last executing test programs: 3m26.361654793s ago: executing program 0 (id=1202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = eventfd(0x4) r2 = dup2(r0, r1) fchown(r1, 0x0, 0x0) fchmod(r2, 0x1) 3m26.283641565s ago: executing program 0 (id=1203): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) 3m25.083576072s ago: executing program 0 (id=1221): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) 3m23.98827905s ago: executing program 0 (id=1227): syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 3m23.90710413s ago: executing program 0 (id=1229): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000600)={{0xffffffffffffffff, 0x0, 0x80001, 0x0, 0xfffffc4b, 0x0, 0x0}, 0x1, &(0x7f00000005c0)=[{0x3, 0x3, 0x0, &(0x7f0000000500)="517834958869eb9903ac6fc69caeb374e1f5d41d83906ae2980bc164c5a885c1ce04c8aa97484816b821222330a9a4d425f5a9b8", 0x34, 0x2}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3m22.108367223s ago: executing program 0 (id=1236): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)) 3m20.778862873s ago: executing program 32 (id=1236): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)) 2m57.282500715s ago: executing program 4 (id=1413): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000700)={0x6, 0xfff7, 0x202, 0x2, 0xe, 0x4, 0x35, 0xfffffffc, r3}, &(0x7f0000000740)=0x20) 2m57.128262212s ago: executing program 4 (id=1414): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m53.271762558s ago: executing program 4 (id=1428): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1a}}, 0x91e1516366f54ac2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xe, 0x3, 0x81, 0x0, 0x0, 0x20}, {0x10000, 0x200000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x54000, 0xdddd0000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x0, 0x0, 0x2}, {0x100000, 0x3000, 0xe, 0xff, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x8, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x20, 0x4, 0x8001, 0x2000, [0xdd41, 0x0, 0x2000000]}) 2m52.800802271s ago: executing program 4 (id=1433): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 2m52.504070066s ago: executing program 4 (id=1435): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) write(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="400100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000ac000d80140004"], 0x140}}, 0x0) 2m51.644150797s ago: executing program 4 (id=1442): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m51.253170879s ago: executing program 33 (id=1442): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5.92151347s ago: executing program 1 (id=2415): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) userfaultfd(0x80001) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 5.526249694s ago: executing program 1 (id=2419): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000008, 0xd1940e8b8329fa71, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x600}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000264000/0x4000)=nil, 0x800000, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.850810923s ago: executing program 1 (id=2434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.52271522s ago: executing program 1 (id=2437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0xd46, &(0x7f0000000840)={@local, @empty, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x7, 0x6, "b599fd", 0xd08, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], @param_prob={0x4, 0x2, 0x0, 0x4200, {0x3, 0x6, "540df0", 0x9, 0x2, 0xff, @local, @loopback, [@srh={0x33, 0x6, 0x4, 0x3, 0x4, 0x10, 0x71, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, @mcast2]}, @dstopts={0xc, 0x192, '\x00', [@generic={0x8, 0xc92, "c7197f1b5e3b72aff090f4c1a6a343fad3bc0f1ca6aca86ec907279b1a14b9afc7fca8ed6803f6310c3ea80bead638999e3681c43d78a4a610bee78cd743004160033a2ceb4305fd6de9e5b0a2fb993ad8afe10660b8480a2b771ed10d11128d205408e39c76a89b79c7c4c21a5a050baf00d790d32367a4c3956795691a6d25b94904f2dd1cb5e1f0ddd4b376575339390593853363ebf42c0208d81a9c4f49e181ac41892e116a7e51dd8852b7a51ebc0c0d59d8ef20caecc70170b7d54821f03426ecc1f82350e55aee14efe6065d2a650f1ff68db8a4ff9c146e27b098f44cde9808d813ab388fb5cc01a3f0fb992738fadde1691be7158c560677b0bddb93ac5f03739649e53abbd7bf85daed812e3e5347ea94a2d63d3867a4c8ce18bcb44939041a6d4dd49f7e18bd9d82841ca2d168b90d90f236dd5660d30cb968d73fecb25184acb4826ede09942869ae72d7a1d053c9603e6c357a3d12130a94c1ec7c4fb5d451747278a9277309cc34d0339ccd86e5efdc4f331e5e614fbaf5afac11a823030972b76aa07ff7828366ef7adb8fc8388bd3dc6f8ebcdf398c33163d0f8ff8bddd2a87683d7d934862d80bb2ee6f0b5ba39a5751bd0d3f4802c1377ba13a2dd7320ff2982b695e4062770e8942124f9266ebd1b77b780afc1a56d792bd87c8eec69852ad85aa65005c67138d4a3b24e7a6743f2db4b4d80c1099b072f322783f598c7e389a032e0098877bb56d43080200ff2e51772a2bbea242d34950b55d5483ac717303a02ec7258f5587825578c62fc38a0b6da7addadecf3e78bce2587d2277cea7286b5b4812d49313024ee096252578f370ca23baf8b0768c56bc2f8f3b102ffc2a3ce3b55704687dfb99f6627cc03e799f454187c27bfcccdb8a358adb21e98edc2a4837875393e62ed5e69ca7b08376512c563a83c4c6f3b4077a0c3e8941c5543f5edbd3c60cc51e16efb106e756fe870f8ba55bf0f85fbbd10b82033f141f1580279a4e0d703752320e503fd7d388ffc1d378ad8731588e35f06c4848dcaf8b2fef62505390dc2643ba2bdabac455b65dc5024fa64994398bc552f911f2900a3d078fb22e56bd804dfb685f2478463a0aba0349b978b0db5a04002650e4893f8c1912c5ff6d39586facea0d27ab0e8872c7df5f19db33208a2e8c7267533fd86e4a9ed578f777729ac3c2980a8d5bfe2ee30c06ee67407205c176df0b5f33cb3050fea879dfb4df9ea6c432124d6864ce04b2ce13b9b2b700b463af505fbd925ce2c40cdf1ecd349598c57c11fe40eeaf3601a05f927f99805a93502a1e6180e655c0e9f59c67c407d0db4baabfbc036653687094b38815d4ea4125785f0026fa1957d92b24952c41b7fa5f5372337d77cfe18ffdba81e0763618c2f7417307f74356de9d020ce8566d7b4024b76a6b6b687b9566919f6c1f009856612302d349a528da5a58370344e769ed5063b09d4a850a51e9aaf7f7ad242d7752bca4af984a1d7b5743bbc22bec6becf80860014a8934689d922ac1215e72835fd530b8ee72244672a6266f4572d500b19507f3b07b5a3885eaeb9aebda1d4e1743275e2c2f7b9481a4d5837b08c2760e5cd75ef7eff2407cc2306a3cf22a70a386510892962a41239b3b0830c7e326395ccc654036c1934b58dbaf8d12ba3d4bb927ab4af749d6347295ce79167fb8c81e8f2ba3a14d715f81f324f3960ceb7aa7e9f8e61caa6cd912af210b36670164f2fe456882dbd3d6f7002061cc921b48e24e5dc5ae563523e4e857c712dec9466d929f5e32c61ba490b6146262ac0582ea0baac9463c42a12cafb55cd0067fac60aa125eee0118d2ba13090fc7eba802707930c5e5d317c221fd2a06fd64044adbbc658211f8a5acb0d1f0b29835b3c8a7938ff0acd987f879b96d7c4c382d47b58b8d7df0c2ca8f07e0b235986be6f342a045fa402d898e426a3895533a41c75d7d32192f78350d31802f877c2e125a989c637809b4f1adb61ba01627ff521bb10ec3d071f5431c57bcc536bc394b7979343bb0df0c3a8ac2ca757350abc5caa7b8568e56fd383e74e59b90f0f68b18fce9bf7ba249c750146191cbb7c81f38e30bb8fc98eabe258bc9b0d66fe6b86121855b282c8fbbf1a32c96b82748a41a88d0fe94c74fb6c7a27d68b15a6208e7a7ed79f41e1cbcb70c54bee43dad56c43eed72fd31b7d0f62a4284a09df67fdfad86a52bb5c82c3d68e755c009263f1a35edf0ffa674d1d1440273601fc05b45bee2b4a9d9f095a7b998285d2ed8596a3312fff86c41401998e6d86d14a39a504988d533a6ca1d23c70b25999e85bc49a4e0ebca04911734863a175dc2cb8dfe6c0d167d36abd078c8f4ab1cf268261bba9ae6edac725184d8773cfe89aa5f274c6afc36f5b868ea42c701370bbdebe0816ce5b70a189224755cb650919fc208f205e4860aea7fdc13f760a3526604e7ef5ae0ae6ee3c68a817e9e84f5286ca58aeb9e4e26da0e5a6193f977b99520142e86c592e9c0da13cc53baa97365945e42341bf6de9e83285d71f77e31132b2776d3911a42907b3eab304855f12928feae36d48ea79e90e2a54c4eba079f5a71ddf2ee2707899e243e88492153256f216993b39f56db97b5ba9bc9863ee806c9d85d40e66ff495255dcdfb8b09345a4476dddc4634afe36dc94e42a9749450fafb5be6c435bf9dd737d01aec8546872cc3d4a5d09e1c533931b14115c1c71568bad1902775db58804ab8a64451a631ceae4a8b92c7346bcb3d46f38937b7f214b3dae8edf8bf486fcbf5fd99a3f2b02e81c66725e594a6d58faef10a8ad3672085251e14fe3ff7b15c437edcd265c19d8353d2ea625f917ca52195c58447441eb44ebc10446af7661626c9b6b1040f99496936a59e234b9cde42c70a5438303b1698c371f416dcf70df801e774bd2c2710364f346409e18f9f3dfbff1d10620b0a67336d7966c41bac5522bda1bf007cf6391b1bb6c27a4251d441706af73ff8f267277bee0ca33a32224d24e947d0aeb752525f022caca17a1cb2393960f99831e8da0efd05a50db04deee09ff373fd80a0879c8c62fc05be8d912413c461bd19b3d44b4570ee973ba51160d51c0dd34a6f7a69170a8211197215d51cab1065e1ae42f8d4074d03b216b4082cd1083b9c890e8eb716e30f7bf08e9b1f5f3c550e6c916cb7fcc92d0fa70bb4d517d1d32d9ba255bfcfb8bfa5085f7145f9807c376a407e5cb4e469f3e11f1f70e46f9089b185b1c8ac55392e185ed5739de591062e2141bd3148c1f8959358a917412240fb1ece5c73f3efef6d9b544e79a41b81f1e4bd172b93620e3dc1f1288ab5ecf7a8b65a4788c025aea6cddb53c1d32e02bccc04dc90d647960b7db4d6ff56822d0d5e0519723400ab2aa07f38146e4781496d94ef7e6a57d2c271a362625ea7cf057782ac8de84a5afe08f57ffa6451f06fc88e252b863a8e07aee44982e5ca50cd532a27dc25a933052b5049dce6e6318b55ea5eac30e0df15fe1f0977ef8742bdf477a7b8751652f4bf289c7ccc0397834d434d55ed1ae095dd13e1a78bff29b33d30890a35fade51bccd7beb808ca4bdc31730175002774c4cb11876c72fc6c3fd07b2c77f21afe76b57d662f8236b719e7d71101c202e2bb202c724cb66586d5306d66406d76fea9f1d2b1037c7475f0f1d0e532550336e4a6eba1016286f53db461da8a73983a30346396ca9693bb3b8fac43eefd74c785d7fe0625b1d9839616b27272db58a5d16d2ed063a6c1af07e521cf56a42f8ad12143c643c7f7dd17dd19ed10e0995cec18fb4c46d680f0272f1e870a994a07cbba9b580765b8a0b8b7f51a06ed80fcf7819dc897bd73278484237cb1758cb81291598198a9d3884eb58160a4eaafc914e3780030f216f1dcbf17c4cc6256341d55f1b0f794ca41f1fdaa54a5baca772baf0d74364a5b3fdff82a078a271a0f0b292ea89bfcafb1f26db22b32969758d22695c29dba8dd08bbd10fffcb313764ef9729de9e95ac7900569454209711bdc7d1620379d9d3eada0b039f91167f7b9f7535fde46562eab4cfecc613cb5892df8f673b8c4e93b0d238fb01129b1aa3c2742aa8fc321bc06581a71a781eefab4dd01cc5f3614bba7b1e9c70e8264a1db6bfe92f297b6739bedac60fe559b09402608ee180bd70618e94fc32331c4756bfea196ab16511c65cba79a896583b6d570e6b88ae7818560f671027e704e38c844e18330ba8e4907e61b46ccbc3826b00622907600ce6a519dbd78062206c6e35b099dfabdf26e69f777f649720236c36555980606abc6dad44052c85e9b456570473bd0db5720628265fc621d676cc41fb6ed06ff156510985875294087e73ad2ce04bb01e66d27f628985161e26f78c8b14f5e23618fabc4eab816e002deed1a979ee03a38c101a6315399a70673c491a61b58988222601e5e73cc88b18a543f7052f6a521190b884ff7a23c28286fa99d623cb68a3b93ed691c33aa74aa1ad15f5e72c4cce9fc05182a2485810ea3b"}]}]}}}}}}}}, 0x0) 3.200852822s ago: executing program 6 (id=2440): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x00\x00\x00\x80\x00\x00\x00\x00X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc9Z\x82@\xb1=\xc4\xb6=\xed\xec\x8d\xa2lI\xffK\xfd\xbc6\x90{s\xebr=/]d;\xc4VE\xdb\t\xc0\xe1\xcc\x0e\xf6+\x16\xc2\x17\xe0\f%n\xb3u\xa2~\x86,\xdek\x05\xda\xf5\xb6!\xfc\xdbl\x96\xedm\xd9nf\x00\x00\x00M\x1c\a\x81\x1d\xa24\x8e\xe8\xf3\x9e\\\x17*Ip\xbf1\xd4\x0f\xcc\x1e\x85A\x85\tH\xc2\xe6X\xc7\xc5\v\x1cZ56Buj\x81G\xca5\xed\xda\xd9{|\x18gY\x06\x9a\xa1\x04\xbd\x85\xbaq\xb1\xaduR\f\x01\xc65\xe7\x81K\xbf\xab\xc1hUd\xb7\x8b^\x06\xdbZ\xa4>\x1dg5\x1bFFs\x1c\xf5\a\xef\x97\xa5|\x01\x9e\x13\x1e\x8a\xecY!JW\xb3\x1a\xc4\x9d\xc1\xf5\xdcU3\xee\x8ddz\x00a\x95oKc\xd6\xf4/\x9a\x9c6c\x98\bxz\x04\xf7\xecj\x99\xc1=\x01Q\xb2\xdfR\xd5\x17\x9a=\xf3s\xbc\xac\"7\xb8Z\xa4\x04\xf9\xf8\x86\x8f\xb3\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\xa8\x9aJ\xc6\x03\xb4\x9b\x14\xb1+\xa1\x93\xeb/\xd3tq\x98\xd3L\x1a\xfc\xb14i_aFlb\xa3h0\xee.?\x90h\xc9\xc9m\xe1C\xe1\xa9\xf5\xf6\vf', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x2) 2.987807304s ago: executing program 2 (id=2441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.987639949s ago: executing program 6 (id=2442): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r1, 0x541b, 0x0) ioctl(r1, 0x5451, 0x0) 2.948765486s ago: executing program 6 (id=2443): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.808089834s ago: executing program 1 (id=2445): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x800, &(0x7f0000001dc0)={0x3, 0x72, 0x20000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.77343616s ago: executing program 2 (id=2446): socket$inet6(0xa, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2800) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 2.745128985s ago: executing program 6 (id=2447): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)="b5", 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 2.607687981s ago: executing program 2 (id=2449): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) 2.570204894s ago: executing program 1 (id=2451): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x188000, 0x85) lseek(r2, 0x101, 0x1) getdents64(r2, 0x0, 0x4f) 2.469279177s ago: executing program 3 (id=2452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2.273380745s ago: executing program 3 (id=2454): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.272248933s ago: executing program 5 (id=2455): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$l2tp6(r1, &(0x7f0000000640)="381156d7076ab6d0a10ded91fc785a7b", 0x10, 0x4008011, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000001000)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8c0795a70f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f0", 0xa4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.102621099s ago: executing program 5 (id=2456): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 2.038723558s ago: executing program 2 (id=2457): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x66200, 0x99) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pread64(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 1.93497687s ago: executing program 5 (id=2458): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x1, 0x0, 0x40000fff, 0xffffffda}, 0x10) 1.899619814s ago: executing program 3 (id=2459): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x10) fcntl$getflags(0xffffffffffffffff, 0xb) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bb", 0xe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 1.811452935s ago: executing program 5 (id=2460): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r1, 0x0, 0x0) 1.748167401s ago: executing program 3 (id=2461): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r2, 0x6e69, 0x0, 0xe, 0x0, 0x0) 1.252365625s ago: executing program 6 (id=2462): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)) 1.067302712s ago: executing program 2 (id=2463): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') 742.739928ms ago: executing program 3 (id=2464): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/58, 0x3a) getdents64(r2, 0xfffffffffffffffe, 0x29) 741.54967ms ago: executing program 5 (id=2465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x0, 0xc, 0xfff, 0xc}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 616.274531ms ago: executing program 2 (id=2466): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x124}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 616.082877ms ago: executing program 5 (id=2467): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = inotify_init1(0x80000) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/75, 0x4b}], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 273.140132ms ago: executing program 3 (id=2468): mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x0, 0xd, 0x6) r0 = io_uring_setup(0x4a86, &(0x7f0000000a00)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=2469): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r0, &(0x7f0000000300)) kernel console output (not intermixed with test programs): en = 0, was 0) [ 119.994653][ T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.995533][ T55] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 119.995792][ T55] usb 5-1: media controller created [ 120.048012][ T6764] dvb-usb: bulk message failed: -22 (7/0) [ 120.048033][ T6764] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 120.048065][ T6764] ttusb2: i2c transfer failed. [ 120.078097][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.205811][ T55] usb 5-1: selecting invalid altsetting 3 [ 120.205831][ T55] ttusb2: set interface to alts=3 failed [ 120.275054][ T55] DVB: Unable to find symbol tda10086_attach() [ 120.275085][ T55] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 120.275964][ T55] dvb-usb: bulk message failed: -22 (4/0) [ 120.275983][ T55] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.276107][ T55] dvb-usb: bulk message failed: -22 (5/0) [ 120.276119][ T55] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.276183][ T55] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 120.393691][ T55] usb 5-1: USB disconnect, device number 2 [ 120.643505][ T55] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 120.699479][ T6756] infiniband syz0: set active [ 120.702619][ T5785] lo speed is unknown, defaulting to 1000 [ 120.703106][ T6756] infiniband syz0: added lo [ 121.776707][ T6756] RDS/IB: syz0: added [ 121.777451][ T6756] smc: adding ib device syz0 with port count 1 [ 121.777646][ T6756] smc: ib device syz0 port 1 has no pnetid [ 121.908371][ T6807] Zero length message leads to an empty skb [ 121.950273][ T6003] lo speed is unknown, defaulting to 1000 [ 121.985438][ T6756] lo speed is unknown, defaulting to 1000 [ 123.032257][ T6756] lo speed is unknown, defaulting to 1000 [ 123.094878][ T5785] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.252220][ T5785] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 123.252245][ T5785] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 123.252265][ T5785] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 123.254910][ T5785] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 123.254936][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.254952][ T5785] usb 2-1: Product: syz [ 123.254964][ T5785] usb 2-1: Manufacturer: syz [ 123.254976][ T5785] usb 2-1: SerialNumber: syz [ 123.284173][ T5785] usb 2-1: config 0 descriptor?? [ 123.292515][ T6845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.292701][ T6845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.311969][ T5785] usb 2-1: ucan: probing device on interface #0 [ 123.435456][ T6863] veth0: entered promiscuous mode [ 123.435632][ T6863] macsec1: entered allmulticast mode [ 123.435645][ T6863] veth0: entered allmulticast mode [ 123.489927][ T6863] veth0: left allmulticast mode [ 123.491930][ T6863] veth0: left promiscuous mode [ 123.755950][ T5785] usb 2-1: ucan: device reported invalid device info [ 123.755972][ T5785] usb 2-1: ucan: probe failed; try to update the device firmware [ 123.999651][ T5785] usb 2-1: USB disconnect, device number 3 [ 124.164649][ T6756] lo speed is unknown, defaulting to 1000 [ 124.439609][ T6900] ======================================================= [ 124.439609][ T6900] WARNING: The mand mount option has been deprecated and [ 124.439609][ T6900] and is ignored by this kernel. Remove the mand [ 124.439609][ T6900] option from the mount to silence this warning. [ 124.439609][ T6900] ======================================================= [ 124.439682][ T6900] devpts: Bad value for 'max' [ 124.582719][ T6902] Bluetooth: MGMT ver 1.23 [ 124.660252][ T6003] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.738810][ T6756] lo speed is unknown, defaulting to 1000 [ 124.823993][ T6003] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.824045][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.824067][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.824102][ T6003] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 124.824121][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.880044][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 124.892599][ T6003] usb 3-1: config 0 descriptor?? [ 125.045777][ T6914] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 125.045797][ T6914] netlink: 'syz.4.441': attribute type 2 has an invalid length. [ 125.557342][ T6003] usb 3-1: USB disconnect, device number 4 [ 125.667084][ T6936] vlan1: entered allmulticast mode [ 125.667105][ T6936] veth0_vlan: entered allmulticast mode [ 125.667433][ T6934] vlan1: left allmulticast mode [ 125.667446][ T6934] veth0_vlan: left allmulticast mode [ 125.687572][ T6937] netlink: 'syz.1.450': attribute type 4 has an invalid length. [ 125.687591][ T6937] netlink: 17 bytes leftover after parsing attributes in process `syz.1.450'. [ 125.846293][ T6756] lo speed is unknown, defaulting to 1000 [ 126.062157][ T6947] xt_l2tp: v2 sid > 0xffff: 1114112 [ 126.940269][ T6003] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.113646][ T6003] usb 1-1: Using ep0 maxpacket: 8 [ 127.117797][ T6003] usb 1-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 127.117820][ T6003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.148541][ T6003] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 127.148568][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.148584][ T6003] usb 1-1: Product: syz [ 127.148595][ T6003] usb 1-1: Manufacturer: syz [ 127.148606][ T6003] usb 1-1: SerialNumber: syz [ 127.192829][ T6003] usb 1-1: config 0 descriptor?? [ 127.220262][ T6003] cdc_ether 1-1:0.0: skipping garbage [ 127.220280][ T6003] cdc_ether 1-1:0.0: skipping garbage [ 127.220290][ T6003] cdc_ether 1-1:0.0: invalid descriptor buffer length [ 127.220308][ T6003] usb 1-1: bad CDC descriptors [ 127.221935][ T6003] usb 1-1: unsupported MDLM descriptors [ 127.222769][ T6003] cdc_acm 1-1:0.0: skipping garbage [ 127.222783][ T6003] cdc_acm 1-1:0.0: skipping garbage [ 127.222793][ T6003] cdc_acm 1-1:0.0: invalid descriptor buffer length [ 127.320264][ T826] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.411959][ T5882] usb 1-1: USB disconnect, device number 2 [ 127.662803][ T826] usb 5-1: Using ep0 maxpacket: 16 [ 127.664560][ T826] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 127.664585][ T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.668414][ T826] usb 5-1: config 0 descriptor?? [ 127.704641][ T826] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 127.896604][ T826] usb 5-1: Detected FT232A [ 127.901607][ T826] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 127.932921][ T826] usb 5-1: USB disconnect, device number 3 [ 127.976313][ T826] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 127.977346][ T826] ftdi_sio 5-1:0.0: device disconnected [ 128.014855][ T7003] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 128.058617][ T7003] batman_adv: batadv0: Adding interface: gretap1 [ 128.058629][ T7003] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.058646][ T7003] batman_adv: batadv0: Interface activated: gretap1 [ 128.398859][ T7009] gretap0: entered promiscuous mode [ 128.399163][ T7009] vlan2: entered promiscuous mode [ 130.089700][ T7059] lo speed is unknown, defaulting to 1000 [ 130.089790][ T7059] lo speed is unknown, defaulting to 1000 [ 130.105165][ T7059] lo speed is unknown, defaulting to 1000 [ 130.174285][ T7059] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.254101][ T7059] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.442756][ T7059] lo speed is unknown, defaulting to 1000 [ 130.445147][ T7059] lo speed is unknown, defaulting to 1000 [ 130.447779][ T7059] lo speed is unknown, defaulting to 1000 [ 130.497855][ T7059] lo speed is unknown, defaulting to 1000 [ 130.499356][ T7059] lo speed is unknown, defaulting to 1000 [ 130.538652][ T7061] smc: removing ib device syz0 [ 133.162886][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.162954][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.476591][ T7128] netlink: 348 bytes leftover after parsing attributes in process `syz.0.531'. [ 135.958247][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 137.233505][ T1105] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.237929][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.237986][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.238016][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.353547][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.353574][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.393284][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.393310][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.571957][ T826] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.720388][ T826] usb 2-1: Using ep0 maxpacket: 16 [ 137.722902][ T826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.722931][ T826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.722950][ T826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.722989][ T826] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 137.723009][ T826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.790200][ T6003] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.552317][ T6003] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.552342][ T6003] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.553551][ T6003] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.553574][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.553592][ T6003] usb 5-1: SerialNumber: syz [ 138.611286][ T826] usb 2-1: config 0 descriptor?? [ 138.849910][ T6003] usb 5-1: 0:2 : does not exist [ 138.904624][ T6003] usb 5-1: USB disconnect, device number 4 [ 139.021786][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.033830][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.033867][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.033891][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.033924][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.033949][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.033973][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.033997][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.034021][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.034045][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.034068][ T826] logitech 0003:046D:C626.0003: unknown main item tag 0x0 [ 139.089833][ T826] logitech 0003:046D:C626.0003: hidraw0: USB HID v1.00 Device [HID 046d:c626] on usb-dummy_hcd.1-1/input0 [ 139.201742][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.253055][ T6003] usb 2-1: USB disconnect, device number 4 [ 139.352035][ T7231] fido_id[7231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 139.361601][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 139.372593][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.372623][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.372658][ T5882] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 139.372678][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.426837][ T5882] usb 4-1: config 0 descriptor?? [ 139.718199][ T7244] fuse: Invalid rootmode [ 139.750281][ T55] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.914791][ T5882] cherry 0003:046A:0027.0004: bogus close delimiter [ 139.914811][ T5882] cherry 0003:046A:0027.0004: item 0 0 2 10 parsing failed [ 139.915617][ T5882] cherry 0003:046A:0027.0004: probe with driver cherry failed with error -22 [ 140.441601][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 140.660183][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.660235][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.660443][ T55] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 140.660487][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.826221][ T55] usb 3-1: config 0 descriptor?? [ 140.844074][ T5882] usb 4-1: USB disconnect, device number 5 [ 141.324470][ T55] mcp2200 0003:04D8:00DF.0005: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 141.360418][ T7268] netlink: 84 bytes leftover after parsing attributes in process `syz.1.590'. [ 141.531193][ T55] usb 3-1: USB disconnect, device number 5 [ 142.757167][ T6003] hid-generic 0000:0000:0004.0006: hidraw0: HID v0.03 Device [syz1] on syz0 [ 142.790239][ T5961] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.830915][ T55] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.873593][ T7292] fido_id[7292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.944923][ T5961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.944947][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.946220][ T5961] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.946243][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.946260][ T5961] usb 5-1: SerialNumber: syz [ 142.992103][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.992149][ T55] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 142.992170][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.043587][ T55] usb 3-1: config 0 descriptor?? [ 143.170269][ T6003] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.197438][ T5961] usb 5-1: 0:2 : does not exist [ 143.333127][ T6003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.333159][ T6003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.333235][ T6003] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 143.333274][ T6003] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 143.333294][ T6003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.420449][ T6003] usb 1-1: config 0 descriptor?? [ 143.423198][ T5961] usb 5-1: USB disconnect, device number 5 [ 143.641130][ T55] logitech 0003:046D:C295.0007: hidraw0: USB HID v7f.fd Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 143.641245][ T55] logitech 0003:046D:C295.0007: no inputs found [ 143.722880][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.814169][ T55] usb 3-1: USB disconnect, device number 6 [ 143.897373][ T6003] uclogic 0003:28BD:0055.0008: interface is invalid, ignoring [ 143.925118][ T7303] fido_id[7303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 144.010276][ T808] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.051275][ T6003] usb 1-1: USB disconnect, device number 3 [ 144.270203][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 144.272868][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.274200][ T808] usb 4-1: config 4 interface 0 has no altsetting 0 [ 144.277676][ T808] usb 4-1: string descriptor 0 read error: -22 [ 144.277772][ T808] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 144.277793][ T808] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 144.344953][ T808] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 144.452005][ T808] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 144.452425][ T808] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 144.452471][ T808] usb 4-1: media controller created [ 144.492539][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.556687][ T7302] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 144.574406][ T7315] netlink: 'syz.4.611': attribute type 16 has an invalid length. [ 144.574427][ T7315] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.611'. [ 144.669579][ T808] zl10353_read_register: readreg error (reg=127, ret==0) [ 144.871165][ T7321] veth1_macvtap: left promiscuous mode [ 144.871189][ T7321] macsec0: entered allmulticast mode [ 144.910418][ T808] usb 4-1: USB disconnect, device number 6 [ 144.932382][ T7321] veth1_macvtap: entered promiscuous mode [ 144.932403][ T7321] veth1_macvtap: entered allmulticast mode [ 144.935144][ T7321] macsec0: left allmulticast mode [ 144.935162][ T7321] veth1_macvtap: left allmulticast mode [ 146.159390][ T7340] capability: warning: `syz.3.620' uses 32-bit capabilities (legacy support in use) [ 146.730895][ T7365] netlink: 810 bytes leftover after parsing attributes in process `syz.3.633'. [ 148.639781][ T7418] netlink: 'syz.0.656': attribute type 2 has an invalid length. [ 148.639800][ T7418] netlink: 164 bytes leftover after parsing attributes in process `syz.0.656'. [ 150.272808][ T55] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.452515][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.452546][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.674033][ T55] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.674068][ T55] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 150.674085][ T55] usb 1-1: Manufacturer: syz [ 150.704759][ T55] usb 1-1: config 0 descriptor?? [ 150.743428][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.900210][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 150.906734][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 150.906759][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 150.906776][ T10] usb 2-1: Product: syz [ 150.906788][ T10] usb 2-1: Manufacturer: syz [ 150.906800][ T10] usb 2-1: SerialNumber: syz [ 150.913346][ T10] usb 2-1: config 0 descriptor?? [ 151.306321][ T10] usb 2-1: USB disconnect, device number 5 [ 151.387112][ T55] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71 [ 151.387174][ T55] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 151.387277][ T55] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 151.486950][ T55] usb 1-1: USB disconnect, device number 4 [ 151.717167][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.342201][ T7539] program syz.3.