last executing test programs: 13m51.600695858s ago: executing program 1 (id=334): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0)='\n', 0x1) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd000000001a00000000ff0200000000000000000d0098000000007f00000000000000000000000100"/66], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000001240001801400018008000100ac1414bb08000200ac0314bb0c00028005004100000000002400028014000180080001000000000008000900ac1414000c000280050001000000000008000740000000000800084000000cde10a8ea1af935d155eb140c23b578ee9504b0f423674f4e36092ad124e3911c2c5f14c85ca3a94c94edbb4323da986a74b443d2fa60ce919b27244f52638e2aa56ca238b18e273c04d991e00261ca1c32cb831614509d2b1b13d20ce15f5a1b63e22e908e12e0463e2a89dec88fcaf10cb85998971144ad8d8c9d10e295"], 0x6c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) 13m50.152924249s ago: executing program 1 (id=338): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = epoll_create(0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x1}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000463000/0x2000)=nil, 0x2000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e000024000280080004400000000b08000340001c0000080001400000001608000340089dd3850900010073797a31000000000900020073797a22000000001400000011000100000000000a00000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x440400c1) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close(0x3) openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x100) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) 13m47.855066901s ago: executing program 1 (id=345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) 13m43.920123762s ago: executing program 1 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='2', 0x1) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1', 0x1) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r7, &(0x7f00000005c0)='4', 0x1) 13m43.39716553s ago: executing program 1 (id=356): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r3}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) 13m38.423661934s ago: executing program 1 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 13m23.216833957s ago: executing program 32 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.46073467s ago: executing program 3 (id=3251): socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x28) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000008e40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000084c0)={0x18, 0xfffffffffffffff5, 0x6a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2.96914027s ago: executing program 2 (id=3258): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.861243357s ago: executing program 2 (id=3259): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) 1.414127838s ago: executing program 0 (id=3272): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0x0, 0x4b5) 1.338258038s ago: executing program 4 (id=3273): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x558410e9) creat(&(0x7f00000001c0)='./file1\x00', 0x2c) getgid() r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, 0x0, 0x0) 1.334864375s ago: executing program 0 (id=3274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) close(0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x3a, 0x0, [{0x1, 0x81, 0xbccba358a7e175dd, 0x0, 0xafe, 0x6, 0xffff8d14}]}) 1.267995185s ago: executing program 4 (id=3275): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() syz_open_dev$tty1(0xc, 0x4, 0x1) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000440)={0x3, 'vlan0\x00', {0x140}, 0x7}) 1.219859468s ago: executing program 0 (id=3276): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x729) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 1.208345184s ago: executing program 0 (id=3277): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) 1.144268937s ago: executing program 2 (id=3278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004804}, 0x2840) 1.07793771s ago: executing program 0 (id=3279): sched_setaffinity(0x0, 0xfffffd01, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.077794414s ago: executing program 2 (id=3280): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) timerfd_create(0x9, 0x800) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 999.224884ms ago: executing program 2 (id=3281): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 960.711917ms ago: executing program 0 (id=3282): r0 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 272.443652ms ago: executing program 3 (id=3283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[], 0x0) 209.591442ms ago: executing program 4 (id=3284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x300e3}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}]}, 0x40}}, 0x0) 209.380943ms ago: executing program 3 (id=3285): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") 209.253179ms ago: executing program 3 (id=3286): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x12b000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 149.518786ms ago: executing program 4 (id=3287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) 149.312363ms ago: executing program 4 (id=3288): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 90.125506ms ago: executing program 3 (id=3289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 80.639536ms ago: executing program 2 (id=3290): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000800000)=""/8, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x11, 0x10, r4, 0x1, 0x0, 0x0, @multicast}, 0x14) 79.784907ms ago: executing program 4 (id=3291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0xe, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=3292): unshare(0x42000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000001800dd8d00000000ffdbdf3502200004ff"], 0x1c}, 0x1, 0x0, 0x0, 