last executing test programs: 1m56.928969831s ago: executing program 2 (id=20856): socket(0x1, 0x803, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x2040400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev, @in6}}, {{@in6=@empty}}}, &(0x7f0000000240)=0xe8) 1m56.852191602s ago: executing program 2 (id=20858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc320e4a27cb5791", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 1m56.682621708s ago: executing program 2 (id=20860): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x3, r1, 0x1, 0x32, 0x6, @link_local}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) 1m56.324606735s ago: executing program 2 (id=20865): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m56.167869162s ago: executing program 2 (id=20868): symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m55.092958152s ago: executing program 2 (id=20883): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x805}], 0x1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 1m54.836505166s ago: executing program 32 (id=20883): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x805}], 0x1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 5.286191923s ago: executing program 5 (id=22922): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 5.068450489s ago: executing program 5 (id=22925): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x1000, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.899518894s ago: executing program 5 (id=22928): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3b6e37bc, 0x2000, 0x0, r2, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1) 3.852263415s ago: executing program 3 (id=22952): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x2c, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x3, 0x0, 0xffff, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) 3.836975005s ago: executing program 5 (id=22953): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 3.695050222s ago: executing program 3 (id=22957): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x440c0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) sendmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1f", 0x1}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 3.478031329s ago: executing program 3 (id=22963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x1fd}) unlink(&(0x7f0000000100)='./file0/file1\x00') 3.459281176s ago: executing program 5 (id=22964): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) close(0x3) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x0}) 2.959979764s ago: executing program 0 (id=22972): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xec5, &(0x7f0000000500), &(0x7f0000000080)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x95d, 0xfa39, 0xc1, 0x0, 0x0) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x3f00, 0x0, 0x0, 0x0) 2.696978386s ago: executing program 0 (id=22975): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) syz_io_uring_setup(0x7e0e, 0x0, &(0x7f0000000400), 0x0) shutdown(r0, 0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x9, 0x20001) 2.592158768s ago: executing program 0 (id=22977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.210724546s ago: executing program 3 (id=22984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x6, 0x2a2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x401a, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 2.200658676s ago: executing program 0 (id=22985): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.008639283s ago: executing program 4 (id=22987): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/31, 0x1f}}], 0x1, 0x1000000000fe, 0x0) 1.983187499s ago: executing program 0 (id=22988): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 1.968636939s ago: executing program 1 (id=22989): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x29cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x14a0000, 0x800, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xbc, 0x0, 0x71, 0x2a82, 0x6, 0x2, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x3, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x0, 0x1, 0x2], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x313, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x9, 0x1, 0x2000002, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x8, 0x2, 0x7f, 0x9, 0x401, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x802, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0x19bd, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xfffffffe, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x5, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x808) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x10, 0x10, 0xff, 0xfd, 0x4, 0xff, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20000050) 1.920882546s ago: executing program 4 (id=22990): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x359}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0xfffffffffffffffe, r1, 0x33, {0x5, 0x10001}, 0x6}, 0x1) 1.869704621s ago: executing program 1 (id=22991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1.854602007s ago: executing program 4 (id=22992): r0 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x100, 0x5, 0x0, 0x0) 1.246680303s ago: executing program 3 (id=22993): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x90, 0x0, 0xa, {0x1, 0x0, 0xaa61, 0x3, 0x62240f1d, 0x2, {0x6, 0x3, 0x7, 0x5, 0x9ee, 0x10001, 0x81, 0xf1e, 0xc, 0xa000, 0xb, r3, 0x0, 0xab, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}}, 0x50) 636.428072ms ago: executing program 3 (id=22994): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x63fb, 0x810, 0xfffffffb, 0x1008168}) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 636.101754ms ago: executing program 0 (id=22995): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8}, 0x50) mount(0x0, 0x0, &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 635.962879ms ago: executing program 1 (id=22996): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000008c0)=""/4096, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) ioctl$FIONREAD(r2, 0x541b, 0x0) getdents64(r0, 0x0, 0x500) 564.972975ms ago: executing program 4 (id=22997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 388.314929ms ago: executing program 1 (id=22998): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4102, 0x1006) 228.888389ms ago: executing program 4 (id=22999): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 211.884638ms ago: executing program 1 (id=23000): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1, 0x0, 0xfffffffe}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x4, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2}) 102.995233ms ago: executing program 5 (id=23001): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 12.980047ms ago: executing program 4 (id=23002): syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000500)={0x0, 0x79ac, 0x10, 0x2, 0x40024e}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0x10c65d, 0x100, 0x8, 0x40}, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 1 (id=23003): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d6) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) kernel console output (not intermixed with test programs): 774][T10875] hsr0: entered allmulticast mode [ 967.632805][T10875] hsr_slave_0: entered allmulticast mode [ 967.632828][T10875] hsr_slave_1: entered allmulticast mode [ 968.261666][T10894] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 968.632637][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15787'. [ 968.632681][T10913] netlink: 'syz.3.15787': attribute type 7 has an invalid length. [ 968.632714][T10913] netlink: 'syz.3.15787': attribute type 8 has an invalid length. [ 968.632729][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15787'. [ 968.815854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.115253][ T44] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 969.278629][ T44] usb 4-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 969.278666][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.287818][ T44] usb 4-1: config 0 descriptor?? [ 969.541961][ T37] audit: type=1326 audit(2000000825.270:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.580403][ T37] audit: type=1326 audit(2000000825.307:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.613890][ T37] audit: type=1326 audit(2000000825.326:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.614244][ T37] audit: type=1326 audit(2000000825.335:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.615016][ T37] audit: type=1326 audit(2000000825.335:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.615326][ T37] audit: type=1326 audit(2000000825.335:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.641453][ T37] audit: type=1326 audit(2000000825.363:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.716924][ T37] audit: type=1326 audit(2000000825.419:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.783174][ T44] lenovo 0003:04B3:3100.0049: item fetching failed at offset 0/3 [ 969.783744][ T44] lenovo 0003:04B3:3100.0049: hid_parse failed [ 969.783797][ T44] lenovo 0003:04B3:3100.0049: probe with driver lenovo failed with error -22 [ 969.787801][ T37] audit: type=1326 audit(2000000825.429:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.826018][ T37] audit: type=1326 audit(2000000825.541:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.0.15806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 969.906794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.928320][ T6148] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 969.973553][ T6135] usb 4-1: USB disconnect, device number 14 [ 970.089745][ T6148] usb 3-1: Using ep0 maxpacket: 16 [ 970.092690][ T6148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.092728][ T6148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.092770][ T6148] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 970.092795][ T6148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.117753][ T6148] usb 3-1: config 0 descriptor?? [ 970.618190][ T6148] corsair 0003:1B1C:1B02.004A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 971.019070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.101257][ T6148] corsair 0003:1B1C:1B02.004A: Failed to get K90 initial state (error -71). [ 971.112406][ T6148] usb 3-1: USB disconnect, device number 25 [ 971.655144][T11082] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.15841'. [ 971.755711][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15844'. [ 972.131736][ T6148] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 972.298605][ T6148] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 972.298630][ T6148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.315214][ T6148] usb 3-1: config 0 descriptor?? [ 972.347775][ T6148] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 972.548494][ T6148] gp8psk: usb in 128 operation failed. [ 972.550711][ T6148] gp8psk: usb in 137 operation failed. [ 972.550736][ T6148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 972.582536][ T6148] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 972.582606][ T6148] usb 3-1: media controller created [ 972.638562][ T6148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 972.674142][T11132] program syz.0.15860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 972.736823][ T6148] gp8psk_fe: Frontend attached [ 972.736918][ T6148] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 972.737195][ T6148] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 973.197314][ T6148] gp8psk: usb in 137 operation failed. [ 973.197337][ T6148] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 973.197352][ T6148] gp8psk: found Genpix USB device pID = 203 (hex) [ 973.227054][ T6148] usb 3-1: USB disconnect, device number 26 [ 973.395235][ T6148] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 973.793917][T11183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.869268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.051625][T11245] netlink: 'syz.2.15906': attribute type 1 has an invalid length. [ 975.051654][T11245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15906'. [ 975.051691][T11245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.981791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.772141][T11330] ip6gretap0: entered promiscuous mode [ 977.094461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.147408][ T9371] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 977.219454][T11360] program syz.2.15961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 977.321574][ T9371] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.321635][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 977.321667][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 977.321690][ T9371] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 977.324199][ T9371] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 977.324232][ T9371] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 977.324256][ T9371] usb 4-1: Manufacturer: syz [ 977.400122][ T9371] usb 4-1: config 0 descriptor?? [ 977.639457][T11341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.639995][T11341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.810411][ T9371] rc_core: IR keymap rc-hauppauge not found [ 977.810444][ T9371] Registered IR keymap rc-empty [ 977.810636][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 977.831871][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 977.856266][ T9371] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 977.880805][ T9371] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input82 [ 977.918253][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 977.943247][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 977.960989][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 977.981729][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.003150][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.024887][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.046547][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.068315][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.089431][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.109998][ T9371] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.143495][ T9371] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 978.143587][ T9371] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 978.201954][ T10] usb 4-1: USB disconnect, device number 15 [ 978.206309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.190792][T11453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 979.201572][T11453] bond0: (slave bond5): Enslaving as an active interface with a down link [ 979.318390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.547360][T11556] input: syz1 as /devices/virtual/input/input83 [ 980.828919][T11574] netlink: 356 bytes leftover after parsing attributes in process `syz.3.16033'. [ 981.023678][T11586] loop9: detected capacity change from 0 to 7 [ 981.054198][T11586] Dev loop9: unable to read RDB block 7 [ 981.054250][T11586] loop9: unable to read partition table [ 981.054482][T11586] loop9: partition table beyond EOD, truncated [ 981.054505][T11586] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 982.716206][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 982.716270][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 982.716322][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 982.716372][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 