last executing test programs: 16m6.303506976s ago: executing program 2 (id=174): accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10, 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000007c0)={0x80000000, 0x0, &(0x7f0000000800)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000480)={r4, 0x0, 0x0}) 16m5.223021472s ago: executing program 2 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16m4.484519016s ago: executing program 2 (id=177): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) 16m4.268616777s ago: executing program 2 (id=179): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46e, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="330520000a00160006007ef52f555f2ab34eb67eabe256dc234347dc0fb58da9c97b714283fe7517599e", 0x2a, 0x801, &(0x7f0000000000)={0x11, 0x17, r1, 0x1, 0x2, 0x6, @remote}, 0x14) 16m4.099872583s ago: executing program 2 (id=181): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x10000000000000) 16m3.534893499s ago: executing program 2 (id=184): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x51, 0x0) 15m47.959448984s ago: executing program 32 (id=184): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x51, 0x0) 6m5.687802778s ago: executing program 1 (id=1655): openat$hwrng(0xffffffffffffff9c, 0x0, 0x1d7785, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x18, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0) fdatasync(r6) 6m3.616203242s ago: executing program 1 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) pipe2$9p(&(0x7f00000001c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x3, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m2.556469287s ago: executing program 1 (id=1662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x2880, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x280057a) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x3a, &(0x7f0000000480)=""/233, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)='2', 0x1}, {&(0x7f0000000000)='0', 0x1}], 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x380, 0x1c0, 0x0, 0x1c0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private, 0x21}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x520}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x80800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, 0x0) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40002000) 6m1.904162141s ago: executing program 1 (id=1665): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6m0.7963246s ago: executing program 1 (id=1667): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 5m58.783026088s ago: executing program 1 (id=1672): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000006c0)={&(0x7f0000000180), 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000004d5f9ed42c5e4166cf056b44b96f9f3f67eee0a03e90dc0e0000000000002e78d01304fcd78c1275d1e91e3dd4443b5d882f2bc1cb5dfea5e6c4cacf6baf096480c848c4cb6fb4f4822e600acc082ed7bb4204cafcd0883d403ee61fb410db448516557690a10cfdd01e932384baab4435def8e7b07674c36cf7487fb734eb958e5b1358798a24fd3c05e701a682ac4b615bb5e3d0b2768bb13a706ffda81b08e78fe889882fe21e7a157c9e904dbd669b092aecbce7bf97a8d946dc1fce50f46b32db7d6852734ac1fe", @ANYRES16=r5, @ANYBLOB="050500000000fbdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0082006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 5m43.646924679s ago: executing program 33 (id=1672): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000006c0)={&(0x7f0000000180), 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000004d5f9ed42c5e4166cf056b44b96f9f3f67eee0a03e90dc0e0000000000002e78d01304fcd78c1275d1e91e3dd4443b5d882f2bc1cb5dfea5e6c4cacf6baf096480c848c4cb6fb4f4822e600acc082ed7bb4204cafcd0883d403ee61fb410db448516557690a10cfdd01e932384baab4435def8e7b07674c36cf7487fb734eb958e5b1358798a24fd3c05e701a682ac4b615bb5e3d0b2768bb13a706ffda81b08e78fe889882fe21e7a157c9e904dbd669b092aecbce7bf97a8d946dc1fce50f46b32db7d6852734ac1fe", @ANYRES16=r5, @ANYBLOB="050500000000fbdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0082006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 31.512359485s ago: executing program 4 (id=2524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 30.555728279s ago: executing program 4 (id=2525): syz_usb_connect(0x2, 0x24, &(0x7f0000007640)={{0x12, 0x1, 0x110, 0x72, 0x3a, 0x9d, 0x20, 0x0, 0x0, 0x40a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x30, 0x8, [{{0x9, 0x4, 0xb6, 0x4, 0x0, 0xe, 0x1, 0x0, 0xad}}]}}]}}, 0x0) 27.588116972s ago: executing program 4 (id=2536): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 24.545705352s ago: executing program 4 (id=2547): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) 23.745853911s ago: executing program 4 (id=2549): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000000, 0xcb9, 0x8f], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.84435654s ago: executing program 0 (id=2584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)="6fffde3a", 0x4}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 9.84405906s ago: executing program 5 (id=2585): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 9.670631597s ago: executing program 0 (id=2587): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x24, 0x28, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x5}, {0xd, 0xfff2}, {0x1ffe7, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c818) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000e], 0x80a0000, 0x2018d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x814}, 0x20000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9.364508078s ago: executing program 0 (id=2588): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 9.03622576s ago: executing program 0 (id=2589): syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) syz_open_dev$vim2m(&(0x7f00000000c0), 0x10077ff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0x21, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket(0x25, 0x3, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000300)={0x8, r5, r3}) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r6, &(0x7f0000000000)=0x2b00, 0x12) socket$kcm(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0) 6.679950132s ago: executing program 5 (id=2592): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) 6.60184771s ago: executing program 0 (id=2593): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) syz_open_procfs(r0, &(0x7f0000000680)='net/rpc\x00') 6.376309382s ago: executing program 5 (id=2594): write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) unshare(0x26020480) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.923347407s ago: executing program 5 (id=2595): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000e80)=""/4096, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getneigh={0x28, 0x1e, 0x1, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x10c1, 0x2802}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40010) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 5.367562321s ago: executing program 0 (id=2596): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0xe8}, 0x0, 0x4044092}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 5.289216109s ago: executing program 3 (id=2597): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000f2ec00000000000000000001ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa00"/135], 0xfc}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 4.230875493s ago: executing program 3 (id=2598): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 2.899655724s ago: executing program 3 (id=2599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x80, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x1) openat(0xffffffffffffff9c, 0x0, 0x100042, 0x100) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x25) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1000, 0xa0f}]}) 2.268365726s ago: executing program 5 (id=2600): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2465) write$snddsp(r1, 0x0, 0x0) 1.538705469s ago: executing program 3 (id=2601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, r0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000002fc0)) 1.405028902s ago: executing program 5 (id=2602): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 1.333080309s ago: executing program 4 (id=2551): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='^', 0x1) write(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 272.442083ms ago: executing program 3 (id=2603): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) 0s ago: executing program 3 (id=2605): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048010) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) kernel console output (not intermixed with test programs): ] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.079030][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.094971][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.128152][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.135365][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.197317][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.226768][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.233986][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.251402][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 576.256037][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.284792][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.297606][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.304896][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.327374][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.334589][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.356610][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.384193][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.400135][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.425023][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.453520][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.478515][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.498448][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.536103][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.561818][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.570129][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.581434][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.590994][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.606571][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.615153][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.627049][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.649206][T10253] autofs4:pid:10253:autofs_fill_super: called with bogus options [ 576.674307][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.684540][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.693158][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.701943][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.710535][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.798622][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.842603][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.884618][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.935757][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 576.976452][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.022762][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.100273][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.186003][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.246219][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.288907][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.336185][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.392881][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.426466][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.434628][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.468793][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.487869][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.495185][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556645][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556683][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556712][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556740][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556769][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556796][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556824][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556852][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556881][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556909][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556945][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.556972][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557000][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557028][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557056][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557084][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557113][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557141][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557169][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557197][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557224][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557252][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557278][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557306][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557334][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557362][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557392][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557420][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557448][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.557476][ T8] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 577.628512][ T8] hid-alps 0003:044E:1215.0002: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 578.043766][ T8] usb 1-1: USB disconnect, device number 14 [ 578.327195][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 579.558037][T10269] fido_id[10269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 580.656714][T10282] syzkaller0: entered promiscuous mode [ 580.776038][T10282] syzkaller0: entered allmulticast mode [ 581.446257][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 582.376904][T10299] pimreg: entered allmulticast mode [ 582.427029][T10299] pimreg: left allmulticast mode [ 582.542037][T10301] 9pnet_fd: Insufficient options for proto=fd [ 582.653144][T10302] 9pnet_fd: Insufficient options for proto=fd [ 583.658734][T10315] autofs4:pid:10315:autofs_fill_super: called with bogus options [ 584.495701][T10322] syzkaller0: entered promiscuous mode [ 584.545359][T10322] syzkaller0: entered allmulticast mode [ 584.843977][T10328] af_packet: tpacket_rcv: packet too big, clamped from 604 to 4294967272. macoff=96 [ 585.266280][T10328] netlink: 528 bytes leftover after parsing attributes in process `syz.3.1208'. [ 585.291758][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 585.818187][T10337] 9pnet_fd: Insufficient options for proto=fd [ 586.978795][ T5804] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 