969773][ T8933] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1454.131937][ T8933] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1454.131966][ T8933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.137783][ T8933] usb 9-1: config 0 descriptor?? [ 1454.164634][ T8933] cp210x 9-1:0.0: cp210x converter detected [ 1454.204511][T18678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.204528][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.204894][T18678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.255323][T18678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.255339][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.255364][T18678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.566594][ T8933] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1455.438984][ T5806] Bluetooth: hci2: command tx timeout [ 1455.532995][ T8933] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1455.727105][ T8933] usb 9-1: USB disconnect, device number 40 [ 1455.732455][ T8933] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1455.808793][ T5884] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1455.879397][ T8933] cp210x 9-1:0.0: device disconnected [ 1455.899645][T18678] hsr_slave_0: entered promiscuous mode [ 1455.901575][T18678] hsr_slave_1: entered promiscuous mode [ 1455.902470][T18678] debugfs: 'hsr0' already exists in 'hsr' [ 1455.902487][T18678] Cannot create hsr debugfs directory [ 1455.964573][ T5884] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1455.964592][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.964602][ T5884] usb 6-1: Product: syz [ 1455.964609][ T5884] usb 6-1: Manufacturer: syz [ 1455.964615][ T5884] usb 6-1: SerialNumber: syz [ 1455.968108][ T5884] usb 6-1: config 0 descriptor?? [ 1456.006878][ T5884] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 022 [ 1456.406726][ T5884] (null): failure reading functionality [ 1456.452663][ T5884] i2c i2c-1: connected i2c-tiny-usb device [ 1456.679356][T16329] usb 6-1: USB disconnect, device number 22 [ 1456.818309][ T5972] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1456.972966][ T5972] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1456.972995][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.981490][ T5972] usb 7-1: config 0 descriptor?? [ 1456.986708][ T5972] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1457.166566][ T5884] hid_parser_main: 5 callbacks suppressed [ 1457.166586][ T5884] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1457.212944][ T5884] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1457.398275][ T5972] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 1457.469194][ T5806] Bluetooth: hci2: command tx timeout [ 1457.610184][ T5972] gspca_cpia1: usb_control_msg 01, error -71 [ 1457.610204][ T5972] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1457.709853][ T5972] usb 7-1: USB disconnect, device number 18 [ 1458.152510][T18813] IPVS: Error connecting to the multicast addr [ 1458.309208][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1458.309225][ T37] audit: type=1326 audit(6055082203.565:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1458.313090][ T37] audit: type=1326 audit(6055082203.565:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1458.313138][ T37] audit: type=1326 audit(6055082203.565:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1458.313177][ T37] audit: type=1326 audit(6055082203.565:192): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1458.313216][ T37] audit: type=1326 audit(6055082203.565:193): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1458.315659][ T37] audit: type=1326 audit(6055082203.565:194): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1458.315711][ T37] audit: type=1326 audit(6055082203.565:195): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12bd70f783 code=0x7ffc0000 [ 1458.315750][ T37] audit: type=1326 audit(6055082203.565:196): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12bd70f783 code=0x7ffc0000 [ 1458.315788][ T37] audit: type=1326 audit(6055082203.565:197): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1458.315827][ T37] audit: type=1326 audit(6055082203.565:198): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=18823 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bd70f749 code=0x7ffc0000 [ 1458.607382][ T8933] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1458.757583][ T8933] usb 9-1: Using ep0 maxpacket: 32 [ 1458.760028][ T8933] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1458.760148][ T8933] usb 9-1: config 0 has no interface number 0 [ 1458.760181][ T8933] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1458.764223][ T8933] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1458.764249][ T8933] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.764267][ T8933] usb 9-1: Product: syz [ 1458.764279][ T8933] usb 9-1: Manufacturer: syz [ 1458.764291][ T8933] usb 9-1: SerialNumber: syz [ 1458.781382][ T8933] usb 9-1: config 0 descriptor?? [ 1458.850719][ T8933] appletouch 9-1:0.85: Could not find int-in endpoint [ 1458.850755][ T8933] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 1458.876307][ T8933] usbhid 9-1:0.85: couldn't find an input interrupt endpoint [ 1459.549942][ T5806] Bluetooth: hci2: command tx timeout [ 1459.712853][T18678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1459.754619][T18678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1459.813345][T18678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1459.863390][T18678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1459.970350][ T8933] usb 9-1: USB disconnect, device number 41 [ 1460.262954][T18678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.311600][T18678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1460.359157][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.359360][ T7578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.400611][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.400776][ T7578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.131334][T18678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.711820][T18906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1461.912532][T18678] veth0_vlan: entered promiscuous mode [ 1461.940247][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1461.940287][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1461.940309][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1461.940320][ T5806] Workqueue: hci3 hci_rx_work [ 1461.940446][ T5806] Call Trace: [ 1461.940458][ T5806] [ 1461.940467][ T5806] dump_stack_lvl+0x189/0x250 [ 1461.940518][ T5806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1461.940544][ T5806] ? __pfx__printk+0x10/0x10 [ 1461.940597][ T5806] ? kernfs_path_from_node+0x2c/0x280 [ 1461.940642][ T5806] ? kernfs_path_from_node+0x243/0x280 [ 1461.940660][ T5806] ? kernfs_path_from_node+0x2c/0x280 [ 1461.940683][ T5806] sysfs_create_dir_ns+0x259/0x280 [ 1461.940703][ T5806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1461.940764][ T5806] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1461.940786][ T5806] ? rt_spin_unlock+0x161/0x200 [ 1461.940810][ T5806] kobject_add_internal+0x5a5/0xb50 [ 1461.940867][ T5806] kobject_add+0x155/0x220 [ 1461.940892][ T5806] ? __pfx_kobject_add+0x10/0x10 [ 1461.940920][ T5806] ? get_device_parent+0x370/0x3a0 [ 1461.940981][ T5806] device_add+0x408/0xb50 [ 1461.941010][ T5806] hci_conn_add_sysfs+0xd5/0x1e0 [ 1461.941073][ T5806] le_conn_complete_evt+0xf39/0x1500 [ 1461.941158][ T5806] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1461.941183][ T5806] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1461.941237][ T5806] ? lockdep_hardirqs_on+0x9c/0x150 [ 1461.941329][ T5806] ? skb_pull_data+0xfb/0x200 [ 1461.941398][ T5806] hci_le_conn_complete_evt+0x187/0x450 [ 1461.941431][ T5806] hci_event_packet+0x78f/0x1200 [ 1461.941483][ T5806] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1461.941509][ T5806] ? __pfx_hci_event_packet+0x10/0x10 [ 1461.941542][ T5806] ? hci_send_to_monitor+0xe2/0x570 [ 1461.941592][ T5806] hci_rx_work+0x46a/0xe80 [ 1461.941623][ T5806] ? process_scheduled_works+0x9ef/0x17b0 [ 1461.941659][ T5806] process_scheduled_works+0xae1/0x17b0 [ 1461.941714][ T5806] ? __pfx_process_scheduled_works+0x10/0x10 [ 1461.941756][ T5806] worker_thread+0x8a0/0xda0 [ 1461.941807][ T5806] kthread+0x711/0x8a0 [ 1461.941835][ T5806] ? __pfx_worker_thread+0x10/0x10 [ 1461.941855][ T5806] ? __pfx_kthread+0x10/0x10 [ 1461.941876][ T5806] ? rt_spin_unlock+0x150/0x200 [ 1461.941902][ T5806] ? rt_spin_unlock+0x161/0x200 [ 1461.941920][ T5806] ? __pfx_kthread+0x10/0x10 [ 1461.941946][ T5806] ret_from_fork+0x4bc/0x870 [ 1461.941981][ T5806] ? __pfx_ret_from_fork+0x10/0x10 [ 1461.942011][ T5806] ? __switch_to_asm+0x39/0x70 [ 1461.942028][ T5806] ? __switch_to_asm+0x33/0x70 [ 1461.942051][ T5806] ? __pfx_kthread+0x10/0x10 [ 1461.942077][ T5806] ret_from_fork_asm+0x1a/0x30 [ 1461.942116][ T5806] [ 1461.942263][ T5806] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1461.942314][ T5806] Bluetooth: hci3: failed to register connection device [ 1462.574091][T18678] veth1_vlan: entered promiscuous mode [ 1462.737284][T18678] veth0_macvtap: entered promiscuous mode [ 1462.773850][T18678] veth1_macvtap: entered promiscuous mode [ 1462.846067][T18678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.893740][T18678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1462.928231][ T7578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.928664][ T7578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.928720][ T7578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.928752][ T7578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.422302][ T7564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.422323][ T7564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.595047][T16329] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1463.621469][ T7564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.621488][ T7564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.764755][T16329] usb 6-1: Using ep0 maxpacket: 32 [ 1463.767068][T16329] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1463.767091][T16329] usb 6-1: config 0 has no interface number 0 [ 1463.767139][T16329] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1463.771252][T16329] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1463.771277][T16329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.771293][T16329] usb 6-1: Product: syz [ 1463.771305][T16329] usb 6-1: Manufacturer: syz [ 1463.771317][T16329] usb 6-1: SerialNumber: syz [ 1463.840126][T16329] usb 6-1: config 0 descriptor?? [ 1464.898032][T16329] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1464.898086][T16329] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1464.898101][T16329] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1464.898193][T16329] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1464.938927][T16329] usb 6-1: USB disconnect, device number 23 [ 1464.994161][ T5886] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1465.148451][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.148508][ T5886] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1465.148528][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.186267][ T5886] usb 7-1: config 0 descriptor?? [ 1465.208404][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 1465.536482][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4215'. [ 1465.666723][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1465.669155][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 1466.535771][ T5886] pwc: recv_control_msg error -71 req 04 val 1000 [ 1466.536291][ T5886] pwc: recv_control_msg error -71 req 04 val 1300 [ 1466.536772][ T5886] pwc: recv_control_msg error -71 req 04 val 1400 [ 1466.537246][ T5886] pwc: recv_control_msg error -71 req 02 val 2000 [ 1466.537722][ T5886] pwc: recv_control_msg error -71 req 02 val 2100 [ 1466.538213][ T5886] pwc: recv_control_msg error -71 req 04 val 1500 [ 1466.538671][ T5886] pwc: recv_control_msg error -71 req 02 val 2500 [ 1466.539131][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 1466.539593][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 1466.540078][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 1466.553356][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 1466.554064][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 1466.571752][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 1466.661436][ T5886] pwc: Registered as video103. [ 1466.671216][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30 [ 1466.695760][ T5886] usb 7-1: USB disconnect, device number 19 [ 1466.833217][ T9660] unregister_netdevice: waiting for sit0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1466.940601][T19049] input: syz1 as /devices/virtual/input/input31 [ 1467.243075][ T5972] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1468.599442][ T5806] Bluetooth: hci3: command 0x0406 tx timeout