982.716423][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 982.716474][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 982.716524][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 982.716575][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 982.716629][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16075'. [ 984.209421][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 984.209504][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 984.987185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.068705][T11780] bridge0: port 4(bond0) entered disabled state [ 985.121302][T11780] bridge0: port 3(ip6gretap0) entered disabled state [ 985.121571][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.121812][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.301912][T11780] bridge0: entered allmulticast mode [ 986.097882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.593330][T11850] syzkaller1: tun_chr_ioctl cmd 35108 [ 986.697372][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 986.697394][ T37] audit: type=1326 audit(2000000841.305:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.697453][ T37] audit: type=1326 audit(2000000841.305:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.697843][ T37] audit: type=1326 audit(2000000841.305:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.724281][ T37] audit: type=1326 audit(2000000841.333:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.725336][ T37] audit: type=1326 audit(2000000841.333:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.762094][ T37] audit: type=1326 audit(2000000841.361:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.763117][ T37] audit: type=1326 audit(2000000841.361:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.781159][ T37] audit: type=1326 audit(2000000841.389:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.781353][ T37] audit: type=1326 audit(2000000841.389:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 986.802763][ T37] audit: type=1326 audit(2000000841.408:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11858 comm="syz.3.16165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 987.190116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.714839][T11895] __nla_validate_parse: 8 callbacks suppressed [ 987.714867][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16179'. [ 988.976277][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 989.136703][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 989.145368][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.145407][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 989.145446][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 989.145473][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.191835][ T10] usb 4-1: config 0 descriptor?? [ 989.628708][ T6945] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 989.653974][ T10] nzxt-smart2 0003:1E71:2009.004B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 989.800828][ T6945] usb 3-1: Using ep0 maxpacket: 32 [ 989.830001][ T6945] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 989.830035][ T6945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.869530][ T6945] usb 3-1: config 0 descriptor?? [ 989.894322][ T10] usb 4-1: USB disconnect, device number 16 [ 990.112930][ T6945] usbhid 3-1:0.0: can't add hid device: -71 [ 990.113063][ T6945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 990.118425][ T6945] usb 3-1: USB disconnect, device number 27 [ 990.377239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.552790][T12054] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.16241'. [ 991.468414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.753423][T12121] erspan0: entered promiscuous mode [ 992.214205][T12149] program syz.0.16284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 992.623311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.181282][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 994.181307][ T37] audit: type=1326 audit(2000000848.308:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 994.181780][ T37] audit: type=1326 audit(2000000848.308:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 994.183050][ T37] audit: type=1326 audit(2000000848.308:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 994.183433][ T37] audit: type=1326 audit(2000000848.308:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 994.290331][ T37] audit: type=1326 audit(2000000848.401:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 994.290404][ T37] audit: type=1326 audit(2000000848.401:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 994.290488][ T37] audit: type=1326 audit(2000000848.401:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20d68f749 code=0x7ffc0000 [ 994.290541][ T37] audit: type=1326 audit(2000000848.411:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd20d62b829 code=0x7ffc0000 [ 994.290588][ T37] audit: type=1326 audit(2000000848.411:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd20d62b829 code=0x7ffc0000 [ 994.290635][ T37] audit: type=1326 audit(2000000848.411:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.0.16319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd20d62b829 code=0x7ffc0000 [ 994.352973][T12227] misc userio: Begin command sent, but we're already running [ 995.059593][T12262] netlink: 'syz.2.16334': attribute type 15 has an invalid length. [ 995.778382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.955841][T12301] netlink: 830 bytes leftover after parsing attributes in process `syz.2.16355'. [ 996.624094][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 996.783738][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 996.786404][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 996.786439][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 996.786462][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 996.786485][ T10] usb 4-1: config 1 has no interface number 0 [ 996.786536][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 996.786574][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 996.786621][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 996.786652][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.858604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.898848][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 997.162346][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 997.578116][ T6945] usb 4-1: USB disconnect, device number 17 [ 997.581255][ T6945] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 997.970898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.348812][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16431'. [ 1000.052566][T12510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.344249][T12522] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.16451'. [ 1000.819828][T12545] program syz.2.16462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1001.136667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.906824][ T6945] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1002.067173][ T6945] usb 3-1: Using ep0 maxpacket: 16 [ 1002.069826][ T6945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1002.071433][ T6945] usb 3-1: config 68 has an invalid interface number: 49 but max is 1 [ 1002.071464][ T6945] usb 3-1: config 68 has an invalid interface number: 139 but max is 1 [ 1002.071486][ T6945] usb 3-1: config 68 has no interface number 0 [ 1002.071504][ T6945] usb 3-1: config 68 has no interface number 1 [ 1002.071571][ T6945] usb 3-1: config 68 interface 49 altsetting 85 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1002.071604][ T6945] usb 3-1: config 68 interface 49 has no altsetting 0 [ 1002.071624][ T6945] usb 3-1: config 68 interface 139 has no altsetting 0 [ 1002.074660][ T6945] usb 3-1: New USB device found, idVendor=0af0, idProduct=6731, bcdDevice=91.06 [ 1002.074693][ T6945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.074731][ T6945] usb 3-1: Product: syz [ 1002.074746][ T6945] usb 3-1: Manufacturer: syz [ 1002.074762][ T6945] usb 3-1: SerialNumber: syz [ 1002.248915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.460669][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1002.484568][ T6945] hso 3-1:68.49: Not our interface [ 1002.531621][ T6945] hso 3-1:68.139: Not our interface [ 1002.559925][ T6945] usb 3-1: USB disconnect, device number 28 [ 1003.361600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.473527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.644984][ T9371] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1004.820591][ T9371] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.820660][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1004.820691][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1004.820718][ T9371] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1004.822006][ T9371] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1004.822044][ T9371] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1004.822065][ T9371] usb 4-1: Manufacturer: syz [ 1004.877373][ T9371] usb 4-1: config 0 descriptor?? [ 1005.034421][T12751] program syz.2.16545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1005.271424][ T9371] rc_core: IR keymap rc-hauppauge not found [ 1005.271453][ T9371] Registered IR keymap rc-empty [ 1005.276613][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.302468][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.323848][ T9371] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1005.361245][ T9371] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input87 [ 1005.394862][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.439027][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.471289][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.517364][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.533899][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.585793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.591961][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.618857][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.665804][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.693180][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.725245][ T9371] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1005.750213][ T9371] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1005.750235][ T9371] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1005.801251][ T9371] usb 4-1: USB disconnect, device number 18 [ 1007.269894][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16583'. [ 1010.403792][T13003] program syz.0.16646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1010.791113][T13018] ucma_write: process 5886 (syz.2.16655) changed security contexts after opening file descriptor, this is not allowed. [ 1011.949441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.225393][ T9371] kernel read not supported for file /5871/pagemap (pid: 9371 comm: kworker/1:3) [ 1012.517662][T13087] program syz.0.16687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.032176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.619519][T13124] netlink: 'syz.0.16704': attribute type 8 has an invalid length. [ 1013.749979][T13128] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16706'. [ 1014.142702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.018154][T13189] netlink: 'syz.3.16733': attribute type 1 has an invalid length. [ 1015.034918][T13189] netlink: 'syz.3.16733': attribute type 2 has an invalid length. [ 1015.034946][T13189] netlink: 'syz.3.16733': attribute type 1 has an invalid length. [ 1015.034960][T13189] netlink: 'syz.3.16733': attribute type 3 has an invalid length. [ 1015.034975][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16733'. [ 1015.470968][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1015.628988][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1015.631691][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1015.631723][ T10] usb 4-1: config 0 has no interface number 0 [ 1015.631776][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1015.631805][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1015.636633][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1015.636668][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.636690][ T10] usb 4-1: Product: syz [ 1015.636708][ T10] usb 4-1: Manufacturer: syz [ 1015.636725][ T10] usb 4-1: SerialNumber: syz [ 1015.726071][ T10] usb 4-1: config 0 descriptor?? [ 1016.395805][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 1016.408018][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input88 [ 1016.613382][ T10] usb 4-1: USB disconnect, device number 19 [ 1016.775251][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 1016.875932][T13267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.905746][T13267] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1017.200498][T13294] pimreg: tun_chr_ioctl cmd 1074025673 [ 1017.337194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.743186][T13327] program syz.2.16781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1018.238760][T22228] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1018.399316][T22228] usb 3-1: Using ep0 maxpacket: 32 [ 1018.407435][T22228] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.407478][T22228] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1018.407528][T22228] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1018.407555][T22228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.420259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.483879][T22228] usb 3-1: config 0 descriptor?? [ 1019.020459][T22228] steelseries 0003:1038:12B6.004C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1019.532406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.862918][ T9] usb 3-1: USB disconnect, device number 29 [ 1020.734097][ T37] kauditd_printk_skb: 59 callbacks suppressed [ 1020.734122][ T37] audit: type=1800 audit(2000000873.104:746): pid=13442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.16814" name="/newroot/2895/file0" dev="tmpfs" ino=14584 res=0 errno=0 [ 1021.667704][T13506] gre0: Master is either lo or non-ether device [ 1022.657242][ T37] audit: type=1326 audit(2000000874.937:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1022.657311][ T37] audit: type=1326 audit(2000000874.937:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1022.664204][ T37] audit: type=1326 audit(2000000874.937:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1022.664325][ T37] audit: type=1326 audit(2000000874.937:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1022.664791][ T37] audit: type=1326 audit(2000000874.937:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7b8b4b829 code=0x7ffc0000 [ 1022.665039][ T37] audit: type=1326 audit(2000000874.937:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1022.665097][ T37] audit: type=1326 audit(2000000874.937:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1022.665390][ T37] audit: type=1326 audit(2000000874.937:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1022.665618][ T37] audit: type=1326 audit(2000000874.937:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.3.16851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1022.730304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.810471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.922912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.142312][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1026.303118][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1026.305341][ T9] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1026.305370][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.309790][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.309826][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.309849][ T9] usb 3-1: Product: syz [ 1026.309866][ T9] usb 3-1: Manufacturer: syz [ 1026.309882][ T9] usb 3-1: SerialNumber: syz [ 1026.589296][ T9] usb 3-1: 0:2 : does not exist [ 1026.604104][ T9] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 1026.631523][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1026.660195][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1026.790228][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1026.824009][ T9] usb 3-1: USB disconnect, device number 30 [ 1028.120566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.324701][ T9371] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1028.484233][ T44] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1028.514685][ T9371] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1028.514718][ T9371] usb 3-1: config 0 has no interface number 0 [ 1028.514770][ T9371] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1028.514794][ T9371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.565498][ T9371] usb 3-1: config 0 descriptor?? [ 1028.577540][ T9371] usb 3-1: selecting invalid altsetting 1 [ 1028.577743][ T9371] dvb_ttusb_budget: ttusb_init_controller: error [ 1028.577758][ T9371] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1028.649752][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1028.651360][ T44] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.678502][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1028.678538][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.678560][ T44] usb 4-1: Product: syz [ 1028.678577][ T44] usb 4-1: Manufacturer: syz [ 1028.678593][ T44] usb 4-1: SerialNumber: syz [ 1028.797579][ T9371] DVB: Unable to find symbol cx22700_attach() [ 1029.019570][ T9371] DVB: Unable to find symbol tda10046_attach() [ 1029.019591][ T9371] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1029.024659][ T9371] usb 3-1: USB disconnect, device number 31 [ 1029.205606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.601046][ T44] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 1029.916040][ T6072] block nbd0: Receive control failed (result -32) [ 1029.918070][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1030.309144][ T9] usb 4-1: USB disconnect, device number 20 [ 1030.313089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.024757][T13992] netlink: 'syz.2.17028': attribute type 21 has an invalid length. [ 1031.024852][T13992] netlink: 'syz.2.17028': attribute type 6 has an invalid length. [ 1031.024872][T13992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17028'. [ 1033.466576][T14110] program syz.2.17084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1033.500350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.591196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.703509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.816201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.012891][T14290] program syz.2.17163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.561365][T14312] blkio.reset_stats is deprecated [ 1037.928005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.248914][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1038.413336][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1038.416182][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1038.416221][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1038.416252][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1038.416300][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1038.416328][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.463449][ T9] usb 3-1: config 0 descriptor?? [ 1038.486586][T14329] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1038.503507][ T9] hub 3-1:0.0: USB hub found [ 1038.730220][ T9] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 1039.040358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.222887][ T9] hid-generic 0003:046D:C314.004D: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 1039.479828][ T9] usb 3-1: USB disconnect, device number 32 [ 1039.580997][T14404] netlink: 'syz.3.17208': attribute type 14 has an invalid length. [ 1040.404495][T14446] netlink: 164 bytes leftover after parsing attributes in process `syz.2.17228'. [ 1042.722154][T14549] netlink: 830 bytes leftover after parsing attributes in process `syz.0.17275'. [ 1042.924482][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1043.086037][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1043.090583][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1043.090626][ T9] usb 3-1: config 0 has no interface number 0 [ 1043.097939][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1043.097974][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.097996][ T9] usb 3-1: Product: syz [ 1043.098011][ T9] usb 3-1: Manufacturer: syz [ 1043.098025][ T9] usb 3-1: SerialNumber: syz [ 1043.156200][ T9] usb 3-1: config 0 descriptor?? [ 1043.193245][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1043.420346][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1043.453742][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1043.857651][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1043.862020][ T10] usb 3-1: USB disconnect, device number 33 [ 1043.892903][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1043.924412][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1043.925508][ T10] quatech2 3-1:0.51: device disconnected [ 1044.080360][T14618] program syz.0.17295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.323796][ T44] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1046.489935][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1046.489976][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 1046.490006][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1046.490054][ T44] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1046.490081][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.551251][ T44] usb 3-1: config 0 descriptor?? [ 1046.552343][T14724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1047.017398][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017435][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017459][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017483][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017506][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017529][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017553][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017577][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017600][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.017624][ T44] hid-multitouch 0003:0457:07DA.004E: unknown main item tag 0x0 [ 1047.126889][ T44] hid-multitouch 0003:0457:07DA.004E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 1047.345759][ T44] usb 3-1: USB disconnect, device number 34 [ 1048.783666][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1048.946646][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.946687][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.946719][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1048.946766][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1048.946791][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.952838][ T10] usb 3-1: config 0 descriptor?? [ 1049.419167][ T10] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1049.776804][T14917] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17417'. [ 1049.824904][ T10] usb 3-1: USB disconnect, device number 35 [ 1049.925420][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.925506][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.539156][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 1050.539177][ T37] audit: type=1326 audit(2000000901.005:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1050.541869][ T37] audit: type=1326 audit(2000000901.005:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1050.543661][ T37] audit: type=1326 audit(2000000901.005:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1050.545760][ T37] audit: type=1326 audit(2000000901.005:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1050.547552][ T37] audit: type=1326 audit(2000000901.005:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1050.547908][ T37] audit: type=1326 audit(2000000901.005:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1050.749186][ T37] audit: type=1326 audit(2000000901.201:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1050.749531][ T37] audit: type=1326 audit(2000000901.201:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1050.751166][ T37] audit: type=1326 audit(2000000901.201:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14968 comm="syz.2.17436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1053.566335][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1053.739114][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1053.739149][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.770420][ T10] usb 4-1: config 0 descriptor?? [ 1053.790168][ T10] cp210x 4-1:0.0: cp210x converter detected [ 1054.219159][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1054.435168][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1054.435202][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1054.466541][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1054.507320][ T10] usb 4-1: USB disconnect, device number 21 [ 1054.512915][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1054.514008][ T10] cp210x 4-1:0.0: device disconnected [ 1055.238218][T10107] syz_tun (unregistering): left allmulticast mode [ 1056.588460][T15236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1056.664716][T15236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1056.706805][T15236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1056.765596][T15236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1056.792299][T15236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1056.896245][ T6072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1056.909244][ T6072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1056.909786][ T6072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1056.911359][ T6072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1056.956003][ T6072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1057.058087][ T6380] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.058118][ T6380] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.078425][ T6380] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.078477][ T6380] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.801010][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17582'. [ 1058.840756][ T6380] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.840799][ T6380] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.147891][ T6072] Bluetooth: hci1: command tx timeout [ 1060.307734][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17602'. [ 1061.030872][T15226] chnl_net:caif_netlink_parms(): no params data found [ 1061.383247][ T6072] Bluetooth: hci1: command tx timeout [ 1061.752963][ T37] audit: type=1326 audit(2000000911.467:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.753364][ T37] audit: type=1326 audit(2000000911.486:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.756872][ T37] audit: type=1326 audit(2000000911.486:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.765871][ T37] audit: type=1326 audit(2000000911.495:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.802895][ T37] audit: type=1326 audit(2000000911.533:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.803096][ T37] audit: type=1326 audit(2000000911.533:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.901243][ T37] audit: type=1326 audit(2000000911.617:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.901439][ T37] audit: type=1326 audit(2000000911.617:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.901542][ T37] audit: type=1326 audit(2000000911.617:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1061.901625][ T37] audit: type=1326 audit(2000000911.617:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.2.17625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1062.153098][ T6380] bond0: left allmulticast mode [ 1062.153125][ T6380] bond_slave_0: left allmulticast mode [ 1062.153429][ T6380] @0Ù: left allmulticast mode [ 1062.159718][ T6380] dummy0: left allmulticast mode [ 1062.218527][ T6380] bridge0: port 4(bond0) entered disabled state [ 1062.316390][ T6380] ip6gretap0: left allmulticast mode [ 1062.316429][ T6380] ip6gretap0: left promiscuous mode [ 1062.316806][ T6380] bridge0: port 3(ip6gretap0) entered disabled state [ 1062.401498][ T6380] bridge_slave_1: left allmulticast mode [ 1062.401531][ T6380] bridge_slave_1: left promiscuous mode [ 1062.401805][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.503604][ T6380] bridge_slave_0: left allmulticast mode [ 1062.503639][ T6380] bridge_slave_0: left promiscuous mode [ 1062.530475][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.596473][ T6072] Bluetooth: hci1: command tx timeout [ 1065.420280][T15731] Invalid ELF header magic: != ELF [ 1065.825644][T15236] Bluetooth: hci1: command tx timeout [ 1067.350165][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023e07400: rx timeout, send abort [ 1067.523064][ T6380] team0: Port device bridge0 removed [ 1067.889497][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023e07400: abort rx timeout. Force session deactivation [ 1068.259655][ T9371] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1068.420053][ T9371] usb 4-1: Using ep0 maxpacket: 8 [ 1068.423781][ T9371] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1068.423821][ T9371] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1068.423850][ T9371] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1068.423875][ T9371] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1068.424964][ T9371] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1068.424995][ T9371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.758031][ T9371] usb 4-1: usb_control_msg returned -32 [ 1068.758085][ T9371] usbtmc 4-1:16.0: can't read capabilities [ 1070.390095][ T6380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.433325][ T6380] bond_slave_0: left promiscuous mode [ 1070.528851][ T6380] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1070.559959][ T6380] @0Ù: left promiscuous mode [ 1070.602729][ T6380] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1070.641018][ T6380] dummy0: left promiscuous mode [ 1070.748944][ T6380] bond0 (unregistering): Released all slaves [ 1070.831082][ T6380] bond1 (unregistering): Released all slaves [ 1071.240220][ T44] usb 4-1: USB disconnect, device number 22 [ 1072.743787][ T6380] bond2 (unregistering): Released all slaves [ 1072.817254][ T6380] bond3 (unregistering): Released all slaves [ 1072.870663][ T6380] bond4 (unregistering): Released all slaves [ 1074.457844][ T6380] bond5 (unregistering): Released all slaves [ 1074.819510][T15954] batadv_slave_1: entered promiscuous mode [ 1075.544771][T15961] batadv_slave_1: left promiscuous mode [ 1075.545026][ T6380] tipc: Disabling bearer [ 1075.551450][ T6380] tipc: Left network mode [ 1075.569559][T15226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.569811][T15226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.570092][T15226] bridge_slave_0: entered allmulticast mode [ 1075.608697][T15226] bridge_slave_0: entered promiscuous mode [ 1075.612611][T15226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.612819][T15226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.613047][T15226] bridge_slave_1: entered allmulticast mode [ 1075.634352][T15226] bridge_slave_1: entered promiscuous mode [ 1075.965269][ T6380] IPVS: stopping backup sync thread 9933 ... [ 1076.052591][T15226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.071315][T15226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.104840][T15226] team0: Port device team_slave_0 added [ 1077.197115][T15226] team0: Port device team_slave_1 added [ 1077.813941][T15226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.813964][T15226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.813994][T15226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.964003][T15226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.964021][T15226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.964046][T15226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.608932][T15226] hsr_slave_0: entered promiscuous mode [ 1078.624030][T15226] hsr_slave_1: entered promiscuous mode [ 1078.625148][T15226] debugfs: 'hsr0' already exists in 'hsr' [ 1078.625179][T15226] Cannot create hsr debugfs directory [ 1079.780415][T16447] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input90 [ 1081.425801][ T6380] hsr_slave_0: left promiscuous mode [ 1081.476304][ T6380] hsr_slave_1: left promiscuous mode [ 1081.502140][ T6380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.502251][ T6380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.581621][ T6380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.581646][ T6380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.754136][ T6380] veth1_macvtap: left allmulticast mode [ 1081.754418][ T6380] veth1_macvtap: left promiscuous mode [ 1081.754525][ T6380] veth0_macvtap: left promiscuous mode [ 1081.754886][ T6380] veth1_vlan: left promiscuous mode [ 1082.817457][T16601] netlink: 240 bytes leftover after parsing attributes in process `syz.2.17996'. [ 1082.817484][T16601] netlink: 424 bytes leftover after parsing attributes in process `syz.2.17996'. [ 1082.998588][ T6380] pimreg (unregistering): left allmulticast mode [ 1085.438649][ T6380] hsr0 (unregistering): left allmulticast mode [ 1087.565817][ T6380] team0 (unregistering): Port device team_slave_1 removed [ 1088.046521][ T6380] team0 (unregistering): Port device team_slave_0 removed [ 1095.734926][T17116] loop8: detected capacity change from 0 to 7 [ 1095.814384][T17116] Dev loop8: unable to read RDB block 7 [ 1095.814437][T17116] loop8: unable to read partition table [ 1095.814804][T17116] loop8: partition table beyond EOD, truncated [ 1095.814827][T17116] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1095.887590][ T6380] IPVS: stop unused estimator thread 0... [ 1096.136393][T15226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1096.236689][T17113] cgroup: fork rejected by pids controller in /syz3 [ 1096.304141][T15226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1096.626005][T15226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1096.770300][T15226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1097.213454][T15226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.314636][T15226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.354991][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.380292][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.421721][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.421870][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.427419][T15226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.785773][T15226] veth0_vlan: entered promiscuous mode [ 1098.859866][T15226] veth1_vlan: entered promiscuous mode [ 1099.017444][T15226] veth0_macvtap: entered promiscuous mode [ 1099.076666][T15226] veth1_macvtap: entered promiscuous mode [ 1099.158828][T15226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.208311][T15226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.250209][ T6460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.252250][ T6460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.253021][ T6460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.253068][ T6460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.036769][ T6460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.036794][ T6460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.260789][T23834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.260814][T23834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.045717][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18321'. [ 1101.623115][ T6135] hid_parser_main: 50 callbacks suppressed [ 1101.623142][ T6135] hid-generic 0005:0005:0008.0050: unknown main item tag 0x0 [ 1101.768773][ T6135] hid-generic 0005:0005:0008.0050: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1101.969344][T17394] input: syz0 as /devices/virtual/input/input91 [ 1102.228374][T17410] netlink: 277 bytes leftover after parsing attributes in process `syz.3.18349'. [ 1103.887985][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18380'. [ 1104.519462][T17509] loop8: detected capacity change from 0 to 7 [ 1104.549067][T17509] Dev loop8: unable to read RDB block 7 [ 1104.549118][T17509] loop8: unable to read partition table [ 1104.549353][T17509] loop8: partition table beyond EOD, truncated [ 1104.549374][T17509] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1105.061868][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18408'. [ 1105.064055][T17544] bridge0: port 3(gretap0) entered disabled state [ 1105.071348][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.071597][T17544] bridge0: port 1(1m~aW) entered disabled state [ 1107.018992][ T6135] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1107.221175][ T6135] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1107.221209][ T6135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.252176][ T6135] usb 3-1: config 0 descriptor?? [ 1107.661564][ T9371] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1107.715283][ T6135] [drm:udl_init] *ERROR* Selecting channel failed [ 1107.744395][ T6135] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1107.744423][ T6135] [drm] Initialized udl on minor 2 [ 1107.784582][ T6135] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1107.784955][ T6135] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1107.797009][ T6135] usb 3-1: USB disconnect, device number 36 [ 1107.797549][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1107.821141][ T9371] usb 4-1: Using ep0 maxpacket: 32 [ 1107.846758][ T9371] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1107.846794][ T9371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.855305][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1107.855415][ T9371] usb 4-1: config 0 descriptor?? [ 1107.892441][ T9371] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1108.983525][ T9371] gspca_vc032x: reg_w err -71 [ 1108.983548][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983561][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983572][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983582][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983592][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983611][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983621][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983632][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983642][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983652][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983662][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983672][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983683][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983693][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983703][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983714][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983724][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983735][ T9371] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.983746][ T9371] gspca_vc032x: Unknown sensor... [ 1108.983838][ T9371] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1108.995894][T17709] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.18477'. [ 1109.168633][ T9371] usb 4-1: USB disconnect, device number 23 [ 1109.673108][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18490'. [ 1110.155246][T17766] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1110.414330][T17784] Invalid ELF header magic: != ELF [ 1110.782979][T17803] input: syz1 as /devices/virtual/input/input92 [ 1111.184293][T17821] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1115.630361][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.630441][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.420293][ T31] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1116.530581][T18088] veth1_to_hsr: entered promiscuous mode [ 1116.530666][T18088] macvlan2: entered promiscuous mode [ 1116.580438][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1116.588040][ T31] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1116.588075][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.588098][ T31] usb 3-1: Product: syz [ 1116.588114][ T31] usb 3-1: Manufacturer: syz [ 1116.588131][ T31] usb 3-1: SerialNumber: syz [ 1116.631984][ T31] usb 3-1: config 0 descriptor?? [ 1116.645032][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1117.731752][ T31] gspca_stk1135: reg_w 0x7 err -71 [ 1117.732809][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1117.732824][ T31] gspca_stk1135: Sensor write failed [ 1117.732859][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1117.732871][ T31] gspca_stk1135: Sensor write failed [ 1117.732906][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1117.732917][ T31] gspca_stk1135: Sensor read failed [ 1117.732949][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1117.732960][ T31] gspca_stk1135: Sensor read failed [ 1117.732967][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 1117.733009][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1117.733020][ T31] gspca_stk1135: Sensor read failed [ 1117.733054][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1117.733063][ T31] gspca_stk1135: Sensor read failed [ 1117.733098][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1117.733120][ T31] gspca_stk1135: Sensor write failed [ 1117.733154][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1117.733164][ T31] gspca_stk1135: Sensor write failed [ 1117.733256][ T31] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1117.778383][ T31] usb 3-1: USB disconnect, device number 37 [ 1118.715780][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1118.715801][ T37] audit: type=1326 audit(2000000964.744:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.18688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1118.715924][ T37] audit: type=1326 audit(2000000964.744:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.18688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1118.720660][ T37] audit: type=1326 audit(2000000964.753:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.18688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1118.723043][ T37] audit: type=1326 audit(2000000964.753:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.18688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1118.723289][ T37] audit: type=1326 audit(2000000964.753:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.18688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1118.737564][ T37] audit: type=1326 audit(2000000964.762:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.18688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1119.137809][T18193] IPVS: Scheduler module ip_vs_ not found [ 1119.138124][ T37] audit: type=1326 audit(2000000965.146:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.18688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1119.139023][ T37] audit: type=1326 audit(2000000965.146:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.18688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x7ffc0000 [ 1120.192788][T18244] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 108 [ 1121.318927][ T9371] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1121.478796][ T9371] usb 3-1: Using ep0 maxpacket: 8 [ 1121.484126][ T9371] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1121.484160][ T9371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.484183][ T9371] usb 3-1: Product: syz [ 1121.484199][ T9371] usb 3-1: Manufacturer: syz [ 1121.484215][ T9371] usb 3-1: SerialNumber: syz [ 1121.519777][ T9371] usb 3-1: config 0 descriptor?? [ 1121.562399][ T9371] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1122.644629][ T9371] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 1122.644744][ T9371] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1122.651540][ T9371] usb 3-1: USB disconnect, device number 38 [ 1122.699643][ T37] audit: type=1326 audit(2000000968.474:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18336 comm="syz.3.18753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1122.700035][ T37] audit: type=1326 audit(2000000968.474:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18336 comm="syz.3.18753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1123.567970][T18375] bond0: entered promiscuous mode [ 1123.567997][T18375] bond_slave_0: entered promiscuous mode [ 1123.568284][T18375] bond_slave_1: entered promiscuous mode [ 1123.572096][T18375] batadv0: entered promiscuous mode [ 1123.716560][T18375] hsr1: entered allmulticast mode [ 1123.717874][T18375] bond0: entered allmulticast mode [ 1123.717904][T18375] bond_slave_0: entered allmulticast mode [ 1123.717922][T18375] bond_slave_1: entered allmulticast mode [ 1123.717961][T18375] batadv0: entered allmulticast mode [ 1123.721124][T18375] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1123.935327][T18375] bond0: left promiscuous mode [ 1123.935353][T18375] bond_slave_0: left promiscuous mode [ 1123.935642][T18375] bond_slave_1: left promiscuous mode [ 1123.995010][T18375] batadv0: left promiscuous mode [ 1127.147307][ T9371] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1127.318520][ T9371] usb 4-1: Using ep0 maxpacket: 32 [ 1127.320954][ T9371] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.320993][ T9371] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1127.321038][ T9371] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1127.321064][ T9371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.326453][ T9371] usb 4-1: config 0 descriptor?? [ 1127.459196][T18552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18845'. [ 1127.773200][ T9371] corsair-cpro 0003:1B1C:0C10.0051: unknown main item tag 0x0 [ 1127.773244][ T9371] corsair-cpro 0003:1B1C:0C10.0051: unknown main item tag 0x0 [ 1127.773274][ T9371] corsair-cpro 0003:1B1C:0C10.0051: unknown main item tag 0x0 [ 1127.773303][ T9371] corsair-cpro 0003:1B1C:0C10.0051: unknown main item tag 0x0 [ 1127.773333][ T9371] corsair-cpro 0003:1B1C:0C10.0051: unknown main item tag 0x0 [ 1127.820063][ T9371] corsair-cpro 0003:1B1C:0C10.0051: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1127.919636][ T9371] corsair-cpro 0003:1B1C:0C10.0051: probe with driver corsair-cpro failed with error -38 [ 1127.983468][ T9] usb 4-1: USB disconnect, device number 24 [ 1128.719513][ T6945] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1128.883885][ T6945] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.883915][ T6945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.910968][ T6945] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.911010][ T6945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.911033][ T6945] usb 3-1: Product: syz [ 1128.911049][ T6945] usb 3-1: Manufacturer: syz [ 1128.911065][ T6945] usb 3-1: SerialNumber: syz [ 1129.393644][ T6945] usb 3-1: cannot find UAC_HEADER [ 1129.557090][ T6945] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1129.632890][ T6135] usb 3-1: USB disconnect, device number 39 [ 1130.955107][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1131.117504][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.117535][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1131.117572][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1131.117596][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1131.118894][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1131.118932][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1131.118954][ T9] usb 4-1: SerialNumber: syz [ 1131.364340][ T9] usb 4-1: 0:2 : does not exist [ 1131.364451][ T9] usb 4-1: unit 5 not found! [ 1131.432788][ T9] usb 4-1: USB disconnect, device number 25 [ 1131.865564][ T6945] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1132.046788][ T6945] usb 3-1: Using ep0 maxpacket: 16 [ 1132.090834][ T6945] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1132.090869][ T6945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.090891][ T6945] usb 3-1: Product: syz [ 1132.090907][ T6945] usb 3-1: Manufacturer: syz [ 1132.090924][ T6945] usb 3-1: SerialNumber: syz [ 1132.123684][ T6945] usb 3-1: config 0 descriptor?? [ 1132.613306][ T6945] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1132.628495][ T6945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1132.630701][ T6945] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1132.630850][ T6945] usb 3-1: media controller created [ 1132.709498][ T6945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1133.382839][ T6945] zl10353_read_register: readreg error (reg=127, ret==0) [ 1133.382862][T18780] dtv5100: wlen = 0, aborting. [ 1133.382914][ T6945] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1133.382947][ T6945] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1133.385963][ T6945] usb 3-1: USB disconnect, device number 40 [ 1133.569962][ T6945] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1133.620125][T18870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18961'. [ 1133.620158][T18870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18961'. [ 1133.992172][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1134.155241][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.155279][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1134.157776][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1134.157810][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.157825][ T9] usb 4-1: Product: syz [ 1134.157836][ T9] usb 4-1: Manufacturer: syz [ 1134.157848][ T9] usb 4-1: SerialNumber: syz [ 1134.232643][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 1134.465753][T18878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1135.118549][T18878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1135.119257][ T9] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 1135.122094][ T9] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1135.233294][ T31] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1135.235047][ T9] wwan wwan0: port wwan0mbim0 attached [ 1135.282851][ T9] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 9e:63:ed:3f:09:c5 [ 1135.365642][ T9371] usb 4-1: USB disconnect, device number 26 [ 1135.368122][ T9371] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1135.417699][ T31] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1135.417763][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1135.417798][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1135.417826][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1135.417855][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1135.417903][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1135.417927][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.473670][ T31] usb 3-1: config 0 descriptor?? [ 1135.572244][T18941] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1135.659741][ T9371] wwan wwan0: port wwan0mbim0 disconnected [ 1136.030157][ T31] plantronics 0003:047F:FFFF.0052: reserved main item tag 0xd [ 1136.116369][ T31] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1136.349465][ T31] usb 3-1: USB disconnect, device number 41 [ 1137.900444][T19052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1138.602926][T19103] tracefs: Invalid gid '0x00000000ffffffff' [ 1139.681250][ T31] kernel write not supported for file bpf-prog (pid: 31 comm: kworker/1:0) [ 1141.181798][ T9371] kernel read not supported for file /6413/attr/exec (pid: 9371 comm: kworker/1:3) [ 1141.960204][ T9371] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1141.969833][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1141.969854][ T37] audit: type=1326 audit(2000000986.482:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19290 comm="syz.0.19133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07f62af749 code=0x0 [ 1142.124696][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.124734][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.124759][ T9371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.124804][ T9371] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1142.124828][ T9371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.138370][ T9371] usb 4-1: config 0 descriptor?? [ 1142.620503][T19318] loop9: detected capacity change from 0 to 7 [ 1142.659114][ T9371] acrux 0003:1A34:0802.0053: unknown main item tag 0x0 [ 1142.659156][ T9371] acrux 0003:1A34:0802.0053: unknown main item tag 0x0 [ 1142.659186][ T9371] acrux 0003:1A34:0802.0053: unknown main item tag 0x0 [ 1142.659215][ T9371] acrux 0003:1A34:0802.0053: unknown main item tag 0x0 [ 1142.659243][ T9371] acrux 0003:1A34:0802.0053: unknown main item tag 0x0 [ 1142.669568][ T9371] acrux 0003:1A34:0802.0053: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 1142.669665][ T9371] acrux 0003:1A34:0802.0053: no inputs found [ 1142.669725][ T9371] acrux 0003:1A34:0802.0053: Failed to enable force feedback support, error: -19 [ 1142.676300][T19318] Dev loop9: unable to read RDB block 7 [ 1142.676377][T19318] loop9: unable to read partition table [ 1142.677539][T19318] loop9: partition table beyond EOD, truncated [ 1142.677604][T19318] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1142.869530][T19275] acrux 0003:1A34:0802.0053: pid 19275 passed too short report [ 1142.875141][ T9371] usb 4-1: USB disconnect, device number 27 [ 1143.383242][ T9371] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1143.556172][ T9371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.556211][ T9371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.556254][ T9371] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1143.556280][ T9371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.564080][ T9371] usb 3-1: config 0 descriptor?? [ 1144.244292][ T9371] usb 3-1: string descriptor 0 read error: -22 [ 1144.485161][ T9371] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0054/input/input95 [ 1144.575803][ T9371] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0054/input/input96 [ 1144.607722][ T9371] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0054/input/input97 [ 1144.702020][ T9371] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0054/input/input98 [ 1144.774981][ T9371] uclogic 0003:256C:006D.0054: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1144.850128][ T9371] usb 3-1: USB disconnect, device number 42 [ 1148.213174][T19642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19263'. [ 1148.668162][ T31] hid-generic 0005:16C0:5505.0055: item fetching failed at offset 0/1 [ 1148.668945][ T31] hid-generic 0005:16C0:5505.0055: probe with driver hid-generic failed with error -22 [ 1149.063434][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19277'. [ 1150.120600][ T6135] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1150.280870][ T6135] usb 4-1: Using ep0 maxpacket: 16 [ 1150.283561][ T6135] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.283601][ T6135] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.283644][ T6135] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1150.283670][ T6135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.799816][ T6135] mcp2221 0003:04D8:00DD.0056: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1151.006260][ T6135] usb 4-1: USB disconnect, device number 28 [ 1151.360930][T19810] veth0: entered promiscuous mode [ 1151.363392][T19810] veth0: left promiscuous mode [ 1151.874970][ T6135] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1152.037882][ T6135] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.037913][ T6135] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1152.040938][ T6135] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1152.040987][ T6135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.041010][ T6135] usb 3-1: Product: syz [ 1152.041027][ T6135] usb 3-1: Manufacturer: syz [ 1152.041044][ T6135] usb 3-1: SerialNumber: syz [ 1152.322171][ T6135] usb 3-1: 0:2 : does not exist [ 1152.339349][ T6135] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1152.372588][ T6135] usb 3-1: USB disconnect, device number 43 [ 1153.480609][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19372'. [ 1154.622232][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1154.794481][ T31] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1154.794519][ T31] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1154.794546][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1154.798852][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1154.798888][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.798903][ T31] usb 4-1: Product: syz [ 1154.798914][ T31] usb 4-1: Manufacturer: syz [ 1154.798925][ T31] usb 4-1: SerialNumber: syz [ 1154.804415][T19975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1154.804560][T19975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1155.936710][ T31] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:75:66:6e:96:a2 [ 1156.040453][ T31] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 1156.076002][ T31] usb 4-1: USB disconnect, device number 29 [ 1156.878602][T20090] netlink: 348 bytes leftover after parsing attributes in process `syz.2.19436'. [ 1156.944537][ T6135] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1157.107562][ T6135] usb 4-1: Using ep0 maxpacket: 16 [ 1157.110288][ T6135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.110326][ T6135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.110350][ T6135] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1157.110397][ T6135] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1157.110422][ T6135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.190099][ T6135] usb 4-1: config 0 descriptor?? [ 1157.348540][T20112] pim6reg: entered allmulticast mode [ 1157.432080][T20112] pim6reg: left allmulticast mode [ 1157.667257][ T6135] shield 0003:0955:7214.0057: unknown main item tag 0x0 [ 1157.667299][ T6135] shield 0003:0955:7214.0057: unknown main item tag 0x0 [ 1157.667328][ T6135] shield 0003:0955:7214.0057: unknown main item tag 0x0 [ 1157.667357][ T6135] shield 0003:0955:7214.0057: unknown main item tag 0x0 [ 1157.667384][ T6135] shield 0003:0955:7214.0057: unknown main item tag 0x0 [ 1157.709214][ T6135] input: HID 0955:7214 Haptics as /devices/virtual/input/input99 [ 1157.770252][ T6135] shield 0003:0955:7214.0057: Registered Thunderstrike controller [ 1157.770629][ T6135] shield 0003:0955:7214.0057: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1157.923309][ T9] shield 0003:0955:7214.0057: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1157.923477][ T31] usb 4-1: USB disconnect, device number 30 [ 1157.923668][ T9] shield 0003:0955:7214.0057: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1157.923758][ T9] shield 0003:0955:7214.0057: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1157.923836][ T9] shield 0003:0955:7214.0057: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1158.007035][T20150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.124126][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19456'. [ 1158.784938][T20210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19474'. [ 1159.482935][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1159.561927][T22228] hid-generic 0005:0006:5508.0058: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1159.646063][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1159.646098][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.646121][ T9] usb 4-1: Product: syz [ 1159.646139][ T9] usb 4-1: Manufacturer: syz [ 1159.646156][ T9] usb 4-1: SerialNumber: syz [ 1159.656668][ T9] usb 4-1: config 0 descriptor?? [ 1159.697973][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1160.187056][T20282] netlink: 50 bytes leftover after parsing attributes in process `syz.2.19503'. [ 1160.803889][ T9] gspca_sunplus: reg_w_riv err -71 [ 1160.803998][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1160.833023][ T9] usb 4-1: USB disconnect, device number 31 [ 1162.395131][T20407] vlan2: entered allmulticast mode [ 1162.395418][T20407] bridge0: port 3(vlan2) entered blocking state [ 1162.396098][T20407] bridge0: port 3(vlan2) entered disabled state [ 1162.420648][T20407] vlan2: entered promiscuous mode [ 1162.569752][ T44] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1162.735104][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1162.735138][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.735160][ T44] usb 4-1: Product: syz [ 1162.735175][ T44] usb 4-1: Manufacturer: syz [ 1162.735192][ T44] usb 4-1: SerialNumber: syz [ 1163.211610][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1163.211679][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1163.645612][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1163.645693][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1163.694350][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1163.746342][ T44] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1163.801522][ T44] usb 4-1: USB disconnect, device number 32 [ 1167.588242][T20673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19676'. [ 1168.174050][ T6945] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1168.347182][ T6945] usb 4-1: config 0 has no interfaces? [ 1168.347226][ T6945] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1168.347300][ T6945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.354363][ T6945] usb 4-1: config 0 descriptor?? [ 1168.623810][T20703] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1168.628437][ T6945] usb 4-1: USB disconnect, device number 33 [ 1171.240039][T20895] netlink: 112 bytes leftover after parsing attributes in process `syz.0.19754'. [ 1172.652385][ T37] audit: type=1326 audit(2000001015.177:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20964 comm="syz.3.19787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1172.652537][ T37] audit: type=1326 audit(2000001015.177:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20964 