587.042707][T10342] 9pnet_fd: Insufficient options for proto=fd [ 587.785153][T10350] trusted_key: encrypted_key: insufficient parameters specified [ 589.291362][T10361] autofs4:pid:10361:autofs_fill_super: called with bogus options [ 590.814394][T10379] 9pnet_fd: Insufficient options for proto=fd [ 592.048576][T10384] 9pnet_fd: Insufficient options for proto=fd [ 592.409706][ T5791] kernel write not supported for file /video8 (pid: 5791 comm: kworker/0:4) [ 592.826218][T10400] autofs4:pid:10400:autofs_fill_super: called with bogus options [ 594.990921][T10415] tipc: Enabling of bearer rejected, failed to enable media [ 595.042041][T10415] syzkaller0: entered promiscuous mode [ 595.196146][T10415] syzkaller0: entered allmulticast mode [ 595.963430][T10429] 9pnet_fd: Insufficient options for proto=fd [ 596.543194][T10429] 9pnet_fd: Insufficient options for proto=fd [ 598.713978][ T8] IPVS: starting estimator thread 0... [ 598.838788][T10451] IPVS: using max 15 ests per chain, 36000 per kthread [ 598.939065][T10453] tipc: Enabling of bearer rejected, failed to enable media [ 598.974160][T10453] syzkaller0: entered promiscuous mode [ 599.239269][T10453] syzkaller0: entered allmulticast mode [ 600.467733][T10464] 9pnet_fd: Insufficient options for proto=fd [ 602.330887][T10467] 9pnet_fd: Insufficient options for proto=fd [ 604.494552][T10490] loop3: detected capacity change from 0 to 16 [ 604.717017][T10490] erofs: (device loop3): mounted with root inode @ nid 36. [ 604.791985][T10496] autofs4:pid:10496:autofs_fill_super: called with bogus options [ 606.763332][T10490] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 606.773206][T10490] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 606.783250][T10490] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 606.793109][T10490] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 606.803133][T10490] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 606.815449][T10490] trusted_key: encrypted_key: insufficient parameters specified [ 607.394312][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 607.500022][T10511] 9pnet_fd: Insufficient options for proto=fd [ 608.001806][T10511] 9pnet_fd: Insufficient options for proto=fd [ 611.455655][T10543] 9pnet_fd: Insufficient options for proto=fd [ 611.832361][T10544] 9pnet_fd: Insufficient options for proto=fd [ 614.502448][T10571] 9pnet_fd: Insufficient options for proto=fd [ 615.457562][T10572] 9pnet_fd: Insufficient options for proto=fd [ 616.039455][ T5804] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 617.864978][T10602] 9pnet_fd: Insufficient options for proto=fd [ 619.058991][T10602] 9pnet_fd: Insufficient options for proto=fd [ 619.628354][T10617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 619.714040][T10620] loop3: detected capacity change from 0 to 16 [ 619.759841][T10620] erofs: (device loop3): mounted with root inode @ nid 36. [ 620.089162][ T5804] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 620.099375][ T5804] Bluetooth: hci1: Injecting HCI hardware error event [ 620.112279][ T5804] Bluetooth: hci1: hardware error 0x00 [ 620.142596][T10628] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 620.152528][T10628] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 620.162726][T10628] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 620.172769][T10628] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 620.182958][T10628] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 620.215047][T10628] trusted_key: encrypted_key: insufficient parameters specified [ 622.247191][T10645] tipc: Enabling of bearer rejected, failed to enable media [ 622.259109][T10645] syzkaller0: entered promiscuous mode [ 622.267718][T10645] syzkaller0: entered allmulticast mode [ 622.674827][T10656] 9pnet_fd: Insufficient options for proto=fd [ 623.047281][ T5804] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 623.198079][T10656] 9pnet_fd: Insufficient options for proto=fd [ 623.696069][ T5862] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 624.656058][ T5862] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 624.698606][ T5862] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 624.734962][ T5862] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 624.736599][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.752870][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.957354][ T5862] usb 2-1: string descriptor 0 read error: -22 [ 624.963712][ T5862] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 625.753616][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.774734][ T5862] adutux 2-1:168.0: interrupt endpoints not found [ 626.026492][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1317'. [ 627.853011][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 628.346679][ T5862] usb 2-1: USB disconnect, device number 10 [ 628.497532][T10714] capability: warning: `syz.1.1323' uses deprecated v2 capabilities in a way that may be insecure [ 628.545649][T10715] program syz.1.1323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.683027][T10728] vxcan1: entered allmulticast mode [ 630.784105][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 631.642293][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 634.549397][T10763] trusted_key: encrypted_key: insufficient parameters specified [ 639.705496][T10797] loop3: detected capacity change from 0 to 16 [ 639.746233][T10797] erofs: (device loop3): mounted with root inode @ nid 36. [ 640.122818][T10801] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 640.133120][T10801] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 640.143265][T10801] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 640.153156][T10801] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 640.163205][T10801] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 640.176037][T10801] trusted_key: encrypted_key: insufficient parameters specified [ 643.196293][ T27] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 644.535566][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.816113][ T27] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 644.857486][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 644.907278][ T27] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 644.926420][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.985803][ T27] usb 2-1: config 0 descriptor?? [ 645.005326][ T27] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 645.931629][ T5143] bcm5974 2-1:0.0: could not read from device [ 645.950535][ T7272] usb 2-1: USB disconnect, device number 11 [ 645.970462][ T5143] bcm5974 2-1:0.0: could not read from device [ 646.001019][T10786] bcm5974 2-1:0.0: could not read from device [ 646.022873][ T5143] bcm5974 2-1:0.0: could not read from device [ 646.050664][T10833] 9pnet_fd: Insufficient options for proto=fd [ 646.620858][T10786] udevd[10786]: Error opening device "/dev/input/event4": No such device [ 646.658235][T10786] udevd[10786]: Unable to EVIOCGABS device "/dev/input/event4" [ 646.671347][T10833] 9pnet_fd: Insufficient options for proto=fd [ 646.691929][T10786] udevd[10786]: Unable to EVIOCGABS device "/dev/input/event4" [ 646.712479][T10786] udevd[10786]: Unable to EVIOCGABS device "/dev/input/event4" [ 646.721840][T10786] udevd[10786]: Unable to EVIOCGABS device "/dev/input/event4" [ 648.103115][T10846] trusted_key: encrypted_key: insufficient parameters specified [ 649.561998][T10856] random: crng reseeded on system resumption [ 654.205210][T10871] 9pnet_fd: Insufficient options for proto=fd [ 654.747375][T10871] 9pnet_fd: Insufficient options for proto=fd [ 655.173366][T10882] trusted_key: encrypted_key: insufficient parameters specified [ 659.942181][T10915] 9pnet_fd: Insufficient options for proto=fd [ 660.488355][T10915] 9pnet_fd: Insufficient options for proto=fd [ 663.356890][T10941] 9pnet_fd: Insufficient options for proto=fd [ 663.903103][T10941] 9pnet_fd: Insufficient options for proto=fd [ 665.042174][T10960] syzkaller0: entered promiscuous mode [ 665.066024][T10960] syzkaller0: entered allmulticast mode [ 665.291793][T10949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.206060][T10974] 9pnet_fd: Insufficient options for proto=fd [ 666.731625][T10974] 9pnet_fd: Insufficient options for proto=fd [ 667.942363][T10989] syzkaller0: entered promiscuous mode [ 667.975948][T10989] syzkaller0: entered allmulticast mode [ 668.423821][T10999] usb usb7: usbfs: process 10999 (syz.0.1409) did not claim interface 0 before use [ 668.453905][T11003] 9pnet_fd: Insufficient options for proto=fd [ 668.633771][T11004] 9pnet_fd: Insufficient options for proto=fd [ 671.619474][T11028] syzkaller0: entered promiscuous mode [ 671.625026][T11028] syzkaller0: entered allmulticast mode [ 672.071829][T11032] 9pnet_fd: Insufficient options for proto=fd [ 672.211862][T11033] 9pnet_fd: Insufficient options for proto=fd [ 674.380955][T11060] IPv6: Can't replace route, no match found [ 674.500890][T11063] 9pnet_fd: Insufficient options for proto=fd [ 675.099054][T11063] 9pnet_fd: Insufficient options for proto=fd [ 677.220346][T11087] syz.0.1440: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 677.966900][T11087] CPU: 0 PID: 11087 Comm: syz.0.1440 Not tainted syzkaller #0 [ 677.974404][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 677.984483][T11087] Call Trace: [ 677.987777][T11087] [ 677.990730][T11087] dump_stack_lvl+0x16c/0x230 [ 677.995427][T11087] ? show_regs_print_info+0x20/0x20 [ 678.000650][T11087] ? load_image+0x3b0/0x3b0 [ 678.005161][T11087] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 678.011694][T11087] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 678.018236][T11087] warn_alloc+0x210/0x300 [ 678.022627][T11087] ? zone_watermark_ok_safe+0x230/0x230 [ 678.028222][T11087] ? _raw_spin_unlock+0x28/0x40 [ 678.033083][T11087] ? __vb2_queue_alloc+0x794/0x1410 [ 678.038319][T11087] __vmalloc_node_range+0x662/0x1320 [ 678.043640][T11087] ? free_vm_area+0x50/0x50 [ 678.048166][T11087] vmalloc_user+0x74/0x80 [ 678.052530][T11087] ? vb2_vmalloc_alloc+0xef/0x330 [ 678.057558][T11087] vb2_vmalloc_alloc+0xef/0x330 [ 678.062410][T11087] ? __copy_timestamp+0x1f0/0x1f0 [ 678.067458][T11087] __vb2_queue_alloc+0x794/0x1410 [ 678.072553][T11087] vb2_core_reqbufs+0xa57/0x1140 [ 678.077533][T11087] ? vb2_verify_memory_type+0x570/0x570 [ 678.083468][T11087] ? vb2_reqbufs+0x360/0x5a0 [ 678.088079][T11087] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 678.093473][T11087] __video_do_ioctl+0xcbd/0xdd0 [ 678.098344][T11087] ? video_ioctl2+0x30/0x30 [ 678.102856][T11087] ? __might_fault+0xc6/0x120 [ 678.107535][T11087] ? __might_fault+0xaa/0x120 [ 678.112243][T11087] video_usercopy+0x838/0x1330 [ 678.117026][T11087] ? video_ioctl2+0x30/0x30 [ 678.121543][T11087] ? v4l_printk_ioctl+0x160/0x160 [ 678.126598][T11087] v4l2_ioctl+0x18a/0x1e0 [ 678.130933][T11087] ? v4l2_poll+0x2b0/0x2b0 [ 678.135357][T11087] __se_sys_ioctl+0xfd/0x170 [ 678.139956][T11087] do_syscall_64+0x55/0xb0 [ 678.144383][T11087] ? clear_bhb_loop+0x40/0x90 [ 678.149066][T11087] ? clear_bhb_loop+0x40/0x90 [ 678.153758][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.159677][T11087] RIP: 0033:0x7f1726f8efc9 [ 678.164135][T11087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.183761][T11087] RSP: 002b:00007f1727f12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.192185][T11087] RAX: ffffffffffffffda RBX: 00007f17271e5fa0 RCX: 00007f1726f8efc9 [ 678.200697][T11087] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 678.208678][T11087] RBP: 00007f1727011f91 R08: 0000000000000000 R09: 0000000000000000 [ 678.216662][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.224722][T11087] R13: 00007f17271e6038 R14: 00007f17271e5fa0 R15: 00007fff27e92f18 [ 678.232716][T11087] [ 678.263699][T11087] Mem-Info: [ 678.273288][T11087] active_anon:5689 inactive_anon:0 isolated_anon:0 [ 678.273288][T11087] active_file:14775 inactive_file:40137 isolated_file:0 [ 678.273288][T11087] unevictable:768 dirty:51 writeback:0 [ 678.273288][T11087] slab_reclaimable:10380 slab_unreclaimable:94564 [ 678.273288][T11087] mapped:24456 shmem:1372 pagetables:687 [ 678.273288][T11087] sec_pagetables:0 bounce:0 [ 678.273288][T11087] kernel_misc_reclaimable:0 [ 678.273288][T11087] free:1337555 free_pcp:13838 free_cma:0 [ 678.325297][T11096] 9pnet_fd: Insufficient options for proto=fd [ 678.355704][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 678.382072][T11087] Node 0 active_anon:22956kB inactive_anon:0kB active_file:59100kB inactive_file:160348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97824kB dirty:204kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11524kB pagetables:2748kB sec_pagetables:0kB all_unreclaimable? no [ 678.453603][T11099] 9pnet_fd: Insufficient options for proto=fd [ 678.464334][T11087] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 678.706470][T11087] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.886202][T11087] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 678.915730][T11087] Node 0 DMA32 free:1444992kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:23060kB inactive_anon:0kB active_file:59100kB inactive_file:159036kB unevictable:1536kB writepending:204kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:32372kB local_pcp:15732kB free_cma:0kB [ 679.266307][T11087] lowmem_reserve[]: 0 0 1 1 1 [ 679.300102][T11087] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 679.371603][T11087] lowmem_reserve[]: 0 0 0 0 0 [ 679.388127][T11087] Node 1 Normal free:3889856kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22988kB local_pcp:11624kB free_cma:0kB [ 679.460699][T11087] lowmem_reserve[]: 0 0 0 0 0 [ 679.480981][T11087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 679.533640][T11087] Node 0 DMA32: 2*4kB (E) 14*8kB (UME) 29*16kB (E) 246*32kB (ME) 186*64kB (UME) 156*128kB (UME) 28*256kB (UM) 14*512kB (UM) 7*1024kB (UM) 5*2048kB (UME) 335*4096kB (UM) = 1444232kB [ 679.580854][T11087] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 679.611063][T11087] Node 1 Normal: 254*4kB (U) 65*8kB (UE) 46*16kB (UE) 43*32kB (UE) 22*64kB (UME) 4*128kB (UM) 1*256kB (M) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3889856kB [ 679.649306][T11087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 679.680394][T11087] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 679.690960][T11087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 679.700964][T11087] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 679.735222][T11087] 56296 total pagecache pages [ 679.748310][T11087] 0 pages in swap cache [ 679.758251][T11087] Free swap = 124984kB [ 679.767389][T11087] Total swap = 124996kB [ 679.778050][T11087] 2097051 pages RAM [ 679.787491][T11087] 0 pages HighMem/MovableOnly [ 679.801165][T11087] 416136 pages reserved [ 679.811216][T11087] 0 pages cma reserved [ 680.172528][T11128] 9pnet_fd: Insufficient options for proto=fd [ 680.710747][T11128] 9pnet_fd: Insufficient options for proto=fd [ 680.756081][ T5862] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 681.021736][T11134] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 681.227755][ T5862] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 