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.418096][ T7543] random: crng reseeded on system resumption [ 153.599549][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.702'. [ 154.940530][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 154.940553][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.703'. [ 154.940569][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 154.941180][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.703'. [ 154.941198][ T7561] netlink: 'syz.1.703': attribute type 6 has an invalid length. [ 155.180869][ T5961] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.372297][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.372326][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.372346][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.372379][ T5961] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.372396][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.876987][ T5961] usb 1-1: config 0 descriptor?? [ 156.020068][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 156.020207][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 156.069138][ T7582] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.560789][ T7594] netlink: 71 bytes leftover after parsing attributes in process `syz.1.719'. [ 156.610986][ T5961] hid_parser_main: 364 callbacks suppressed [ 156.611007][ T5961] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 156.611037][ T5961] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 156.611061][ T5961] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x4 [ 156.611086][ T5961] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x1 [ 156.611110][ T5961] plantronics 0003:047F:FFFF.000A: unbalanced delimiter at end of report description [ 156.611830][ T5961] plantronics 0003:047F:FFFF.000A: parse failed [ 156.611922][ T5961] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 156.766487][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 156.810067][ T6003] usb 1-1: USB disconnect, device number 5 [ 156.928890][ T7607] erspan0: entered promiscuous mode [ 156.929047][ T7607] macsec1: entered promiscuous mode [ 157.725959][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 157.923981][ T7652] veth1_macvtap: left promiscuous mode [ 159.053696][ T36] audit: type=1107 audit(1772847135.792:26): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 159.702724][ T7708] netlink: 'syz.1.773': attribute type 3 has an invalid length. [ 159.702746][ T7708] netlink: 92 bytes leftover after parsing attributes in process `syz.1.773'. [ 162.474092][ T7788] delete_channel: no stack [ 162.635874][ T7792] team0: Device gtp0 is of different type [ 163.298647][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 163.390604][ T7818] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 164.657598][ T7837] Bluetooth: MGMT ver 1.23 [ 165.403389][ T7858] lo speed is unknown, defaulting to 1000 [ 165.476390][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 165.476414][ T7865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.843'. [ 165.476437][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 165.476644][ T7865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.843'. [ 165.587213][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 165.587234][ T7869] netlink: 120 bytes leftover after parsing attributes in process `syz.0.846'. [ 165.618163][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 165.671657][ T7871] program syz.1.845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.857243][ T7877] C: renamed from team_slave_0 (while UP) [ 165.903756][ T7877] netlink: 'syz.2.850': attribute type 4 has an invalid length. [ 165.903776][ T7877] netlink: 116 bytes leftover after parsing attributes in process `syz.2.850'. [ 165.904366][ T7877] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 166.320269][ T5914] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.484418][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.485524][ T5914] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 166.485557][ T5914] usb 4-1: can't read configurations, error -71 [ 166.616372][ T7902] process 'syz.2.859' launched '/dev/fd/3' with NULL argv: empty string added [ 166.700317][ T5801] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 166.702108][ T5801] Bluetooth: hci2: command 0x0401 tx timeout [ 167.399027][ T7926] bond0: entered promiscuous mode [ 167.399048][ T7926] bond_slave_0: entered promiscuous mode [ 167.399271][ T7926] bond_slave_1: entered promiscuous mode [ 167.403087][ T7926] batadv0: entered promiscuous mode [ 167.432497][ T7926] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 167.470343][ T7926] bond0: left promiscuous mode [ 167.470366][ T7926] bond_slave_0: left promiscuous mode [ 167.470590][ T7926] bond_slave_1: left promiscuous mode [ 167.523003][ T7926] batadv0: left promiscuous mode [ 168.147790][ T7943] netlink: 72 bytes leftover after parsing attributes in process `syz.0.877'. [ 168.147855][ T7943] netlink: 64 bytes leftover after parsing attributes in process `syz.0.877'. [ 170.194308][ T7963] vlan3: entered allmulticast mode [ 170.194329][ T7963] vlan0: entered allmulticast mode [ 170.194340][ T7963] veth0_vlan: entered allmulticast mode [ 171.220319][ T5961] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 171.266483][ T8001] __nla_validate_parse: 4 callbacks suppressed [ 171.266502][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 171.266526][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'. [ 171.377087][ T8001] ip6gretap1: entered allmulticast mode [ 171.586040][ T8005] netlink: 72 bytes leftover after parsing attributes in process `syz.1.903'. [ 171.586103][ T8005] netlink: 64 bytes leftover after parsing attributes in process `syz.1.903'. [ 171.922825][ T5961] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.922904][ T5961] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.185247][ T5961] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.185276][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 172.185294][ T5961] usb 3-1: Product: syz [ 172.185306][ T5961] usb 3-1: Manufacturer: syz [ 172.185319][ T5961] usb 3-1: SerialNumber: syz [ 172.231260][ T5961] usb 3-1: config 0 descriptor?? [ 172.260209][ T5961] usb 3-1: selecting invalid altsetting 0 [ 172.493473][ T5961] usb 3-1: USB disconnect, device number 7 [ 172.747102][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'. [ 172.756241][ T8022] block nbd1: shutting down sockets [ 173.879048][ T8067] netlink: 72 bytes leftover after parsing attributes in process `syz.2.926'. [ 173.879069][ T8067] netlink: 64 bytes leftover after parsing attributes in process `syz.2.926'. [ 174.906430][ T6003] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.985957][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 174.985984][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 175.095081][ T6003] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.095121][ T6003] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.124764][ T6003] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 175.124790][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.124807][ T6003] usb 4-1: Product: syz [ 175.124817][ T6003] usb 4-1: Manufacturer: syz [ 175.124830][ T6003] usb 4-1: SerialNumber: syz [ 175.168840][ T6003] usb 4-1: config 0 descriptor?? [ 175.205994][ T6003] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 175.225432][ T6003] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.233407][ T6003] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 175.233463][ T6003] usb 4-1: media controller created [ 175.305228][ T6003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.410397][ T6003] DVB: Unable to find symbol tda10046_attach() [ 175.410412][ T6003] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 175.410423][ T6003] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 176.021443][ T6003] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 176.042639][ T6003] usb 4-1: USB disconnect, device number 9 [ 176.391347][ T55] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.541089][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 176.543707][ T55] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 176.543732][ T55] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 176.543750][ T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 176.543768][ T55] usb 1-1: config 1 has no interface number 0 [ 176.543810][ T55] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.543834][ T55] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 176.543871][ T55] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 176.543891][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.607553][ T8129] vivid-000: disconnect [ 176.610909][ T8129] vivid-000: reconnect [ 176.665262][ T55] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 176.901473][ T55] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 177.400512][ T8144] netlink: 72 bytes leftover after parsing attributes in process `syz.4.960'. [ 177.400536][ T8144] netlink: 64 bytes leftover after parsing attributes in process `syz.4.960'. [ 177.423032][ T5961] usb 1-1: USB disconnect, device number 6 [ 177.443090][ T5961] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 178.095099][ T8154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.102037][ T8154] bond0: (slave bond2): Enslaving as an active interface with an up link [ 178.560431][ T5961] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 178.751570][ T55] IPVS: starting estimator thread 0... [ 178.757228][ T8176] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.759474][ T5961] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 178.759500][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.759517][ T5961] usb 1-1: Product: syz [ 178.759529][ T5961] usb 1-1: Manufacturer: syz [ 178.759541][ T5961] usb 1-1: SerialNumber: syz [ 178.773719][ T5961] usb 1-1: config 0 descriptor?? [ 178.840331][ T8178] IPVS: using max 9 ests per chain, 21600 per kthread [ 179.198408][ T5961] usb 1-1: Firmware version (0.0) predates our first public release. [ 179.198432][ T5961] usb 1-1: Please update to version 0.2 or newer [ 179.632414][ T5961] usb 1-1: USB disconnect, device number 7 [ 180.037570][ T8226] netlink: 72 bytes leftover after parsing attributes in process `syz.3.991'. [ 180.037591][ T8226] netlink: 64 bytes leftover after parsing attributes in process `syz.3.991'. [ 182.011495][ T8277] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.843319][ T8302] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1031'. [ 182.843342][ T8302] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1031'. [ 182.937463][ T5785] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.100194][ T5785] usb 5-1: Using ep0 maxpacket: 32 [ 183.102806][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.102835][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.102854][ T5785] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.102891][ T5785] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 183.102912][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.151854][ T5785] usb 5-1: config 0 descriptor?? [ 183.280500][ T5961] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.436760][ T5961] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.436788][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.457113][ T5961] usb 3-1: config 0 descriptor?? [ 183.485046][ T5961] cp210x 3-1:0.0: cp210x converter detected [ 183.764333][ T5785] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000B/input/input7 [ 184.037010][ T5961] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 184.697530][ T5961] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 184.755303][ T5961] usb 3-1: cp210x converter now attached to ttyUSB0 [ 184.779742][ T5785] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000B/input/input8 [ 184.803764][ T8339] tipc: Started in network mode [ 184.803793][ T8339] tipc: Node identity ac14142f, cluster identity 4711 [ 184.804837][ T8339] tipc: New replicast peer: 0.0.0.0 [ 184.845296][ T8339] tipc: Enabled bearer , priority 10 [ 184.858498][ T5785] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 184.858557][ T8339] tipc: New replicast peer: 255.255.255.255 [ 184.957156][ T6003] usb 3-1: USB disconnect, device number 8 [ 184.979147][ T5785] usb 5-1: USB disconnect, device number 6 [ 185.190873][ T8344] veth0: entered promiscuous mode [ 185.191496][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 185.259209][ T6003] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 185.269471][ T6003] cp210x 3-1:0.0: device disconnected [ 185.284021][ T8341] fido_id[8341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 185.389965][ T8344] veth0 (unregistering): left promiscuous mode [ 185.454534][ T8349] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1051'. [ 185.600527][ T5961] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.750200][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 185.751019][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 185.752227][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.752275][ T5961] usb 4-1: New USB device found, idVendor=0b05, idProduct=1854, bcdDevice= 0.00 [ 185.752295][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.832893][ T5961] usb 4-1: config 0 descriptor?? [ 185.858665][ T5961] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 185.922685][ T55] tipc: Node number set to 2886997039 [ 186.044784][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1059'. [ 186.066808][ T55] usb 4-1: USB disconnect, device number 10 [ 186.311735][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 186.753978][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1076'. [ 186.874365][ T8408] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1079'. [ 187.064795][ T8412] lo speed is unknown, defaulting to 1000 [ 187.272631][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1084'. [ 187.935802][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 188.442298][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 188.532246][ T8459] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1100'. [ 188.532269][ T8459] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1100'. [ 188.962764][ T8477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1107'. [ 189.356790][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 189.848411][ T8507] dummy0: entered promiscuous mode [ 189.860436][ T8507] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 189.878883][ T8507] hsr1: entered allmulticast mode [ 189.878904][ T8507] dummy0: entered allmulticast mode [ 189.878927][ T8507] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 190.602617][ T5785] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 190.814023][ T5914] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.922026][ T8535] syz.1.1131 (8535) used greatest stack depth: 17600 bytes left [ 191.925705][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.925735][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.925754][ T5785] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.925792][ T5785] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.925812][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.942561][ T5785] usb 5-1: config 0 descriptor?? [ 191.998884][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 192.004129][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.004157][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.004192][ T5914] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 192.004211][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.054278][ T5914] usb 4-1: config 0 descriptor?? [ 192.349561][ T8547] bond_slave_0: entered promiscuous mode [ 192.351264][ T8547] bond_slave_1: entered promiscuous mode [ 193.049777][ T8547] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.073001][ T8547] team0: Port device macvlan2 added [ 193.173193][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173226][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173247][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173268][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173289][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173309][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173330][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173351][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173372][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.173395][ T5785] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 193.287532][ T5914] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 193.320998][ T5914] usb 4-1: USB disconnect, device number 11 [ 193.395390][ T5785] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 193.693146][ T5785] usb 5-1: USB disconnect, device number 7 [ 194.309062][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.309131][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.381573][ T8562] fido_id[8562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 198.672715][ T8666] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1182'. [ 199.746625][ T8679] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.841504][ T8681] vlan2: entered promiscuous mode [ 199.841525][ T8681] geneve1: entered promiscuous mode [ 199.841730][ T8681] vlan2: entered allmulticast mode [ 199.841742][ T8681] geneve1: entered allmulticast mode [ 200.000352][ T826] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 200.110698][ T8687] sctp: [Deprecated]: syz.3.1192 (pid 8687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.110698][ T8687] Use struct sctp_sack_info instead [ 200.150163][ T826] usb 3-1: Using ep0 maxpacket: 16 [ 200.155364][ T826] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 200.155392][ T826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.155408][ T826] usb 3-1: Product: syz [ 200.155503][ T826] usb 3-1: Manufacturer: syz [ 200.155516][ T826] usb 3-1: SerialNumber: syz [ 200.173896][ T826] usb 3-1: config 0 descriptor?? [ 200.275644][ T8689] loop2: detected capacity change from 0 to 7 [ 200.362552][ T5855] Dev loop2: unable to read RDB block 7 [ 200.362596][ T5855] loop2: unable to read partition table [ 200.365729][ T5855] loop2: partition table beyond EOD, truncated [ 200.405687][ T8689] Dev loop2: unable to read RDB block 7 [ 200.405819][ T8689] loop2: unable to read partition table [ 200.408629][ T8689] loop2: partition table beyond EOD, truncated [ 200.408668][ T8689] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 200.604055][ T826] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 200.630951][ T826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.637593][ T826] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 200.637647][ T826] usb 3-1: media controller created [ 200.689417][ T826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.815803][ T826] zl10353_read_register: readreg error (reg=127, ret==0) [ 200.815867][ T826] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 200.815880][ T826] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 200.816980][ T8707] vivid-002: disconnect [ 200.842371][ T826] usb 3-1: USB disconnect, device number 9 [ 200.861589][ T8702] vivid-002: reconnect [ 201.047018][ T826] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 201.319001][ T36] audit: type=1804 audit(1772847434.051:27): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1207" name="/newroot/251/file0" dev="tmpfs" ino=1291 res=1 errno=0 [ 201.672440][ T8713] vivid-000: disconnect [ 201.720645][ T55] vivid-000: reconnect [ 201.721688][ T8740] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1211'. [ 201.744599][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 201.744724][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 201.744820][ T5804] Bluetooth: hci2: command 0x0401 tx timeout [ 201.744843][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 201.744865][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 202.286282][ T8756] dummy0: entered promiscuous mode [ 202.288335][ T8755] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.301348][ T8755] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.304864][ T8756] bond0: entered promiscuous mode [ 202.304883][ T8756] bond_slave_0: entered promiscuous mode [ 202.305186][ T8756] bond_slave_1: entered promiscuous mode [ 202.311622][ T8756] debugfs: 'hsr1' already exists in 'hsr' [ 202.311648][ T8756] Cannot create hsr debugfs directory [ 202.311987][ T8756] hsr1: entered allmulticast mode [ 202.312002][ T8756] dummy0: entered allmulticast mode [ 202.312019][ T8756] bond0: entered allmulticast mode [ 202.312029][ T8756] bond_slave_0: entered allmulticast mode [ 202.312045][ T8756] bond_slave_1: entered allmulticast mode [ 203.485550][ T55] hid_parser_main: 5 callbacks suppressed [ 203.485569][ T55] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 203.514669][ T55] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.979079][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.003479][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.004827][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.025543][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.029391][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.066591][ T1411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.066624][ T1411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.373934][ T8822] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 207.373953][ T8822] netlink: 'syz.4.1249': attribute type 4 has an invalid length. [ 207.373964][ T8822] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1249'. [ 207.709500][ T1411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.709533][ T1411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.819241][ T8808] lo speed is unknown, defaulting to 1000 [ 208.028270][ T8851] loop2: detected capacity change from 0 to 7 [ 208.059594][ T8851] Dev loop2: unable to read RDB block 7 [ 208.059635][ T8851] loop2: unable to read partition table [ 208.059850][ T8851] loop2: partition table beyond EOD, truncated [ 208.059882][ T8851] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.135187][ T1411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.135229][ T1411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.395532][ T1411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.395555][ T1411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.626243][ T55] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 208.698337][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 208.809270][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 208.809316][ T55] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 208.809335][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.858111][ T55] usb 5-1: config 0 descriptor?? [ 208.859742][ T8865] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.969951][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 209.180234][ T5807] Bluetooth: hci4: command tx timeout [ 209.276563][ T1411] bridge_slave_1: left allmulticast mode [ 209.276645][ T1411] bridge_slave_1: left promiscuous mode [ 209.277206][ T1411] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.303093][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303127][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303151][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303175][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303199][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303222][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303246][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303269][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303293][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.303316][ T55] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 209.308435][ T55] asus 0003:0B05:1ABE.000F: collection stack underflow [ 209.308463][ T55] asus 0003:0B05:1ABE.000F: item 0 2 0 12 parsing failed [ 209.309254][ T55] asus 0003:0B05:1ABE.000F: Asus hid parse failed: -22 [ 209.309428][ T55] asus 0003:0B05:1ABE.000F: probe with driver asus failed with error -22 [ 209.473496][ T1411] bridge_slave_0: left allmulticast mode [ 209.473516][ T1411] bridge_slave_0: left promiscuous mode [ 209.473694][ T1411] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.488302][ T55] usb 5-1: USB disconnect, device number 8 [ 209.951512][ T1411] bond_slave_0: left promiscuous mode [ 209.951683][ T1411] bond_slave_1: left promiscuous mode [ 211.003465][ T1411] team0: Port device macvlan2 removed [ 211.103652][ T1411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.186707][ T8931] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1293'. [ 211.201705][ T1411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.242547][ T1411] bond0 (unregistering): Released all slaves [ 211.260215][ T5807] Bluetooth: hci4: command tx timeout [ 211.465607][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.465743][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.465963][ T8808] bridge_slave_0: entered allmulticast mode [ 211.503404][ T8808] bridge_slave_0: entered promiscuous mode [ 211.543859][ T1411] tipc: Disabling bearer [ 211.551056][ T1411] tipc: Left network mode [ 211.551613][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.551810][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.570241][ T8808] bridge_slave_1: entered allmulticast mode [ 211.572746][ T8808] bridge_slave_1: entered promiscuous mode [ 211.663204][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.729914][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.994674][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 211.994695][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 212.081948][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.091636][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.543436][ T9] IPVS: starting estimator thread 0... [ 212.544594][ T8960] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.630487][ T8962] IPVS: using max 15 ests per chain, 36000 per kthread [ 212.911504][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.031170][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.206099][ T8970] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 213.346452][ T5807] Bluetooth: hci4: command tx timeout [ 215.048762][ T8985] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1314'. [ 215.420449][ T5807] Bluetooth: hci4: command tx timeout [ 215.437818][ T8947] batman_adv: batadv0: Interface deactivated: gretap1 [ 216.282332][ T8808] team0: Port device team_slave_0 added [ 216.445019][ T9005] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1324'. [ 216.658838][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 216.658859][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 216.762459][ T1163] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.768122][ T8808] team0: Port device team_slave_1 added [ 216.816091][ T1163] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.918142][ T1163] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.565123][ T36] audit: type=1326 audit(1772847450.251:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9014 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee75ffc799 code=0x7fc00000 [ 217.871439][ T5807] Bluetooth: hci0: unexpected subevent 0x19 length: 25 < 28 [ 218.015969][ T9046] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 218.035285][ T1163] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.100461][ T826] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.125305][ T9046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.126869][ T1163] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.128149][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.128161][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.128184][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.252466][ T826] usb 3-1: config 0 has no interfaces? [ 218.252499][ T826] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 218.252517][ T826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.259703][ T826] usb 3-1: config 0 descriptor?? [ 218.274429][ T9049] bond1: (slave veth3): Enslaving as an active interface with a down link [ 218.454434][ T1163] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.458871][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.458885][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.458908][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.468443][ T1163] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.489631][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.499764][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.509699][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.514214][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.527713][ T826] usb 3-1: USB disconnect, device number 10 [ 219.350904][ T1163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.613151][ T1411] hsr_slave_0: left promiscuous mode [ 219.660300][ T826] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.710481][ T1411] hsr_slave_1: left promiscuous mode [ 219.711852][ T1411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.711977][ T1411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.770381][ T1411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.770410][ T1411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.810254][ T826] usb 3-1: Using ep0 maxpacket: 16 [ 219.812281][ T826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 219.812306][ T826] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.838907][ T826] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice= b.c7 [ 219.838933][ T826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.838951][ T826] usb 3-1: Product: syz [ 219.838963][ T826] usb 3-1: Manufacturer: syz [ 219.838975][ T826] usb 3-1: SerialNumber: syz [ 219.898350][ T826] usb 3-1: config 0 descriptor?? [ 219.925704][ T826] i2c-tiny-usb 3-1:0.0: version b.c7 found at bus 003 address 011 [ 220.157415][ T1411] veth1_macvtap: left promiscuous mode [ 220.169657][ T1411] veth0_macvtap: left promiscuous mode [ 220.180963][ T1411] veth1_vlan: left promiscuous