last executing test programs: 24.763758771s ago: executing program 2 (id=1201): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r1, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3, 0x10, &(0x7f0000000000), 0x10}, 0x2e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r0, 0x7) 24.655055824s ago: executing program 0 (id=1202): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) 24.157875423s ago: executing program 2 (id=1203): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) recvmsg(r0, &(0x7f0000000480)={&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001880)=""/221, 0xdd}], 0x5, &(0x7f0000001980)=""/201, 0xc9}, 0x140) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000400", @ANYRES32=0x1, @ANYBLOB="fdffffff00001a0000", @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc0405602, &(0x7f00000001c0)=@fd={0x4, 0x1, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ';\'S;'}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x22, 0x6, "44cd65f240bf75993b5db86a4ca5a6cd5029db184eeb3d78e9caaa4fa600"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0xfffffffffffffffe) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23.706370612s ago: executing program 0 (id=1204): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 23.359101862s ago: executing program 2 (id=1205): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 21.121417469s ago: executing program 1 (id=1208): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d0102030109021200"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, 0x0) 21.082781484s ago: executing program 0 (id=1209): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x61, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r2, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75", 0xbf, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 20.260691924s ago: executing program 2 (id=1211): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0xa94a7000) r1 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0x0, &(0x7f0000000100)) 18.244076856s ago: executing program 0 (id=1214): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x400381, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2, 0x0, 0x0, 0x0, r4, 0xd4, 0x6}, 0x0, 0x0, 0x80, 0x1ae, 0x1, 0x4, 0xc8, 0x9, 0x7, 0xc875, r1, r2}) 16.574280987s ago: executing program 0 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) recvmsg(r0, &(0x7f0000000480)={&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001880)=""/221, 0xdd}], 0x5, &(0x7f0000001980)=""/201, 0xc9}, 0x140) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000400", @ANYRES32=0x1, @ANYBLOB="fdffffff00001a0000", @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc0405602, &(0x7f00000001c0)=@fd={0x4, 0x1, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ';\'S;'}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x22, 0x6, "44cd65f240bf75993b5db86a4ca5a6cd5029db184eeb3d78e9caaa4fa600"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0xfffffffffffffffe) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16.409711087s ago: executing program 1 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x3) 16.265539913s ago: executing program 3 (id=1218): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) userfaultfd(0x80001) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 15.892343793s ago: executing program 1 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000004}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 15.486171716s ago: executing program 1 (id=1221): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 15.448660919s ago: executing program 4 (id=1222): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000fc0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={r3}) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r4, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) 14.36722101s ago: executing program 1 (id=1223): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 14.36567607s ago: executing program 3 (id=1224): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2000002, 0xffffffff, 0x0, 0x5, 0x0, 0x42}) 8.039280122s ago: executing program 4 (id=1225): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) 7.844686011s ago: executing program 3 (id=1226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, 0x0) 7.591567807s ago: executing program 2 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc0a00002300010324bd7002fadbdf2501"], 0xafc}}, 0xc004) 6.724835584s ago: executing program 4 (id=1228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000ff03000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0100000000000000000000000000000000000004"], 0xfc}}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x4004040) 5.815080505s ago: executing program 4 (id=1229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3.798749766s ago: executing program 1 (id=1230): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) umount2(&(0x7f0000000180)='./file0\x00', 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.536512117s ago: executing program 0 (id=1231): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x1, 0xff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x2182, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4241, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)="f60e562e51", 0x5}], 0x1, 0x0, 0x1e0, 0x20040000}, 0x48081) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x1, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r6, 0x701, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000440)={0x9d0000, 0x200, 0x8, r4, 0x0, &(0x7f00000003c0)={0xa00964, 0x40, '\x00', @ptr=0xdbf6}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r9 = getpid() sched_setattr(r9, &(0x7f0000000340)={0x38, 0x0, 0x49, 0x12000, 0x299c0, 0x7, 0x0, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) 3.374477894s ago: executing program 2 (id=1232): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.252633989s ago: executing program 4 (id=1233): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 1.484652296s ago: executing program 4 (id=1234): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$write(0x1, &(0x7f0000000900)={0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0x800, 0x11428, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x400000400, {0x0, 0x0, 0x0, {0x2, 0x10000000, 0x0, 0x6, 0x7ff, 0xfffffffffffffffd, 0x0, 0x3966, 0x3, 0x8000, 0x4, r3, r4, 0xc3d, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r0) mount$9p_xen(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa8, 0x0) 1.474668552s ago: executing program 3 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) 267.317157ms ago: executing program 3 (id=1236): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000062dfdae906d9"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x10000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000000, 0x0, 0x7, 0x48}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) 0s ago: executing program 3 (id=1237): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0xa94a7000) r1 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): bridge_slave_1) entered disabled state [ 77.583087][ T5795] bridge_slave_1: entered allmulticast mode [ 77.584755][ T5795] bridge_slave_1: entered promiscuous mode [ 77.683873][ T5794] team0: Port device team_slave_0 added [ 77.745771][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.822733][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.822744][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.822758][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.826162][ T5794] team0: Port device team_slave_1 added [ 77.828126][ T5808] team0: Port device team_slave_0 added [ 77.830421][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.942750][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.942767][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.942791][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.053502][ T5808] team0: Port device team_slave_1 added [ 78.121335][ T5814] Bluetooth: hci0: command tx timeout [ 78.121426][ T5799] Bluetooth: hci2: command tx timeout [ 78.146821][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.201434][ T5799] Bluetooth: hci4: command tx timeout [ 78.281322][ T5799] Bluetooth: hci1: command tx timeout [ 78.281345][ T5814] Bluetooth: hci3: command tx timeout [ 78.514550][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.516994][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.517112][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.517127][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.644019][ T5804] team0: Port device team_slave_0 added [ 78.703132][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.703144][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.703158][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.704025][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.704034][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.704047][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.706237][ T5804] team0: Port device team_slave_1 added [ 78.919219][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.919234][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.919252][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.993810][ T5795] team0: Port device team_slave_0 added [ 79.133913][ T5795] team0: Port device team_slave_1 added [ 79.138883][ T5805] hsr_slave_0: entered promiscuous mode [ 79.139837][ T5805] hsr_slave_1: entered promiscuous mode [ 79.146256][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.146271][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.146295][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.333510][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.333528][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.333541][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.823591][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.823607][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.823629][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.828699][ T5794] hsr_slave_0: entered promiscuous mode [ 79.829438][ T5794] hsr_slave_1: entered promiscuous mode [ 79.830088][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 79.830173][ T5794] Cannot create hsr debugfs directory [ 79.983193][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.983209][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.983224][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.987881][ T5808] hsr_slave_0: entered promiscuous mode [ 79.988639][ T5808] hsr_slave_1: entered promiscuous mode [ 79.989166][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 79.989182][ T5808] Cannot create hsr debugfs directory [ 80.201159][ T5814] Bluetooth: hci2: command tx timeout [ 80.201186][ T5799] Bluetooth: hci0: command tx timeout [ 80.281289][ T5799] Bluetooth: hci4: command tx timeout [ 80.362608][ T5799] Bluetooth: hci3: command tx timeout [ 80.362638][ T5814] Bluetooth: hci1: command tx timeout [ 80.426836][ T5804] hsr_slave_0: entered promiscuous mode [ 80.427628][ T5804] hsr_slave_1: entered promiscuous mode [ 80.428137][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 80.428155][ T5804] Cannot create hsr debugfs directory [ 80.878638][ T5795] hsr_slave_0: entered promiscuous mode [ 80.879379][ T5795] hsr_slave_1: entered promiscuous mode [ 80.879963][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 80.879979][ T5795] Cannot create hsr debugfs directory [ 81.654391][ T43] cfg80211: failed to load regulatory.db [ 81.928821][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.984256][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.025127][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.076975][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.172290][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.199815][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.235540][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.281125][ T5814] Bluetooth: hci2: command tx timeout [ 82.282051][ T5814] Bluetooth: hci0: command tx timeout [ 82.307404][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.361136][ T5814] Bluetooth: hci4: command tx timeout [ 82.442068][ T5799] Bluetooth: hci3: command tx timeout [ 82.442105][ T5814] Bluetooth: hci1: command tx timeout [ 82.454084][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.491628][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.527419][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.582397][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.710026][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.733671][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.768664][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.814267][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.937418][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.937822][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.973556][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.018481][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.049860][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.130539][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.177873][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.178641][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.193424][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.216556][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.216751][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.294534][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.327954][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.349339][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.349521][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.395629][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.395752][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.455650][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.474888][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.497179][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.497430][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.546212][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.546352][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.598539][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.649141][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.650305][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.679321][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.696801][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.696934][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.806853][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.864308][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.871500][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.909542][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.909753][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.947645][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.192838][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.222186][ T5805] veth0_vlan: entered promiscuous mode [ 84.269592][ T5805] veth1_vlan: entered promiscuous mode [ 84.433421][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.433764][ T5794] veth0_vlan: entered promiscuous mode [ 84.459300][ T5805] veth0_macvtap: entered promiscuous mode [ 84.486920][ T5794] veth1_vlan: entered promiscuous mode [ 84.489689][ T5805] veth1_macvtap: entered promiscuous mode [ 84.564290][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.566570][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.605315][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.607840][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.663794][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.668886][ T5808] veth0_vlan: entered promiscuous mode [ 84.675148][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.677231][ T5794] veth0_macvtap: entered promiscuous mode [ 84.686095][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.700438][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.712567][ T5794] veth1_macvtap: entered promiscuous mode [ 84.823590][ T5808] veth1_vlan: entered promiscuous mode [ 84.996613][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.020577][ T5804] veth0_vlan: entered promiscuous mode [ 85.056568][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.070379][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.070402][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.114166][ T5804] veth1_vlan: entered promiscuous mode [ 85.119790][ T1481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.142718][ T1481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.150140][ T1481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.174869][ T1481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.200324][ T5808] veth0_macvtap: entered promiscuous mode [ 85.208434][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.208452][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.275306][ T5808] veth1_macvtap: entered promiscuous mode [ 85.468069][ T5795] veth0_vlan: entered promiscuous mode [ 85.470447][ T5804] veth0_macvtap: entered promiscuous mode [ 85.475481][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.494623][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.524345][ T5804] veth1_macvtap: entered promiscuous mode [ 85.589222][ T5795] veth1_vlan: entered promiscuous mode [ 85.596687][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.597570][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.597586][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.634841][ T3528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.647575][ T3528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.662344][ T3528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.699213][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.825153][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.878515][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.878533][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.992447][ T3528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.010653][ T3528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.029251][ T3528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.055137][ T3528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.141574][ T5795] veth0_macvtap: entered promiscuous mode [ 86.217068][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.217088][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.241566][ T5795] veth1_macvtap: entered promiscuous mode [ 86.629238][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.640775][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.640794][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.745185][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.751646][ T5866] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.764737][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.764757][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.815761][ T1201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.859676][ T1201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.883893][ T1201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.904648][ T1201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.925439][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 86.939968][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.939993][ T5866] usb 2-1: config 0 has no interfaces? [ 86.946903][ T5866] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 86.946931][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.946949][ T5866] usb 2-1: Product: syz [ 86.946962][ T5866] usb 2-1: Manufacturer: syz [ 86.946975][ T5866] usb 2-1: SerialNumber: syz [ 87.016914][ T5866] usb 2-1: config 0 descriptor?? [ 87.034433][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.034453][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.111057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 88.302949][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.302970][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.591416][ T5880] usb 2-1: USB disconnect, device number 2 [ 89.813236][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.813255][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.862570][ T5948] bpq0: entered promiscuous mode [ 89.862598][ T5948] bpq0: entered allmulticast mode [ 89.961065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.971052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.981041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.991041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.001045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.011036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.021041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.031066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.190351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.963395][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 95.837356][ T5866] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.011140][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 96.017072][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.017096][ T5866] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.022622][ T5866] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 96.022650][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.022668][ T5866] usb 5-1: Product: syz [ 96.022680][ T5866] usb 5-1: Manufacturer: syz [ 96.022694][ T5866] usb 5-1: SerialNumber: syz [ 96.093752][ T5866] usb 5-1: config 0 descriptor?? [ 97.656321][ C1] Unknown status report in ack skb [ 98.700029][ T5965] usb 5-1: USB disconnect, device number 2 [ 99.072437][ T6024] overlayfs: failed to resolve './bus': -2 [ 103.819377][ T6048] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 103.819395][ T6048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.821725][ T6048] vhci_hcd vhci_hcd.0: Device attached [ 104.751200][ T5965] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 104.761673][ T6050] vhci_hcd: connection reset by peer [ 104.768845][ T13] vhci_hcd vhci_hcd.2: stop threads [ 104.769411][ T13] vhci_hcd vhci_hcd.2: release socket [ 104.911196][ T6006] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.061082][ T6006] usb 2-1: Using ep0 maxpacket: 8 [ 105.063535][ T6006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.063557][ T6006] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.066921][ T6006] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 105.066947][ T6006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.066965][ T6006] usb 2-1: Product: syz [ 105.066978][ T6006] usb 2-1: Manufacturer: syz [ 105.066991][ T6006] usb 2-1: SerialNumber: syz [ 105.141665][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 105.245584][ T6006] usb 2-1: config 0 descriptor?? [ 105.473221][ T6062] process 'syz.2.41' launched '/dev/fd/3' with NULL argv: empty string added [ 105.588013][ T6062] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 105.588046][ T6062] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 105.588129][ T6062] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.899488][ T6068] Zero length message leads to an empty skb [ 107.739075][ T5797] usb 2-1: USB disconnect, device number 3 [ 108.031625][ T6090] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 108.031649][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.031711][ T6090] vhci_hcd vhci_hcd.0: Device attached [ 108.054926][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 108.794995][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 108.951094][ T9] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 108.954609][ T6092] vhci_hcd: connection reset by peer [ 108.956676][ T1201] vhci_hcd vhci_hcd.1: stop threads [ 108.956964][ T1201] vhci_hcd vhci_hcd.1: release socket [ 108.958494][ T1201] vhci_hcd vhci_hcd.1: disconnect device [ 110.647465][ T5965] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 110.772318][ T6105] overlayfs: missing 'lowerdir' [ 110.914987][ T6087] team0: Port device team_slave_1 removed [ 114.071525][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 115.120164][ T6151] overlayfs: missing 'lowerdir' [ 117.655971][ T6174] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 117.655989][ T6174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.659629][ T6174] vhci_hcd vhci_hcd.0: Device attached [ 118.471200][ T5797] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.691130][ T5880] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 118.712950][ T6177] vhci_hcd: connection reset by peer [ 118.713275][ T1481] vhci_hcd vhci_hcd.0: stop threads [ 118.713290][ T1481] vhci_hcd vhci_hcd.0: release socket [ 118.713426][ T1481] vhci_hcd vhci_hcd.0: disconnect device [ 118.741079][ T5797] usb 4-1: Using ep0 maxpacket: 8 [ 118.747310][ T5797] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.747334][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.747352][ T5797] usb 4-1: config 0 has no interface number 0 [ 118.747397][ T5797] usb 4-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.747422][ T5797] usb 4-1: config 0 interface 1 has no altsetting 0 [ 118.747451][ T5797] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.747472][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.822812][ T5797] usb 4-1: config 0 descriptor?? [ 118.829631][ T5797] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 119.266797][ T5866] usb 4-1: USB disconnect, device number 2 [ 121.780345][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 123.792017][ T5880] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 125.372322][ T6219] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 125.372344][ T6219] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.374583][ T6219] vhci_hcd vhci_hcd.0: Device attached [ 125.726275][ T5880] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 125.727858][ T6220] vhci_hcd: connection reset by peer [ 125.731181][ T6080] vhci_hcd vhci_hcd.0: stop threads [ 125.731202][ T6080] vhci_hcd vhci_hcd.0: release socket [ 125.731266][ T6080] vhci_hcd vhci_hcd.0: disconnect device [ 128.421186][ T6037] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.666291][ T6037] usb 4-1: Using ep0 maxpacket: 8 [ 128.668347][ T6037] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.668362][ T6037] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.668372][ T6037] usb 4-1: config 0 has no interface number 0 [ 128.668419][ T6037] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.668442][ T6037] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.668453][ T6037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.735167][ T6037] usb 4-1: config 0 descriptor?? [ 128.778200][ T6037] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 129.093220][ T6037] usb 4-1: USB disconnect, device number 3 [ 131.541200][ T5880] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 132.136345][ T6276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 132.136365][ T6276] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.136430][ T6276] vhci_hcd vhci_hcd.0: Device attached [ 132.401122][ T5887] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 132.862750][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.862794][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.573434][ T6278] vhci_hcd: connection reset by peer [ 133.583676][ T1516] vhci_hcd vhci_hcd.3: stop threads [ 133.583700][ T1516] vhci_hcd vhci_hcd.3: release socket [ 133.583765][ T1516] vhci_hcd vhci_hcd.3: disconnect device [ 137.691906][ T5887] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 140.826514][ T6330] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 140.826538][ T6330] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.826593][ T6330] vhci_hcd vhci_hcd.0: Device attached [ 141.171097][ T805] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 141.194511][ T6333] vhci_hcd: connection reset by peer [ 141.201980][ T1201] vhci_hcd vhci_hcd.1: stop threads [ 141.202005][ T1201] vhci_hcd vhci_hcd.1: release socket [ 141.202289][ T1201] vhci_hcd vhci_hcd.1: disconnect device [ 141.963417][ T6349] syz.4.126 uses obsolete (PF_INET,SOCK_PACKET) [ 146.882144][ T805] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 147.149454][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.134'. [ 149.091190][ T5887] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.285957][ T5887] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 150.286003][ T5887] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.286016][ T5887] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.286038][ T5887] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.286050][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.404344][ T5887] usb 4-1: can't set config #27, error -71 [ 150.418575][ T5887] usb 4-1: USB disconnect, device number 4 [ 156.263884][ T5797] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.561172][ T5797] usb 2-1: Using ep0 maxpacket: 16 [ 156.583101][ T5797] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 156.583131][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.583150][ T5797] usb 2-1: Product: syz [ 156.583164][ T5797] usb 2-1: Manufacturer: syz [ 156.583177][ T5797] usb 2-1: SerialNumber: syz [ 156.658453][ T5797] r8152-cfgselector 2-1: Unknown version 0x0000 [ 156.658491][ T5797] r8152-cfgselector 2-1: config 0 descriptor?? [ 157.690956][ T5797] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 161.441254][ T886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 161.602664][ T886] usb 3-1: Using ep0 maxpacket: 16 [ 161.612551][ T886] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 161.612575][ T886] usb 3-1: config 1 has no interface number 0 [ 161.612617][ T886] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 161.612640][ T886] usb 3-1: config 1 interface 105 has no altsetting 0 [ 161.619974][ T886] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 161.620000][ T886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.620018][ T886] usb 3-1: Product: syz [ 161.620031][ T886] usb 3-1: Manufacturer: syz [ 161.620044][ T886] usb 3-1: SerialNumber: syz [ 161.652892][ T6465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.003336][ T886] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 163.286719][ T6479] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 163.286738][ T6479] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.286826][ T6479] vhci_hcd vhci_hcd.0: Device attached [ 163.551137][ T5887] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 164.639275][ T5910] usb 3-1: USB disconnect, device number 2 [ 164.906952][ T6482] vhci_hcd: connection reset by peer [ 164.907765][ T6447] vhci_hcd vhci_hcd.0: stop threads [ 164.907786][ T6447] vhci_hcd vhci_hcd.0: release socket [ 164.909445][ T6447] vhci_hcd vhci_hcd.0: disconnect device [ 167.683315][ T6040] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.862666][ T6040] usb 5-1: Using ep0 maxpacket: 8 [ 167.867863][ T6040] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 167.867891][ T6040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.867908][ T6040] usb 5-1: Product: syz [ 167.867921][ T6040] usb 5-1: Manufacturer: syz [ 167.867933][ T6040] usb 5-1: SerialNumber: syz [ 167.887182][ T6040] usb 5-1: config 0 descriptor?? [ 167.893339][ T6040] gspca_main: se401-2.14.0 probing 047d:5003 [ 168.989519][ T6040] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 169.054553][ T5887] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 169.132165][ T6532] 9pnet_virtio: no channels available for device syz [ 169.341753][ T5910] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.491074][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 169.512813][ T5910] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 169.512839][ T5910] usb 1-1: config 1 has no interface number 0 [ 169.512889][ T5910] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 169.512912][ T5910] usb 1-1: config 1 interface 105 has no altsetting 0 [ 169.756942][ T5910] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 169.756973][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.756992][ T5910] usb 1-1: Product: syz [ 169.757005][ T5910] usb 1-1: Manufacturer: syz [ 169.757019][ T5910] usb 1-1: SerialNumber: syz [ 170.039845][ T6533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 170.151677][ T6040] gspca_se401: read req failed req 0x06 error -19 [ 170.181755][ T6040] usb 5-1: USB disconnect, device number 3 [ 170.279601][ T5910] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 174.287663][ T5957] usb 1-1: USB disconnect, device number 2 [ 175.047084][ T5957] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.255231][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 175.259341][ T5957] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 175.259368][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.279570][ T5957] usb 3-1: config 0 descriptor?? [ 175.639168][ T6561] overlayfs: failed to resolve './bus': -2 [ 176.303773][ T5957] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 176.534812][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.538263][ T5957] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 176.538357][ T5957] usb 3-1: media controller created [ 176.588633][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.704984][ T5957] az6027: usb out operation failed. (-71) [ 176.706266][ T5957] az6027: usb out operation failed. (-71) [ 176.706281][ T5957] stb0899_attach: Driver disabled by Kconfig [ 176.706290][ T5957] az6027: no front-end attached [ 176.706290][ T5957] [ 176.736271][ T5957] az6027: usb out operation failed. (-71) [ 176.736289][ T5957] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 178.099957][ T886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.294910][ T5957] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 178.301346][ T886] usb 1-1: Using ep0 maxpacket: 8 [ 178.365873][ T886] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 178.365903][ T886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.365921][ T886] usb 1-1: Product: syz [ 178.365934][ T886] usb 1-1: Manufacturer: syz [ 178.365947][ T886] usb 1-1: SerialNumber: syz [ 178.370830][ T5957] dvb-usb: schedule remote query interval to 400 msecs. [ 178.370852][ T5957] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 178.395409][ T886] usb 1-1: config 0 descriptor?? [ 178.435928][ T5957] usb 3-1: USB disconnect, device number 3 [ 178.461630][ T886] gspca_main: se401-2.14.0 probing 047d:5003 [ 178.979828][ T886] gspca_se401: Wrong descriptor type [ 179.223601][ T5957] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 179.353205][ T6596] 9pnet_virtio: no channels available for device syz [ 181.488227][ T5991] usb 1-1: USB disconnect, device number 3 [ 182.427191][ T6612] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 182.427207][ T6612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.428804][ T6612] vhci_hcd vhci_hcd.0: Device attached [ 182.527859][ T6620] overlayfs: failed to resolve './bus': -2 [ 183.341174][ T6037] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 183.393709][ T6615] vhci_hcd: connection reset by peer [ 183.394070][ T12] vhci_hcd vhci_hcd.1: stop threads [ 183.394091][ T12] vhci_hcd vhci_hcd.1: release socket [ 183.394314][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 185.363447][ T6644] 9pnet_virtio: no channels available for device syz [ 186.688638][ T6662] overlayfs: failed to resolve './bus': -2 [ 186.993861][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.614062][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 187.690048][ T43] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 187.690078][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.690104][ T43] usb 3-1: Product: syz [ 187.690117][ T43] usb 3-1: Manufacturer: syz [ 187.690130][ T43] usb 3-1: SerialNumber: syz [ 187.857877][ T43] usb 3-1: config 0 descriptor?? [ 189.062634][ T43] gspca_main: se401-2.14.0 probing 047d:5003 [ 189.091210][ T6037] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 189.321703][ T6677] Bluetooth: MGMT ver 1.23 [ 190.123533][ T43] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 190.123636][ T43] se401 3-1:0.0: probe with driver se401 failed with error -110 [ 190.525671][ T43] usb 3-1: USB disconnect, device number 4 [ 192.953325][ T6704] overlayfs: failed to resolve './bus': -2 [ 194.777078][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.778837][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.049497][ T6305] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.276479][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 197.276519][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 197.276544][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 197.276565][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 197.276589][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 197.431194][ T6305] usb 2-1: Using ep0 maxpacket: 8 [ 197.440270][ T6305] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 197.440298][ T6305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.440316][ T6305] usb 2-1: Product: syz [ 197.440329][ T6305] usb 2-1: Manufacturer: syz [ 197.440342][ T6305] usb 2-1: SerialNumber: syz [ 197.541133][ T6305] usb 2-1: config 0 descriptor?? [ 197.608672][ T6305] gspca_main: se401-2.14.0 probing 047d:5003 [ 198.208342][ T6305] gspca_se401: Wrong descriptor type [ 198.905806][ T6752] overlayfs: failed to resolve './bus': -2 [ 200.321396][ T6606] usb 2-1: USB disconnect, device number 5 [ 203.812335][ T6780] 9pnet_virtio: no channels available for device syz [ 203.881330][ T5858] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.159627][ T5858] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 204.201190][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 204.213783][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.213839][ T5858] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.213864][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.215292][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.215341][ T5858] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.215365][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.228342][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.229745][ T5858] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.229826][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.260520][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.260613][ T5858] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.260672][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.284920][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.285066][ T5858] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.285124][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.304914][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.305059][ T5858] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.305116][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.316642][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.316734][ T5858] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.316759][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.362472][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.362573][ T5858] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.362626][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.412216][ T5858] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 204.412257][ T5858] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 204.412307][ T5858] usb 5-1: Product: syz [ 204.412321][ T5858] usb 5-1: Manufacturer: syz [ 204.412372][ T5858] usb 5-1: SerialNumber: syz [ 204.566598][ T5858] usb 5-1: config 0 descriptor?? [ 205.209789][ T5858] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 205.232566][ T5858] usb 5-1: USB disconnect, device number 4 [ 205.245844][ T5858] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 206.971274][ T5797] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.011593][ T5797] usb 1-1: Using ep0 maxpacket: 8 [ 208.126771][ T5797] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 208.126800][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.126817][ T5797] usb 1-1: Product: syz [ 208.126830][ T5797] usb 1-1: Manufacturer: syz [ 208.126842][ T5797] usb 1-1: SerialNumber: syz [ 208.185929][ T5797] usb 1-1: config 0 descriptor?? [ 208.385514][ T5797] gspca_main: se401-2.14.0 probing 047d:5003 [ 209.430945][ T5797] gspca_se401: Wrong descriptor type [ 209.575247][ T6821] 9pnet_virtio: no channels available for device syz [ 210.871348][ T5797] usb 1-1: USB disconnect, device number 4 [ 213.724140][ T5809] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 217.951601][ T5809] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 217.955461][ T5809] Bluetooth: hci1: Injecting HCI hardware error event [ 217.957159][ T5803] Bluetooth: hci1: hardware error 0x00 [ 221.570290][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 221.721177][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 221.729231][ T5917] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 221.729259][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.729277][ T5917] usb 4-1: Product: syz [ 221.729290][ T5917] usb 4-1: Manufacturer: syz [ 221.729303][ T5917] usb 4-1: SerialNumber: syz [ 221.775078][ T5917] usb 4-1: config 0 descriptor?? [ 222.000607][ T5917] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.601271][ T5803] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 224.381678][ T5917] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 224.385071][ T5917] usb 4-1: USB disconnect, device number 5 [ 224.503993][ T6907] bpq0: left promiscuous mode [ 224.504009][ T6907] bpq0: left allmulticast mode [ 224.573201][ T6910] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 229.001934][ T805] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 229.021805][ T805] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.436008][ T6960] fido_id[6960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.081393][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 234.467301][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 234.474920][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 234.474947][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.474965][ T10] usb 1-1: Product: syz [ 234.474978][ T10] usb 1-1: Manufacturer: syz [ 234.474990][ T10] usb 1-1: SerialNumber: syz [ 235.564467][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 235.564492][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 236.761531][ T6040] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 237.085014][ T7025] 9pnet_virtio: no channels available for device syz [ 242.427427][ T5803] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 244.474075][ T7074] 9pnet_virtio: no channels available for device syz [ 247.402256][ T5803] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 247.402692][ T5803] Bluetooth: hci2: Injecting HCI hardware error event [ 247.405314][ T5809] Bluetooth: hci2: hardware error 0x00 [ 249.326836][ T5803] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 250.896834][ T5809] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 250.964808][ T7120] 9pnet_virtio: no channels available for device syz [ 251.886741][ T7124] bridge0: entered promiscuous mode [ 251.887024][ T7124] macsec1: entered promiscuous mode [ 251.889331][ T7124] bridge0: port 3(macsec1) entered blocking state [ 251.889581][ T7124] bridge0: port 3(macsec1) entered disabled state [ 251.889832][ T7124] macsec1: entered allmulticast mode [ 251.889846][ T7124] bridge0: entered allmulticast mode [ 251.991800][ T7124] macsec1: left allmulticast mode [ 251.991824][ T7124] bridge0: left allmulticast mode [ 252.040655][ T7124] bridge0: left promiscuous mode [ 252.464510][ T7129] trusted_key: encrypted_key: insufficient parameters specified [ 252.498607][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 252.498855][ T7129] openvswitch: netlink: Flow key attr not present in new flow. [ 253.066159][ T7128] XFS (nbd2): SB validate failed with error -5. [ 253.906572][ T5809] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 253.906948][ T5809] Bluetooth: hci3: Injecting HCI hardware error event [ 253.910197][ T5803] Bluetooth: hci3: hardware error 0x00 [ 254.722492][ T6270] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 254.786636][ T7164] 9pnet_virtio: no channels available for device syz [ 254.881147][ T6270] usb 4-1: Using ep0 maxpacket: 8 [ 254.938812][ T6270] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 254.938892][ T6270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.938911][ T6270] usb 4-1: Product: syz [ 254.938924][ T6270] usb 4-1: Manufacturer: syz [ 254.938938][ T6270] usb 4-1: SerialNumber: syz [ 255.052421][ T6270] usb 4-1: config 0 descriptor?? [ 255.705880][ T6270] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.726538][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.726600][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.051208][ T5803] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 257.192100][ T7181] trusted_key: encrypted_key: insufficient parameters specified [ 257.197835][ T7181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 257.197857][ T7181] openvswitch: netlink: Flow key attr not present in new flow. [ 257.290439][ T7181] XFS (nbd2): SB validate failed with error -5. [ 257.679220][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 257.682204][ T6270] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 257.719158][ T6270] usb 4-1: USB disconnect, device number 6 [ 258.300227][ T37] audit: type=1326 audit(1767571577.542:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f890cf749 code=0x7ffc0000 [ 258.300261][ T37] audit: type=1326 audit(1767571577.542:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f890cf749 code=0x7ffc0000 [ 258.418697][ T37] audit: type=1326 audit(1767571577.662:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f6f890cf749 code=0x7ffc0000 [ 258.420105][ T37] audit: type=1326 audit(1767571577.672:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f890cf749 code=0x7ffc0000 [ 260.022191][ T7213] 9pnet_virtio: no channels available for device syz [ 265.382972][ T6305] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 265.403145][ T7259] 9pnet_virtio: no channels available for device syz [ 265.539613][ T6305] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 265.539641][ T6305] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 265.539690][ T6305] usb 4-1: config 0 has no interface number 0 [ 265.583336][ T6305] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 265.583364][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.583383][ T6305] usb 4-1: Product: syz [ 265.583396][ T6305] usb 4-1: Manufacturer: syz [ 265.583446][ T6305] usb 4-1: SerialNumber: syz [ 267.211210][ T6305] usb 4-1: config 0 descriptor?? [ 267.638168][ T6305] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 267.638209][ T6305] uvcvideo 4-1:0.64: No valid video chain found. [ 267.881594][ T6305] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 267.881834][ T5801] usb 4-1: USB disconnect, device number 7 [ 268.031090][ T6305] usb 3-1: Using ep0 maxpacket: 16 [ 268.037513][ T6305] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 268.037539][ T6305] usb 3-1: config 1 has no interface number 0 [ 268.037585][ T6305] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.037608][ T6305] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.037631][ T6305] usb 3-1: config 1 interface 105 has no altsetting 0 [ 268.040076][ T6305] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 268.040101][ T6305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.040120][ T6305] usb 3-1: Product: syz [ 268.040134][ T6305] usb 3-1: Manufacturer: syz [ 268.040147][ T6305] usb 3-1: SerialNumber: syz [ 268.137050][ T7269] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 268.137174][ T7269] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 269.491633][ T7269] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 269.491788][ T7269] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 270.387032][ T6305] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 270.387342][ T6305] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61 [ 271.657342][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 271.891930][ T7281] usb 3-1: USB disconnect, device number 5 [ 287.161118][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 291.392102][ T6006] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 291.567550][ T7443] trusted_key: encrypted_key: insufficient parameters specified [ 291.588267][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'. [ 291.588326][ T7443] openvswitch: netlink: Flow key attr not present in new flow. [ 291.672454][ T6006] usb 1-1: Using ep0 maxpacket: 8 [ 291.762737][ T6006] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 291.762777][ T6006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 291.762834][ T6006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.762886][ T6006] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.762959][ T6006] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.763008][ T6006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.295763][ T7443] XFS (nbd2): SB validate failed with error -5. [ 293.334493][ T6006] usb 1-1: GET_CAPABILITIES returned 0 [ 293.334523][ T6006] usbtmc 1-1:16.0: can't read capabilities [ 293.594991][ T6006] usb 1-1: USB disconnect, device number 6 [ 294.651627][ T7470] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 298.681438][ T7508] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.191080][ T805] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 299.461090][ T805] usb 5-1: Using ep0 maxpacket: 16 [ 299.504638][ T805] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 299.504666][ T805] usb 5-1: config 1 has no interface number 0 [ 299.504712][ T805] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 299.504724][ T805] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 299.504737][ T805] usb 5-1: config 1 interface 105 has no altsetting 0 [ 299.589479][ T805] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 299.589508][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.589527][ T805] usb 5-1: Product: syz [ 299.589540][ T805] usb 5-1: Manufacturer: syz [ 299.589553][ T805] usb 5-1: SerialNumber: syz [ 299.623115][ T7515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 299.623255][ T7515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.204748][ T7515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.205058][ T7515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.406174][ T805] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3 [ 300.406482][ T805] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 300.572350][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 300.721170][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 300.729075][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 300.729104][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.729122][ T10] usb 4-1: Product: syz [ 300.729135][ T10] usb 4-1: Manufacturer: syz [ 300.729148][ T10] usb 4-1: SerialNumber: syz [ 300.812662][ T10] usb 4-1: config 0 descriptor?? [ 301.205254][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 302.066042][ T6669] usb 5-1: USB disconnect, device number 5 [ 303.684825][ T7553] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.782974][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 303.822487][ T10] usb 4-1: USB disconnect, device number 8 [ 307.066530][ T7281] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 307.211123][ T7281] usb 4-1: Using ep0 maxpacket: 16 [ 307.212916][ T7281] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 307.212941][ T7281] usb 4-1: config 1 has no interface number 0 [ 307.212984][ T7281] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 307.213008][ T7281] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 307.213031][ T7281] usb 4-1: config 1 interface 105 has no altsetting 0 [ 307.215345][ T7281] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 307.215370][ T7281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.215388][ T7281] usb 4-1: Product: syz [ 307.215401][ T7281] usb 4-1: Manufacturer: syz [ 307.215414][ T7281] usb 4-1: SerialNumber: syz [ 308.286479][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.286571][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.864443][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.864592][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 309.065986][ T7281] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 5 [ 309.066166][ T7281] aqc111 4-1:1.105: probe with driver aqc111 failed with error -61 [ 310.329520][ T7281] usb 4-1: USB disconnect, device number 9 [ 311.312591][ T6669] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 311.471151][ T6669] usb 2-1: Using ep0 maxpacket: 8 [ 311.696116][ T6669] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 311.696145][ T6669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.696164][ T6669] usb 2-1: Product: syz [ 311.696176][ T6669] usb 2-1: Manufacturer: syz [ 311.696189][ T6669] usb 2-1: SerialNumber: syz [ 311.758044][ T6669] usb 2-1: config 0 descriptor?? [ 312.093687][ T6669] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 313.544657][ T6669] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 315.871878][ T6006] usb 2-1: USB disconnect, device number 7 [ 317.712270][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.712339][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.768726][ T6006] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 319.781171][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 319.786554][ T6006] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 319.786583][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.786602][ T6006] usb 5-1: Product: syz [ 319.786615][ T6006] usb 5-1: Manufacturer: syz [ 319.786629][ T6006] usb 5-1: SerialNumber: syz [ 319.836564][ T6006] usb 5-1: config 0 descriptor?? [ 320.072885][ T6006] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 321.893525][ T6006] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 322.010675][ T6634] usb 5-1: USB disconnect, device number 6 [ 327.771222][ T6270] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 327.911132][ T805] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 327.921112][ T6270] usb 2-1: Using ep0 maxpacket: 8 [ 327.925738][ T6270] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.925766][ T6270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.925784][ T6270] usb 2-1: Product: syz [ 327.925797][ T6270] usb 2-1: Manufacturer: syz [ 327.925810][ T6270] usb 2-1: SerialNumber: syz [ 327.970597][ T6270] usb 2-1: config 0 descriptor?? [ 328.081078][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 328.106042][ T805] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 328.106119][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.106139][ T805] usb 3-1: Product: syz [ 328.106153][ T805] usb 3-1: Manufacturer: syz [ 328.106166][ T805] usb 3-1: SerialNumber: syz [ 328.161475][ T805] r8152-cfgselector 3-1: Unknown version 0x0000 [ 328.161500][ T805] r8152-cfgselector 3-1: config 0 descriptor?? [ 328.184589][ T6270] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 328.667819][ T5866] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 