0x4021}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) kernel console output (not intermixed with test programs): 9][T16095] vhci_hcd vhci_hcd.0: Device attached [ 839.964730][ T5782] veth1_macvtap: left promiscuous mode [ 839.969606][ T5782] veth0_macvtap: left promiscuous mode [ 839.976331][ T5782] veth0_vlan: left promiscuous mode [ 840.022325][ T50] usb 46-1: SetAddress Request (64) to port 0 [ 840.028043][ T50] usb 46-1: new SuperSpeed USB device number 64 using vhci_hcd [ 840.432544][T16086] vhci_hcd: connection reset by peer [ 840.437971][ T5818] vhci_hcd vhci_hcd.4: stop threads [ 840.441231][ T5818] vhci_hcd vhci_hcd.4: release socket [ 840.445573][ T5818] vhci_hcd vhci_hcd.4: disconnect device [ 840.474001][T16096] vhci_hcd: connection closed [ 840.477101][ T5818] vhci_hcd vhci_hcd.0: stop threads [ 840.487861][ T5818] vhci_hcd vhci_hcd.0: release socket [ 840.493643][ T5818] vhci_hcd vhci_hcd.0: disconnect device [ 840.570156][ T5736] Bluetooth: hci2: command tx timeout [ 840.622823][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 840.638386][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 840.721206][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 840.851131][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.855595][T16011] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.859217][T16011] bridge_slave_0: entered allmulticast mode [ 840.866255][T16011] bridge_slave_0: entered promiscuous mode [ 840.890389][T16011] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.897625][T16011] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.905533][T16011] bridge_slave_1: entered allmulticast mode [ 840.915459][T16011] bridge_slave_1: entered promiscuous mode [ 841.198181][T16011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.243495][T16011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.571739][T16011] team0: Port device team_slave_0 added [ 841.616065][T16011] team0: Port device team_slave_1 added [ 842.177476][ T5732] usb 38-1: device descriptor read/8, error -110 [ 842.295723][T16011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.313234][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.355611][T16011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.376681][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 842.389667][T16011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.401540][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.439227][T16011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.594213][T16011] hsr_slave_0: entered promiscuous mode [ 842.602241][ T5732] usb usb38-port1: attempt power cycle [ 842.616745][T16011] hsr_slave_1: entered promiscuous mode [ 842.626110][T16135] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 842.628466][T16135] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 842.651132][ T5736] Bluetooth: hci2: command tx timeout [ 842.691165][T16135] vhci_hcd vhci_hcd.0: Device attached [ 842.741359][ T5732] usb 38-1: SetAddress Request (70) to port 0 [ 842.748212][ T5732] usb 38-1: new SuperSpeed USB device number 70 using vhci_hcd [ 843.062133][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2164'. [ 843.948009][ T5839] usb 44-1: device descriptor read/8, error -110 [ 844.476649][T16136] vhci_hcd: connection reset by peer [ 844.483554][ T5818] vhci_hcd vhci_hcd.0: stop threads [ 844.495057][ T5818] vhci_hcd vhci_hcd.0: release socket [ 844.505203][ T5818] vhci_hcd vhci_hcd.0: disconnect device [ 844.732678][ T5736] Bluetooth: hci2: command tx timeout [ 844.863765][ T5839] usb usb44-port1: attempt power cycle [ 844.987988][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2167'. [ 845.131536][ T50] usb 46-1: device descriptor read/8, error -110 [ 845.184374][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'. [ 845.452499][ T5839] usb usb44-port1: unable to enumerate USB device [ 845.542423][ T50] usb usb46-port1: attempt power cycle [ 845.755816][T16011] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 845.783342][T16011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.793032][T16011] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 845.807141][T16011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.811276][T16011] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 845.820720][T16011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.825590][T16011] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 845.834711][T16011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.932064][T16011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.954469][T16011] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.966777][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.969213][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.994448][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.997398][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.121719][ T50] usb usb46-port1: unable to enumerate USB device [ 846.281068][T16203] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 846.283203][T16203] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 846.308328][T16203] vhci_hcd vhci_hcd.0: Device attached [ 846.580178][ T50] usb 46-1: SetAddress Request (68) to port 0 [ 846.586194][ T50] usb 46-1: new SuperSpeed USB device number 68 using vhci_hcd [ 847.026821][T16011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.121910][T16204] vhci_hcd: connection reset by peer [ 847.122925][T16011] veth0_vlan: entered promiscuous mode [ 847.127392][ T5818] vhci_hcd vhci_hcd.4: stop threads [ 847.133173][ T5818] vhci_hcd vhci_hcd.4: release socket [ 847.138011][ T5818] vhci_hcd vhci_hcd.4: disconnect device [ 847.153130][T16011] veth1_vlan: entered promiscuous mode [ 847.232574][T16011] veth0_macvtap: entered promiscuous mode [ 847.259155][T16011] veth1_macvtap: entered promiscuous mode [ 