mode [ 220.181513][ T808] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 220.189585][ T1411] veth0_vlan: left promiscuous mode [ 220.308708][ T826] (null): failure reading functionality [ 220.335160][ T826] i2c i2c-2: failure reading functionality [ 220.346707][ T826] i2c i2c-2: connected i2c-tiny-usb device [ 220.350578][ T808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.350602][ T808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.370575][ T808] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 220.370601][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 220.370619][ T808] usb 5-1: SerialNumber: syz [ 220.381640][ T826] usb 3-1: USB disconnect, device number 11 [ 220.703744][ T808] usb 5-1: 0:2 : does not exist [ 220.811055][ T808] usb 5-1: USB disconnect, device number 9 [ 220.945186][ T8019] udevd[8019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.534597][ T9112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1362'. [ 221.653767][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 223.150905][ T1411] team0 (unregistering): Port device team_slave_1 removed [ 223.213471][ T1411] team0 (unregistering): Port device team_slave_0 removed [ 224.015151][ T8808] hsr_slave_0: entered promiscuous mode [ 224.017709][ T8808] hsr_slave_1: entered promiscuous mode [ 224.036485][ T8808] debugfs: 'hsr0' already exists in 'hsr' [ 224.036514][ T8808] Cannot create hsr debugfs directory [ 224.253454][ T9163] kernel read not supported for file /file0 (pid: 9163 comm: syz.2.1384) [ 224.266694][ T36] audit: type=1800 audit(1772847457.011:29): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1384" name="file0" dev="mqueue" ino=21129 res=0 errno=0 [ 224.279652][ T9167] 9p: Bad value for 'rfdno' [ 225.710157][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 227.067458][ T8808] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.177016][ T8808] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.254681][ T8808] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.278514][ T36] audit: type=1326 audit(1772847460.031:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73b20c799 code=0x7ffc0000 [ 227.280962][ T36] audit: type=1326 audit(1772847460.031:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73b20c799 code=0x7ffc0000 [ 227.281006][ T36] audit: type=1326 audit(1772847460.031:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73b20c799 code=0x7ffc0000 [ 227.367428][ T8808] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.592228][ T9231] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1400'. [ 227.871069][ T36] audit: type=1326 audit(1772847460.301:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73b20c799 code=0x7ffc0000 [ 227.871331][ T36] audit: type=1326 audit(1772847460.301:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73b20c799 code=0x7ffc0000 [ 227.871697][ T36] audit: type=1326 audit(1772847460.371:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73b20c799 code=0x7ffc0000 [ 227.871973][ T36] audit: type=1326 audit(1772847460.371:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa73b20c799 code=0x7ffc0000 [ 227.877618][ T36] audit: type=1326 audit(1772847460.371:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa73b20c502 code=0x7ffc0000 [ 227.877874][ T36] audit: type=1326 audit(1772847460.371:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73b20c799 code=0x7ffc0000 [ 229.127822][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.266690][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.331760][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.346063][ T8550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.392070][ T1411] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.392199][ T1411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.440294][ T6003] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.590247][ T6003] usb 4-1: Using ep0 maxpacket: 8 [ 229.614234][ T6003] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 229.614261][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.614278][ T6003] usb 4-1: Product: syz [ 229.614290][ T6003] usb 4-1: Manufacturer: syz [ 229.614302][ T6003] usb 4-1: SerialNumber: syz [ 229.667689][ T6003] usb 4-1: config 0 descriptor?? [ 229.875181][ T6003] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 230.315637][ T9286] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1411'. [ 231.368288][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.496645][ T9287] lo speed is unknown, defaulting to 1000 [ 232.058960][ T6003] usb write operation failed. (-71) [ 232.081657][ T6003] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 232.082241][ T6003] dvbdev: DVB: registering new adapter (Terratec H7) [ 232.082287][ T6003] usb 4-1: media controller created [ 232.085687][ T6003] usb read operation failed. (-71) [ 232.086346][ T6003] usb write operation failed. (-71) [ 232.129108][ T6003] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 232.152891][ T6003] usb 4-1: USB disconnect, device number 12 [ 232.341250][ T8808] veth0_vlan: entered promiscuous mode [ 232.363377][ T8808] veth1_vlan: entered promiscuous mode [ 232.713295][ T8808] veth0_macvtap: entered promiscuous mode [ 232.855794][ T9331] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1424'. [ 233.389845][ T8808] veth1_macvtap: entered promiscuous mode [ 233.471550][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.536584][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.610376][ T8550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.622350][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.632736][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.644825][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.838790][ T808] libceph: connect (1)[c::]:6789 error -101 [ 233.839388][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 233.861643][ T808] libceph: connect (1)[c::]:6789 error -101 [ 233.861810][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 233.864095][ T9336] ceph: No mds server is up or the cluster is laggy [ 234.529650][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 234.570865][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.570885][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.700304][ T6003] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 234.806512][ T8550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.806531][ T8550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.863771][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.863801][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.863837][ T6003] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 234.863856][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.934042][ T6003] usb 3-1: config 0 descriptor?? [ 235.443921][ T9378] netlink: 'syz.1.1439': attribute type 12 has an invalid length. [ 235.443938][ T9378] netlink: 'syz.1.1439': attribute type 29 has an invalid length. [ 235.443944][ T9378] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1439'. [ 235.494767][ T6003] hid_parser_main: 368 callbacks suppressed [ 235.494788][ T6003] hid-led 0003:27B8:01ED.0010: unknown main item tag 0x3 [ 235.702822][ T6003] hid-led 0003:27B8:01ED.0010: probe with driver hid-led failed with error -71 [ 235.719442][ T6003] usb 3-1: USB disconnect, device number 12 [ 236.262110][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.379310][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.394418][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.399037][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.399988][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.410577][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.779932][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.167475][ T9421] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1456'. [ 237.200357][ T9424] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 237.221198][ T9426] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1456'. [ 237.514458][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.589372][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.611178][ T9424] team0: entered promiscuous mode [ 237.611199][ T9424] team_slave_0: entered promiscuous mode [ 237.611400][ T9424] team_slave_1: entered promiscuous mode [ 237.612760][ T9424] team0: entered allmulticast mode [ 237.612777][ T9424] team_slave_0: entered allmulticast mode [ 237.612793][ T9424] team_slave_1: entered allmulticast mode [ 237.616877][ T9424] bond0: (slave team0): Enslaving as an active interface with an up link [ 237.621715][ T9402] lo speed is unknown, defaulting to 1000 [ 238.482130][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 238.491875][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.540216][ T5807] Bluetooth: hci1: command tx timeout [ 240.332724][ T67] bridge_slave_1: left allmulticast mode [ 240.332753][ T67] bridge_slave_1: left promiscuous mode [ 240.333272][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.384231][ T67] bridge_slave_0: left allmulticast mode [ 240.384260][ T67] bridge_slave_0: left promiscuous mode [ 240.387674][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.620163][ T5807] Bluetooth: hci1: command tx timeout [ 241.847209][ T9490] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 242.062435][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.120941][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.164014][ T67] bond0 (unregistering): Released all slaves [ 242.709863][ T5807] Bluetooth: hci1: command tx timeout [ 242.766946][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1486'. [ 242.768399][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1486'. [ 242.919487][ T9513] loop2: detected capacity change from 0 to 7 [ 242.994074][ T9513] loop2: [POWERTEC] p1 p2 p3 [ 242.994324][ T9513] loop2: p1 start 779053419 is beyond EOD, truncated [ 242.994343][ T9513] loop2: p2 size 393216 extends beyond EOD, truncated [ 243.090225][ T9513] loop2: p3 start 1680801792 is beyond EOD, truncated [ 243.237628][ T9402] chnl_net:caif_netlink_parms(): no params data found [ 243.338139][ T8019] udevd[8019]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 243.424402][ T8019] udevd[8019]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 244.059311][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1497'. [ 244.207366][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.207431][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.207541][ T9402] bridge_slave_0: entered allmulticast mode [ 244.208948][ T9402] bridge_slave_0: entered promiscuous mode [ 244.260911][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.260985][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.261171][ T9402] bridge_slave_1: entered allmulticast mode [ 244.262720][ T9402] bridge_slave_1: entered promiscuous mode [ 244.407707][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.431987][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.800439][ T5807] Bluetooth: hci1: command tx timeout [ 244.872216][ T5914] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 244.895740][ T5914] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 244.972189][ T9562] syz.5.1499 (9562) used greatest stack depth: 17128 bytes left [ 245.310941][ T9402] team0: Port device team_slave_0 added [ 245.454130][ T9402] team0: Port device team_slave_1 added [ 246.154529][ T67] dummy0: left promiscuous mode [ 246.340744][ T67] hsr_slave_0: left promiscuous mode [ 246.410286][ T67] hsr_slave_1: left promiscuous mode [ 246.412886][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.412911][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.526031][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.526059][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.769502][ T67] veth0_macvtap: left promiscuous mode [ 246.769663][ T67] veth1_vlan: left promiscuous mode [ 246.769757][ T67] veth0_vlan: left promiscuous mode [ 248.248158][ T9631] loop5: detected capacity change from 0 to 7 [ 248.262680][ T9631] Dev loop5: unable to read RDB block 7 [ 248.262718][ T9631] loop5: unable to read partition table [ 248.262902][ T9631] loop5: partition table beyond EOD, truncated [ 248.262918][ T9631] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.782376][ T67] team0 (unregistering): Port device team_slave_1 removed [ 249.012591][ T67] team0 (unregistering): Port device team_slave_0 removed [ 249.345981][ T5961] lo speed is unknown, defaulting to 1000 [ 249.346000][ T5961] infiniband syz2: ib_query_port failed (-19) [ 249.653922][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.653939][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.653962][ T9402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.656824][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.656837][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.656860][ T9402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.874802][ T9402] hsr_slave_0: entered promiscuous mode [ 249.875554][ T9402] hsr_slave_1: entered promiscuous mode [ 249.876135][ T9402] debugfs: 'hsr0' already exists in 'hsr' [ 249.876150][ T9402] Cannot create hsr debugfs directory [ 251.426903][ T67] IPVS: stop unused estimator thread 0... [ 251.722757][ T9402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.890229][ T9402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 252.066155][ T9402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 252.127473][ T9402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 252.540848][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.605503][ T9402] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.636011][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.649675][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.667014][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.667108][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.408166][ T9] kernel write not supported for file /video36 (pid: 9 comm: kworker/0:0) [ 253.868176][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'. [ 254.284245][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.314471][ T9767] fuse: Bad value for 'fd' [ 255.107370][ T9402] veth0_vlan: entered promiscuous mode [ 255.183741][ T9402] veth1_vlan: entered promiscuous mode [ 255.390590][ T9402] veth0_macvtap: entered promiscuous mode [ 255.412046][ T9402] veth1_macvtap: entered promiscuous mode [ 255.516056][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.586043][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.589402][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 255.589419][ T36] audit: type=1326 audit(1772847488.341:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9810 comm="syz.5.1566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2049f2c799 code=0x0 [ 255.637375][ T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.653799][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.654443][ T69] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.678490][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678564][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.692810][ T69] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.366084][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.366098][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.517026][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.517045][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.327090][ T9849] block nbd1: shutting down sockets [ 264.466721][ T9897] mmap: syz.2.1584 (9897) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.690181][ T6003] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 267.276003][ T6003] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.276020][ T6003] usb 6-1: config 0 has no interface number 0 [ 267.276052][ T6003] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 267.276064][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.315397][ T6003] usb 6-1: config 0 descriptor?? [ 268.511377][ T6003] usb 6-1: selecting invalid altsetting 1 [ 268.512950][ T6003] dvb_ttusb_budget: ttusb_init_controller: error [ 268.512967][ T6003] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 268.810666][ T6003] DVB: Unable to find symbol cx22700_attach() [ 270.636743][ T6003] DVB: Unable to find symbol tda10046_attach() [ 270.636801][ T6003] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 270.713868][ T6003] usb 6-1: USB disconnect, device number 2 [ 272.705536][ T9973] binder: 9972:9973 ioctl 4018620d 0 returned -22 [ 272.899172][ T9979] serio: Serial port ptm0 [ 278.161671][T10031] QAT: failed to copy from user cfg_data. [ 278.460385][ T36] audit: type=1326 audit(1772847511.011:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.3.1618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa73b20c799 code=0x0 [ 278.624619][T10026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.624693][T10026] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.956708][T10026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.956758][T10026] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.050133][T10026] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.050252][T10026] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 280.144518][T10026] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.144566][T10026] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 280.234169][T10026] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 280.318185][T10026] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.319339][T10026] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 280.437457][T10026] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 280.700258][ T5807] Bluetooth: hci0: command 0x0406 tx timeout [ 282.384296][ T5807] Bluetooth: hci2: command 0x0401 tx timeout [ 282.384587][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 282.384615][ T5807] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.384698][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.841048][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 284.910224][ T5807] Bluetooth: hci4: command 0x0c1a tx timeout [ 284.910261][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 284.910284][ T5807] Bluetooth: hci2: command 0x0401 tx timeout [ 284.910389][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.953082][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 286.953439][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.540135][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 298.150188][ T826] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 298.290557][ T826] usb 7-1: device descriptor read/64, error -71 [ 298.906951][ T826] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 299.035833][ T826] usb 7-1: device descriptor read/64, error -71 [ 299.141643][ T826] usb usb7-port1: attempt power cycle [ 300.523550][ T826] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 300.546203][ T826] usb 7-1: device descriptor read/8, error -71 [ 300.902356][ T826] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 301.552405][ T826] usb 7-1: device descriptor read/8, error -71 [ 301.660665][ T826] usb usb7-port1: unable to enumerate USB device [ 306.124396][ T36] audit: type=1326 audit(1772847538.881:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.124968][ T36] audit: type=1326 audit(1772847538.881:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.130835][ T36] audit: type=1326 audit(1772847538.881:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.130881][ T36] audit: type=1326 audit(1772847538.881:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.130918][ T36] audit: type=1326 audit(1772847538.881:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.130954][ T36] audit: type=1326 audit(1772847538.881:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.130991][ T36] audit: type=1326 audit(1772847538.881:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.131028][ T36] audit: type=1326 audit(1772847538.881:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.131064][ T36] audit: type=1326 audit(1772847538.881:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 306.131111][ T36] audit: type=1326 audit(1772847538.881:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee75ffc799 code=0x7ffc0000 [ 309.100303][ T1238] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 309.264914][ T1238] usb 2-1: Using ep0 maxpacket: 8 [ 309.683516][ T1238] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.683533][ T1238] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 309.683545][ T1238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.683558][ T1238] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.686040][ T1238] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 309.686065][ T1238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.686081][ T1238] usb 2-1: Product: syz [ 309.686088][ T1238] usb 2-1: Manufacturer: syz [ 309.686095][ T1238] usb 2-1: SerialNumber: syz [ 309.724795][ T1238] usb 2-1: config 0 descriptor?? [ 309.799021][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 309.917877][ T1238] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 311.480181][ T6003] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 311.750205][ T6003] usb 6-1: Using ep0 maxpacket: 32 [ 311.770787][ T1238] rc_core: IR keymap rc-imon-pad not found [ 311.770805][ T1238] Registered IR keymap rc-empty [ 311.770951][ T1238] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 311.770967][ T1238] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 311.800167][ T6003] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 311.800211][ T6003] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 311.800246][ T6003] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 311.800270][ T6003] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 311.800294][ T6003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.810882][ T6003] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 311.810909][ T6003] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 311.810927][ T6003] usb 6-1: Product: syz [ 311.810940][ T6003] usb 6-1: Manufacturer: syz [ 311.810952][ T6003] usb 6-1: SerialNumber: syz [ 312.740436][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.740990][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.743731][ T6003] usb 6-1: config 0 descriptor?? [ 312.784514][ T1238] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 312.979242][ T6003] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 313.020224][ T6003] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 313.036526][ T1238] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 313.950502][ T1238] imon 2-1:0.0: iMON device (15c2:003b, intf0) on usb<2:7> initialized [ 313.960570][ T6003] usb 6-1: USB disconnect, device number 3 [ 313.998438][ T6003] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 314.244341][ T5914] usb 2-1: USB disconnect, device number 7 [ 317.513776][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.513856][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.658455][T10338] comedi: No check for data length of config insn id 53517 is implemented [ 323.658503][T10338] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 323.658536][T10338] comedi: Assuming n=15 is correct [ 324.984268][ T1238] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 325.035165][T10347] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 325.182537][ T1238] usb 2-1: Using ep0 maxpacket: 32 [ 326.010240][ T1238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.010296][ T1238] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 326.010336][ T1238] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 326.010358][ T1238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.033483][ T1238] usb 2-1: config 0 descriptor?? [ 326.050926][ T1238] usb 2-1: bad CDC descriptors [ 326.051744][ T1238] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 326.051765][ T1238] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 326.051797][ T1238] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 326.133356][ T5801] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 326.295701][ T826] usb 2-1: USB disconnect, device number 8 [ 329.717927][T10361] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 332.432402][T10414] netlink: 'syz.3.1698': attribute type 1 has an invalid length. [ 332.432423][T10414] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1698'. [ 332.791900][ T5801] Bluetooth: hci0: unexpected event 0x14 length: 20 > 6 [ 332.900532][T10423] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1700'. [ 333.596835][T10252] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 333.773074][T10252] usb 7-1: unable to get BOS descriptor or descriptor too short [ 333.773637][T10252] usb 7-1: not running at top speed; connect to a high speed hub [ 333.774915][T10252] usb 7-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 333.778962][T10252] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 333.778987][T10252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.779005][T10252] usb 7-1: Product: syz [ 333.779018][T10252] usb 7-1: Manufacturer: syz [ 333.779031][T10252] usb 7-1: SerialNumber: syz [ 334.248776][T10252] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.227928][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.297215][T10252] snd-usb-audio 7-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 336.306712][T10252] usb 7-1: USB disconnect, device number 6 [ 336.674597][T10247] udevd[10247]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.724590][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1711'. [ 337.732264][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1720'. [ 337.732278][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 341.291798][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1722'. [ 342.070229][ T5801] Bluetooth: hci4: command 0x0c1a tx timeout [ 344.051809][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 344.190385][T10523] kAFS: unable to lookup cell '/,' [ 346.650298][ T5785] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 346.805576][ T5785] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 346.805606][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.805623][ T5785] usb 2-1: Product: syz [ 346.805635][ T5785] usb 2-1: Manufacturer: syz [ 346.805647][ T5785] usb 2-1: SerialNumber: syz [ 346.844545][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1753'. [ 346.844577][T10564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1753'. [ 346.975845][T10567] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 347.090654][ T5785] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 347.090705][ T5785] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 347.090721][ T5785] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 347.899403][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1770'. [ 348.032127][ T5785] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 348.324082][T10612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.518507][T10620] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.1779'. [ 348.884825][T10634] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 348.957391][ T55] usb 2-1: USB disconnect, device number 9 [ 349.026625][T10638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1787'. [ 349.257041][T10650] XFS (nbd1): no-recovery mounts must be read-only. [ 349.720682][ T55] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 350.185860][ T55] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 350.185890][ T55] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 350.186081][ T55] usb 7-1: Product: syz [ 350.186699][ T55] usb 7-1: Manufacturer: syz [ 350.187680][ T55] usb 7-1: SerialNumber: syz [ 350.531427][ T55] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 350.678743][T10684] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1807'. [ 350.695826][T10687] kAFS: unable to lookup cell '(' [ 350.887417][T10697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1812'. [ 350.946277][ T55] vp7045: USB control message 'in' went wrong. [ 350.946402][ T55] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 350.946451][ T55] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 350.968668][ T55] usb 7-1: USB disconnect, device number 7 [ 351.070341][ T1238] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 352.677162][ T1238] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.691255][ T1238] usb 4-1: not running at top speed; connect to a high speed hub [ 352.695407][ T1238] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 352.698210][ T1238] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 352.698235][ T1238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.698253][ T1238] usb 4-1: Product: syz [ 352.698266][ T1238] usb 4-1: Manufacturer: syz [ 352.698279][ T1238] usb 4-1: SerialNumber: syz [ 353.062515][T10727] netlink: 'syz.5.1824': attribute type 10 has an invalid length. [ 353.104581][ T1238] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.218943][T10727] team0: Device xfrm0 is of different type [ 353.346125][ T1238] snd-usb-audio 4-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 353.370425][ T1238] usb 4-1: USB disconnect, device number 13 [ 353.537685][T10247] udevd[10247]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.670220][ T5785] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 353.795253][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 353.820643][ T5785] usb 2-1: Using ep0 maxpacket: 16 [ 353.823177][ T5785] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 353.905017][ T5785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 353.905046][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.905063][ T5785] usb 2-1: Product: syz [ 353.905073][ T5785] usb 2-1: Manufacturer: syz [ 353.905084][ T5785] usb 2-1: SerialNumber: syz [ 355.425109][T10252] usb 2-1: USB disconnect, device number 10 [ 356.375131][T10784] siw: device registration error -23 [ 356.466073][T10788] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1854'. [ 356.523751][T10790] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.525491][T10790] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.280110][ T55] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 358.448761][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 358.449347][ T55] usb 4-1: not running at top speed; connect to a high speed hub [ 358.466443][ T55] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 358.475418][ T55] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 358.475447][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.475466][ T55] usb 4-1: Product: syz [ 358.475478][ T55] usb 4-1: Manufacturer: syz [ 358.475491][ T55] usb 4-1: SerialNumber: syz [ 358.541837][T10826] siw: device registration error -23 [ 358.748108][ T55] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.798778][T10834] ubi0: attaching mtd0 [ 358.809422][T10834] ubi0: scanning is finished [ 358.809441][T10834] ubi0: empty MTD device detected [ 358.905497][ T55] snd-usb-audio 4-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 358.921678][ T55] usb 4-1: USB disconnect, device number 14 [ 358.928675][T10247] udevd[10247]: setting owner of /dev/bus/usb/004/014 to uid=0, gid=0 failed: No such file or directory [ 