681.260827][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.858809][ T5862] usb 4-1: Product: syz [ 681.863053][ T5862] usb 4-1: Manufacturer: syz [ 681.868219][ T5862] usb 4-1: SerialNumber: syz [ 681.880276][ T5862] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 681.902800][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 682.577141][ T9] usb 4-1: USB disconnect, device number 17 [ 683.600359][ T8] usb 4-1: Service connection timeout for: 256 [ 683.634086][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 683.959485][ T8] ath9k_htc: Failed to initialize the device [ 684.325275][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 685.905639][T11168] autofs4:pid:11168:autofs_fill_super: called with bogus options [ 686.178581][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.187859][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.386111][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 687.624035][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 687.761343][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.776359][ T23] usb 1-1: Product: syz [ 687.780674][ T23] usb 1-1: Manufacturer: syz [ 687.785315][ T23] usb 1-1: SerialNumber: syz [ 687.806846][ T23] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 687.846718][ T7272] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 688.303687][ T23] usb 1-1: USB disconnect, device number 15 [ 688.844769][T11209] autofs4:pid:11209:autofs_fill_super: called with bogus options [ 689.127374][ T7272] usb 1-1: Service connection timeout for: 256 [ 689.133805][ T7272] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 689.177439][ T7272] ath9k_htc: Failed to initialize the device [ 689.193341][ T23] usb 1-1: ath9k_htc: USB layer deinitialized [ 689.874928][T11216] syzkaller0: entered promiscuous mode [ 689.891748][T11216] syzkaller0: entered allmulticast mode [ 691.114525][T11237] autofs4:pid:11237:autofs_fill_super: called with bogus options [ 692.623997][T11243] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 693.464069][T11255] syzkaller0: entered promiscuous mode [ 693.491524][T11255] syzkaller0: entered allmulticast mode [ 694.496202][T11269] autofs4:pid:11269:autofs_fill_super: called with bogus options [ 696.030253][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 696.109444][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 698.787847][T11306] autofs4:pid:11306:autofs_fill_super: called with bogus options [ 703.901611][T11339] autofs4:pid:11339:autofs_fill_super: called with bogus options [ 703.926691][T11340] hfs: can't find a HFS filesystem on dev nullb0 [ 707.626142][T11368] autofs4:pid:11368:autofs_fill_super: called with bogus options [ 708.304460][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1539'. [ 708.473694][T11386] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 708.520593][T11386] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 708.550971][T11386] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 708.580685][T11386] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 710.445392][T11386] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 710.473237][T11386] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 710.526127][T11386] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 710.532653][T11386] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 710.576578][T11386] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 710.584058][T11386] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 710.628161][T11386] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 710.635816][T11386] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 710.642817][T11386] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 710.651510][T11386] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 710.922911][T11398] tipc: Enabled bearer , priority 0 [ 710.954852][T11398] syzkaller0: entered promiscuous mode [ 711.000857][T11398] syzkaller0: entered allmulticast mode [ 711.160032][T11397] tipc: Resetting bearer [ 711.376910][T11397] tipc: Disabling bearer [ 711.962194][T11411] autofs4:pid:11411:autofs_fill_super: called with bogus options [ 713.046129][ T8] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 714.781306][ T8] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 714.827913][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.883776][ T8] usb 5-1: config 0 descriptor?? [ 716.289252][T11443] netlink: 'syz.0.1559': attribute type 6 has an invalid length. [ 716.641205][T11448] autofs4:pid:11448:autofs_fill_super: called with bogus options [ 716.760055][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 716.788383][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 716.811809][ T8] asix: probe of 5-1:0.0 failed with error -71 [ 716.841353][ T8] usb 5-1: USB disconnect, device number 9 [ 721.731664][T11478] hfs: can't find a HFS filesystem on dev nullb0 [ 722.987907][ T5862] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 723.220980][T11492] autofs4:pid:11492:autofs_fill_super: called with bogus options [ 723.240522][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.254849][ T5862] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 723.274472][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.308064][ T5862] usb 4-1: config 0 descriptor?? [ 723.327429][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 724.596476][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00 [ 724.613751][ T5862] pwc: recv_control_msg error -32 req 02 val 2700 [ 724.869145][ T5862] pwc: recv_control_msg error -71 req 04 val 1000 [ 724.896937][ T5862] pwc: recv_control_msg error -71 req 04 val 1300 [ 724.922850][ T5862] pwc: recv_control_msg error -71 req 04 val 1400 [ 724.950056][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 724.971143][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 724.980632][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 724.997587][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 725.043010][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 725.089322][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 725.155465][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 725.243057][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 725.328937][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 725.434181][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 725.588169][ T5862] pwc: Registered as video103. [ 725.636187][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 725.759519][ T5862] usb 4-1: USB disconnect, device number 18 [ 727.214184][T11533] autofs4:pid:11533:autofs_fill_super: called with bogus options [ 727.826075][ T5791] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 728.018695][ T5791] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 728.041824][ T5791] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 728.066705][ T5791] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 728.135628][ T5791] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 728.171422][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.202299][ T5791] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 729.003575][ T5791] usb 4-1: invalid MIDI out EP 0 [ 729.060384][T11551] binder: 11545:11551 ioctl 4018620d 0 returned -22 [ 729.067511][T11551] binder: 11545:11551 ioctl c0306201 0 returned -14 [ 729.194806][ T5791] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 730.143798][ T5791] usb 4-1: USB disconnect, device number 19 [ 730.274803][T11559] udevd[11559]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.436107][ T7272] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 733.300989][T11584] autofs4:pid:11584:autofs_fill_super: called with bogus options [ 734.035177][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 734.081650][T11586] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.394602][ T7272] usb 1-1: device descriptor read/all, error -71 [ 737.118391][T11619] autofs4:pid:11619:autofs_fill_super: called with bogus options [ 737.901008][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 737.926757][T11621] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1613'. [ 737.955776][T11621] geneve2: entered promiscuous mode [ 738.026013][T11621] geneve2: entered allmulticast mode [ 739.417394][T11637] random: crng reseeded on system resumption [ 739.616144][ T5862] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 739.817974][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 739.832148][ T5862] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 739.843109][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.852566][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.869130][T11635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 739.909724][ T5862] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 740.429661][T11647] autofs4:pid:11647:autofs_fill_super: called with bogus options [ 741.164598][T11646] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 742.909740][ T7272] usb 1-1: USB disconnect, device number 18 [ 747.696483][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.702854][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.277008][T11703] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 752.983048][T11741] 9pnet_fd: Insufficient options for proto=fd [ 755.720506][ T1078] Bluetooth: hci3: Frame reassembly failed (-84) [ 755.727330][T11764] tipc: Enabled bearer , priority 0 [ 755.730328][T11764] syzkaller0: entered promiscuous mode [ 755.764215][T11764] syzkaller0: entered allmulticast mode [ 755.764546][ T1078] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 755.826787][T11764] tipc: Resetting bearer [ 755.835752][T11763] tipc: Resetting bearer [ 755.908170][T11763] tipc: Disabling bearer [ 756.880641][T11777] 9pnet_fd: Insufficient options for proto=fd [ 757.767837][T10276] Bluetooth: hci3: command 0x1003 tx timeout [ 757.836345][ T5804] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 759.743181][T11802] random: crng reseeded on system resumption [ 759.885593][T11803] tipc: Enabled bearer , priority 0 [ 759.972182][T11803] tipc: Resetting bearer [ 760.819081][T11801] tipc: Disabling bearer [ 761.686404][T11818] 9pnet_fd: Insufficient options for proto=fd [ 764.657182][T11842] autofs4:pid:11842:autofs_fill_super: called with bogus options [ 765.545952][ T6981] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 765.748244][ T6981] usb 1-1: Using ep0 maxpacket: 8 [ 765.770186][ T6981] usb 1-1: unable to get BOS descriptor or descriptor too short [ 765.790794][ T6981] usb 1-1: config 4 interface 0 has no altsetting 0 [ 765.969313][ T6981] usb 1-1: string descriptor 0 read error: -22 [ 765.975679][ T6981] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 766.775048][ T6981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.854846][ T6981] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 766.907526][ T6981] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 766.944999][ T6981] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 766.967819][ T6981] usb 1-1: media controller created [ 767.034274][ T6981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.098731][T11839] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 767.203880][ T6981] zl10353_read_register: readreg error (reg=127, ret==0) [ 767.895976][ T6981] usb 1-1: USB disconnect, device number 19 [ 768.137085][T11862] 9pnet_fd: Insufficient options for proto=fd [ 769.108093][T11859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.338514][T11875] tipc: Enabled bearer , priority 0 [ 770.346767][T11875] syzkaller0: entered promiscuous mode [ 770.364125][T11875] syzkaller0: entered allmulticast mode [ 770.387430][T11878] hfs: can't find a HFS filesystem on dev nullb0 [ 770.630862][T11875] tipc: Resetting bearer [ 770.758284][T11872] tipc: Resetting bearer [ 771.087127][T11872] tipc: Disabling bearer [ 773.284240][T11895] 9pnet_fd: Insufficient options for proto=fd [ 774.012631][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 774.229308][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 774.259830][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.298880][ T9] usb 4-1: Product: syz [ 774.314966][ T9] usb 4-1: Manufacturer: syz [ 774.332229][ T9] usb 4-1: SerialNumber: syz [ 774.398291][ T9] usb 4-1: config 0 descriptor?? [ 774.671879][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 774.724405][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 774.918249][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.189316][ T9] usb 4-1: USB disconnect, device number 20 [ 776.535206][T11918] hfs: can't find a HFS filesystem on dev nullb0 [ 779.651385][T10276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 779.663545][T10276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 779.673055][T10276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.682547][T10276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.692130][T10276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 779.699773][T10276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 781.203729][T11944] chnl_net:caif_netlink_parms(): no params data found [ 781.233586][T11970] 9pnet_fd: Insufficient options for proto=fd [ 781.392842][T11971] 9pnet_fd: Insufficient options for proto=fd [ 781.590211][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.766592][T10276] Bluetooth: hci3: command tx timeout [ 781.999566][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.597379][T11980] hfs: can't find a HFS filesystem on dev nullb0 [ 782.805582][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.700105][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.889684][T10276] Bluetooth: hci3: command tx timeout [ 784.012785][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.098513][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.105811][T11944] bridge_slave_0: entered allmulticast mode [ 784.148364][T11944] bridge_slave_0: entered promiscuous mode [ 784.359733][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.368761][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.382324][T11944] bridge_slave_1: entered allmulticast mode [ 784.425649][T11944] bridge_slave_1: entered promiscuous mode [ 784.788482][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.832512][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.001680][T11944] team0: Port device team_slave_0 added [ 785.082957][T11944] team0: Port device team_slave_1 added [ 785.928012][T10276] Bluetooth: hci3: command tx timeout [ 786.288272][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.298419][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.343106][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.374416][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.416706][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.473787][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.509092][ T48] tipc: Left network mode [ 786.558072][ T28] audit: type=1326 audit(2000000090.440:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f7d8efc9 code=0x7ffc0000 [ 786.616454][ T28] audit: type=1326 audit(2000000090.440:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f7d8efc9 code=0x7ffc0000 [ 786.696001][ T28] audit: type=1326 audit(2000000090.440:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa2f7d8efc9 code=0x7ffc0000 [ 786.784682][ T28] audit: type=1326 audit(2000000090.440:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f7d8efc9 code=0x7ffc0000 [ 786.883926][ T28] audit: type=1326 audit(2000000090.440:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fa2f7d8efc9 code=0x7ffc0000 [ 786.944769][ T28] audit: type=1326 audit(2000000090.540:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f7d8efc9 code=0x7ffc0000 [ 787.002888][T11944] hsr_slave_0: entered promiscuous mode [ 787.029664][ T28] audit: type=1326 audit(2000000090.540:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.3.