847.326865][T16011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.373616][T16011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.443093][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.465675][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.510041][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.517042][T16239] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 847.519181][T16239] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 847.534913][T16239] vhci_hcd vhci_hcd.0: Device attached [ 847.616952][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.628877][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.660426][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.735030][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.762465][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.803114][T11765] usb 44-1: SetAddress Request (52) to port 0 [ 847.814830][T11765] usb 44-1: new SuperSpeed USB device number 52 using vhci_hcd [ 847.852668][ T5732] usb 38-1: device descriptor read/8, error -110 [ 848.261617][ T5732] usb usb38-port1: unable to enumerate USB device [ 848.310822][T16240] vhci_hcd: connection reset by peer [ 848.318870][ T5818] vhci_hcd vhci_hcd.3: stop threads [ 848.327826][ T5818] vhci_hcd vhci_hcd.3: release socket [ 848.334809][ T5818] vhci_hcd vhci_hcd.3: disconnect device [ 848.692070][T16266] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 848.694247][T16266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 848.785534][T16266] vhci_hcd vhci_hcd.0: Device attached [ 850.850134][T16267] vhci_hcd: connection closed [ 850.856245][ T5818] vhci_hcd vhci_hcd.4: stop threads [ 850.878786][ T5818] vhci_hcd vhci_hcd.4: release socket [ 851.312529][ T5818] vhci_hcd vhci_hcd.4: disconnect device [ 851.694174][ T50] usb 46-1: device descriptor read/8, error -110 [ 852.770445][ T50] usb usb46-port1: attempt power cycle [ 852.970044][T11765] usb 44-1: device descriptor read/8, error -110 [ 853.374942][ T50] usb usb46-port1: unable to enumerate USB device [ 854.165209][T11765] usb usb44-port1: attempt power cycle [ 854.660069][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 854.709685][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 854.754807][T11765] usb usb44-port1: unable to enumerate USB device [ 856.943335][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 858.293419][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2190'. [ 858.705757][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2193'. [ 860.455831][T16369] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 860.458072][T16369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 860.467543][T16369] vhci_hcd vhci_hcd.0: Device attached [ 860.580905][T16376] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 860.583493][T16376] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 860.607399][T16376] vhci_hcd vhci_hcd.0: Device attached [ 860.730133][ T6649] usb 44-1: SetAddress Request (56) to port 0 [ 860.742739][ T6649] usb 44-1: new SuperSpeed USB device number 56 using vhci_hcd [ 860.834297][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2198'. [ 860.888452][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2198'. [ 860.909905][ T50] usb 38-1: SetAddress Request (72) to port 0 [ 860.914469][ T50] usb 38-1: new SuperSpeed USB device number 72 using vhci_hcd [ 861.189405][T16370] vhci_hcd: connection reset by peer [ 861.203043][ T5818] vhci_hcd vhci_hcd.3: stop threads [ 861.205133][ T5818] vhci_hcd vhci_hcd.3: release socket [ 861.212371][ T5818] vhci_hcd vhci_hcd.3: disconnect device [ 861.349856][T16377] vhci_hcd: connection reset by peer [ 861.353481][ T5818] vhci_hcd vhci_hcd.0: stop threads [ 861.356568][ T5818] vhci_hcd vhci_hcd.0: release socket [ 861.360759][ T5818] vhci_hcd vhci_hcd.0: disconnect device [ 861.865566][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'. [ 865.158132][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 865.168775][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 865.494728][T16536] netlink: 'syz.0.2261': attribute type 10 has an invalid length. [ 865.699962][T11765] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 865.850116][ T6649] usb 44-1: device descriptor read/8, error -110 [ 865.855988][T11765] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.861871][T11765] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 865.869924][T11765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.895383][T11765] as10x_usb: device has been detected [ 865.903397][T11765] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 865.909191][T16556] netlink: 'syz.4.2271': attribute type 8 has an invalid length. [ 865.915066][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'. [ 865.938988][T16556] bond0: entered promiscuous mode [ 865.968938][T16556] gretap0: entered promiscuous mode [ 865.972293][T11765] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 865.999137][T16556] bond0: left promiscuous mode [ 866.013763][T16556] gretap0: left promiscuous mode [ 866.022138][ T50] usb 38-1: device descriptor read/8, error -110 [ 866.048662][T11765] as10x_usb: error during firmware upload part1 [ 866.051843][T11765] Registered device Abilis Systems DVB-Titan [ 866.086992][T16563] faux_driver vgem: [drm] Unknown color mode 11; guessing buffer size. [ 866.126992][T16565] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 866.148409][T16565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 866.169502][T16565] bond1: (slave dummy0): making interface the new active one [ 866.173058][T16565] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 866.178788][T16565] : renamed from dummy0 (while UP) [ 866.242358][ T6649] usb usb44-port1: attempt power cycle [ 866.372933][T16576] tipc: Started in network mode [ 866.383450][T16576] tipc: Node identity 7f000001, cluster identity 4711 [ 866.412403][T16576] tipc: Enabled