359.045184][T10247] udevd[10247]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.989187][T10834] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 359.989216][T10834] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 359.989232][T10834] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 359.989247][T10834] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 359.989262][T10834] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 359.989276][T10834] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 359.989292][T10834] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 392733612 [ 359.989309][T10834] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 359.993768][T10851] ubi0: background thread "ubi_bgt0d" started, PID 10851 [ 360.479586][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479622][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479647][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479670][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479695][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479719][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479743][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479766][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479787][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.479811][ T55] hid-generic 000A:0004:0009.0012: unknown main item tag 0x0 [ 360.584244][ T55] hid-generic 000A:0004:0009.0012: hidraw0: HID v0.04 Device [syz1] on syz0 [ 360.712549][T10876] fido_id[10876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.854197][T10884] ubi: mtd0 is already attached to ubi0 [ 360.902559][ T5961] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 361.082889][ T5961] usb 7-1: unable to get BOS descriptor or descriptor too short [ 361.083444][ T5961] usb 7-1: not running at top speed; connect to a high speed hub [ 361.084567][ T5961] usb 7-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 361.086963][ T5961] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 361.086987][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.087005][ T5961] usb 7-1: Product: syz [ 361.087018][ T5961] usb 7-1: Manufacturer: syz [ 361.087030][ T5961] usb 7-1: SerialNumber: syz [ 361.253381][T10900] netlink: 'syz.1.1902': attribute type 3 has an invalid length. [ 361.404989][ T5961] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.564919][ T5961] snd-usb-audio 7-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 361.570660][ T5961] usb 7-1: USB disconnect, device number 8 [ 361.637301][T10247] udevd[10247]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.120379][ T5961] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 362.300389][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 362.302340][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.302368][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.302393][ T5961] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 362.302405][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.307248][ T5961] usb 2-1: config 0 descriptor?? [ 362.771049][T10252] kernel write not supported for file /sg0 (pid: 10252 comm: kworker/1:7) [ 362.818557][ T5961] koneplus 0003:1E7D:2D51.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 362.994736][ T5961] koneplus 0003:1E7D:2D51.0013: couldn't init struct koneplus_device [ 362.994791][ T5961] koneplus 0003:1E7D:2D51.0013: couldn't install mouse [ 363.012501][ T5961] koneplus 0003:1E7D:2D51.0013: probe with driver koneplus failed with error -71 [ 363.039075][ T5961] usb 2-1: USB disconnect, device number 11 [ 363.101081][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 363.101870][T10893] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 363.133259][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 363.133278][ T36] audit: type=1326 audit(1772847595.881:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10947 comm="syz.3.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73b20c799 code=0x7fc00000 [ 363.380893][T10974] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 363.436019][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1937'. [ 363.491684][T10980] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 363.945243][T11000] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 363.958899][T11007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1951'. [ 364.007844][T11000] bond1 (unregistering): Released all slaves [ 364.332098][T10252] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 364.500858][T10252] usb 6-1: Using ep0 maxpacket: 32 [ 364.544314][T10252] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 364.544530][T10252] usb 6-1: config 0 has no interface number 0 [ 364.544659][T10252] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 364.638355][T10252] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 364.638432][T10252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.638473][T10252] usb 6-1: Product: syz [ 364.638539][T10252] usb 6-1: Manufacturer: syz [ 364.638574][T10252] usb 6-1: SerialNumber: syz [ 365.031519][T10252] usb 6-1: config 0 descriptor?? [ 365.035939][T10252] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 365.035960][T10252] em28xx 6-1:0.132: Video interface 132 found: [ 365.261883][T11027] netlink: 'syz.1.1959': attribute type 29 has an invalid length. [ 365.278253][T11027] netlink: 'syz.1.1959': attribute type 29 has an invalid length. [ 365.442824][T10252] em28xx 6-1:0.132: unknown em28xx chip ID (39) [ 365.464475][T11037] netlink: 'syz.6.1963': attribute type 2 has an invalid length. [ 365.568007][T11042] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 365.568040][T11042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.759705][T10252] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 365.759736][T10252] em28xx 6-1:0.132: board has no eeprom [ 365.822444][T10252] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 365.822558][T10252] em28xx 6-1:0.132: analog set to bulk mode. [ 365.824069][ T5914] em28xx 6-1:0.132: Registering V4L2 extension [ 365.862710][T10252] usb 6-1: USB disconnect, device number 4 [ 365.864980][T10252] em28xx 6-1:0.132: Disconnecting em28xx [ 366.170733][ T5914] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 366.170805][ T5914] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 366.170819][ T5914] em28xx 6-1:0.132: No AC97 audio processor [ 366.347116][ T5914] usb 6-1: Decoder not found [ 366.347136][ T5914] em28xx 6-1:0.132: failed to create media graph [ 366.347222][ T5914] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 366.359178][ T5914] em28xx 6-1:0.132: Remote control support is not available for this card. [ 366.367900][T10252] em28xx 6-1:0.132: Closing input extension [ 366.497248][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1985'. [ 366.526882][T10252] em28xx 6-1:0.132: Freeing device [ 366.675273][T11091] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1988'. [ 368.038064][T11127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2004'. [ 368.926581][T11172] hugetlbfs: Bad value '%' for mount option 'size' [ 368.926581][T11172] [ 369.081502][ T5785] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 370.067651][T11190] wireguard0: entered promiscuous mode [ 370.067678][T11190] wireguard0: entered allmulticast mode [ 370.082256][ T5785] usb 7-1: config 0 has no interfaces? [ 370.082292][ T5785] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.082313][ T5785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.129040][ T5785] usb 7-1: config 0 descriptor?? [ 370.154349][T11190] team0: Device wireguard0 is of different type [ 370.384772][ T5914] usb 7-1: USB disconnect, device number 9 [ 372.074707][T11249] netlink: 'syz.1.2061': attribute type 1 has an invalid length. [ 372.074729][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2061'. [ 373.156378][T11265] 9p: Bad value for 'rfdno' [ 373.474181][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'. [ 373.599080][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2079'. [ 373.961038][T10252] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 374.510221][T10252] usb 4-1: Using ep0 maxpacket: 16 [ 374.533164][T10252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.533194][T10252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.533214][T10252] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.533252][T10252] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.533274][T10252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.548159][T10252] usb 4-1: config 0 descriptor?? [ 374.905400][T11316] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2090'. [ 375.047709][T10252] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input11 [ 375.066214][T10252] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 376.028826][ T5961] usb 4-1: USB disconnect, device number 15 [ 376.202980][T11336] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2097'. [ 376.251696][T11339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.251996][T11331] fido_id[11331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 377.661907][T11368] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2113'. [ 378.001102][ T5914] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 378.264115][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 378.307231][ T5914] usb 4-1: not running at top speed; connect to a high speed hub [ 378.360515][ T5914] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 378.423555][ T5914] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 378.423759][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.423857][ T5914] usb 4-1: Product: syz [ 378.423925][ T5914] usb 4-1: Manufacturer: syz [ 378.426755][ T5914] usb 4-1: SerialNumber: syz [ 378.868482][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.868554][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.062076][T11390] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2120'. [ 379.213219][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.315982][ T5914] snd-usb-audio 4-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 379.332887][ T5914] usb 4-1: USB disconnect, device number 16 [ 379.374108][T10247] udevd[10247]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.681246][T11410] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2130'. [ 381.448365][T11450] program syz.6.2148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.588793][T11456] netlink: 87 bytes leftover after parsing attributes in process `syz.6.2151'. [ 381.968344][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2156'. [ 382.312265][T11486] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2165'. [ 383.895166][T11519] program syz.6.2178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.660170][ T5961] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 385.812153][ T5961] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 385.812182][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.825954][ T5961] usb 7-1: config 0 descriptor?? [ 385.830153][ T5914] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 385.863124][ T5961] cp210x 7-1:0.0: cp210x converter detected [ 385.990171][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 385.992380][ T5914] usb 4-1: config 32 has an invalid interface number: 85 but max is 0 [ 385.992403][ T5914] usb 4-1: config 32 has no interface number 0 [ 385.992444][ T5914] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.992477][ T5914] usb 4-1: config 32 interface 85 has no altsetting 0 [ 385.995282][ T5914] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 385.995309][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.995326][ T5914] usb 4-1: Product: syz [ 385.995389][ T5914] usb 4-1: Manufacturer: syz [ 385.995403][ T5914] usb 4-1: SerialNumber: syz [ 386.262675][ T5961] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 386.291662][ T5961] usb 7-1: cp210x converter now attached to ttyUSB0 [ 386.507580][ T5785] usb 7-1: USB disconnect, device number 10 [ 386.526450][ T5785] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 386.664067][ T5785] cp210x 7-1:0.0: device disconnected [ 386.850851][ T5914] appletouch 4-1:32.85: Geyser mode initialized. [ 386.859670][ T5914] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.85/input/input12 [ 386.912998][ C1] appletouch 4-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 387.106632][T11622] program syz.1.2224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.121190][ T5914] usb 4-1: USB disconnect, device number 17 [ 387.222066][ T5914] appletouch 4-1:32.85: input: appletouch disconnected [ 387.329320][ T1238] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 387.390940][ T36] audit: type=1326 audit(1772847620.151:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.391066][ T36] audit: type=1326 audit(1772847620.151:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.391196][ T36] audit: type=1326 audit(1772847620.151:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.391586][ T36] audit: type=1326 audit(1772847620.151:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.391743][ T36] audit: type=1326 audit(1772847620.151:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.391931][ T36] audit: type=1326 audit(1772847620.151:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.392049][ T36] audit: type=1326 audit(1772847620.151:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.392200][ T36] audit: type=1326 audit(1772847620.151:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.392409][ T36] audit: type=1326 audit(1772847620.151:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.393360][ T36] audit: type=1326 audit(1772847620.151:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f19d04ac799 code=0x7ffc0000 [ 387.630113][ T1238] usb 7-1: Using ep0 maxpacket: 16 [ 387.651455][ T1238] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.651495][ T1238] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.651516][ T1238] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 387.651539][ T1238] usb 7-1: config 0 interface 0 has no altsetting 0 [ 387.651569][ T1238] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 387.651589][ T1238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.695976][ T1238] usb 7-1: config 0 descriptor?? [ 388.078079][T11647] netlink: 'syz.5.2236': attribute type 1 has an invalid length. [ 388.107986][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.108489][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.314969][ T5961] usb 7-1: USB disconnect, device number 11 [ 388.743106][ T5961] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 388.903296][ T5961] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.903324][ T5961] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 388.903340][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.903389][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 388.903411][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 388.905247][ T5961] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.905272][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.905289][ T5961] usb 4-1: Product: syz [ 388.905301][ T5961] usb 4-1: Manufacturer: syz [ 388.949066][ T5961] cdc_wdm 4-1:1.0: skipping garbage [ 388.949086][ T5961] cdc_wdm 4-1:1.0: skipping garbage [ 388.971115][ T5961] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 388.972804][ T5961] cdc_wdm 4-1:1.0: Unknown control protocol [ 389.460769][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 