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f7d8efc9 code=0x7ffc0000 [ 787.066782][T11944] hsr_slave_1: entered promiscuous mode [ 787.095760][T11944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.105950][T11944] Cannot create hsr debugfs directory [ 788.097560][T10276] Bluetooth: hci3: command tx timeout [ 788.392104][T12046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1735'. [ 788.563555][T12045] tipc: Enabled bearer , priority 0 [ 788.885937][T12047] syzkaller0: entered promiscuous mode [ 788.961487][T12047] syzkaller0: entered allmulticast mode [ 789.664595][ T9] tipc: Node number set to 1157982646 [ 789.848045][T12043] tipc: Resetting bearer [ 789.928380][T12043] tipc: Disabling bearer [ 790.391079][ T48] IPVS: stopping backup sync thread 6991 ... [ 790.438342][T12069] hfs: can't find a HFS filesystem on dev nullb0 [ 790.839109][T11944] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 790.873454][T11944] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 790.957828][T11944] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 791.034198][ T48] hsr_slave_0: left promiscuous mode [ 791.125202][ T48] hsr_slave_1: left promiscuous mode [ 791.144457][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.174370][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.207467][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.225242][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.247385][ T48] bridge_slave_1: left allmulticast mode [ 791.253120][ T48] bridge_slave_1: left promiscuous mode [ 791.281838][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.304511][ T48] bridge_slave_0: left allmulticast mode [ 791.314686][ T48] bridge_slave_0: left promiscuous mode [ 791.326569][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.405720][ T48] veth1_macvtap: left promiscuous mode [ 791.421979][ T48] veth1_vlan: left promiscuous mode [ 791.442156][ T48] veth0_vlan: left promiscuous mode [ 794.004282][ T48] team0 (unregistering): Port device team_slave_1 removed [ 794.074090][ T48] team0 (unregistering): Port device team_slave_0 removed [ 794.135740][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.201860][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.963823][ T48] bond0 (unregistering): Released all slaves [ 795.070348][T11944] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 795.118520][T12105] tipc: Enabled bearer , priority 0 [ 795.134320][T12106] syzkaller0: entered promiscuous mode [ 795.150752][T12106] syzkaller0: entered allmulticast mode [ 795.182125][T12112] tipc: Resetting bearer [ 795.210616][T12101] tipc: Resetting bearer [ 795.528770][T12123] hfs: can't find a HFS filesystem on dev nullb0 [ 795.631041][T12101] tipc: Disabling bearer [ 797.077075][T11944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.487155][T11944] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.228886][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.236105][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.294669][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.302563][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.889437][ T48] IPVS: stop unused estimator thread 0... [ 799.234568][T11944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.878368][T12178] hfs: can't find a HFS filesystem on dev nullb0 [ 800.162770][T12185] tipc: Enabled bearer , priority 0 [ 800.173214][T12185] syzkaller0: entered promiscuous mode [ 800.855982][T12185] syzkaller0: entered allmulticast mode [ 801.190584][T12185] tipc: Resetting bearer [ 801.873163][ T7272] tipc: Node number set to 2051524252 [ 802.016245][T12184] tipc: Resetting bearer [ 802.252164][T12184] tipc: Disabling bearer [ 803.107986][T11944] veth0_vlan: entered promiscuous mode [ 803.220400][T11944] veth1_vlan: entered promiscuous mode [ 803.336527][T11944] veth0_macvtap: entered promiscuous mode [ 803.458718][T11944] veth1_macvtap: entered promiscuous mode [ 804.097859][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.134571][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.165728][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.218645][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.228994][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.239518][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.254809][T11944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.277664][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.299465][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.321373][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.332482][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.351408][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.381617][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.436209][T11944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.484865][T11944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.512414][T11944] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.523365][T11944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.533108][T11944] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.921567][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.964757][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.972738][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.972791][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.897111][T12246] tipc: Enabled bearer , priority 0 [ 807.925748][T12246] syzkaller0: entered promiscuous mode [ 808.099877][T12246] syzkaller0: entered allmulticast mode [ 808.319905][T12245] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 808.332089][T12245] UDF-fs: Scanning with blocksize 512 failed [ 810.086225][ T5862] tipc: Node number set to 1864662653 [ 810.092660][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.099270][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.454707][T12245] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 810.497171][T12245] UDF-fs: Scanning with blocksize 1024 failed [ 810.516543][T12245] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 810.547309][T12245] UDF-fs: Scanning with blocksize 2048 failed [ 810.610993][T12245] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 810.657169][T12245] UDF-fs: Scanning with blocksize 4096 failed [ 810.663776][T12243] tipc: Resetting bearer [ 810.814691][T12243] tipc: Disabling bearer [ 813.586370][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1782'. [ 814.266287][ T5778] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 814.508078][ T5778] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.556318][ T5778] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 814.565524][ T5778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.618497][ T5778] usb 6-1: config 0 descriptor?? [ 814.639417][ T5778] pwc: Askey VC010 type 2 USB webcam detected. [ 815.167580][ T5778] pwc: recv_control_msg error -32 req 02 val 2b00 [ 815.215960][ T5778] pwc: recv_control_msg error -32 req 02 val 2700 [ 815.256858][ T5778] pwc: recv_control_msg error -32 req 02 val 2c00 [ 815.295743][ T5778] pwc: recv_control_msg error -32 req 04 val 1000 [ 815.327148][ T5778] pwc: recv_control_msg error -32 req 04 val 1300 [ 815.335434][ T5778] pwc: recv_control_msg error -32 req 04 val 1400 [ 815.356902][ T5778] pwc: recv_control_msg error -32 req 02 val 2000 [ 815.384695][ T5778] pwc: recv_control_msg error -32 req 02 val 2100 [ 815.406497][ T5778] pwc: recv_control_msg error -32 req 04 val 1500 [ 815.426496][ T5778] pwc: recv_control_msg error -32 req 02 val 2500 [ 815.608123][T12310] tipc: Enabled bearer , priority 0 [ 815.640827][ T5778] pwc: recv_control_msg error -71 req 02 val 2600 [ 815.647314][T12310] syzkaller0: entered promiscuous mode [ 815.647335][T12310] syzkaller0: entered allmulticast mode [ 815.686686][ T5778] pwc: recv_control_msg error -71 req 02 val 2900 [ 815.716406][ T5778] pwc: recv_control_msg error -71 req 02 val 2800 [ 815.738503][T12310] tipc: Resetting bearer [ 815.749014][ T5778] pwc: recv_control_msg error -71 req 04 val 1100 [ 815.765374][ T5778] pwc: recv_control_msg error -71 req 04 val 1200 [ 815.785278][T12308] tipc: Resetting bearer [ 815.792010][ T5778] pwc: Registered as video103. [ 815.817028][ T5778] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 815.895117][T12308] tipc: Disabling bearer [ 815.901386][ T5778] usb 6-1: USB disconnect, device number 2 [ 825.903238][T12420] hfs: can't find a HFS filesystem on dev nullb0 [ 830.234138][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 831.403953][T12466] sd 0:0:1:0: device reset [ 833.739119][T12492] tipc: Started in network mode [ 834.631384][T12492] tipc: Node identity d2fd23cb5a82, cluster identity 4711 [ 834.724175][T12492] tipc: Enabled bearer , priority 0 [ 834.796350][T12499] syzkaller0: entered promiscuous mode [ 834.825972][T12499] syzkaller0: entered allmulticast mode [ 835.183037][T12489] tipc: Resetting bearer [ 835.716262][ T7272] tipc: Node number set to 2290033611 [ 836.182335][T12489] tipc: Disabling bearer [ 836.275362][T12517] hfs: can't find a HFS filesystem on dev nullb0 [ 836.445977][ T6981] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 836.635925][ T6981] usb 1-1: Using ep0 maxpacket: 16 [ 836.686872][ T6981] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 836.737292][ T6981] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 836.770957][ T6981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 836.849621][ T6981] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 836.985710][ T6981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.116216][ T6981] usb 1-1: Product: syz [ 837.184358][ T6981] usb 1-1: Manufacturer: syz [ 837.258118][ T6981] usb 1-1: SerialNumber: syz [ 837.349052][ T6981] usb 1-1: config 0 descriptor?? [ 837.809548][ T7272] usb 1-1: USB disconnect, device number 20 [ 840.688089][T12615] syzkaller0: entered promiscuous mode [ 840.853098][T12615] syzkaller0: entered allmulticast mode [ 841.806521][T12625] tipc: Enabled bearer , priority 0 [ 842.024211][T12625] syzkaller0: entered promiscuous mode [ 842.066926][T12625] syzkaller0: entered allmulticast mode [ 842.287861][T12631] tipc: Resetting bearer [ 842.300553][T12624] tipc: Resetting bearer [ 842.585080][T12624] tipc: Disabling bearer [ 845.860818][T12671] hfs: can't find a HFS filesystem on dev nullb0 [ 846.668970][ T5862] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 847.642945][T12690] netlink: 'syz.3.1857': attribute type 1 has an invalid length. [ 847.676184][T12690] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1857'. [ 847.775935][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 847.788013][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.806352][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 848.558500][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 848.655941][ T5862] usb 1-1: string descriptor 0 read error: -71 [ 848.692084][ T5862] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 848.747460][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 848.847054][ T5862] usb 1-1: config 0 descriptor?? [ 848.894006][ T5862] usb 1-1: can't set config #0, error -71 [ 849.186076][ T5862] usb 1-1: USB disconnect, device number 21 [ 851.887152][ T7272] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 851.989982][ T7272] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 852.010128][T12736] tipc: Enabled bearer , priority 0 [ 852.059157][T12736] syzkaller0: entered promiscuous mode [ 852.228426][T12736] syzkaller0: entered allmulticast mode [ 852.859370][T12736] tipc: Resetting bearer [ 852.948067][T12735] tipc: Resetting bearer [ 853.187200][T12735] tipc: Disabling bearer [ 854.644211][T12765] hfs: can't find a HFS filesystem on dev nullb0 [ 855.336755][T12762] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 859.265337][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 861.111023][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1889'. [ 864.515282][T12880] syzkaller0: entered promiscuous mode [ 864.555613][T12880] syzkaller0: entered allmulticast mode [ 865.618231][T12911] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 866.750690][T12921] vivid-007: kernel_thread() failed [ 870.504019][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.618698][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.709403][T12965] netlink: 'syz.4.1917': attribute type 6 has an invalid length. [ 874.206071][ T5862] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 874.470879][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.576140][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.606075][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.649871][ T5862] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.682849][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.717071][ T5862] usb 6-1: config 0 descriptor?? [ 875.389756][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 875.935383][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 875.985910][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 875.993485][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.013246][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.051603][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.113880][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.166149][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.194096][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.261221][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.302742][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.312872][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.325917][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.333954][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.344131][ T5862] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 876.359115][ T5862] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 876.417493][ T5862] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 876.474431][ T5862] usb 6-1: USB disconnect, device number 3 [ 876.592769][T13015] fido_id[13015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 878.116235][T13033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1933'. [ 879.050336][T13047] vivid-001: kernel_thread() failed [ 886.393999][ T28] audit: type=1326 audit(2000000190.270:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 886.419656][ T28] audit: type=1326 audit(2000000190.300:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 886.490866][ T28] audit: type=1326 audit(2000000190.300:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 887.289874][ T28] audit: type=1326 audit(2000000190.300:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 887.446074][ T28] audit: type=1326 audit(2000000190.300:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 887.523675][ T28] audit: type=1326 audit(2000000190.330:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 888.315933][ T28] audit: type=1326 audit(2000000190.330:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 888.365886][ T28] audit: type=1326 audit(2000000190.330:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 888.456033][ T28] audit: type=1326 audit(2000000190.330:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 888.540976][ T28] audit: type=1326 audit(2000000190.330:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.4.