328.783574][ T7759] [U]  [ 328.783637][ T7759] [U] K{ [ 328.784100][ T7759] [U] T 1ŠFFˊ`GJǘGO/MC [ 328.786494][ T7759] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 328.787352][ T7759] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 328.791058][ T7759] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 328.795815][ T7759] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 328.796830][ T7759] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 328.797814][ T7759] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 328.799969][ T7759] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 328.808244][ T7759] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 328.809468][ T7759] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 328.809665][ T7759] [U] 22Ʃ۩X?0;3U [ 328.812078][ T7759] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 328.812848][ T7759] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 328.813525][ T7759] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 328.813922][ T7759] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 328.814982][ T7759] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 328.815051][ T7759] [U] EC [ 328.816171][ T7759] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 329.497613][ T7756] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 329.636738][ T6270] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 329.673962][ T6270] usb 2-1: USB disconnect, device number 8 [ 333.848921][ T6040] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 334.071661][ T6040] usb 1-1: Using ep0 maxpacket: 8 [ 334.408085][ T6040] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.408123][ T6040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.408142][ T6040] usb 1-1: Product: syz [ 334.408154][ T6040] usb 1-1: Manufacturer: syz [ 334.408166][ T6040] usb 1-1: SerialNumber: syz [ 334.436297][ T6040] usb 1-1: config 0 descriptor?? [ 334.651226][ T6040] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.674883][ T5801] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 334.921103][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 334.943289][ T5801] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.943369][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.943388][ T5801] usb 2-1: Product: syz [ 334.943401][ T5801] usb 2-1: Manufacturer: syz [ 334.943414][ T5801] usb 2-1: SerialNumber: syz [ 334.957747][ T5801] usb 2-1: config 0 descriptor?? [ 335.993655][ T6040] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 336.018170][ T5801] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 337.224032][ T5866] usb 1-1: USB disconnect, device number 7 [ 339.125582][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.575'. [ 339.356754][ T5801] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 339.391110][ T5801] usb 2-1: USB disconnect, device number 9 [ 339.477730][ T7833] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 340.291496][ T7836] trusted_key: encrypted_key: insufficient parameters specified [ 340.292608][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 340.292622][ T7834] openvswitch: netlink: Flow key attr not present in new flow. [ 340.491756][ T7834] XFS (nbd4): SB validate failed with error -5. [ 342.124303][ T5801] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 342.321394][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 342.360065][ T5801] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 342.360094][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.360454][ T5801] usb 2-1: Product: syz [ 342.360469][ T5801] usb 2-1: Manufacturer: syz [ 342.360482][ T5801] usb 2-1: SerialNumber: syz [ 342.787610][ T5801] usb 2-1: config 0 descriptor?? [ 343.037046][ T5801] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 343.099024][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.586'. [ 343.401190][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 343.554520][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 343.572664][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.572690][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.572707][ T10] usb 5-1: Product: syz [ 343.572720][ T10] usb 5-1: Manufacturer: syz [ 343.572733][ T10] usb 5-1: SerialNumber: syz [ 343.577857][ T10] usb 5-1: config 0 descriptor?? [ 343.642035][ T5801] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 343.792069][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 343.806390][ T7884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 344.770757][ T6606] usb 2-1: USB disconnect, device number 10 [ 345.068935][ T37] audit: type=1326 audit(1767571664.312:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 345.117001][ T37] audit: type=1326 audit(1767571664.352:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 345.117054][ T37] audit: type=1326 audit(1767571664.352:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 345.117093][ T37] audit: type=1326 audit(1767571664.352:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 345.245941][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 345.249426][ T10] usb 5-1: USB disconnect, device number 7 [ 346.793478][ T5917] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 346.953121][ T5917] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 346.953149][ T5917] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 346.953167][ T5917] usb 1-1: config 0 has no interface number 0 [ 346.971810][ T5917] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 346.971847][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.971865][ T5917] usb 1-1: Product: syz [ 346.971878][ T5917] usb 1-1: Manufacturer: syz [ 346.971891][ T5917] usb 1-1: SerialNumber: syz [ 347.003782][ T5917] usb 1-1: config 0 descriptor?? [ 347.490653][ T5917] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 347.491034][ T5917] uvcvideo 1-1:0.64: No valid video chain found. [ 347.723221][ T5917] usb 1-1: USB disconnect, device number 8 [ 347.971197][ T7281] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 348.152081][ T7281] usb 2-1: Using ep0 maxpacket: 8 [ 348.615548][ T7281] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 348.615576][ T7281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.615594][ T7281] usb 2-1: Product: syz [ 348.615607][ T7281] usb 2-1: Manufacturer: syz [ 348.615628][ T7281] usb 2-1: SerialNumber: syz [ 348.714903][ T7281] usb 2-1: config 0 descriptor?? [ 349.009450][ T7281] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.442462][ T6270] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 350.611143][ T6270] usb 1-1: Using ep0 maxpacket: 8 [ 350.617889][ T6270] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 350.617915][ T6270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.617934][ T6270] usb 1-1: Product: syz [ 350.617946][ T6270] usb 1-1: Manufacturer: syz [ 350.617959][ T6270] usb 1-1: SerialNumber: syz [ 350.671303][ T6270] usb 1-1: config 0 descriptor?? [ 350.762815][ T7281] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 350.878115][ T6270] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 351.869447][ T6040] usb 2-1: USB disconnect, device number 11 [ 352.287622][ T7991] [U]  [ 352.287677][ T7991] [U] K{ [ 352.288147][ T7991] [U] T 1ŠFFˊ`GJǘGO/MC [ 352.290491][ T7991] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 352.291383][ T7991] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 352.295103][ T7991] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 352.299896][ T7991] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 352.300938][ T7991] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 352.302026][ T7991] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 352.304210][ T7991] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 352.312542][ T7991] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 352.313765][ T7991] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 352.313957][ T7991] [U] 22Ʃ۩X?0;3U [ 352.316351][ T7991] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 352.317116][ T7991] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 352.317803][ T7991] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 352.318199][ T7991] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 352.319256][ T7991] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 352.319327][ T7991] [U] EC [ 352.320369][ T7991] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 352.505693][ T6270] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 352.766374][ T6270] usb 1-1: USB disconnect, device number 9 [ 352.948304][ T7987] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 355.372859][ T5887] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 356.771186][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 356.791249][ T5887] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 356.791272][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.791282][ T5887] usb 1-1: Product: syz [ 356.791289][ T5887] usb 1-1: Manufacturer: syz [ 356.791296][ T5887] usb 1-1: SerialNumber: syz [ 356.833342][ T5887] usb 1-1: config 0 descriptor?? [ 357.082321][ T5887] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 359.468850][ T5887] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 359.511188][ T6606] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 359.661111][ T6606] usb 2-1: Using ep0 maxpacket: 8 [ 359.676129][ T6606] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 359.676156][ T6606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.676175][ T6606] usb 2-1: Product: syz [ 359.676188][ T6606] usb 2-1: Manufacturer: syz [ 359.676199][ T6606] usb 2-1: SerialNumber: syz [ 359.695583][ T6606] usb 2-1: config 0 descriptor?? [ 360.021321][ T6606] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 360.034860][ T5866] usb 1-1: USB disconnect, device number 10 [ 362.149561][ T6606] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 362.376880][ T7281] usb 2-1: USB disconnect, device number 12 [ 364.069711][ T8092] [U]  [ 364.069768][ T8092] [U] K{ [ 364.070242][ T8092] [U] T 1ŠFFˊ`GJǘGO/MC [ 364.072654][ T8092] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 364.073517][ T8092] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 364.077199][ T8092] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 364.081993][ T8092] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 364.083028][ T8092] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 364.084018][ T8092] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 364.086191][ T8092] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 364.094426][ T8092] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 364.095637][ T8092] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 364.095832][ T8092] [U] 22Ʃ۩X?0;3U [ 364.098224][ T8092] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 364.098991][ T8092] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 364.099672][ T8092] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 364.100086][ T8092] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 364.101174][ T8092] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 364.101241][ T8092] [U] EC [ 364.102275][ T8092] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 365.041433][ T8090] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 367.593665][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 378.341109][ T6037] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 378.581112][ T6037] usb 1-1: Using ep0 maxpacket: 8 [ 378.586454][ T6037] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 378.586484][ T6037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.586502][ T6037] usb 1-1: Product: syz [ 378.586516][ T6037] usb 1-1: Manufacturer: syz [ 378.586529][ T6037] usb 1-1: SerialNumber: syz [ 378.594438][ T6037] usb 1-1: config 0 descriptor?? [ 378.609732][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.611764][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.847897][ T6037] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 381.858572][ T6037] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 381.863778][ T6037] usb 1-1: USB disconnect, device number 11 [ 384.895657][ T8239] fuse: Bad value for 'fd' [ 393.131024][ T8295] [U]  [ 393.131093][ T8295] [U] K{ [ 393.131562][ T8295] [U] T 1ŠFFˊ`GJǘGO/MC [ 393.133975][ T8295] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 393.134848][ T8295] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 393.138599][ T8295] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 393.143461][ T8295] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 393.144504][ T8295] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 393.145505][ T8295] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 393.147720][ T8295] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 393.156087][ T8295] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 393.157331][ T8295] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 393.157525][ T8295] [U] 22Ʃ۩X?0;3U [ 393.159940][ T8295] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 393.160729][ T8295] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 393.161450][ T8295] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 393.161855][ T8295] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 393.162938][ T8295] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 393.163006][ T8295] [U] EC [ 393.164085][ T8295] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 393.494749][ T8293] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 400.060250][ T8331] [U]  [ 400.060307][ T8331] [U] K{ [ 400.060800][ T8331] [U] T 1ŠFFˊ`GJǘGO/MC [ 400.063233][ T8331] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 400.064135][ T8331] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 400.067873][ T8331] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 400.072776][ T8331] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 400.073826][ T8331] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 400.074820][ T8331] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 400.077037][ T8331] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 400.085913][ T8331] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 400.087143][ T8331] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 400.087339][ T8331] [U] 22Ʃ۩X?0;3U [ 400.089771][ T8331] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 400.090557][ T8331] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 400.091272][ T8331] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 400.091683][ T8331] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 400.092753][ T8331] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 400.092820][ T8331] [U] EC [ 400.093881][ T8331] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 400.493492][ T8328] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 402.385381][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 403.271187][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 403.276421][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 403.276449][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.276468][ T10] usb 5-1: Product: syz [ 403.276481][ T10] usb 5-1: Manufacturer: syz [ 403.276494][ T10] usb 5-1: SerialNumber: syz [ 403.335852][ T10] usb 5-1: config 0 descriptor?? [ 404.499642][ T10] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 404.499748][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 405.731779][ T6270] usb 5-1: USB disconnect, device number 8 [ 406.100717][ T8374] [U]  [ 406.100774][ T8374] [U] K{ [ 406.101261][ T8374] [U] T 1ŠFFˊ`GJǘGO/MC [ 406.103660][ T8374] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 406.104518][ T8374] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 406.108233][ T8374] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 406.112991][ T8374] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 406.114024][ T8374] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 406.115019][ T8374] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 406.117206][ T8374] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 406.125465][ T8374] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 406.126516][ T8374] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 406.126652][ T8374] [U] 22Ʃ۩X?0;3U [ 406.128439][ T8374] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 406.129219][ T8374] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 406.129901][ T8374] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 406.130301][ T8374] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 406.131285][ T8374] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 406.131320][ T8374] [U] EC [ 406.131844][ T8374] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 406.134869][ T8373] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 410.368252][ T8410] [U]  [ 410.368304][ T8410] [U] K{ [ 410.368629][ T8410] [U] T 1ŠFFˊ`GJǘGO/MC [ 410.369813][ T8410] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 410.370232][ T8410] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 410.372219][ T8410] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 410.374599][ T8410] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 410.375110][ T8410] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 410.375626][ T8410] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 410.376715][ T8410] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 410.380818][ T8410] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 410.381555][ T8410] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 410.381653][ T8410] [U] 22Ʃ۩X?0;3U [ 410.382845][ T8410] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 410.383227][ T8410] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 410.383568][ T8410] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 410.383767][ T8410] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 410.384296][ T8410] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 410.384328][ T8410] [U] EC [ 410.384848][ T8410] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 410.387870][ T8409] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 410.584929][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 410.871256][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 411.172631][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 411.172649][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.172659][ T10] usb 2-1: Product: syz [ 411.172666][ T10] usb 2-1: Manufacturer: syz [ 411.172673][ T10] usb 2-1: SerialNumber: syz [ 411.243492][ T10] usb 2-1: config 0 descriptor?? [ 411.580639][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 412.963415][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 412.975083][ T10] usb 2-1: USB disconnect, device number 13 [ 413.657684][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 415.146870][ T43] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 415.146887][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.146898][ T43] usb 4-1: Product: syz [ 415.146905][ T43] usb 4-1: Manufacturer: syz [ 415.146918][ T43] usb 4-1: SerialNumber: syz [ 415.197958][ T43] usb 4-1: config 0 descriptor?? [ 416.876123][ T43] usb-storage 4-1:0.0: USB Mass Storage device detected [ 419.225471][ T43] usb 4-1: USB disconnect, device number 10 [ 419.297831][ T8455] [U]  [ 419.297889][ T8455] [U] K{ [ 419.298367][ T8455] [U] T 1ŠFFˊ`GJǘGO/MC [ 419.300774][ T8455] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 419.301664][ T8455] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 419.305347][ T8455] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 419.310054][ T8455] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 419.311097][ T8455] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 419.312048][ T8455] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 419.314173][ T8455] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 419.322317][ T8455] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 419.323499][ T8455] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 419.323696][ T8455] [U] 22Ʃ۩X?0;3U [ 419.326125][ T8455] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 419.326892][ T8455] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 419.327568][ T8455] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 419.327949][ T8455] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 419.328977][ T8455] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 419.329044][ T8455] [U] EC [ 419.330033][ T8455] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 419.334163][ T8451] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 426.954024][ T8505] [U]  [ 426.954086][ T8505] [U] K{ [ 426.954550][ T8505] [U] T 1ŠFFˊ`GJǘGO/MC [ 426.956925][ T8505] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 426.957727][ T8505] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 427.048882][ T8505] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 427.104166][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.771'. [ 427.112306][ T8505] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 427.113277][ T8505] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 427.114221][ T8505] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 427.116246][ T8505] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 427.160550][ T8505] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 427.166339][ T8505] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 427.166524][ T8505] [U] 22Ʃ۩X?0;3U [ 427.176262][ T8505] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 427.178995][ T8505] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 427.179635][ T8505] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 427.182837][ T8505] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 427.185175][ T8505] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 427.185238][ T8505] [U] EC [ 427.190436][ T8505] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 428.177548][ T8502] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 433.689315][ T8551] 9pnet_virtio: no channels available for device syz [ 439.385328][ T8604] 9pnet_virtio: no channels available for device syz [ 440.062982][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.063199][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.753200][ T8613] Driver unsupported XDP return value 0 on prog (id 125) dev N/A, expect packet loss! [ 442.938446][ T8627] fuse: Bad value for 'rootmode' [ 444.321696][ T8643] 9pnet_virtio: no channels available for device syz [ 446.085018][ T8651] trusted_key: encrypted_key: insufficient parameters specified [ 446.139745][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'. [ 446.139769][ T8651] openvswitch: netlink: Flow key attr not present in new flow. [ 447.108755][ T8651] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd0": -EINTR [ 448.909805][ T8678] fuse: Unknown parameter 'use00000000000000000000' [ 449.488866][ T8686] 9pnet_virtio: no channels available for device syz [ 454.718935][ T8710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.828'. [ 454.718958][ T8710] openvswitch: netlink: Flow key attr not present in new flow. [ 454.718984][ T8709] trusted_key: encrypted_key: insufficient parameters specified [ 455.061194][ T8709] XFS (nbd3): SB validate failed with error -5. [ 455.690891][ T8725] fuse: Unknown parameter 'use00000000000000000000' [ 457.307180][ T8742] 9pnet_virtio: no channels available for device syz [ 458.461448][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 458.643061][ T43] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 458.643089][ T43] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 458.643656][ T43] usb 1-1: config 0 has no interface number 0 [ 458.647771][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 458.647799][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.647816][ T43] usb 1-1: Product: syz [ 458.647830][ T43] usb 1-1: Manufacturer: syz [ 458.647843][ T43] usb 1-1: SerialNumber: syz [ 458.656826][ T43] usb 1-1: config 0 descriptor?? [ 459.138248][ T43] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 459.138273][ T43] uvcvideo 1-1:0.64: No valid video chain found. [ 459.321188][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 459.525088][ T6634] usb 1-1: USB disconnect, device number 12 [ 459.846855][ T8761] trusted_key: encrypted_key: insufficient parameters specified [ 459.873116][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.842'. [ 459.873131][ T8761] openvswitch: netlink: Flow key attr not present in new flow. [ 460.150810][ T8761] XFS (nbd2): SB validate failed with error -5. [ 460.319207][ T8780] fuse: Unknown parameter 'use00000000000000000000' [ 461.510682][ T8791] 9pnet_virtio: no channels available for device syz [ 472.749621][ T8882] 9pnet_virtio: no channels available for device syz [ 477.493578][ T6634] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 477.785189][ T6634] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 477.785344][ T6634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.785475][ T6634] usb 4-1: Product: syz [ 477.785545][ T6634] usb 4-1: Manufacturer: syz [ 477.785645][ T6634] usb 4-1: SerialNumber: syz [ 478.259614][ T6634] usb 4-1: config 0 descriptor?? [ 478.360489][ T8923] 9pnet_virtio: no channels available for device syz [ 478.961350][ T6634] usb-storage 4-1:0.0: USB Mass Storage device detected [ 479.518078][ T6634] usb 4-1: USB disconnect, device number 11 [ 483.802106][ T8969] 9pnet_virtio: no channels available for device syz [ 486.901100][ T6040] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 487.061066][ T6040] usb 2-1: Using ep0 maxpacket: 8 [ 487.066249][ T6040] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 487.066278][ T6040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.066296][ T6040] usb 2-1: Product: syz [ 487.066310][ T6040] usb 2-1: Manufacturer: syz [ 487.066323][ T6040] usb 2-1: SerialNumber: syz [ 487.145107][ T6040] usb 2-1: config 0 descriptor?? [ 487.355008][ T6040] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.084586][ T6040] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 488.439236][ T9014] 9pnet_virtio: no channels available for device syz [ 489.375583][ T6040] usb 2-1: USB disconnect, device number 14 [ 493.363976][ T6634] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 494.161322][ T6634] usb 5-1: Using ep0 maxpacket: 8 [ 494.167063][ T6634] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 494.167089][ T6634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.167105][ T6634] usb 5-1: Product: syz [ 494.167118][ T6634] usb 5-1: Manufacturer: syz [ 494.167130][ T6634] usb 5-1: SerialNumber: syz [ 494.178963][ T6634] usb 5-1: config 0 descriptor?? [ 495.251828][ T6634] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 495.251933][ T6634] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 496.646902][ T43] usb 5-1: USB disconnect, device number 9 [ 496.972685][ T9090] fuse: Unknown parameter 'user_id00000000000000000000' [ 500.142084][ T6270] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 500.320473][ T6270] usb 1-1: Using ep0 maxpacket: 8 [ 500.341260][ T6270] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 500.341283][ T6270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.341293][ T6270] usb 1-1: Product: syz [ 500.341300][ T6270] usb 1-1: Manufacturer: syz [ 500.341307][ T6270] usb 1-1: SerialNumber: syz [ 500.374354][ T6270] usb 1-1: config 0 descriptor?? [ 500.611218][ T6270] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 501.349113][ T6270] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 501.394089][ T9139] fuse: Bad value for 'fd' [ 501.441143][ T6040] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 