comm="syz.3.19787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1172.653214][ T37] audit: type=1326 audit(2000001015.177:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20964 comm="syz.3.19787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1172.654249][ T37] audit: type=1326 audit(2000001015.177:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20964 comm="syz.3.19787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1172.654552][ T37] audit: type=1326 audit(2000001015.177:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20964 comm="syz.3.19787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1172.770887][ T37] audit: type=1326 audit(2000001015.280:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20964 comm="syz.3.19787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1172.770950][ T37] audit: type=1326 audit(2000001015.280:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20964 comm="syz.3.19787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1174.208377][T21040] netlink: 92 bytes leftover after parsing attributes in process `syz.2.19822'. [ 1175.281567][ T37] audit: type=1326 audit(2000001017.636:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21077 comm="syz.2.19840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aa556f749 code=0x0 [ 1175.733056][T21071] mkiss: ax0: crc mode is auto. [ 1176.361761][T21119] loop4: detected capacity change from 0 to 7 [ 1176.397539][T21119] Dev loop4: unable to read RDB block 7 [ 1176.397593][T21119] loop4: unable to read partition table [ 1176.397829][T21119] loop4: partition table beyond EOD, truncated [ 1176.397851][T21119] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1177.376525][T21180] loop9: detected capacity change from 0 to 7 [ 1177.378338][T21180] Dev loop9: unable to read RDB block 7 [ 1177.378385][T21180] loop9: unable to read partition table [ 1177.378613][T21180] loop9: partition table beyond EOD, truncated [ 1177.378634][T21180] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1178.132224][T21216] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.19901'. [ 1178.132384][T21216] netlink: Unknown conntrack attr (0) [ 1181.340494][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.340574][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.700487][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20001'. [ 1182.893747][T21442] netlink: 'syz.2.20004': attribute type 3 has an invalid length. [ 1183.460617][T21460] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1183.870774][T21497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1185.404353][T22228] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1185.569065][T22228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.569098][T22228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1185.570435][T22228] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1185.570466][T22228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1185.570488][T22228] usb 3-1: SerialNumber: syz [ 1185.878672][T22228] usb 3-1: 0:2 : does not exist [ 1185.935345][T22228] usb 3-1: USB disconnect, device number 44 [ 1188.072285][T21685] overlayfs: failed to clone upperpath [ 1189.899055][T21779] 9p: Invalid uid '0x00000000ffffffff' [ 1191.436493][T21861] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.20183'. [ 1192.020590][T21891] overlayfs: failed to clone lowerpath [ 1195.158104][ T31] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1195.320666][ T31] usb 3-1: config 0 has no interfaces? [ 1195.320716][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1195.320744][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.326105][ T31] usb 3-1: config 0 descriptor?? [ 1195.603610][T22028] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1195.626622][ T9] usb 3-1: USB disconnect, device number 45 [ 1196.623254][ T31] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1196.839510][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1196.839568][ T31] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1196.839594][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.845670][ T31] usb 3-1: config 0 descriptor?? [ 1197.504928][ T31] usb 3-1: language id specifier not provided by device, defaulting to English [ 1197.719846][ T31] letsketch 0003:6161:4D15.0059: Device info: Њ [ 1197.934841][ T31] letsketch 0003:6161:4D15.0059: Device info: 劸 [ 1198.204355][ T31] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 1198.204451][ T31] letsketch 0003:6161:4D15.0059: probe with driver letsketch failed with error -71 [ 1198.222849][ T31] usb 3-1: USB disconnect, device number 46 [ 1199.081657][T22251] ALSA: seq fatal error: cannot create timer (-16) [ 1201.183026][T22351] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1201.955657][ T9371] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1201.967924][ T9371] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1203.373819][T22459] loop9: detected capacity change from 0 to 7 [ 1203.398465][T22459] Dev loop9: unable to read RDB block 7 [ 1203.398522][T22459] loop9: unable to read partition table [ 1203.398769][T22459] loop9: partition table beyond EOD, truncated [ 1203.398791][T22459] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1205.942878][T22567] loop9: detected capacity change from 0 to 7 [ 1205.960970][T22567] Dev loop9: unable to read RDB block 7 [ 1205.961006][T22567] loop9: AHDI p3 p4 [ 1205.961052][T22567] loop9: partition table partially beyond EOD, truncated [ 1205.963924][T22567] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1208.845699][T22723] netlink: 'syz.3.20543': attribute type 1 has an invalid length. [ 1208.942016][T22723] bond6: entered promiscuous mode [ 1208.942526][T22723] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1209.053359][T22747] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1209.054212][T22747] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1209.054237][T22747] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1209.122316][T22747] bond6: (slave ip6gre2): making interface the new active one [ 1209.123544][T22747] ip6gre2: entered promiscuous mode [ 1209.208345][T22747] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 1209.773559][T22809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20565'. [ 1211.595281][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 1211.842003][T22899] netlink: 'syz.0.20606': attribute type 1 has an invalid length. [ 1211.842028][T22899] netlink: 'syz.0.20606': attribute type 4 has an invalid length. [ 1211.842043][T22899] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.20606'. [ 1212.135902][ T31] IPVS: starting estimator thread 0... [ 1212.240384][T22910] IPVS: using max 7 ests per chain, 16800 per kthread [ 1212.843005][T22942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20624'. [ 1214.864127][T23041] input: syz0 as /devices/virtual/input/input100 [ 1215.554925][T15236] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1223.169934][ T9371] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1223.329104][ T9371] usb 4-1: Using ep0 maxpacket: 16 [ 1223.332111][ T9371] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1223.332149][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1223.343689][ T9371] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1223.343781][ T9371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.343843][ T9371] usb 4-1: Product: syz [ 1223.343885][ T9371] usb 4-1: Manufacturer: syz [ 1223.343928][ T9371] usb 4-1: SerialNumber: syz [ 1223.397272][ T9371] usb 4-1: config 0 descriptor?? [ 1223.430580][ T9371] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1223.430619][ T9371] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1224.059897][ T9371] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1224.060802][ T9371] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1224.276773][ T9371] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1224.276798][ T9371] em28xx 4-1:0.0: No AC97 audio processor [ 1224.304814][ T9371] usb 4-1: USB disconnect, device number 34 [ 1224.313983][ T9371] em28xx 4-1:0.0: Disconnecting em28xx [ 1224.317228][ T9371] em28xx 4-1:0.0: Freeing device [ 1225.536589][ T6072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1225.565793][ T6072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1225.586143][ T6072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1225.587467][ T6072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1225.592727][ T6072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1226.652961][T23554] chnl_net:caif_netlink_parms(): no params data found [ 1227.235159][T23554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.236175][T23554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.236564][T23554] bridge_slave_0: entered allmulticast mode [ 1227.239825][T23554] bridge_slave_0: entered promiscuous mode [ 1227.254888][T23554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.255456][T23554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.256523][T23554] bridge_slave_1: entered allmulticast mode [ 1227.270816][T23554] bridge_slave_1: entered promiscuous mode [ 1227.585408][T23554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.604972][T23554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.789713][T15236] Bluetooth: hci0: command tx timeout [ 1227.861276][T23554] team0: Port device team_slave_0 added [ 1227.872021][T23554] team0: Port device team_slave_1 added [ 1228.145068][T23554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.145088][T23554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.145116][T23554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.147711][T23554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.147730][T23554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.147762][T23554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.528034][T23554] hsr_slave_0: entered promiscuous mode [ 1228.529883][T23554] hsr_slave_1: entered promiscuous mode [ 1228.815763][ T44] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1228.978669][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.978725][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1228.978751][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.016218][ T44] usb 4-1: config 0 descriptor?? [ 1229.475824][ T44] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0 [ 1229.475870][ T44] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0 [ 1229.475900][ T44] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0 [ 1229.475929][ T44] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0 [ 1229.475972][ T44] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0 [ 1229.476146][ T44] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0 [ 1229.476175][ T44] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0 [ 1229.679502][ T6135] usb 4-1: USB disconnect, device number 35 [ 1229.990609][T23554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1230.014557][T15236] Bluetooth: hci0: command tx timeout [ 1230.066592][T23554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1230.136864][T23554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1230.205404][T23554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1230.688960][T23554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.746547][T23554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.797505][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.797619][ T6460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.799848][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.799948][ T6460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.318362][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1231.481511][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.481572][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1231.481597][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.519029][ T9] usb 4-1: config 0 descriptor?? [ 1231.530727][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1231.969184][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1231.983205][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1231.983945][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1232.204988][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 1232.213502][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 1232.214265][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 1232.214770][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 1232.215343][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 1232.215882][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1232.216430][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1232.238702][T15236] Bluetooth: hci0: command tx timeout [ 1232.240863][T23554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.271066][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1232.278093][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1232.278810][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1232.279573][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1232.280087][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1232.343807][ T9] pwc: Registered as video103. [ 1232.352333][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input101 [ 1232.370550][ T9] usb 4-1: USB disconnect, device number 36 [ 1233.136043][T23554] veth0_vlan: entered promiscuous mode [ 1233.169345][T23554] veth1_vlan: entered promiscuous mode [ 1233.312798][T23554] veth0_macvtap: entered promiscuous mode [ 1233.333155][T23554] veth1_macvtap: entered promiscuous mode [ 1233.396396][T23554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.443519][T23554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.477092][ T6460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.477363][ T6460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.477430][ T6460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.477469][ T6460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.060852][ T6460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.060880][ T6460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.195991][T23834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.196017][T23834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.463127][T15236] Bluetooth: hci0: command tx timeout [ 1235.320130][T24318] overlayfs: failed to clone upperpath [ 1235.760370][T24342] fuse: Bad value for 'user_id' [ 1235.760392][T24342] fuse: Bad value for 'user_id' [ 1238.386965][T24463] netlink: 'syz.0.21138': attribute type 9 has an invalid length. [ 1238.387003][T24463] netlink: 'syz.0.21138': attribute type 11 has an invalid length. [ 1238.387020][T24463] netlink: 'syz.0.21138': attribute type 12 has an invalid length. [ 1238.387039][T24463] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.21138'. [ 1238.387388][T24463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21138'. [ 1238.452874][T24465] netlink: 'syz.3.21137': attribute type 1 has an invalid length. [ 1238.635353][T24485] bond7: (slave ip6gretap0): making interface the new active one [ 1238.642074][T24485] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1238.685659][T24521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.251143][T24757] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1247.068686][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.068771][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1247.370132][T23834] Bluetooth: hci5: Frame reassembly failed (-84) [ 1249.522017][ T6072] Bluetooth: hci5: command 0x1003 tx timeout [ 1249.527169][T15236] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1250.883895][T25041] syzkaller1: entered promiscuous mode [ 1250.883927][T25041] syzkaller1: entered allmulticast mode [ 1251.824539][T25084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21394'. [ 1252.042588][T25082] bond1: option primary_reselect: invalid value (13) [ 1252.286398][T25082] bond1 (unregistering): Released all slaves [ 1254.431551][T22228] kernel write not supported for file bpf-prog (pid: 22228 comm: kworker/0:3) [ 1256.255883][T25325] netlink: 'syz.5.21472': attribute type 10 has an invalid length. [ 1256.401256][T25325] team0: Port device netdevsim0 added [ 1258.165158][T25416] netlink: 51 bytes leftover after parsing attributes in process `syz.5.21513'. [ 1259.735508][ T9371] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1259.898954][ T9371] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1259.898994][ T9371] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1259.899037][ T9371] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1259.899064][ T9371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.945058][T25454] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1259.975184][ T9371] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1260.303434][ T6311] usb 4-1: USB disconnect, device number 37 [ 1260.325162][T25454] usb 4-1: usb_submit_urb: -2 [ 1264.251915][T25669] mkiss: ax0: crc mode is auto. [ 1265.702177][T25754] netlink: 'syz.3.21642': attribute type 30 has an invalid length. [ 1266.138853][T25770] syzkaller1: entered promiscuous mode [ 1266.138884][T25770] syzkaller1: entered allmulticast mode [ 1267.515079][T25845] netlink: 'syz.3.21681': attribute type 1 has an invalid length. [ 1267.691956][T25845] bond8: entered promiscuous mode [ 1267.692414][T25845] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1267.841238][T25852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1267.875996][T25851] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1267.878490][T25851] bond8: (slave bond9): making interface the new active one [ 1267.878509][T25851] bond9: entered promiscuous mode [ 1267.880055][T25851] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1268.541602][T25958] trusted_key: syz.3.21700 sent an empty control message without MSG_MORE. [ 1268.656455][T25962] 9pnet_virtio: no channels available for device syz [ 1268.982246][ T37] audit: type=1326 audit(2000001105.246:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.984953][ T37] audit: type=1326 audit(2000001105.246:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.985797][ T37] audit: type=1326 audit(2000001105.246:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.986376][ T37] audit: type=1326 audit(2000001105.246:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.987241][ T37] audit: type=1326 audit(2000001105.246:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.988240][ T37] audit: type=1326 audit(2000001105.255:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.994972][ T37] audit: type=1326 audit(2000001105.255:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.996641][ T37] audit: type=1326 audit(2000001105.255:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.997802][ T37] audit: type=1326 audit(2000001105.265:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1268.998622][ T37] audit: type=1326 audit(2000001105.265:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25980 comm="syz.3.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1269.758307][T26003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1270.803019][T26057] netlink: 'syz.3.21740': attribute type 10 has an invalid length. [ 1271.408676][T26057] team0: Device veth1_vlan failed to register rx_handler [ 1271.950607][T26094] kvm: user requested TSC rate below hardware speed [ 1271.972884][T26094] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=162 (324 ns) > initial count (46 ns). Using initial count to start timer. [ 1274.937994][T26219] netlink: 'syz.3.21810': attribute type 1 has an invalid length. [ 1275.087021][T26219] bond10: (slave bridge5): making interface the new active one [ 1275.111873][T26219] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 1276.825041][T26306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21832'. [ 1277.599208][ T9371] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 1277.606245][ T9371] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1278.835863][T26397] overlayfs: failed to clone upperpath [ 1286.413645][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1286.413668][ T37] audit: type=1326 audit(2000001377.547:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26701 comm="syz.0.22000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07f62af749 code=0x0 [ 1288.614115][T26816] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1289.578434][ T37] audit: type=1326 audit(2000001380.511:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1289.579465][ T37] audit: type=1326 audit(2000001380.511:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1289.631212][ T37] audit: type=1326 audit(2000001380.557:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1289.631402][ T37] audit: type=1326 audit(2000001380.557:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1289.631659][ T37] audit: type=1326 audit(2000001380.557:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1289.632057][ T37] audit: type=1326 audit(2000001380.557:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1289.632418][ T37] audit: type=1326 audit(2000001380.557:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1289.632881][ T37] audit: type=1326 audit(2000001380.557:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1289.634464][ T37] audit: type=1326 audit(2000001380.557:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26876 comm="syz.5.22077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09a64f749 code=0x7ffc0000 [ 1291.643777][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22108'. [ 1291.643837][T26949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22108'. [ 1291.799197][T26971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22115'. [ 1291.809842][T26971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22115'. [ 1293.079591][T15236] Bluetooth: hci1: command 0x0406 tx timeout [ 1293.919040][T27086] Bluetooth: MGMT ver 1.23 [ 1295.749339][T27196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22211'. [ 1295.751183][T27196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22211'. [ 1296.195431][T22228] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1296.355795][T22228] usb 4-1: Using ep0 maxpacket: 32 [ 1296.357994][T22228] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1296.358026][T22228] usb 4-1: config 0 has no interface number 0 [ 1296.358161][T22228] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1296.361558][T22228] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1296.361594][T22228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.361617][T22228] usb 4-1: Product: syz [ 1296.361634][T22228] usb 4-1: Manufacturer: syz [ 1296.361650][T22228] usb 4-1: SerialNumber: syz [ 1296.388492][T22228] usb 4-1: config 0 descriptor?? [ 1297.565879][T27280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22249'. [ 1297.939779][T22228] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1297.939844][T22228] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1297.939864][T22228] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1297.939968][T22228] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1297.997326][T22228] usb 4-1: USB disconnect, device number 38 [ 1300.274564][T27427] overlayfs: failed to clone upperpath [ 1302.098920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1302.516230][ T9371] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1302.678250][ T9371] usb 4-1: Using ep0 maxpacket: 32 [ 1302.681262][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.681300][ T9371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.681348][ T9371] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1302.681372][ T9371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.686819][ T9371] usb 4-1: config 0 descriptor?? [ 1303.263514][ T9371] ft260 0003:0403:6030.005D: unknown main item tag 0x0 [ 1303.263558][ T9371] ft260 0003:0403:6030.005D: unknown main item tag 0x0 [ 1303.469562][ T9371] ft260 0003:0403:6030.005D: chip code: 6424 8183 [ 1303.695907][ T9371] ft260 0003:0403:6030.005D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1304.166658][T27571] Bluetooth: hci0: invalid len left 7, exp >= 107 [ 1304.171236][ T9371] ft260 0003:0403:6030.005D: failed to retrieve status: -71 [ 1304.172165][ T9371] ft260 0003:0403:6030.005D: failed to reset I2C controller: -71 [ 1304.329920][ T9371] usb 4-1: USB disconnect, device number 39 [ 1304.921336][T27615] kvm: kvm [27613]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 1305.073850][T27626] netlink: 'syz.0.22390': attribute type 5 has an invalid length. [ 1305.653290][T27659] netlink: 'syz.0.22401': attribute type 1 has an invalid length. [ 1305.957286][T27661] bond1: (slave bridge1): making interface the new active one [ 1305.959599][T27661] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1312.769483][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1312.769563][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1314.239047][T28037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22552'. [ 1317.465603][T28190] kvm: emulating exchange as write [ 1319.030394][T28279] loop2: detected capacity change from 0 to 7 [ 1319.057865][T28279] Dev loop2: unable to read RDB block 7 [ 1319.057926][T28279] loop2: unable to read partition table [ 1319.058167][T28279] loop2: partition table beyond EOD, truncated [ 1319.058190][T28279] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1319.236905][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1319.236925][ T37] audit: type=1326 audit(2000001408.233:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28207 comm="syz.3.22628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x0 [ 1322.117722][T28412] syzkaller1: entered promiscuous mode [ 1322.117757][T28412] syzkaller1: entered allmulticast mode [ 1324.556806][ T37] audit: type=1326 audit(2000001413.208:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.557142][ T37] audit: type=1326 audit(2000001413.208:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.557454][ T37] audit: type=1326 audit(2000001413.208:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.558025][ T37] audit: type=1326 audit(2000001413.208:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.558626][ T37] audit: type=1326 audit(2000001413.208:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.666967][ T37] audit: type=1326 audit(2000001413.254:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.667156][ T37] audit: type=1326 audit(2000001413.254:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.667418][ T37] audit: type=1326 audit(2000001413.254:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.667575][ T37] audit: type=1326 audit(2000001413.254:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.667723][ T37] audit: type=1326 audit(2000001413.264:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.667881][ T37] audit: type=1326 audit(2000001413.264:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.668004][ T37] audit: type=1326 audit(2000001413.264:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1324.811929][ T37] audit: type=1326 audit(2000001413.423:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28512 comm="syz.3.22740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b8baf749 code=0x7ffc0000 [ 1326.704192][T28575] Bluetooth: hci0: unsupported parameter 255 [ 1326.704222][T28575] Bluetooth: hci0: unsupported parameter 255 [ 1328.933133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1328.943135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1328.943759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1328.943854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1328.953835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1328.954454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1328.954514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1329.609141][T28705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22823'. [ 1329.872847][T28710] netlink: 'syz.0.22825': attribute type 4 has an invalid length. [ 1330.396506][T28736] batadv_slave_0: entered allmulticast mode [ 1330.410184][T28734] batadv_slave_0: left allmulticast mode [ 1330.734547][T28757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22849'. [ 1331.180611][T28775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22856'. [ 1331.938680][T28785] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1332.117805][T28785] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1332.117860][T28785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.117889][T28785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.117914][T28785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1332.119463][T28785] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1332.119494][T28785] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1332.119516][T28785] usb 4-1: Manufacturer: syz [ 1332.202532][T28785] usb 4-1: config 0 descriptor?? [ 1332.660128][T28785] appleir 0003:05AC:8243.005E: unknown main item tag 0x0 [ 1332.739436][T28785] appleir 0003:05AC:8243.005E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1332.956499][T28785] usb 4-1: USB disconnect, device number 40 [ 1334.244445][T28925] netlink: 'syz.0.22910': attribute type 13 has an invalid length. [ 1334.343267][T28925] gretap0: refused to change device tx_queue_len [ 1334.343867][T28925] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1337.655467][T29078] Set syz1 is full, maxelem 14 reached [ 1358.796874][ T6072] Bluetooth: hci0: command 0x0406 tx timeout [ 1450.451788][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1450.451811][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29 [ 1450.451841][ C1] rcu: (detected by 1, t=10502 jiffies, g=159857, q=9080 ncpus=2) [ 1450.451865][ C1] task:ktimers/1 state:R running task stack:21720 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 1450.451947][ C1] Call Trace: [ 1450.451962][ C1] [ 1450.451974][ C1] sched_show_task+0x49d/0x630 [ 1450.452006][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1450.452024][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1450.452054][ C1] ? wq_watchdog_touch+0x100/0x160 [ 1450.452075][ C1] print_other_cpu_stall+0xf78/0x1340 [ 1450.452111][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1450.452138][ C1] ? perf_event_task_tick+0x12a/0x390 [ 1450.452181][ C1] rcu_sched_clock_irq+0x9a9/0x1140 [ 1450.452205][ C1] update_process_times+0x235/0x2d0 [ 1450.452234][ C1] tick_nohz_handler+0x3e9/0x710 [ 1450.452264][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1450.452289][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1450.452313][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1450.452337][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1450.452361][ C1] __hrtimer_run_queues+0x4f6/0xd00 [ 1450.452395][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1450.452413][ C1] ? read_tsc+0x9/0x20 [ 1450.452437][ C1] hrtimer_interrupt+0x45d/0xa90 [ 1450.452477][ C1] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 1450.452504][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1450.452534][ C1] [ 1450.452540][ C1] [ 1450.452548][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1450.452568][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1450.452588][ C1] Code: f7 e8 cd 15 c8 f6 f7 c3 00 02 00 00 74 05 e8 e0 51 f2 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 3f bb f6 65 8b 05 fd eb dd 06 85 c0 74 18 5b 41 5e c3 cc cc [ 1450.452605][ C1] RSP: 0018:ffffc90000a3faa8 EFLAGS: 00000206 [ 1450.452619][ C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 1450.452632][ C1] RDX: 0000000000000002 RSI: ffffffff8ce0bd18 RDI: 0000000000000001 [ 1450.452644][ C1] RBP: ffffc90000a3fc10 R08: ffffffff8edb3577 R09: 1ffffffff1db66ae [ 1450.452657][ C1] R10: dffffc0000000000 R11: fffffbfff1db66af R12: ffff8880b8928a40 [ 1450.452673][ C1] R13: dffffc0000000000 R14: ffff8880b8928580 R15: ffffffff88ebfa70 [ 1450.452687][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1450.452729][ C1] __hrtimer_run_queues+0x42f/0xd00 [ 1450.452763][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1450.452780][ C1] ? read_tsc+0x9/0x20 [ 1450.452804][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 1450.452827][ C1] handle_softirqs+0x1df/0x650 [ 1450.452857][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1450.452879][ C1] run_ktimerd+0x69/0x100 [ 1450.452903][ C1] smpboot_thread_fn+0x542/0xa60 [ 1450.452934][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1450.452964][ C1] kthread+0x711/0x8a0 [ 1450.452993][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1450.453015][ C1] ? __pfx_kthread+0x10/0x10 [ 1450.453039][ C1] ? rt_spin_unlock+0x150/0x200 [ 1450.453067][ C1] ? rt_spin_unlock+0x161/0x200 [ 1450.453089][ C1] ? __pfx_kthread+0x10/0x10 [ 1450.453116][ C1] ret_from_fork+0x510/0xa50 [ 1450.453137][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1450.453155][ C1] ? __switch_to+0xc9e/0x1480 [ 1450.453186][ C1] ? __pfx_kthread+0x10/0x10 [ 1450.453213][ C1] ret_from_fork_asm+0x1a/0x30 [ 1450.453255][ C1] [ 1501.671701][ T38] INFO: task syz-executor:6082 blocked for more than 143 seconds. [ 1501.671739][ T38] Tainted: G L syzkaller #0 [ 1501.671754][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1501.671766][ T38] task:syz-executor state:D stack:21536 pid:6082 tgid:6082 ppid:6065 task_flags:0x400140 flags:0x00080000 [ 1501.671834][ T38] Call Trace: [ 1501.671843][ T38] [ 1501.671868][ T38] __schedule+0x145f/0x5070 [ 1501.671911][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1501.671954][ T38] ? unwind_next_frame+0xa5/0x23d0 [ 1501.671988][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1501.672031][ T38] ? __pfx___schedule+0x10/0x10 [ 1501.672078][ T38] ? schedule+0x91/0x360 [ 1501.672117][ T38] schedule+0x165/0x360 [ 1501.672156][ T38] schedule_timeout+0x9a/0x270 [ 1501.672191][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1501.672228][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1501.672267][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1501.672290][ T38] ? wait_for_completion+0x267/0x5d0 [ 1501.672315][ T38] wait_for_completion+0x2bf/0x5d0 [ 1501.672351][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1501.672377][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1501.672401][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1501.672424][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1501.672453][ T38] synchronize_rcu_normal+0x17d/0x260 [ 1501.672479][ T38] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 1501.672525][ T38] ? umount_tree+0x91a/0xd80 [ 1501.672562][ T38] ? kasan_save_track+0x4f/0x80 [ 1501.672591][ T38] ? kasan_save_track+0x3e/0x80 [ 1501.672623][ T38] ? kasan_save_free_info+0x46/0x50 [ 1501.672648][ T38] ? __kasan_slab_free+0x5c/0x80 [ 1501.672680][ T38] ? kfree+0x1bd/0x900 [ 1501.672709][ T38] ? umount_tree+0x91a/0xd80 [ 1501.672741][ T38] ? path_umount+0xabd/0xb40 [ 1501.672773][ T38] ? __x64_sys_umount+0x122/0x160 [ 1501.672806][ T38] ? do_syscall_64+0xec/0xf80 [ 1501.672848][ T38] synchronize_rcu_expedited+0x13b/0x6e0 [ 1501.672884][ T38] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1501.672911][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1501.672935][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1501.672957][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1501.672981][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1501.673015][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1501.673047][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1501.673069][ T38] ? shrink_dentry_list+0x5cb/0x5e0 [ 1501.673094][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1501.673124][ T38] namespace_unlock+0x536/0x760 [ 1501.673155][ T38] ? reacquire_held_locks+0x104/0x190 [ 1501.673190][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1501.673224][ T38] ? __pfx_namespace_unlock+0x10/0x10 [ 1501.673265][ T38] ? rt_spin_unlock+0x161/0x200 [ 1501.673298][ T38] ? __x64_sys_umount+0x122/0x160 [ 1501.673332][ T38] path_umount+0xae5/0xb40 [ 1501.673369][ T38] ? kmem_cache_free+0x18f/0x8d0 [ 1501.673417][ T38] __x64_sys_umount+0x122/0x160 [ 1501.673454][ T38] ? __pfx___x64_sys_umount+0x10/0x10 [ 1501.673505][ T38] do_syscall_64+0xec/0xf80 [ 1501.673527][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.673550][ T38] ? trace_irq_disable+0x37/0x100 [ 1501.673575][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1501.673604][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.673627][ T38] RIP: 0033:0x7fe7b8bb0a77 [ 1501.673658][ T38] RSP: 002b:00007ffc2a586d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1501.673683][ T38] RAX: ffffffffffffffda RBX: 00007fe7b8c33d7d RCX: 00007fe7b8bb0a77 [ 1501.673700][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2a586e10 [ 1501.673716][ T38] RBP: 00007ffc2a586e10 R08: 0000000000000000 R09: 0000000000000000 [ 1501.673732][ T38] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2a587ea0 [ 1501.673748][ T38] R13: 00007fe7b8c33d7d R14: 0000000000135b05 R15: 00007ffc2a587ee0 [ 1501.673787][ T38] [ 1501.673936][ T38] INFO: task syz.0.22995:29113 blocked for more than 143 seconds. [ 1501.673954][ T38] Tainted: G L syzkaller #0 [ 1501.673968][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1501.673979][ T38] task:syz.0.22995 state:D stack:24952 pid:29113 tgid:29113 ppid:15226 task_flags:0x400040 flags:0x00080002 [ 1501.674048][ T38] Call Trace: [ 1501.674056][ T38] [ 1501.674071][ T38] __schedule+0x145f/0x5070 [ 1501.674107][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1501.674142][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1501.674178][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1501.674224][ T38] ? __pfx___schedule+0x10/0x10 [ 1501.674271][ T38] ? schedule+0x91/0x360 [ 1501.674310][ T38] schedule+0x165/0x360 [ 1501.674348][ T38] schedule_timeout+0x9a/0x270 [ 1501.674383][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1501.674420][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1501.674458][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1501.674479][ T38] ? wait_for_completion+0x267/0x5d0 [ 1501.674504][ T38] wait_for_completion+0x2bf/0x5d0 [ 1501.674541][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1501.674571][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1501.674601][ T38] rcu_barrier+0x463/0x570 [ 1501.674639][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 1501.674674][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 1501.674707][ T38] kvm_put_kvm+0x6ca/0xa80 [ 1501.674745][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 1501.674774][ T38] kvm_vm_release+0x46/0x50 [ 1501.674803][ T38] __fput+0x45b/0xa80 [ 1501.674843][ T38] task_work_run+0x1d4/0x260 [ 1501.674891][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1501.674940][ T38] exit_to_user_mode_loop+0xef/0x4e0 [ 1501.674974][ T38] ? rcu_is_watching+0x15/0xb0 [ 1501.675000][ T38] do_syscall_64+0x2c1/0xf80 [ 1501.675023][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.675046][ T38] ? trace_irq_disable+0x37/0x100 [ 1501.675070][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1501.675099][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.675123][ T38] RIP: 0033:0x7f07f62af749 [ 1501.675142][ T38] RSP: 002b:00007ffc61ad1988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1501.675164][ T38] RAX: 0000000000000000 RBX: 0000000000135bff RCX: 00007f07f62af749 [ 1501.675180][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1501.675194][ T38] RBP: 00007f07f6507da0 R08: 0000000000000001 R09: 0000000861ad1c7f [ 1501.675210][ T38] R10: 0000001b32a20000 R11: 0000000000000246 R12: 00007f07f6505fac [ 1501.675226][ T38] R13: 00007f07f6505fa0 R14: ffffffffffffffff R15: 00007ffc61ad1aa0 [ 1501.675264][ T38] [ 1501.675282][ T38] [ 1501.675282][ T38] Showing all locks held in the system: [ 1501.675296][ T38] 5 locks held by ktimers/1/29: [ 1501.675312][ T38] 1 lock held by khungtaskd/38: [ 1501.675325][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1501.675398][ T38] 2 locks held by kworker/u8:2/42: [ 1501.675411][ T38] #0: ffff888145298138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1501.675467][ T38] #1: ffffc90000b47bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1501.675531][ T38] 2 locks held by kworker/u8:6/156: [ 1501.675544][ T38] #0: ffff88813ff69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1501.675601][ T38] #1: ffffc90003b07bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1501.675679][ T38] 2 locks held by getty/5555: [ 1501.675693][ T38] #0: ffff88814d2be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1501.675754][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1501.675816][ T38] 6 locks held by kworker/u9:0/15236: [ 1501.675830][ T38] #0: ffff88804233b138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1501.675891][ T38] #1: ffffc90005fc7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1501.675949][ T38] #2: ffff88803cf6cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1501.676017][ T38] #3: ffff88803cf6c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1501.676076][ T38] #4: ffffffff8ea153f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 1501.676135][ T38] #5: ffff888029e8cb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 1501.676206][ T38] 1 lock held by syz.0.22995/29113: [ 1501.676219][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1501.676274][ T38] 1 lock held by dhcpcd/29135: [ 1501.676287][ T38] #0: ffff88802bfa0358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1501.676354][ T38] 1 lock held by dhcpcd/29136: [ 1501.676367][ T38] #0: ffff888069f1e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1501.676434][ T38] 1 lock held by dhcpcd/29137: [ 1501.676447][ T38] #0: ffff88807b85c358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1501.676513][ T38] [ 1501.676519][ T38] ============================================= [ 1501.676519][ T38] [ 1501.676530][ T38] NMI backtrace for cpu 0 [ 1501.676565][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1501.676606][ T38] Tainted: [L]=SOFTLOCKUP [ 1501.676615][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1501.676629][ T38] Call Trace: [ 1501.676639][ T38] [ 1501.676648][ T38] dump_stack_lvl+0xe8/0x150 [ 1501.676682][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1501.676713][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1501.676739][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1501.676775][ T38] sys_info+0x135/0x170 [ 1501.676800][ T38] watchdog+0xf95/0xfe0 [ 1501.676832][ T38] ? watchdog+0x20a/0xfe0 [ 1501.676872][ T38] kthread+0x711/0x8a0 [ 1501.676909][ T38] ? __pfx_watchdog+0x10/0x10 [ 1501.676933][ T38] ? __pfx_kthread+0x10/0x10 [ 1501.676963][ T38] ? rt_spin_unlock+0x150/0x200 [ 1501.677000][ T38] ? rt_spin_unlock+0x161/0x200 [ 1501.677030][ T38] ? __pfx_kthread+0x10/0x10 [ 1501.677065][ T38] ret_from_fork+0x510/0xa50 [ 1501.677093][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1501.677117][ T38] ? __switch_to+0xc9e/0x1480 [ 1501.677172][ T38] ? __pfx_kthread+0x10/0x10 [ 1501.677205][ T38] ret_from_fork_asm+0x1a/0x30 [ 1501.677258][ T38] [ 1501.677267][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1501.677302][ C1] NMI backtrace for cpu 1 [ 1501.677320][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1501.677347][ C1] Tainted: [L]=SOFTLOCKUP [ 1501.677355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1501.677372][ C1] RIP: 0010:timerqueue_del+0x8a/0x100 [ 1501.677398][ C1] Code: 03 43 80 3c 2f 00 74 08 4c 89 e7 e8 f0 6c 54 f7 4d 39 34 24 74 07 e8 a5 35 f2 f6 eb 26 e8 9e 35 f2 f6 4c 89 f7 e8 f6 81 ff ff <43> 80 3c 2f 00 74 0e 4c 89 e7 49 89 c7 e8 b4 6d 54 f7 4c 89 f8 49 [ 1501.677416][ C1] RSP: 0018:ffffc90000a3fa88 EFLAGS: 00000046 [ 1501.677432][ C1] RAX: 0000000000000000 RBX: ffff8880b8928a90 RCX: ffff88801bea1e40 [ 1501.677447][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff888035a7c440 [ 1501.677460][ C1] RBP: 1ffff11006b4f888 R08: 0000000000000000 R09: 0000000000000100 [ 1501.677473][ C1] R10: dffffc0000000000 R11: fffffbfff1db66af R12: ffff8880b8928a98 [ 1501.677488][ C1] R13: dffffc0000000000 R14: ffff888035a7c440 R15: 1ffff11017125153 [ 1501.677503][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 1501.677519][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1501.677533][ C1] CR2: 00007fe77f3bd984 CR3: 000000002c74a000 CR4: 00000000003526f0 [ 1501.677550][ C1] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e [ 1501.677562][ C1] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1501.677575][ C1] Call Trace: [ 1501.677582][ C1] [ 1501.677593][ C1] __hrtimer_run_queues+0x38f/0xd00 [ 1501.677624][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1501.677657][ C1] ? read_tsc+0x9/0x20 [ 1501.677679][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 1501.677703][ C1] handle_softirqs+0x1df/0x650 [ 1501.677732][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1501.677756][ C1] run_ktimerd+0x69/0x100 [ 1501.677781][ C1] smpboot_thread_fn+0x542/0xa60 [ 1501.677806][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1501.677836][ C1] kthread+0x711/0x8a0 [ 1501.677866][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1501.677890][ C1] ? __pfx_kthread+0x10/0x10 [ 1501.677916][ C1] ? rt_spin_unlock+0x150/0x200 [ 1501.677945][ C1] ? rt_spin_unlock+0x161/0x200 [ 1501.677970][ C1] ? __pfx_kthread+0x10/0x10 [ 1501.677998][ C1] ret_from_fork+0x510/0xa50 [ 1501.678021][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1501.678040][ C1] ? __switch_to+0xc9e/0x1480 [ 1501.678072][ C1] ? __pfx_kthread+0x10/0x10 [ 1501.678101][ C1] ret_from_fork_asm+0x1a/0x30 [ 1501.678146][ C1] [ 1501.678304][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1501.678328][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1501.678358][ T38] Tainted: [L]=SOFTLOCKUP [ 1501.678367][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1501.678381][ T38] Call Trace: [ 1501.678391][ T38] [ 1501.678400][ T38] vpanic+0x1e0/0x670 [ 1501.678437][ T38] panic+0xb9/0xc0 [ 1501.678470][ T38] ? __pfx_panic+0x10/0x10 [ 1501.678514][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1501.678549][ T38] watchdog+0xfdf/0xfe0 [ 1501.678581][ T38] ? watchdog+0x20a/0xfe0 [ 1501.678615][ T38] kthread+0x711/0x8a0 [ 1501.678652][ T38] ? __pfx_watchdog+0x10/0x10 [ 1501.678677][ T38] ? __pfx_kthread+0x10/0x10 [ 1501.678708][ T38] ? rt_spin_unlock+0x150/0x200 [ 1501.678745][ T38] ? rt_spin_unlock+0x161/0x200 [ 1501.678775][ T38] ? __pfx_kthread+0x10/0x10 [ 1501.678809][ T38] ret_from_fork+0x510/0xa50 [ 1501.678839][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1501.678868][ T38] ? __switch_to+0xc9e/0x1480 [ 1501.678907][ T38] ? __pfx_kthread+0x10/0x10 [ 1501.678942][ T38] ret_from_fork_asm+0x1a/0x30 [ 1501.678993][ T38] [ 1501.679590][ T38] Kernel Offset: disabled