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04c3b8efc9 code=0x7ffc0000 [ 888.876405][ T27] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 889.636000][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 889.713418][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 889.727555][ T27] usb 1-1: can't read configurations, error -71 [ 889.869495][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 889.931610][T13172] macvtap1: entered promiscuous mode [ 889.945165][T13172] macvtap1: entered allmulticast mode [ 889.960968][T13172] batadv0: entered promiscuous mode [ 889.967075][T13172] batadv0: entered allmulticast mode [ 889.980421][T13172] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 890.016385][T13172] team0: Device macvtap1 failed to register rx_handler [ 890.040569][T13172] batadv0: left allmulticast mode [ 890.046391][T13172] batadv0: left promiscuous mode [ 891.091915][T13180] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 891.322390][T13180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 891.491080][T13182] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 892.811723][T13199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 892.818903][T13199] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 892.830108][T13199] vhci_hcd vhci_hcd.0: Device attached [ 892.890468][T13202] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 892.897053][T13202] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 892.905444][T13202] vhci_hcd vhci_hcd.0: Device attached [ 893.957577][T13203] vhci_hcd: connection closed [ 893.963044][T13200] vhci_hcd: connection closed [ 894.005957][T12594] vhci_hcd: stop threads [ 894.027870][T12594] vhci_hcd: release socket [ 894.061304][T12594] vhci_hcd: disconnect device [ 894.086556][T12545] vhci_hcd: vhci_device speed not set [ 894.093384][T12594] vhci_hcd: stop threads [ 894.103257][T12594] vhci_hcd: release socket [ 894.125970][T12594] vhci_hcd: disconnect device [ 894.147544][T13207] loop8: detected capacity change from 0 to 8 [ 894.156090][T12545] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 894.170451][T12545] usb 33-1: enqueue for inactive port 0 [ 894.216198][T13207] Dev loop8: unable to read RDB block 8 [ 894.235990][T13207] loop8: unable to read partition table [ 894.246476][T13207] loop8: partition table beyond EOD, truncated [ 894.259499][T12545] vhci_hcd: vhci_device speed not set [ 894.276374][T13207] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 894.416425][ T6981] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 894.632495][ T6981] usb 4-1: Using ep0 maxpacket: 32 [ 894.658372][ T6981] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 894.689381][ T6981] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 894.738762][ T6981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 894.793724][ T6981] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 894.853841][ T6981] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 895.113103][ T6981] usb 4-1: Product: syz [ 895.294569][ T6981] usb 4-1: Manufacturer: syz [ 895.381962][ T6981] usb 4-1: SerialNumber: syz [ 895.413244][ T6981] usb 4-1: config 0 descriptor?? [ 895.878689][ T6981] gs_usb 4-1:0.0: Configuring for 217 interfaces [ 895.894493][ T6981] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 895.938102][ T6981] gs_usb: probe of 4-1:0.0 failed with error -22 [ 897.058188][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 897.761807][ T5862] usb 4-1: USB disconnect, device number 21 [ 898.058228][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 898.066735][ T9] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 898.076124][ T9] usb 6-1: config 0 has no interface number 0 [ 898.082345][ T9] usb 6-1: config 0 interface 217 has no altsetting 0 [ 898.097206][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=26.93 [ 898.117089][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.125177][ T9] usb 6-1: Product: syz [ 898.876850][ T9] usb 6-1: Manufacturer: syz [ 898.881533][ T9] usb 6-1: SerialNumber: syz [ 898.889284][ T9] usb 6-1: config 0 descriptor?? [ 899.268880][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1986'. [ 899.641005][ T9] em28xx 6-1:0.217: New device syz syz @ 480 Mbps (2040:651f, interface 217, class 217) [ 899.684972][ T9] em28xx 6-1:0.217: Video interface 217 found: bulk [ 899.796456][ T9] em28xx 6-1:0.217: unknown em28xx chip ID (0) [ 899.920353][ T9] em28xx 6-1:0.217: reading from i2c device at 0xa0 failed (error=-5) [ 899.930649][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 899.967339][ T9] em28xx 6-1:0.217: board has no eeprom [ 900.055953][ T9] em28xx 6-1:0.217: Identified as Hauppauge WinTV HVR 850 (card=60) [ 900.084602][ T9] em28xx 6-1:0.217: analog set to bulk mode. [ 900.096479][ T5791] em28xx 6-1:0.217: Registering V4L2 extension [ 900.131295][ T9] usb 6-1: USB disconnect, device number 4 [ 900.160836][ T9] em28xx 6-1:0.217: Disconnecting em28xx [ 900.508210][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 900.641864][ T5791] em28xx 6-1:0.217: Config register raw data: 0xffffffed [ 900.650373][ T5791] em28xx 6-1:0.217: AC97 chip type couldn't be determined [ 900.657612][ T5791] em28xx 6-1:0.217: No AC97 audio processor [ 900.673206][ T5791] usb 6-1: Decoder not found [ 900.677966][ T5791] em28xx 6-1:0.217: failed to create media graph [ 900.684781][ T5791] em28xx 6-1:0.217: V4L2 device video103 deregistered [ 900.698565][ T5791] em28xx 6-1:0.217: Binding DVB extension [ 900.706636][ T5791] em28xx 6-1:0.217: no endpoint for DVB mode and transfer type 0 [ 900.779127][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 901.437406][ T5791] em28xx 6-1:0.217: failed to pre-allocate USB transfer buffers for DVB. [ 901.446060][ T5791] em28xx 6-1:0.217: Registering input extension [ 901.452846][ T9] em28xx 6-1:0.217: Closing input extension [ 901.515258][ T9] em28xx 6-1:0.217: Freeing device [ 903.854175][T13309] vlan2: entered promiscuous mode [ 903.874111][T13309] gretap0: entered promiscuous mode [ 903.949176][T13307] vlan2: left promiscuous mode [ 903.969773][T13307] gretap0: left promiscuous mode [ 904.675977][T12545] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 904.875943][T12545] usb 6-1: Using ep0 maxpacket: 32 [ 904.903002][T12545] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 904.922102][T13319] 9pnet_fd: Insufficient options for proto=fd [ 904.941255][T12545] usb 6-1: config 0 has no interface number 0 [ 904.976036][T12545] usb 6-1: config 0 interface 230 has no altsetting 0 [ 905.065528][T12545] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 905.122156][T12545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.252639][T12545] usb 6-1: Product: syz [ 905.257059][T12545] usb 6-1: Manufacturer: syz [ 905.261777][T12545] usb 6-1: SerialNumber: syz [ 905.300536][T12545] usb 6-1: config 0 descriptor?? [ 905.371392][T12545] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 905.456421][T12545] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 906.648028][T13336] vivid-007: kernel_thread() failed [ 906.917932][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2016'. [ 906.975744][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 906.985190][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2018'. [ 907.025162][T13346] geneve2: entered promiscuous mode [ 907.046598][T13346] geneve2: entered allmulticast mode [ 908.063648][T12545] ums-usbat: probe of 6-1:0.230 failed with error -5 [ 908.237128][T12545] usb 6-1: USB disconnect, device number 5 [ 908.323856][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 910.371956][T13392] autofs4:pid:13392:autofs_fill_super: called with bogus options [ 912.856188][ T7272] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 914.098804][ T7272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.130117][ T7272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.182042][ T7272] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 914.216015][ T7272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 914.252901][ T7272] usb 1-1: SerialNumber: syz [ 914.531422][ T7272] usb 1-1: 0:2 : does not exist [ 914.566300][ T7272] usb 1-1: USB disconnect, device number 24 [ 914.605935][T10832] udevd[10832]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 914.624616][T10832] udevd[10832]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 916.026262][T12545] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 916.328371][T13452] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2052'. [ 916.478578][T12545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.500478][T12545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.536323][T12545] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 916.565983][T12545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.362667][T12545] usb 4-1: config 0 descriptor?? [ 918.811275][T12545] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 918.832430][T13479] tty tty28: ldisc open failed (-12), clearing slot 27 [ 918.954666][T12545] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 919.075893][T13480] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2058'. [ 919.131827][T12545] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 920.037516][ T27] usb 4-1: USB disconnect, device number 22 [ 920.968079][T13505] hfs: can't find a HFS filesystem on dev nullb0 [ 921.431513][T13511] autofs4:pid:13511:autofs_fill_super: called with bogus options [ 923.542655][T13531] 9pnet_fd: Insufficient options for proto=fd [ 925.236018][T13541] autofs4:pid:13541:autofs_fill_super: called with bogus options [ 927.157889][T13566] hfs: can't find a HFS filesystem on dev nullb0 [ 931.246479][T13592] autofs4:pid:13592:autofs_fill_super: called with bogus options [ 931.938253][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.944754][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.339849][T13610] vivid-001: kernel_thread() failed [ 934.528979][ T5862] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 934.853519][ T5862] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 934.873395][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.296167][ T5862] usb 5-1: Product: syz [ 936.300403][ T5862] usb 5-1: Manufacturer: syz [ 936.305028][ T5862] usb 5-1: SerialNumber: syz [ 936.374036][ T5862] usb 5-1: can't set config #1, error -71 [ 936.414382][ T5862] usb 5-1: USB disconnect, device number 10 [ 939.927599][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 939.969786][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 942.883145][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2124'. [ 943.045952][T10276] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 943.053362][T10276] Bluetooth: hci0: command 0x0406 tx timeout [ 944.820367][T13731] hfs: can't find a HFS filesystem on dev nullb0 [ 947.070496][T13739] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 948.299705][T13746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2135'. [ 950.007038][T13770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'. [ 950.299226][T13770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'. [ 950.460341][T13775] ip6gretap1: entered allmulticast mode [ 951.066871][T13786] netlink: 'syz.4.2146': attribute type 4 has an invalid length. [ 958.959054][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2168'. [ 959.425137][T13862] hfs: can't find a HFS filesystem on dev nullb0 [ 960.365254][T13853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 960.572328][T13853] bond1: (slave wlan0): Enslaving as an active interface with an up link [ 962.869464][T10276] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 964.411980][T12545] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 964.691821][T12545] usb 1-1: Using ep0 maxpacket: 16 [ 964.710334][T12545] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 964.720152][T12545] usb 1-1: config 0 has no interface number 0 [ 964.766525][T12545] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 964.784106][T12545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.841245][T12545] usb 1-1: Product: syz [ 964.866707][T12545] usb 1-1: Manufacturer: syz [ 964.882392][T12545] usb 1-1: SerialNumber: syz [ 964.922690][T12545] usb 1-1: config 0 descriptor?? [ 964.961375][T12545] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 965.159610][T13910] Process accounting resumed [ 966.262074][T12545] gspca_spca1528: reg_w err -71 [ 966.268176][T12545] spca1528: probe of 1-1:0.1 failed with error -71 [ 966.313555][T12545] usb 1-1: USB disconnect, device number 25 [ 968.835359][T13951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2196'. [ 970.924216][ T5791] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 971.818327][ T5791] usb 5-1: Using ep0 maxpacket: 32 [ 971.849940][ T5791] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 971.880958][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.548682][ T5791] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 973.058576][T12545] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 973.375106][T12545] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.475285][T12545] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 973.530112][T12545] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 973.557188][T12545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 973.585839][T12545] usb 1-1: SerialNumber: syz [ 973.855418][T12545] usb 1-1: 0:2 : does not exist [ 973.903632][ T5791] gspca_nw80x: reg_w err -71 [ 973.924547][T12545] usb 1-1: USB disconnect, device number 26 [ 973.927136][ T5791] nw80x: probe of 5-1:3.0 failed with error -71 [ 973.956340][ T5791] usb 5-1: USB disconnect, device number 11 [ 974.036534][T10832] udevd[10832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.657503][T13998] netlink: 'syz.0.2212': attribute type 10 has an invalid length. [ 974.682642][T13998] bridge0: port 3(macsec0) entered blocking state [ 974.741395][T13998] bridge0: port 3(macsec0) entered disabled state [ 974.817173][T13998] macsec0: entered allmulticast mode [ 974.876670][T13998] veth1_macvtap: entered allmulticast mode [ 974.906858][T13998] macsec0: entered promiscuous mode [ 974.921943][T13998] bridge0: port 3(macsec0) entered blocking state [ 974.928945][T13998] bridge0: port 3(macsec0) entered forwarding state [ 978.322621][T14034] sd 0:0:1:0: device reset [ 979.427528][T14044] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 981.167153][T14057] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 