501.487536][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.487603][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.616124][ T6040] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 501.616153][ T6040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.616163][ T6040] usb 4-1: Product: syz [ 501.616170][ T6040] usb 4-1: Manufacturer: syz [ 501.616177][ T6040] usb 4-1: SerialNumber: syz [ 501.624454][ T6040] usb 4-1: config 0 descriptor?? [ 501.840667][ T6040] usb-storage 4-1:0.0: USB Mass Storage device detected [ 503.181765][ T6634] usb 1-1: USB disconnect, device number 13 [ 503.200939][ T6040] usb 4-1: USB disconnect, device number 12 [ 503.401145][ T6079] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 504.316713][ T6079] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 504.316742][ T6079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.316761][ T6079] usb 3-1: Product: syz [ 504.316774][ T6079] usb 3-1: Manufacturer: syz [ 504.316788][ T6079] usb 3-1: SerialNumber: syz [ 504.407675][ T6079] usb 3-1: config 0 descriptor?? [ 505.486040][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 505.597892][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 505.752778][ T6079] usb-storage 3-1:0.0: USB Mass Storage device detected [ 506.076581][ T6079] usb 3-1: USB disconnect, device number 7 [ 508.261911][ T6079] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 508.917189][ T6079] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 508.917219][ T6079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.917238][ T6079] usb 5-1: Product: syz [ 508.917251][ T6079] usb 5-1: Manufacturer: syz [ 508.917265][ T6079] usb 5-1: SerialNumber: syz [ 508.971027][ T6079] usb 5-1: config 0 descriptor?? [ 509.185257][ T6079] usb-storage 5-1:0.0: USB Mass Storage device detected [ 509.338977][ T6079] usb 5-1: USB disconnect, device number 10 [ 510.844282][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 510.934233][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 514.979764][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 515.822258][ T7281] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 516.140566][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 516.472774][ T7281] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 516.472803][ T7281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.472823][ T7281] usb 5-1: Product: syz [ 516.472836][ T7281] usb 5-1: Manufacturer: syz [ 516.472850][ T7281] usb 5-1: SerialNumber: syz [ 516.616075][ T7281] usb 5-1: config 0 descriptor?? [ 518.401101][ T6079] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 518.771288][ T6079] usb 4-1: Using ep0 maxpacket: 16 [ 519.581408][ T6079] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 519.581438][ T6079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.581456][ T6079] usb 4-1: Product: syz [ 519.581470][ T6079] usb 4-1: Manufacturer: syz [ 519.581483][ T6079] usb 4-1: SerialNumber: syz [ 519.588087][ T6079] r8152-cfgselector 4-1: Unknown version 0x0000 [ 519.588102][ T6079] r8152-cfgselector 4-1: config 0 descriptor?? [ 521.997396][ T7281] usb-storage 5-1:0.0: USB Mass Storage device detected [ 522.329838][ T6079] r8152-cfgselector 4-1: Unknown version 0x0000 [ 522.330522][ T6079] r8152-cfgselector 4-1: bad CDC descriptors [ 522.372456][ T6079] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 523.850105][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 523.857120][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 523.910405][ T6079] usb 5-1: USB disconnect, device number 11 [ 528.466694][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 533.533320][ T6037] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 533.752039][ T6037] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 533.752070][ T6037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.752089][ T6037] usb 4-1: Product: syz [ 533.752103][ T6037] usb 4-1: Manufacturer: syz [ 533.752117][ T6037] usb 4-1: SerialNumber: syz [ 534.090950][ T6037] usb 4-1: config 0 descriptor?? [ 539.166501][ T6037] usb-storage 4-1:0.0: USB Mass Storage device detected [ 540.211603][ T6037] usb 4-1: USB disconnect, device number 14 [ 540.933366][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 551.637647][ T9497] trusted_key: encrypted_key: insufficient parameters specified [ 551.649047][ T9497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1054'. [ 551.649113][ T9497] openvswitch: netlink: Flow key attr not present in new flow. [ 551.897055][ T9497] XFS (nbd3): SB validate failed with error -5. [ 560.246398][ T9573] 9pnet_virtio: no channels available for device syz [ 563.058105][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.058579][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.251950][ T9629] 9pnet_virtio: no channels available for device syz [ 569.613290][ T5958] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 570.693680][ T5958] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 570.693708][ T5958] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 570.693726][ T5958] usb 1-1: config 0 has no interface number 0 [ 570.699288][ T5958] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 570.699317][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.699335][ T5958] usb 1-1: Product: syz [ 570.699348][ T5958] usb 1-1: Manufacturer: syz [ 570.699361][ T5958] usb 1-1: SerialNumber: syz [ 570.741265][ T5917] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 570.787512][ T5958] usb 1-1: config 0 descriptor?? [ 571.613919][ T5917] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 571.614146][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.614166][ T5917] usb 4-1: Product: syz [ 571.616285][ T5917] usb 4-1: Manufacturer: syz [ 571.616305][ T5917] usb 4-1: SerialNumber: syz [ 571.716569][ T5958] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 571.716605][ T5958] uvcvideo 1-1:0.64: No valid video chain found. [ 571.759553][ T5917] usb 4-1: config 0 descriptor?? [ 572.067472][ T6634] usb 1-1: USB disconnect, device number 14 [ 574.292720][ T5917] usb-storage 4-1:0.0: USB Mass Storage device detected [ 575.039283][ T5917] usb 4-1: USB disconnect, device number 15 [ 579.231540][ T5958] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 579.389667][ T5958] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 579.389695][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.389705][ T5958] usb 1-1: Product: syz [ 579.389713][ T5958] usb 1-1: Manufacturer: syz [ 579.389719][ T5958] usb 1-1: SerialNumber: syz [ 579.456844][ T5958] usb 1-1: config 0 descriptor?? [ 581.282099][ T5958] usb-storage 1-1:0.0: USB Mass Storage device detected [ 581.497528][ T5958] usb 1-1: USB disconnect, device number 15 [ 593.426737][ T9836] trusted_key: encrypted_key: insufficient parameters specified [ 593.438656][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1151'. [ 593.438711][ T9836] openvswitch: netlink: Flow key attr not present in new flow. [ 593.873600][ T9836] XFS (nbd3): SB validate failed with error -5. [ 594.614204][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 594.951220][ T10] usb 1-1: device descriptor read/64, error -71 [ 595.201139][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 595.331275][ T10] usb 1-1: device descriptor read/64, error -71 [ 595.442393][ T10] usb usb1-port1: attempt power cycle [ 597.011354][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 597.052036][ T10] usb 1-1: device descriptor read/8, error -71 [ 598.651191][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 598.758547][ T10] usb 1-1: device descriptor read/8, error -71 [ 598.863578][ T10] usb usb1-port1: unable to enumerate USB device [ 598.963220][ T9885] 9pnet_virtio: no channels available for device syz [ 601.065907][ T9894] trusted_key: encrypted_key: insufficient parameters specified [ 601.067008][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1165'. [ 601.067021][ T9894] openvswitch: netlink: Flow key attr not present in new flow. [ 601.203892][ T9894] XFS (nbd0): SB validate failed with error -5. [ 602.881251][ T9403] Bluetooth: hci4: command 0x0406 tx timeout [ 604.857884][ T9930] 9pnet_virtio: no channels available for device syz [ 606.251217][ T5880] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 606.491485][ T5880] usb 5-1: device descriptor read/64, error -71 [ 606.731178][ T5880] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 606.950793][ T5880] usb 5-1: device descriptor read/64, error -71 [ 607.051770][ T5880] usb usb5-port1: attempt power cycle [ 607.391148][ T5880] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 607.412495][ T5880] usb 5-1: device descriptor read/8, error -71 [ 607.651167][ T5880] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 607.671799][ T5880] usb 5-1: device descriptor read/8, error -71 [ 607.781779][ T5880] usb usb5-port1: unable to enumerate USB device [ 610.013144][ T9969] 9pnet_virtio: no channels available for device syz [ 612.488890][ T37] audit: type=1326 audit(1767571931.742:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.488944][ T37] audit: type=1326 audit(1767571931.742:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.492279][ T37] audit: type=1326 audit(1767571931.752:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.492539][ T37] audit: type=1326 audit(1767571931.752:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.493040][ T37] audit: type=1326 audit(1767571931.752:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.493082][ T37] audit: type=1326 audit(1767571931.752:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.499335][ T37] audit: type=1326 audit(1767571931.752:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.502165][ T37] audit: type=1326 audit(1767571931.762:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.502213][ T37] audit: type=1326 audit(1767571931.762:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.512012][ T37] audit: type=1326 audit(1767571931.762:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002a8ff749 code=0x7ffc0000 [ 612.611134][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 613.011685][ T43] usb 3-1: device descriptor read/64, error -71 [ 613.508880][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 614.981182][ T43] usb 3-1: device descriptor read/64, error -71 [ 615.091933][ T43] usb usb3-port1: attempt power cycle [ 616.064182][T10016] 9pnet_virtio: no channels available for device syz [ 616.931210][ T5880] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 617.923233][ T5880] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 617.923260][ T5880] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 617.923280][ T5880] usb 1-1: config 0 has no interface number 0 [ 617.925413][ T5880] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 617.925440][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.925457][ T5880] usb 1-1: Product: syz [ 617.925465][ T5880] usb 1-1: Manufacturer: syz [ 617.925472][ T5880] usb 1-1: SerialNumber: syz [ 617.929235][ T5880] usb 1-1: config 0 descriptor?? [ 618.726593][ T5880] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 618.726626][ T5880] uvcvideo 1-1:0.64: No valid video chain found. [ 618.731679][ T5880] usb 1-1: USB disconnect, device number 20 [ 619.381160][ T5880] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 619.689748][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.689774][ T5880] usb 2-1: config 0 has no interfaces? [ 619.695813][ T5880] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 619.695842][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.695853][ T5880] usb 2-1: Product: syz [ 619.695860][ T5880] usb 2-1: Manufacturer: syz [ 619.695868][ T5880] usb 2-1: SerialNumber: syz [ 619.699934][ T5880] usb 2-1: config 0 descriptor?? [ 623.708275][ T5957] usb 2-1: USB disconnect, device number 15 [ 624.604650][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.604722][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.931101][ T5917] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 626.087330][ T5917] usb 3-1: device descriptor read/64, error -71 [ 626.221243][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 626.401345][ T5917] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 626.441550][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.441627][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.441681][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 626.441801][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 626.441854][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.563405][ T43] usb 4-1: config 0 descriptor?? [ 626.602026][ T5917] usb 3-1: device descriptor read/64, error -71 [ 626.771494][ T5917] usb usb3-port1: attempt power cycle [ 627.339480][ T5917] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 627.473250][ T5917] usb 3-1: device descriptor read/8, error -71 [ 628.747569][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 632.203826][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 632.204003][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 632.231076][ T5917] usb 3-1: device descriptor read/8, error -71 [ 632.341657][ T5917] usb usb3-port1: unable to enumerate USB device [ 632.519844][ T43] usb 4-1: USB disconnect, device number 16 [ 632.831994][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 633.201055][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.201083][ T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.213839][ T43] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 633.213879][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.213899][ T43] usb 4-1: Product: syz [ 633.213913][ T43] usb 4-1: Manufacturer: syz [ 633.213926][ T43] usb 4-1: SerialNumber: syz [ 633.267817][ T43] usb 4-1: config 0 descriptor?? [ 633.476694][T10102] 9pnet_virtio: no channels available for