389.461355][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.461496][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.461727][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.461745][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.462116][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.462134][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.463721][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.463740][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.464969][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.464988][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.467083][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.467102][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.470226][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.470246][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.470458][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.470476][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.470697][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.470715][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.472302][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 389.472321][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 389.665809][ T5961] usb 4-1: USB disconnect, device number 18 [ 389.665895][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 390.520171][ T5785] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 390.680361][ T5785] usb 2-1: Using ep0 maxpacket: 32 [ 390.682393][ T5785] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 390.682418][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.698606][ T5785] usb 2-1: config 0 descriptor?? [ 390.960268][ T5785] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 390.977950][ T5785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 390.979125][ T5785] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 390.979191][ T5785] usb 2-1: media controller created [ 391.048412][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.175837][ T5785] az6027: usb out operation failed. (-71) [ 391.183414][ T5785] az6027: usb out operation failed. (-71) [ 391.183431][ T5785] stb0899_attach: Driver disabled by Kconfig [ 391.183440][ T5785] az6027: no front-end attached [ 391.183440][ T5785] [ 391.184862][ T5785] az6027: usb out operation failed. (-71) [ 391.184953][ T5785] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 391.192832][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 391.212697][ T5785] dvb-usb: schedule remote query interval to 400 msecs. [ 391.212718][ T5785] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 391.221121][ T5785] usb 2-1: USB disconnect, device number 12 [ 391.362896][T11717] 9p: Bad value for 'rfdno' [ 391.501242][T11721] netlink: 'syz.5.2269': attribute type 4 has an invalid length. [ 391.624692][T11725] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2270'. [ 391.630476][ T5785] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 392.316981][T11760] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 392.761032][T11778] sctp: [Deprecated]: syz.5.2294 (pid 11778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.761032][T11778] Use struct sctp_sack_info instead [ 392.867535][T11780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2295'. [ 392.867559][T11780] netlink: 'syz.3.2295': attribute type 32 has an invalid length. [ 392.867582][T11780] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 393.493695][T11809] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 393.493723][T11809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 393.531378][T11809] vhci_hcd vhci_hcd.0: Device attached [ 393.567262][T11810] vhci_hcd: connection closed [ 393.608101][ T4834] vhci_hcd vhci_hcd.6: stop threads [ 393.609221][ T4834] vhci_hcd vhci_hcd.6: release socket [ 393.609404][ T4834] vhci_hcd vhci_hcd.6: disconnect device [ 393.713770][T11817] input: syz0 as /devices/virtual/input/input14 [ 393.990424][T11827] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2314'. [ 395.002803][T11861] overlayfs: failed to clone lowerpath [ 395.280466][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2326'. [ 395.404098][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2326'. [ 396.620070][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 396.623134][ T5785] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 396.623154][ T5785] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 397.527521][T11963] netlink: 'syz.6.2356': attribute type 12 has an invalid length. [ 397.527544][T11963] netlink: 'syz.6.2356': attribute type 29 has an invalid length. [ 397.527557][T11963] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2356'. [ 397.621679][T11967] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2357'. [ 398.062239][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 398.220627][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.220653][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 398.220673][ T9] usb 4-1: config 1 has no interface number 0 [ 398.220715][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.220741][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 398.220766][ T9] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 398.225255][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.225283][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.225300][ T9] usb 4-1: Product: syz [ 398.225313][ T9] usb 4-1: Manufacturer: syz [ 398.225326][ T9] usb 4-1: SerialNumber: syz [ 398.328329][T11977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 398.734201][T11977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 398.752850][T12019] input: syz0 as /devices/virtual/input/input15 [ 398.780132][ T5785] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 398.780155][ T5785] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 398.780295][ T60] Bluetooth: hci2: command 0x0401 tx timeout [ 398.828902][T12023] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.171138][ T9] cdc_ncm 4-1:1.1: bind() failure [ 399.359371][ T55] usb 4-1: USB disconnect, device number 19 [ 399.448892][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2383'. [ 399.465646][T12043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.281953][T12087] binder: 12084:12087 ioctl c0306201 200000000640 returned -22 [ 400.390090][T12099] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 400.390117][T12099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.390196][T12099] vhci_hcd vhci_hcd.0: Device attached [ 400.397371][T12090] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 400.397397][T12090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.397447][T12090] vhci_hcd vhci_hcd.0: Device attached [ 400.398266][T12099] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 400.398286][T12099] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 400.398342][T12099] vhci_hcd vhci_hcd.0: Device attached [ 400.408351][T12090] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(7) [ 400.408376][T12090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.408422][T12090] vhci_hcd vhci_hcd.0: Device attached [ 400.414980][T12097] trusted_key: syz.2.2401 sent an empty control message without MSG_MORE. [ 400.419005][T12103] vhci_hcd: connection closed [ 400.435685][T12100] vhci_hcd: connection closed [ 400.438684][T12092] vhci_hcd: connection closed [ 400.449193][T12105] vhci_hcd: connection closed [ 400.449459][ T8550] vhci_hcd vhci_hcd.1: stop threads [ 400.449481][ T8550] vhci_hcd vhci_hcd.1: release socket [ 400.449517][ T8550] vhci_hcd vhci_hcd.1: disconnect device [ 400.449870][ T8550] vhci_hcd vhci_hcd.1: stop threads [ 400.449882][ T8550] vhci_hcd vhci_hcd.1: release socket [ 400.449915][ T8550] vhci_hcd vhci_hcd.1: disconnect device [ 400.452152][ T8550] vhci_hcd vhci_hcd.1: stop threads [ 400.452168][ T8550] vhci_hcd vhci_hcd.1: release socket [ 400.452204][ T8550] vhci_hcd vhci_hcd.1: disconnect device [ 400.452456][ T8550] vhci_hcd vhci_hcd.1: stop threads [ 400.452468][ T8550] vhci_hcd vhci_hcd.1: release socket [ 400.452499][ T8550] vhci_hcd vhci_hcd.1: disconnect device [ 400.654528][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 400.654550][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 400.655366][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 400.655383][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 400.860075][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 400.863233][ T5785] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 400.863256][ T5785] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 401.226094][T12137] loop2: detected capacity change from 0 to 7 [ 401.251829][T12137] loop2: [POWERTEC] p1 [ 401.252054][T12137] loop2: p1 start 1798272613 is beyond EOD, truncated [ 401.377022][T12144] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.110341][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 403.272822][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.272855][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.272874][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.272914][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.272935][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.351847][ T10] usb 6-1: config 0 descriptor?? [ 403.401023][T12200] fuse: Bad value for 'fd' [ 403.902323][ T10] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 404.055563][ T1238] usb 6-1: USB disconnect, device number 5 [ 404.555726][T12233] fuse: Bad value for 'fd' [ 404.556399][T12233] fuse: Bad value for 'fd' [ 404.785639][ T5785] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 404.785665][ T5785] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 407.346587][ T5785] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 407.347111][ T5785] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 407.350072][ C1] ------------[ cut here ]------------ [ 407.350084][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 407.350112][ C1] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd16/0xff0, CPU#1: ktimers/1/29 [ 407.350144][ C1] Modules linked in: [ 407.350169][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.350189][ C1] Tainted: [L]=SOFTLOCKUP [ 407.350195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.350207][ C1] RIP: 0010:__queue_work+0xd40/0xff0 [ 407.350226][ C1] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 20 2c 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 d6 [ 407.350239][ C1] RSP: 0018:ffffc90000a3f9a0 EFLAGS: 00010082 [ 407.350251][ C1] RAX: 1ffff1100804d953 RBX: ffff88804026ca98 RCX: ffff88801ceebd00 [ 407.350262][ C1] RDX: ffff888062f45168 RSI: ffffffff8a139220 RDI: ffffffff8f6d1890 [ 407.350272][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 407.350282][ C1] R10: dffffc0000000000 R11: ffffffff818d4300 R12: 0000000000000100 [ 407.350291][ C1] R13: dffffc0000000000 R14: ffffffff8f6d1890 R15: ffff888062f45168 [ 407.350302][ C1] FS: 0000000000000000(0000) GS:ffff88812643d000(0000) knlGS:0000000000000000 [ 407.350314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.350325][ C1] CR2: 0000001b2fc24000 CR3: 0000000061d34000 CR4: 00000000003526f0 [ 407.350338][ C1] Call Trace: [ 407.350348][ C1] [ 407.350367][ C1] call_timer_fn+0x192/0x640 [ 407.350383][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 407.350404][ C1] ? call_timer_fn+0xd4/0x640 [ 407.350419][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 407.350447][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 407.350469][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 407.350496][ C1] __run_timer_base+0x764/0x9f0 [ 407.350534][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 407.350576][ C1] run_timer_softirq+0xb7/0x170 [ 407.350602][ C1] handle_softirqs+0x1de/0x6f0 [ 407.350636][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 407.350661][ C1] run_ktimerd+0x69/0x100 [ 407.350685][ C1] smpboot_thread_fn+0x541/0xa50 [ 407.350714][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 407.350748][ C1] kthread+0x388/0x470 [ 407.350769][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 407.350793][ C1] ? __pfx_kthread+0x10/0x10 [ 407.350815][ C1] ret_from_fork+0x51e/0xb90 [ 407.350843][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 407.350867][ C1] ? __switch_to+0xc7d/0x1450 [ 407.350903][ C1] ? __pfx_kthread+0x10/0x10 [ 407.350925][ C1] ret_from_fork_asm+0x1a/0x30 [ 407.350961][ C1] [ 407.350977][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 407.350994][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.351021][ C1] Tainted: [L]=SOFTLOCKUP [ 407.351029][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.351040][ C1] Call Trace: [ 407.351048][ C1] [ 407.351056][ C1] vpanic+0x56c/0xa60 [ 407.351084][ C1] ? __pfx__printk+0x10/0x10 [ 407.351105][ C1] ? __pfx_vpanic+0x10/0x10 [ 407.351129][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 407.351155][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 407.351190][ C1] panic+0xc5/0xd0 [ 407.351215][ C1] ? __pfx_panic+0x10/0x10 [ 407.351251][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 407.351276][ C1] __warn+0x315/0x4f0 [ 407.351302][ C1] ? __queue_work+0xd16/0xff0 [ 407.351328][ C1] ? __queue_work+0xd16/0xff0 [ 407.351352][ C1] __report_bug+0x29a/0x540 [ 407.351376][ C1] ? enqueue_task+0x341/0x410 [ 407.351407][ C1] ? __queue_work+0xd16/0xff0 [ 407.351434][ C1] ? __pfx___report_bug+0x10/0x10 [ 407.351457][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 407.351489][ C1] ? look_up_lock_class+0x57/0x110 [ 407.351515][ C1] ? register_lock_class+0x31/0x2e0 [ 407.351549][ C1] report_bug_entry+0x19a/0x290 [ 407.351575][ C1] ? __queue_work+0xd40/0xff0 [ 407.351598][ C1] ? __queue_work+0xd45/0xff0 [ 407.351623][ C1] handle_bug+0xce/0x200 [ 407.351651][ C1] exc_invalid_op+0x1a/0x50 [ 407.351678][ C1] asm_exc_invalid_op+0x1a/0x20 [ 407.351698][ C1] RIP: 0010:__queue_work+0xd40/0xff0 [ 407.351724][ C1] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 20 2c 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 d6 [ 407.351740][ C1] RSP: 0018:ffffc90000a3f9a0 EFLAGS: 00010082 [ 407.351758][ C1] RAX: 1ffff1100804d953 RBX: ffff88804026ca98 RCX: ffff88801ceebd00 [ 407.351773][ C1] RDX: ffff888062f45168 RSI: ffffffff8a139220 RDI: ffffffff8f6d1890 [ 407.351788][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 407.351800][ C1] R10: dffffc0000000000 R11: ffffffff818d4300 R12: 0000000000000100 [ 407.351814][ C1] R13: dffffc0000000000 R14: ffffffff8f6d1890 R15: ffff888062f45168 [ 407.351834][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 407.351865][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 407.351915][ C1] call_timer_fn+0x192/0x640 [ 407.351936][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 407.351961][ C1] ? call_timer_fn+0xd4/0x640 [ 407.351980][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 407.352009][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 407.352035][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 407.352065][ C1] __run_timer_base+0x764/0x9f0 [ 407.352108][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 407.352154][ C1] run_timer_softirq+0xb7/0x170 [ 407.352182][ C1] handle_softirqs+0x1de/0x6f0 [ 407.352218][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 407.352242][ C1] run_ktimerd+0x69/0x100 [ 407.352268][ C1] smpboot_thread_fn+0x541/0xa50 [ 407.352296][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 407.352333][ C1] kthread+0x388/0x470 [ 407.352354][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 407.352379][ C1] ? __pfx_kthread+0x10/0x10 [ 407.352397][ C1] ret_from_fork+0x51e/0xb90 [ 407.352420][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 407.352439][ C1] ? __switch_to+0xc7d/0x1450 [ 407.352459][ C1] ? __pfx_kthread+0x10/0x10 [ 407.352476][ C1] ret_from_fork_asm+0x1a/0x30 [ 407.352504][ C1] [ 407.352792][ C1] Kernel Offset: disabled