984.112604][ T27] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 984.219354][ T23] kernel read not supported for file /dsp (pid: 23 comm: kworker/1:0) [ 984.397518][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 984.471772][ T27] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 984.512155][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 984.640320][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.652215][T14080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 984.686446][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 985.050070][ T23] usb 1-1: USB disconnect, device number 27 [ 986.486749][T14113] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 988.080247][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 988.292668][ T23] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 988.309892][ T27] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 988.322450][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.361494][ T23] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 988.391129][ T23] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 988.409044][ T23] usb 4-1: Manufacturer: syz [ 988.434301][ T23] usb 4-1: config 0 descriptor?? [ 989.244969][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 989.259394][ T23] rc_core: IR keymap rc-hauppauge not found [ 989.265578][ T23] Registered IR keymap rc-empty [ 989.271471][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.282843][ T27] usb 1-1: Product: syz [ 989.293355][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 989.308104][ T27] usb 1-1: Manufacturer: syz [ 989.319378][ T27] usb 1-1: SerialNumber: syz [ 989.330895][ T27] usb 1-1: config 0 descriptor?? [ 989.350598][T14137] Illegal XDP return value 4294967282 on prog (id 336) dev syz_tun, expect packet loss! [ 989.372632][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 989.389731][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 989.415723][ T23] usb 4-1: USB disconnect, device number 23 [ 989.551599][ T27] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 990.375595][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 991.647721][ T27] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 992.004896][ T27] usb 1-1: USB disconnect, device number 28 [ 993.353900][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.360346][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.759801][T14224] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 999.222863][T14229] syz_tun: entered allmulticast mode [ 999.248717][T14227] syz_tun: left allmulticast mode [ 1002.869459][T14260] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2294'. [ 1003.427675][ T27] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1003.773455][ T27] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1003.782783][ T27] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1003.798577][ T27] usb 6-1: config 1 has no interface number 0 [ 1003.808666][ T27] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid maxpacket 30768, setting to 64 [ 1003.822909][ T27] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.900951][ T27] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1003.972127][ T27] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 1003.981378][ T27] usb 6-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 1004.002084][ T27] usb 6-1: Product: syz [ 1004.022339][ T27] usb 6-1: Manufacturer: syz [ 1004.034492][ T27] usb 6-1: SerialNumber: syz [ 1004.072348][T14262] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1004.303276][ T27] aqc111: probe of 6-1:1.105 failed with error -22 [ 1004.617040][T14275] overlayfs: missing 'workdir' [ 1005.674540][T10276] Bluetooth: hci3: command 0x0406 tx timeout [ 1005.734501][T10276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1005.754037][T10276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1005.765295][T10276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1005.783132][T10276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1005.792156][T10276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1005.802769][T10276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1006.119019][ T27] usb 6-1: USB disconnect, device number 6 [ 1006.987616][T12591] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.299130][T12591] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.456502][T12591] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.532516][T14286] chnl_net:caif_netlink_parms(): no params data found [ 1007.815918][T12591] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.936778][T10276] Bluetooth: hci1: command tx timeout [ 1008.971010][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.988737][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.020390][T14286] bridge_slave_0: entered allmulticast mode [ 1009.049786][T14286] bridge_slave_0: entered promiscuous mode [ 1009.066911][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.086492][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.140008][T14286] bridge_slave_1: entered allmulticast mode [ 1009.158394][T14286] bridge_slave_1: entered promiscuous mode [ 1009.598512][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.676204][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.035134][T10276] Bluetooth: hci1: command tx timeout [ 1010.289646][T14286] team0: Port device team_slave_0 added [ 1010.291785][T14341] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2322'. [ 1010.312858][T14286] team0: Port device team_slave_1 added [ 1010.358832][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2322'. [ 1010.361681][T12591] tipc: Left network mode [ 1010.465867][T14341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2322'. [ 1010.505943][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.536907][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.671226][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.325707][T14331] block device autoloading is deprecated and will be removed. [ 1012.067984][T10276] Bluetooth: hci1: command tx timeout [ 1013.148358][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.187395][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.213589][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.240166][T10276] Bluetooth: hci1: command tx timeout [ 1014.634525][T14286] hsr_slave_0: entered promiscuous mode [ 1014.649997][T14286] hsr_slave_1: entered promiscuous mode [ 1014.865743][T14382] sd 0:0:1:0: device reset [ 1016.782800][T14395] overlayfs: missing 'lowerdir' [ 1018.055189][T12591] hsr_slave_0: left promiscuous mode [ 1018.832320][T14414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2337'. [ 1019.154609][T12591] hsr_slave_1: left promiscuous mode [ 1019.194898][T12591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.202443][T12591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.294364][T12591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.372559][T12591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.426335][T12591] bridge_slave_1: left allmulticast mode [ 1019.490190][T12591] bridge_slave_1: left promiscuous mode [ 1019.514547][T12591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.541727][T12591] bridge_slave_0: left allmulticast mode [ 1019.561061][T12591] bridge_slave_0: left promiscuous mode [ 1019.604529][T12591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.415370][T12591] veth1_macvtap: left promiscuous mode [ 1020.480738][T12591] veth1_vlan: left promiscuous mode [ 1020.686010][T12591] veth0_vlan: left promiscuous mode [ 1022.402053][T12591] pimreg3 (unregistering): left allmulticast mode [ 1023.552153][T14455] netlink: 'syz.4.2350': attribute type 29 has an invalid length. [ 1023.562170][T14455] netlink: 'syz.4.2350': attribute type 3 has an invalid length. [ 1023.580763][T14455] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1026.260571][T12591] team0 (unregistering): Port device team_slave_1 removed [ 1026.471664][T12591] team0 (unregistering): Port device team_slave_0 removed [ 1026.730505][T14482] hfs: can't find a HFS filesystem on dev nullb0 [ 1027.363790][T12591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.564256][T12591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.383161][T14155] kernel read not supported for file /dsp1 (pid: 14155 comm: kworker/1:3) [ 1030.896898][T12591] bond0 (unregistering): Released all slaves [ 1030.954153][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1030.954169][ T28] audit: type=1326 audit(2000000590.867:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.028281][ T28] audit: type=1326 audit(2000000590.867:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.088944][ T28] audit: type=1326 audit(2000000590.897:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.116403][ T28] audit: type=1326 audit(2000000590.897:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.168634][ T28] audit: type=1326 audit(2000000590.897:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.210084][T14466] netlink: 'syz.5.2351': attribute type 12 has an invalid length. [ 1031.231644][ T28] audit: type=1326 audit(2000000590.907:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.255427][T14471] netlink: 'syz.5.2351': attribute type 4 has an invalid length. [ 1031.274708][ T28] audit: type=1326 audit(2000000590.907:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.299111][ T28] audit: type=1326 audit(2000000590.907:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.351557][ T28] audit: type=1326 audit(2000000590.907:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.375090][ T28] audit: type=1326 audit(2000000590.937:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1726f8efc9 code=0x7ffc0000 [ 1031.633785][T14520] hfs: can't find a HFS filesystem on dev nullb0 [ 1032.448109][T14286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1032.476804][T14286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1032.498042][T14286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1032.509089][T14286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1033.648879][T14286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.745242][T14286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.780502][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.787778][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.790236][T12591] IPVS: stop unused estimator thread 0... [ 1033.839784][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.847202][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.214023][T14566] comedi comedi0: comedi_bond: 3:3 attached, 24 channels from 1 devices [ 1035.396287][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1035.916052][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1035.928848][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.947026][ T9] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1035.975966][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.010636][T14286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.018910][ T9] usb 5-1: config 0 descriptor?? [ 1036.813824][ T9] elo 0003:04E7:0009.0006: collection stack underflow [ 1036.889975][ T9] elo 0003:04E7:0009.0006: item 0 4 0 12 parsing failed [ 1036.979134][ T9] elo 0003:04E7:0009.0006: parse failed [ 1037.044677][ T9] elo: probe of 0003:04E7:0009.0006 failed with error -22 [ 1037.181929][T14286] veth0_vlan: entered promiscuous mode [ 1037.207169][ T9] usb 5-1: USB disconnect, device number 12 [ 1037.308731][T14286] veth1_vlan: entered promiscuous mode [ 1037.387606][T14286] veth0_macvtap: entered promiscuous mode [ 1037.441576][T14286] veth1_macvtap: entered promiscuous mode [ 1037.496218][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.509699][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.520595][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.532118][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.542542][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.555077][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.572608][T14286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.596472][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.627950][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.689241][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.732272][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.742924][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.753635][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.766692][T14286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.780983][T14286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.790702][T14286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.925797][T14286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.041809][T14286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.615472][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1038.637476][T12583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.647641][T12583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.665146][ T5778] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1038.712361][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.735255][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.824873][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 1038.857102][ T27] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1038.891915][ T27] usb 6-1: config 0 has no interface number 0 [ 1038.891927][ T5778] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1038.891953][ T5778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.925854][ T27] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1038.954301][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.966054][ T5778] usb 5-1: config 0 descriptor?? [ 1038.986704][ T27] usb 6-1: Product: syz [ 1038.989547][ T5778] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1038.991003][ T27] usb 6-1: Manufacturer: syz [ 1039.026953][ T27] usb 6-1: SerialNumber: syz [ 1039.040721][ T27] usb 6-1: config 0 descriptor?? [ 1039.059740][ T27] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1039.175216][ T5778] gspca_sn9c2028: read1 error -32 [ 1039.462194][ T5778] gspca_sn9c2028: read1 error -71 [ 1039.470055][ T5778] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 1039.489822][ T5778] usb 5-1: USB disconnect, device number 13 [ 1039.510476][ T27] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1039.654844][ T27] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1039.785170][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1039.793417][ T27] usb 6-1: USB disconnect, device number 7 [ 1039.927750][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1039.992855][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1040.054476][ T27] quatech2 6-1:0.51: device disconnected [ 1040.720514][T14647] syz.4.2391: attempt to access beyond end of device [ 1040.720514][T14647] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1042.257295][ T5778] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1042.648953][ T5778] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.684980][ T5778] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1043.365865][ T5778] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1043.375381][ T5778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1043.383480][ T5778] usb 6-1: SerialNumber: syz [ 1043.668257][ T5778] usb 6-1: 0:2 : does not exist [ 1043.704605][ T5778] usb 6-1: 5:0: cannot get min/max values for control 7 (id 5) [ 1044.295286][ T5778] usb 6-1: 5:0: cannot get min/max values for control 9 (id 5) [ 1044.495404][ T5778] usb 6-1: USB disconnect, device number 8 [ 1044.592535][T10832] udevd[10832]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.289039][T14617] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1049.489409][T14617] usb 4-1: Using ep0 maxpacket: 8 [ 1049.509073][T14617] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1049.528256][T14617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.568459][T14617] usb 4-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 1049.587962][T14617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.621620][T14617] usb 4-1: config 0 descriptor?? [ 1049.639533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.655779][T14617] usb 4-1: Found UVC 0.00 device (05a9:2640) [ 1049.679919][T14617] usb 4-1: No valid video chain found. [ 1049.833308][ T5778] usb 4-1: USB disconnect, device number 24 [ 1050.049020][T14617] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1051.008509][T14617] usb 1-1: Using ep0 maxpacket: 32 [ 1051.038090][T14617] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1051.139422][T14617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.189216][T14617] usb 1-1: config 0 descriptor?? [ 1051.223708][T14617] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1053.218952][T14617] gspca_vc032x: reg_w err -71 [ 1053.223813][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.237570][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.252280][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.277546][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.287712][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.293060][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.321821][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.334211][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.340548][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.346219][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.351970][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.368342][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.373826][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.381493][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.386855][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.415622][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.421614][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.440305][T14617] gspca_vc032x: I2c Bus Busy Wait 00 [ 1053.456430][T14617] gspca_vc032x: Unknown sensor... [ 1053.463627][T14617] vc032x: probe of 1-1:0.0 failed with error -22 [ 1053.497290][T14617] usb 1-1: USB disconnect, device number 29 [ 1053.942513][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2428'. [ 1055.153689][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.164063][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.156230][T14617] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 1056.388661][T14617] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1056.402380][T14617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.414897][T14617] usb 1-1: config 0 descriptor?? [ 1058.938516][T14829] sp0: Synchronizing with TNC [ 1059.092757][T14617] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1059.128678][T14617] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1059.163931][T14617] asix: probe of 1-1:0.0 failed with error -71 [ 1059.191172][T14617] usb 1-1: USB disconnect, device number 30 [ 1059.363633][T14833] netlink: 'syz.3.2444': attribute type 10 has an invalid length. [ 1059.478497][T14833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.501776][T14833] bond0: (slave team0): Enslaving as an active interface with an up link [ 1062.265610][T14856] hfs: can't find a HFS filesystem on dev nullb0 [ 1063.572586][T14617] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1063.592285][ T5862] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1063.762445][T14617] usb 4-1: Using ep0 maxpacket: 16 [ 1063.779471][T14617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.791039][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 1063.807547][T14617] usb 4-1: config 0 has no interfaces? [ 1063.816786][T14617] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1063.826538][T14617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.834900][ T5862] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1063.847826][T14617] usb 4-1: config 0 descriptor?? [ 1063.853157][ T5862] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1063.939359][ T5862] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.063218][ T5862] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1064.202042][ T5862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1064.296520][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.378255][ T5862] usb 5-1: Product: syz [ 1064.424815][ T5862] usb 5-1: Manufacturer: syz [ 1064.429482][ T5862] usb 5-1: SerialNumber: syz [ 1064.684149][ T5862] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1066.832822][ T23] usb 5-1: USB disconnect, device number 14 [ 1066.839263][T14155] usb 4-1: USB disconnect, device number 25 [ 1066.885522][ T23] usblp0: removed [ 1067.227506][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2464'. [ 1067.515074][T14898] hfs: can't find a HFS filesystem on dev nullb0 [ 1071.065128][ T3444] Bluetooth: hci0: Frame reassembly failed (-84) [ 1072.137953][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1073.214860][T13697] Bluetooth: hci0: command 0x1003 tx timeout [ 1073.229176][T10276] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1073.248051][ T9] usb 4-1: no configurations [ 1073.253493][ T9] usb 4-1: can't read configurations, error -22 [ 1073.447267][ T5778] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1073.547466][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1073.659177][ T5778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.669666][ T5778] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 1073.697286][ T5778] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1073.728546][ T5778] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1073.738458][ T5778] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1073.746512][ T5778] usb 1-1: Manufacturer: syz [ 1073.758163][ T9] usb 4-1: no configurations [ 1073.762833][ T9] usb 4-1: can't read configurations, error -22 [ 1073.781259][ T5778] usb 1-1: config 0 descriptor?? [ 1073.790449][ T9] usb usb4-port1: attempt power cycle [ 1074.012137][ T5778] usb 1-1: USB disconnect, device number 31 [ 1074.125169][T14155] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1074.317031][T14155] usb 6-1: Using ep0 maxpacket: 16 [ 1074.325950][T14155] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1074.351038][T14155] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1074.366875][T14155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.398187][T14155] usb 6-1: Product: syz [ 1074.402418][T14155] usb 6-1: Manufacturer: syz [ 1074.446809][T14155] usb 6-1: SerialNumber: syz [ 1074.468015][T14155] usb 6-1: config 0 descriptor?? [ 1076.567277][T14995] sd 0:0:1:0: device reset [ 1077.460671][T14155] usb 6-1: USB disconnect, device number 9 [ 1078.974594][T14155] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1079.199125][T14155] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.222226][T14155] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1079.251885][T14155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.272024][T14155] usb 6-1: config 0 descriptor?? [ 1079.291078][T14155] pwc: Askey VC010 type 2 USB webcam detected. [ 1079.364400][T12545] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1079.746211][T14155] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1080.096681][T12545] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1080.180884][T12545] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1080.191412][T14155] pwc: recv_control_msg error -32 req 02 val 2700 [ 1080.199037][T12545] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1080.208460][T14155] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1080.221842][T12545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.235599][T15014] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1080.257226][T12545] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1080.434373][T14155] pwc: recv_control_msg error -32 req 04 val 1300 [ 1080.463930][T14155] pwc: recv_control_msg error -32 req 04 val 1400 [ 1080.749167][T14155] pwc: recv_control_msg error -71 req 02 val 2100 [ 1080.763879][T14155] pwc: recv_control_msg error -71 req 04 val 1500 [ 1080.776466][T14155] pwc: recv_control_msg error -71 req 02 val 2500 [ 1080.794294][T14155] pwc: recv_control_msg error -71 req 02 val 2400 [ 1080.801932][T14155] pwc: recv_control_msg error -71 req 02 val 2600 [ 1080.810300][T14155] pwc: recv_control_msg error -71 req 02 val 2900 [ 1080.823201][ T5862] usb 5-1: USB disconnect, device number 15 [ 1080.829918][T14155] pwc: recv_control_msg error -71 req 02 val 2800 [ 1080.856691][T14155] pwc: recv_control_msg error -71 req 04 val 1100 [ 1080.883000][T14155] pwc: recv_control_msg error -71 req 04 val 1200 [ 1080.919263][T14155] pwc: Registered as video103. [ 1080.945585][T14155] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 1081.189240][T14155] usb 6-1: USB disconnect, device number 10 [ 1081.917423][ T3444] Bluetooth: hci0: Frame reassembly failed (-84) [ 1082.583241][ T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1083.787718][ T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1083.797461][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.841725][ T9] usb 5-1: config 0 descriptor?? [ 1083.889412][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1083.942245][T10276] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1084.560679][T15069] syz.3.2518 (15069): /proc/15068/oom_adj is deprecated, please use /proc/15068/oom_score_adj instead. [ 1084.599528][ T9] gp8psk: usb in 128 operation failed. [ 1084.645382][ T9] gp8psk: usb in 137 operation failed. [ 1084.650948][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1084.755064][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1084.844491][ T9] usb 5-1: USB disconnect, device number 16 [ 1089.069942][T14155] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1089.274311][T14155] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 1089.291578][T14155] usb 5-1: config 0 has no interface number 0 [ 1089.298291][T14155] usb 5-1: config 0 interface 182 has no altsetting 0 [ 1089.335378][T14155] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=40.a5 [ 1089.346302][T14155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.354636][T14155] usb 5-1: Product: syz [ 1089.359459][T14155] usb 5-1: Manufacturer: syz [ 1089.364885][T14155] usb 5-1: SerialNumber: syz [ 1089.437157][T14155] usb 5-1: config 0 descriptor?? [ 1089.731013][T14155] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1089.740534][T14155] gspca_spca501: reg write: error -71 [ 1089.746125][T14155] spca501 5-1:0.182: Reg write failed for 0x02,0x0f,0x05 [ 1089.789566][T14155] spca501: probe of 5-1:0.182 failed with error -22 [ 1089.805008][T14155] usb 5-1: Found UVC 0.00 device syz (0000:0000) [ 1089.811763][T14155] usb 5-1: No valid video chain found. [ 1089.822060][T14155] usb 5-1: USB disconnect, device number 17 [ 1092.111920][T12545] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1092.313684][T12545] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1092.748507][T12545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.768116][T12545] usb 5-1: config 0 descriptor?? [ 1092.806423][T15141] syz.0.2539: attempt to access beyond end of device [ 1092.806423][T15141] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1093.431193][T12545] usb 5-1: Cannot set autoneg [ 1093.436123][T12545] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 1093.487652][T12545] usb 5-1: USB disconnect, device number 18 [ 1093.569474][T15151] sctp: [Deprecated]: syz.3.2543 (pid 15151) Use of int in max_burst socket option deprecated. [ 1093.569474][T15151] Use struct sctp_assoc_value instead [ 1095.813306][T15168] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4274882444 (136796238208 ns) > initial count (11109752672 ns). Using initial count to start timer. [ 1098.093051][T12600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.207582][T13697] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1098.232134][T13697] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1098.241368][T13697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1098.251222][T13697] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1098.259383][T13697] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1098.269422][T13697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1098.420085][T12600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.032983][T12600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.126638][T15210] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1099.133230][T15210] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1099.156755][T15210] vhci_hcd vhci_hcd.0: Device attached [ 1099.200056][T15211] vhci_hcd: connection closed [ 1099.200697][T12583] vhci_hcd: stop threads [ 1099.221927][T12583] vhci_hcd: release socket [ 1099.225233][T12600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.234490][T12583] vhci_hcd: disconnect device [ 1099.708732][T15193] chnl_net:caif_netlink_parms(): no params data found [ 1099.828668][T12600] tipc: Left network mode [ 1100.336306][T13697] Bluetooth: hci0: command tx timeout [ 1101.329859][T15242] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1102.413957][T13697] Bluetooth: hci0: command tx timeout [ 1102.423644][T15193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.440281][T15193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.504701][T15193] bridge_slave_0: entered allmulticast mode [ 1102.512304][T15193] bridge_slave_0: entered promiscuous mode [ 1102.884109][T14155] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1103.094734][T14155] usb 1-1: config 8 has an invalid interface number: 59 but max is 0 [ 1103.104327][T14155] usb 1-1: config 8 has no interface number 0 [ 1103.111008][T14155] usb 1-1: config 8 interface 59 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1103.132557][T15193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.156410][T14155] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=f6.ce [ 1103.165993][T14155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.174621][T14155] usb 1-1: Product: syz [ 1103.175909][T15193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.179595][T14155] usb 1-1: Manufacturer: syz [ 1103.196623][T14155] usb 1-1: SerialNumber: syz [ 1103.221179][T14155] kvaser_usb 1-1:8.59: Cannot get usb endpoint(s) [ 1103.222823][T15193] bridge_slave_1: entered allmulticast mode [ 1103.251725][T15193] bridge_slave_1: entered