device syz [ 638.648671][ T5880] usb 4-1: USB disconnect, device number 17 [ 640.205625][T10136] ================================================================== [ 640.205644][T10136] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 [ 640.205684][T10136] Read of size 1 at addr ffff8880493a0200 b[ 640.205684][T10136] Read of size 1 at addr ffff8880493a0200 by task syz.2.1232/10136 [ 640.205700][T10136] [ 640.205724][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.2.1232 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 640.205747][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.205768][T10136] Call Trace: [ 640.205779][T10136] [ 640.205787][T10136] dump_stack_lvl+0xe8/0x150 [ 640.205819][T10136] print_report+0xca/0x240 [ 640.205842][T10136] ? rt_spin_lock+0x88/0x3e0 [ 640.205863][T10136] kasan_report+0x118/0x150 [ 640.205892][T10136] ? rt_spin_lock+0x88/0x3e0 [ 640.205918][T10136] ? __wake_up_common_lock+0x2f/0x1e0 [ 640.205941][T10136] __kasan_check_byte+0x2a/0x40 [ 640.205968][T10136] lock_acquire+0x84/0x340 [ 640.205991][T10136] ? rt_mutex_slowunlock+0x668/0x8a0 [ 640.206015][T10136] ? reacquire_held_locks+0x104/0x190 [ 640.206046][T10136] rt_spin_lock+0x88/0x3e0 [ 640.206067][T10136] ? __wake_up_common_lock+0x2f/0x1e0 [ 640.206091][T10136] ? __pfx_rt_spin_lock+0x10/0x10 [ 640.206113][T10136] ? rt_spin_unlock+0x161/0x200 [ 640.206138][T10136] ? __wake_up_common_lock+0x18a/0x1e0 [ 640.206162][T10136] __wake_up_common_lock+0x2f/0x1e0 [ 640.206185][T10136] ? snd_pcm_post_stop+0x14a/0x1e0 [ 640.206213][T10136] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 640.206240][T10136] snd_pcm_action+0x1f4/0x240 [ 640.206264][T10136] loopback_trigger+0xb82/0x1b60 [ 640.206285][T10136] ? rcu_is_watching+0x15/0xb0 [ 640.206312][T10136] snd_pcm_do_start+0xb7/0x180 [ 640.206342][T10136] snd_pcm_action+0xe7/0x240 [ 640.206366][T10136] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 640.206390][T10136] ? __pfx_interleaved_copy+0x10/0x10 [ 640.206411][T10136] ? __pfx_default_write_copy+0x10/0x10 [ 640.206430][T10136] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 640.206447][T10136] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 640.206464][T10136] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 640.206486][T10136] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 640.206509][T10136] ? snd_pcm_oss_write3+0x1a2/0x350 [ 640.206538][T10136] snd_pcm_oss_write3+0x1bc/0x350 [ 640.206567][T10136] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 640.206592][T10136] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 640.206614][T10136] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 640.206641][T10136] snd_pcm_oss_write+0xa31/0xf20 [ 640.206676][T10136] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 640.206702][T10136] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 640.206725][T10136] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 640.206752][T10136] ? vfs_write+0x26a/0xb40 [ 640.206776][T10136] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 640.206803][T10136] vfs_write+0x287/0xb40 [ 640.206832][T10136] ? __pfx_vfs_write+0x10/0x10 [ 640.206857][T10136] ? __fget_files+0x2a/0x420 [ 640.206878][T10136] ? __fget_files+0x2a/0x420 [ 640.206896][T10136] ? __fget_files+0x3a6/0x420 [ 640.206915][T10136] ? __fget_files+0x2a/0x420 [ 640.206939][T10136] ksys_write+0x14b/0x260 [ 640.206964][T10136] ? __pfx_ksys_write+0x10/0x10 [ 640.206995][T10136] do_syscall_64+0xec/0xf80 [ 640.207013][T10136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.207032][T10136] ? trace_irq_disable+0x37/0x100 [ 640.207052][T10136] ? clear_bhb_loop+0x60/0xb0 [ 640.207072][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.207091][T10136] RIP: 0033:0x7f6f890cf749 [ 640.207115][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.207134][T10136] RSP: 002b:00007f6f8730d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.207160][T10136] RAX: ffffffffffffffda RBX: 00007f6f89326090 RCX: 00007f6f890cf749 [ 640.207176][T10136] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 640.207190][T10136] RBP: 00007f6f89153f91 R08: 0000000000000000 R09: 0000000000000000 [ 640.207203][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.207215][T10136] R13: 00007f6f89326128 R14: 00007f6f89326090 R15: 00007ffd97818e68 [ 640.207239][T10136] [ 640.207247][T10136] [ 640.207252][T10136] Allocated by task 10128: [ 640.207266][T10136] kasan_save_track+0x3e/0x80 [ 640.207289][T10136] __kasan_kmalloc+0x93/0xb0 [ 640.207317][T10136] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 640.207341][T10136] snd_pcm_attach_substream+0x5b7/0xb30 [ 640.207360][T10136] snd_pcm_open_substream+0xb6/0x2410 [ 640.207383][T10136] snd_pcm_oss_open+0xf2a/0x1bd0 [ 640.207407][T10136] chrdev_open+0x4cf/0x5e0 [ 640.207422][T10136] do_dentry_open+0x7d0/0x1270 [ 640.207439][T10136] vfs_open+0x3b/0x350 [ 640.207456][T10136] path_openat+0x342a/0x3df0 [ 640.207477][T10136] do_filp_open+0x1fa/0x410 [ 640.207498][T10136] do_sys_openat2+0x121/0x200 [ 640.207516][T10136] __x64_sys_openat+0x138/0x170 [ 640.207534][T10136] do_syscall_64+0xec/0xf80 [ 640.207550][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.207567][T10136] [ 640.207572][T10136] Freed by task 10128: [ 640.207581][T10136] kasan_save_track+0x3e/0x80 [ 640.207602][T10136] kasan_save_free_info+0x46/0x50 [ 640.207622][T10136] __kasan_slab_free+0x5c/0x80 [ 640.207644][T10136] kfree+0x1bd/0x900 [ 640.207663][T10136] snd_pcm_detach_substream+0x1e1/0x290 [ 640.207681][T10136] snd_pcm_oss_release+0x184/0x250 [ 640.207705][T10136] __fput+0x45b/0xa80 [ 640.207721][T10136] task_work_run+0x1d4/0x260 [ 640.207745][T10136] get_signal+0x11c4/0x1310 [ 640.207762][T10136] arch_do_signal_or_restart+0x9a/0x7a0 [ 640.207787][T10136] exit_to_user_mode_loop+0x87/0x4e0 [ 640.207809][T10136] do_syscall_64+0x2c1/0xf80 [ 640.207825][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.207842][T10136] [ 640.207847][T10136] The buggy address belongs to the object at ffff8880493a0000 [ 640.207847][T10136] which belongs to the cache kmalloc-2k of size 2048 [ 640.207867][T10136] The buggy address is located 512 bytes inside of [ 640.207867][T10136] freed 2048-byte region [ffff8880493a0000, ffff8880493a0800) [ 640.207888][T10136] [ 640.207893][T10136] The buggy address belongs to the physical page: [ 640.207910][T10136] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x493a0 [ 640.207928][T10136] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 640.207944][T10136] flags: 0x80000000000040(head|node=0|zone=1) [ 640.207963][T10136] page_type: f5(slab) [ 640.207981][T10136] raw: 0080000000000040 ffff88813ff27000 ffffea000127fc00 dead000000000002 [ 640.207998][T10136] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 640.208018][T10136] head: 0080000000000040 ffff88813ff27000 ffffea000127fc00 dead000000000002 [ 640.208035][T10136] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 640.208052][T10136] head: 0080000000000003 ffffea000124e801 00000000ffffffff 00000000ffffffff [ 640.208070][T10136] head: 00000007f9a1ea0a 0000000000000000 00000000ffffffff 0000000000000008 [ 640.208080][T10136] page dumped because: kasan: bad access detected [ 640.208089][T10136] page_owner tracks the page as allocated [ 640.208101][T10136] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5794, tgid 5794 (syz-executor), ts 82687697166, free_ts 72086446873 [ 640.208137][T10136] post_alloc_hook+0x234/0x290 [ 640.208160][T10136] get_page_from_freelist+0x28c0/0x2960 [ 640.208178][T10136] __alloc_frozen_pages_noprof+0x181/0x370 [ 640.208195][T10136] alloc_pages_mpol+0xd1/0x380 [ 640.208210][T10136] allocate_slab+0x86/0x3b0 [ 640.208229][T10136] ___slab_alloc+0xb10/0x13e0 [ 640.208246][T10136] __slab_alloc+0xc6/0x1f0 [ 640.208262][T10136] __kmalloc_cache_noprof+0x101/0x6d0 [ 640.208285][T10136] rtnl_newlink+0xfb/0x1c90 [ 640.208308][T10136] rtnetlink_rcv_msg+0x7cf/0xb70 [ 640.208327][T10136] netlink_rcv_skb+0x208/0x470 [ 640.208347][T10136] netlink_unicast+0x846/0xa10 [ 640.208366][T10136] netlink_sendmsg+0x805/0xb30 [ 640.208388][T10136] __sock_sendmsg+0x21c/0x270 [ 640.208413][T10136] __sys_sendto+0x3c7/0x520 [ 640.208431][T10136] __x64_sys_sendto+0xde/0x100 [ 640.208449][T10136] page last free pid 5784 tgid 5784 stack trace: [ 640.208460][T10136] free_unref_folios+0xc28/0x1810 [ 640.208484][T10136] folios_put_refs+0x569/0x670 [ 640.208499][T10136] free_pages_and_swap_cache+0x277/0x520 [ 640.208519][T10136] tlb_flush_mmu+0x3a0/0x680 [ 640.208535][T10136] tlb_finish_mmu+0xc3/0x1d0 [ 640.208552][T10136] vms_clear_ptes+0x42b/0x530 [ 640.208572][T10136] vms_complete_munmap_vmas+0x206/0x8a0 [ 640.208590][T10136] do_vmi_align_munmap+0x372/0x450 [ 640.208608][T10136] do_vmi_munmap+0x253/0x2e0 [ 640.208625][T10136] __vm_munmap+0x207/0x380 [ 640.208644][T10136] __x64_sys_munmap+0x60/0x70 [ 640.208667][T10136] do_syscall_64+0xec/0xf80 [ 640.208682][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.208700][T10136] [ 640.208704][T10136] Memory state around the buggy address: [ 640.208714][T10136] ffff8880493a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 640.208728][T10136] ffff8880493a0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 640.208741][T10136] >ffff8880493a0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 640.208751][T10136] ^ [ 640.208760][T10136] ffff8880493a0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 640.208772][T10136] ffff8880493a0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 640.208781][T10136] ================================================================== [ 640.251380][T10136] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 640.251406][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.2.1232 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 640.251428][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.251440][T10136] Call Trace: [ 640.251447][T10136] [ 640.251454][T10136] vpanic+0x1e0/0x670 [ 640.251484][T10136] panic+0xb9/0xc0 [ 640.251507][T10136] ? __pfx_panic+0x10/0x10 [ 640.251531][T10136] ? preempt_schedule_thunk+0x16/0x30 [ 640.251554][T10136] ? preempt_schedule_thunk+0x16/0x30 [ 640.251575][T10136] ? rt_spin_lock+0x88/0x3e0 [ 640.251599][T10136] check_panic_on_warn+0x89/0xb0 [ 640.251629][T10136] ? rt_spin_lock+0x88/0x3e0 [ 640.251649][T10136] end_report+0x6f/0x140 [ 640.251674][T10136] kasan_report+0x129/0x150 [ 640.251702][T10136] ? rt_spin_lock+0x88/0x3e0 [ 640.251726][T10136] ? __wake_up_common_lock+0x2f/0x1e0 [ 640.251748][T10136] __kasan_check_byte+0x2a/0x40 [ 640.251775][T10136] lock_acquire+0x84/0x340 [ 640.251799][T10136] ? rt_mutex_slowunlock+0x668/0x8a0 [ 640.251822][T10136] ? reacquire_held_locks+0x104/0x190 [ 640.251852][T10136] rt_spin_lock+0x88/0x3e0 [ 640.251874][T10136] ? __wake_up_common_lock+0x2f/0x1e0 [ 640.251899][T10136] ? __pfx_rt_spin_lock+0x10/0x10 [ 640.251922][T10136] ? rt_spin_unlock+0x161/0x200 [ 640.251946][T10136] ? __wake_up_common_lock+0x18a/0x1e0 [ 640.251971][T10136] __wake_up_common_lock+0x2f/0x1e0 [ 640.251994][T10136] ? snd_pcm_post_stop+0x14a/0x1e0 [ 640.252023][T10136] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 640.252050][T10136] snd_pcm_action+0x1f4/0x240 [ 640.252076][T10136] loopback_trigger+0xb82/0x1b60 [ 640.252096][T10136] ? rcu_is_watching+0x15/0xb0 [ 640.252119][T10136] snd_pcm_do_start+0xb7/0x180 [ 640.252146][T10136] snd_pcm_action+0xe7/0x240 [ 640.252169][T10136] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 640.252194][T10136] ? __pfx_interleaved_copy+0x10/0x10 [ 640.252214][T10136] ? __pfx_default_write_copy+0x10/0x10 [ 640.252236][T10136] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 640.252258][T10136] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 640.252276][T10136] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 640.252307][T10136] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 640.252334][T10136] ? snd_pcm_oss_write3+0x1a2/0x350 [ 640.252365][T10136] snd_pcm_oss_write3+0x1bc/0x350 [ 640.252395][T10136] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 640.252421][T10136] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 640.252443][T10136] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 640.252469][T10136] snd_pcm_oss_write+0xa31/0xf20 [ 640.252503][T10136] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 640.252530][T10136] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 640.252555][T10136] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 640.252582][T10136] ? vfs_write+0x26a/0xb40 [ 640.252606][T10136] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 640.252633][T10136] vfs_write+0x287/0xb40 [ 640.252662][T10136] ? __pfx_vfs_write+0x10/0x10 [ 640.252686][T10136] ? __fget_files+0x2a/0x420 [ 640.252708][T10136] ? __fget_files+0x2a/0x420 [ 640.252726][T10136] ? __fget_files+0x3a6/0x420 [ 640.252744][T10136] ? __fget_files+0x2a/0x420 [ 640.252764][T10136] ksys_write+0x14b/0x260 [ 640.252789][T10136] ? __pfx_ksys_write+0x10/0x10 [ 640.252817][T10136] do_syscall_64+0xec/0xf80 [ 640.252834][T10136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.252853][T10136] ? trace_irq_disable+0x37/0x100 [ 640.252873][T10136] ? clear_bhb_loop+0x60/0xb0 [ 640.252895][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.252914][T10136] RIP: 0033:0x7f6f890cf749 [ 640.252931][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.252949][T10136] RSP: 002b:00007f6f8730d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.252971][T10136] RAX: ffffffffffffffda RBX: 00007f6f89326090 RCX: 00007f6f890cf749 [ 640.253002][T10136] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 640.253016][T10136] RBP: 00007f6f89153f91 R08: 0000000000000000 R09: 0000000000000000 [ 640.253029][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.253041][T10136] R13: 00007f6f89326128 R14: 00007f6f89326090 R15: 00007ffd97818e68 [ 640.253062][T10136] [ 640.253203][T10136] Kernel Offset: disabled