promiscuous mode [ 1103.444358][T14155] usb 1-1: USB disconnect, device number 32 [ 1103.565761][T15193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.615074][T15193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.841571][T15193] team0: Port device team_slave_0 added [ 1103.923672][T15193] team0: Port device team_slave_1 added [ 1104.167716][T15193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.192399][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.281215][T15193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.513421][T13697] Bluetooth: hci0: command tx timeout [ 1104.595328][T15193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.608498][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.680771][T15193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.018590][T15284] syz.3.2575: attempt to access beyond end of device [ 1105.018590][T15284] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1105.044391][T12600] hsr_slave_0: left promiscuous mode [ 1105.050714][T12600] hsr_slave_1: left promiscuous mode [ 1105.057830][T12600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.069371][T12600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.087242][T12600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.101165][T12600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.109903][T12600] bridge_slave_1: left allmulticast mode [ 1105.116207][T12600] bridge_slave_1: left promiscuous mode [ 1105.140568][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.165446][T12600] bridge_slave_0: left allmulticast mode [ 1105.182404][T12600] bridge_slave_0: left promiscuous mode [ 1105.212574][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.423133][T12600] veth1_macvtap: left promiscuous mode [ 1105.434842][T12600] veth0_macvtap: left promiscuous mode [ 1105.442705][T12600] veth1_vlan: left promiscuous mode [ 1105.448256][T12600] veth0_vlan: left promiscuous mode [ 1105.972869][T12600] pim6reg (unregistering): left allmulticast mode [ 1106.571479][T13697] Bluetooth: hci0: command tx timeout [ 1107.950445][T12600] team0 (unregistering): Port device team_slave_1 removed [ 1108.058757][T12600] team0 (unregistering): Port device team_slave_0 removed [ 1108.134808][T12600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.211277][T12600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.140639][T12600] bond0 (unregistering): Released all slaves [ 1109.253715][T15294] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2577'. [ 1109.454639][T15193] hsr_slave_0: entered promiscuous mode [ 1109.509716][T15193] hsr_slave_1: entered promiscuous mode [ 1109.526478][T15193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.559200][T15193] Cannot create hsr debugfs directory [ 1109.789742][T14617] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1109.999917][T14617] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1110.071519][T14617] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1110.104873][T14617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.113101][T14617] usb 4-1: Product: syz [ 1110.117591][T14617] usb 4-1: Manufacturer: syz [ 1110.157405][T14617] usb 4-1: SerialNumber: syz [ 1110.180184][T14617] usb 4-1: config 0 descriptor?? [ 1110.213994][T14617] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1110.246174][T14617] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1110.275548][T14617] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1110.297510][T14617] usb 4-1: media controller created [ 1110.383654][T14617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1110.398814][T15328] dvb-usb: bulk message failed: -22 (7/0) [ 1110.565008][T14617] DVB: Unable to find symbol mt352_attach() [ 1110.571482][T15348] syz.0.2589: attempt to access beyond end of device [ 1110.571482][T15348] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1110.585306][T12600] IPVS: stop unused estimator thread 0... [ 1110.691909][T14617] DVB: Unable to find symbol nxt6000_attach() [ 1110.698070][T14617] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1110.754478][T14617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 1110.797834][T14617] dvb-usb: schedule remote query interval to 1000 msecs. [ 1110.825897][T14617] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1110.861650][T14617] dvb-usb: bulk message failed: -22 (7/0) [ 1110.886229][T14617] dvb-usb: bulk message failed: -22 (7/0) [ 1110.938273][T14617] usb 4-1: USB disconnect, device number 29 [ 1110.966986][T15193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1111.008177][T15193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1111.043419][T15193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1111.111345][T15193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1111.130875][T14617] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1111.480165][T15193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.544906][T15193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.594840][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.602066][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.640287][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.647459][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.390975][T15193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.751271][T15384] veth0: entered promiscuous mode [ 1112.785381][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2591'. [ 1115.304963][T15193] veth0_vlan: entered promiscuous mode [ 1115.320794][T15193] veth1_vlan: entered promiscuous mode [ 1115.454201][T15193] veth0_macvtap: entered promiscuous mode [ 1115.514334][T15193] veth1_macvtap: entered promiscuous mode [ 1115.601930][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.648960][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.691747][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.710110][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.737476][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.773951][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.814134][T15193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.884063][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.947221][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.977701][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.019583][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.070604][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.136077][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.173424][T15193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.182424][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.258561][T15193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.316144][T15193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.356025][T15193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.395497][T15193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.744448][T12600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.782637][T12600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.802978][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.857589][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.941683][T14617] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1119.134651][T14617] usb 6-1: Using ep0 maxpacket: 8 [ 1119.147024][T14617] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1119.224644][T14617] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1119.231366][T14617] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1119.280087][T14617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.329106][T14617] usb 6-1: config 0 descriptor?? [ 1119.770584][T14617] hid-u2fzero 0003:20A0:4287.0007: unknown main item tag 0x0 [ 1119.804382][T14617] hid-u2fzero 0003:20A0:4287.0007: unknown main item tag 0x0 [ 1119.832309][T14617] hid-u2fzero 0003:20A0:4287.0007: unknown main item tag 0x0 [ 1119.858575][T14617] hid-u2fzero 0003:20A0:4287.0007: unknown main item tag 0x0 [ 1119.879695][T14617] hid-u2fzero 0003:20A0:4287.0007: unknown main item tag 0x0 [ 1119.924552][T14617] hid-u2fzero 0003:20A0:4287.0007: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.5-1/input0 [ 1120.011979][T14617] hid-u2fzero 0003:20A0:4287.0007: NitroKey U2F LED initialised [ 1120.047179][T14617] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1120.059076][T14617] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1120.067532][T14617] CPU: 0 PID: 14617 Comm: kworker/0:2 Not tainted syzkaller #0 [ 1120.075211][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1120.085316][T14617] Workqueue: usb_hub_wq hub_event [ 1120.090396][T14617] RIP: 0010:u2fzero_rng_read+0x241/0x630 [ 1120.096105][T14617] Code: 24 18 80 3c 01 00 74 08 4c 89 ef e8 19 2f f9 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 91 2f f9 f9 48 8d 44 24 60 48 89 03 [ 1120.115846][T14617] RSP: 0018:ffffc900045f6780 EFLAGS: 00010202 [ 1120.121959][T14617] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 1120.129947][T14617] RDX: 0000000000000000 RSI: ffffc900045f68a0 RDI: ffff88802ea03c68 [ 1120.137951][T14617] RBP: ffffc900045f6998 R08: 0000000000000000 R09: 0000000000000000 [ 1120.145945][T14617] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807c244300 [ 1120.153935][T14617] R13: ffff88807c244030 R14: 1ffff1100f848883 R15: 1ffff920008becf8 [ 1120.161950][T14617] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1120.170897][T14617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1120.177512][T14617] CR2: 00005621b15465c8 CR3: 000000002d5c2000 CR4: 00000000003506f0 [ 1120.185501][T14617] Call Trace: [ 1120.188797][T14617] [ 1120.191775][T14617] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1120.197353][T14617] ? add_early_randomness+0x1e/0x1a0 [ 1120.202657][T14617] ? mutex_unlock+0x10/0x10 [ 1120.207232][T14617] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1120.212805][T14617] add_early_randomness+0x7a/0x1a0 [ 1120.217961][T14617] hwrng_register+0x3db/0x4a0 [ 1120.222659][T14617] devm_hwrng_register+0x47/0xb0 [ 1120.227610][T14617] u2fzero_probe+0x348/0x460 [ 1120.232223][T14617] hid_device_probe+0x293/0x5b0 [ 1120.237102][T14617] ? hid_uevent+0x350/0x350 [ 1120.241651][T14617] really_probe+0x25b/0xb40 [ 1120.246200][T14617] ? pm_runtime_barrier+0x14b/0x1c0 [ 1120.251415][T14617] __driver_probe_device+0x18c/0x330 [ 1120.256742][T14617] driver_probe_device+0x4f/0x420 [ 1120.261785][T14617] __device_attach_driver+0x2ca/0x520 [ 1120.267360][T14617] bus_for_each_drv+0x24b/0x2d0 [ 1120.272230][T14617] ? coredump_store+0x90/0x90 [ 1120.276926][T14617] ? bus_find_device+0x320/0x320 [ 1120.281880][T14617] __device_attach+0x2b5/0x400 [ 1120.286659][T14617] ? device_attach+0x20/0x20 [ 1120.291262][T14617] ? do_raw_spin_unlock+0x121/0x230 [ 1120.296476][T14617] bus_probe_device+0x180/0x260 [ 1120.301339][T14617] device_add+0x85b/0xc20 [ 1120.305687][T14617] hid_add_device+0x38d/0x530 [ 1120.310381][T14617] usbhid_probe+0xe02/0x1220 [ 1120.314990][T14617] usb_probe_interface+0x5a4/0xb00 [ 1120.320129][T14617] ? usb_register_driver+0x3d0/0x3d0 [ 1120.325444][T14617] really_probe+0x25b/0xb40 [ 1120.330063][T14617] ? pm_runtime_barrier+0x14b/0x1c0 [ 1120.335281][T14617] __driver_probe_device+0x18c/0x330 [ 1120.340584][T14617] driver_probe_device+0x4f/0x420 [ 1120.345621][T14617] __device_attach_driver+0x2ca/0x520 [ 1120.351014][T14617] bus_for_each_drv+0x24b/0x2d0 [ 1120.355877][T14617] ? coredump_store+0x90/0x90 [ 1120.360567][T14617] ? bus_find_device+0x320/0x320 [ 1120.365518][T14617] __device_attach+0x2b5/0x400 [ 1120.370378][T14617] ? device_attach+0x20/0x20 [ 1120.374979][T14617] ? __kmem_cache_free+0xba/0x1f0 [ 1120.380028][T14617] ? do_raw_spin_unlock+0x121/0x230 [ 1120.385331][T14617] bus_probe_device+0x180/0x260 [ 1120.390193][T14617] device_add+0x85b/0xc20 [ 1120.394548][T14617] usb_set_configuration+0x1a79/0x20c0 [ 1120.400035][T14617] usb_generic_driver_probe+0x8d/0x150 [ 1120.405514][T14617] usb_probe_device+0x13d/0x280 [ 1120.410403][T14617] ? usb_register_device_driver+0x230/0x230 [ 1120.416346][T14617] really_probe+0x25b/0xb40 [ 1120.420863][T14617] ? pm_runtime_barrier+0x14b/0x1c0 [ 1120.426075][T14617] __driver_probe_device+0x18c/0x330 [ 1120.431378][T14617] driver_probe_device+0x4f/0x420 [ 1120.436419][T14617] __device_attach_driver+0x2ca/0x520 [ 1120.441807][T14617] bus_for_each_drv+0x24b/0x2d0 [ 1120.446668][T14617] ? coredump_store+0x90/0x90 [ 1120.451357][T14617] ? bus_find_device+0x320/0x320 [ 1120.456307][T14617] __device_attach+0x2b5/0x400 [ 1120.461108][T14617] ? device_attach+0x20/0x20 [ 1120.465795][T14617] ? __kmem_cache_free+0xba/0x1f0 [ 1120.470840][T14617] ? do_raw_spin_unlock+0x121/0x230 [ 1120.476085][T14617] bus_probe_device+0x180/0x260 [ 1120.480964][T14617] device_add+0x85b/0xc20 [ 1120.485330][T14617] usb_new_device+0xa31/0x1630 [ 1120.490109][T14617] ? usb_disconnect+0x8a0/0x8a0 [ 1120.494981][T14617] ? _raw_spin_unlock_irq+0x23/0x50 [ 1120.500190][T14617] ? lockdep_hardirqs_on+0x98/0x150 [ 1120.505420][T14617] hub_event+0x2962/0x49c0 [ 1120.509961][T14617] ? hub_post_resume+0x120/0x120 [ 1120.514909][T14617] ? read_lock_is_recursive+0x20/0x20 [ 1120.520296][T14617] ? _raw_spin_unlock_irq+0x23/0x50 [ 1120.525503][T14617] ? process_scheduled_works+0x957/0x15b0 [ 1120.531241][T14617] ? process_scheduled_works+0x957/0x15b0 [ 1120.536973][T14617] process_scheduled_works+0xa45/0x15b0 [ 1120.542643][T14617] ? assign_work+0x400/0x400 [ 1120.547251][T14617] ? assign_work+0x39e/0x400 [ 1120.551859][T14617] worker_thread+0xa55/0xfc0 [ 1120.556726][T14617] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1120.562632][T14617] ? _raw_spin_unlock+0x40/0x40 [ 1120.567489][T14617] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1120.573398][T14617] kthread+0x2fa/0x390 [ 1120.577479][T14617] ? pr_cont_work+0x560/0x560 [ 1120.582210][T14617] ? kthread_blkcg+0xd0/0xd0 [ 1120.586960][T14617] ret_from_fork+0x48/0x80 [ 1120.591402][T14617] ? kthread_blkcg+0xd0/0xd0 [ 1120.596005][T14617] ret_from_fork_asm+0x11/0x20 [ 1120.600791][T14617] [ 1120.603841][T14617] Modules linked in: [ 1120.892362][T14617] ---[ end trace 0000000000000000 ]--- [ 1120.944233][T14617] RIP: 0010:u2fzero_rng_read+0x241/0x630 [ 1120.949969][T14617] Code: 24 18 80 3c 01 00 74 08 4c 89 ef e8 19 2f f9 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 91 2f f9 f9 48 8d 44 24 60 48 89 03 [ 1121.027664][T14617] RSP: 0018:ffffc900045f6780 EFLAGS: 00010202 [ 1121.038521][T14617] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 1121.063604][T14617] RDX: 0000000000000000 RSI: ffffc900045f68a0 RDI: ffff88802ea03c68 [ 1121.071651][T14617] RBP: ffffc900045f6998 R08: 0000000000000000 R09: 0000000000000000 [ 1121.096813][T14617] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807c244300 [ 1121.133493][T14617] R13: ffff88807c244030 R14: 1ffff1100f848883 R15: 1ffff920008becf8 [ 1121.141585][T14617] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1121.167409][T14617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1121.186955][T14617] CR2: 00007fff161ea078 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 1121.209661][T14617] Kernel panic - not syncing: Fatal exception [ 1121.216189][T14617] Kernel Offset: disabled [ 1121.220519][T14617] Rebooting in 86400 seconds..