bearer , priority 10 [ 866.424090][T16576] tipc: Enabling of bearer rejected, failed to enable media [ 866.428337][ T50] usb usb38-port1: attempt power cycle [ 866.628212][T16595] lo: entered allmulticast mode [ 866.769903][ T5732] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 866.800893][ T6649] usb usb44-port1: unable to enumerate USB device [ 866.930345][ T5732] usb 9-1: Using ep0 maxpacket: 8 [ 866.937460][ T5732] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 866.942308][ T5732] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 866.945693][ T5732] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 866.949263][ T5732] usb 9-1: config 250 has no interface number 0 [ 866.954389][ T5732] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 866.963783][ T5732] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 866.967734][ T5732] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.972509][ T5732] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 866.976570][ T5732] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 866.981919][ T5732] usb 9-1: config 250 interface 228 has no altsetting 0 [ 866.986297][ T5732] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 866.989852][ T5732] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 866.993019][ T5732] usb 9-1: Product: syz [ 866.994614][ T5732] usb 9-1: SerialNumber: syz [ 867.003584][ T5732] hub 9-1:250.228: bad descriptor, ignoring hub [ 867.009191][ T5732] hub 9-1:250.228: probe with driver hub failed with error -5 [ 867.014316][ T50] usb usb38-port1: unable to enumerate USB device [ 867.213192][ T5732] usblp 9-1:250.228: usblp1: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 867.433292][ T5839] tipc: Node number set to 2130706433 [ 867.530183][ T50] usb 9-1: USB disconnect, device number 16 [ 867.546379][ T50] usblp1: removed [ 867.712927][ T5839] usb 7-1: USB disconnect, device number 3 [ 867.735880][ T5839] Unregistered device Abilis Systems DVB-Titan [ 867.737737][ T5839] as10x_usb: device has been disconnected [ 867.879964][ T6347] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 868.015536][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 868.015551][ T42] audit: type=1800 audit(1786156351.689:73): pid=16635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2304" name="file1" dev="overlay" ino=3000 res=0 errno=0 [ 868.024676][T16635] evm: overlay not supported [ 868.030095][ T6347] usb 9-1: Using ep0 maxpacket: 8 [ 868.034738][ T6347] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 868.042032][ T6347] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 868.064159][ T6347] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 868.067990][ T6347] usb 9-1: config 250 has no interface number 0 [ 868.071250][ T6347] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 868.075831][ T6347] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 868.081239][ T6347] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.085489][ T6347] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 868.090292][ T6347] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 868.095979][ T6347] usb 9-1: config 250 interface 228 has no altsetting 0 [ 868.103163][ T6347] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 868.107159][ T6347] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 868.112501][ T6347] usb 9-1: Product: syz [ 868.116477][ T6347] usb 9-1: SerialNumber: syz [ 868.135429][ T6347] hub 9-1:250.228: bad descriptor, ignoring hub [ 868.139263][ T6347] hub 9-1:250.228: probe with driver hub failed with error -5 [ 868.330260][ T6347] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 868.360857][ T6347] usb 9-1: USB disconnect, device number 17 [ 868.375614][ T6347] usblp0: removed [ 868.529934][T11765] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 868.664038][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 868.679995][T11765] usb 7-1: Using ep0 maxpacket: 32 [ 868.686921][T11765] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 868.702369][T11765] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 868.706526][T11765] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 868.720038][T11765] usb 7-1: Product: syz [ 868.722048][T11765] usb 7-1: Manufacturer: syz [ 868.724155][T11765] usb 7-1: SerialNumber: syz [ 868.734629][T11765] usb 7-1: config 0 descriptor?? [ 868.742574][T16647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 868.752905][T11765] hub 7-1:0.0: bad descriptor, ignoring hub [ 868.759980][T11765] hub 7-1:0.0: probe with driver hub failed with error -5 [ 869.090082][T11765] usb 7-1: USB disconnect, device number 4 [ 869.692352][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.694479][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.866581][T16699] overlayfs: failed to verify upper (551/file1, ino=2943, err=-116) [ 869.871448][T16699] overlayfs: failed to verify index dir 'upper' xattr [ 869.873674][T16699] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 869.951529][T16705] jffs2: notice: (16705) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 870.282199][T16722] random: crng reseeded on system resumption [ 870.286347][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 870.380490][T16728] [ 870.444846][T16722] syz.2.2337 (16722) used greatest stack depth: 19104 bytes left [ 870.494400][T16738] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 870.597653][T16738] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 870.616171][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2345'. [ 870.661368][T16747] input: syz1 as /devices/virtual/input/input7 [ 871.157491][T16784] FAT-fs (mtdblock0): bogus logical sector size 34276 [ 871.170541][T16784] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 871.342167][T16798] raw_sendmsg: syz.4.2372 forgot to set AF_INET. Fix it! [ 871.429948][ T6347] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 871.581037][ T6347] usb 5-1: Using ep0 maxpacket: 32 [ 871.585172][ T6347] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 871.588663][ T6347] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 871.592770][ T6347] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 871.596392][ T6347] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 871.603536][ T6347] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 871.606805][ T6347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.611849][ T6347] usb 5-1: Product: syz [ 871.613646][ T6347] usb 5-1: Manufacturer: syz [ 871.615543][ T6347] usb 5-1: SerialNumber: syz [ 871.633427][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 871.640387][ T5839] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 871.652007][ T6347] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input8 [ 871.789974][ T5839] usb 9-1: Using ep0 maxpacket: 8 [ 871.794483][ T5839] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 871.797392][ T5839] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 871.800734][ T5839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 871.804003][ T5839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 871.807361][ T5839] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.811670][ T5839] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 871.814751][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.850151][ T6347] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 871.853147][ T6347] (id 0x00) [ 871.913633][ T6347] rc_core: IR keymap rc-imon-pad not found [ 871.916600][ T6347] Registered IR keymap rc-empty [ 871.918488][ T6347] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 871.921861][ T6347] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 872.025811][ T5839] usb 9-1: usb_control_msg returned -32 [ 872.027686][ T5839] usbtmc 9-1:16.0: can't read capabilities [ 872.052330][ T6347] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 872.056817][ T6347] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input9 [ 872.066248][ T6347] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:28> initialized [ 872.240592][T11765] usb 5-1: USB disconnect, device number 28 [ 872.339663][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 872.383421][T16819] »»»»»»: renamed from vlan0 (while UP) [ 872.385576][T16820] usbtmc 9-1:16.0: control status returned 0 [ 872.592034][ T5839] usb 9-1: USB disconnect, device number 19 [ 873.078463][T16813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 873.080872][T16813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 873.085312][T16813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 873.105178][T16813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 873.108814][T16813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 873.248659][T16831] loop6: detected capacity change from 0 to 2640 [ 873.253524][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.259676][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.266585][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.270211][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.273571][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.278245][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.282144][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.288149][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.298361][T16831] ldm_validate_partition_table(): Disk read failed. [ 873.301797][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.305700][T16831] Buffer I/O error on dev loop6, logical block 0, async page read [ 873.308323][T16831] Dev loop6: unable to read RDB block 0 [ 873.310730][T16831] loop6: unable to read partition table [ 873.323537][T16831] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 873.344180][ T5143] ldm_validate_partition_table(): Disk read failed. [ 873.346352][ T5143] Dev loop6: unable to read RDB block 0 [ 873.348289][ T5143] loop6: unable to read partition table [ 873.390342][ T5839] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 873.539943][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 873.544855][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 873.548367][T16844] qrtr: Invalid version 0 [ 873.553395][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 873.556032][ T5839] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 873.559688][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 873.587237][ T5839] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 873.598051][ T5839] dw2102: su3000_power_ctrl: 1, initialized 0 [ 873.604629][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 873.638798][T16846] CIFS: Attempting to mount //127.0.0.1/share [ 873.645932][T16846] CIFS: VFS: Error connecting to socket. Aborting operation. [ 873.647674][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 873.649559][T16846] CIFS: VFS: cifs_mount failed w/return code = -4 [ 873.659475][ T5839] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 873.663444][ T6347] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 873.667423][ T5839] usb 5-1: media controller created [ 873.681177][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 873.699469][ T5839] dw2102: i2c transfer failed. [ 873.703567][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 873.706101][ T5839] dw2102: i2c transfer failed. [ 873.709361][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 873.726532][ T5839] dw2102: i2c transfer failed. [ 873.733036][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 873.735612][ T5839] dw2102: i2c transfer failed. [ 873.737943][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 873.741421][ T5839] dw2102: i2c transfer failed. [ 873.743559][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 873.746021][ T5839] dw2102: i2c transfer failed. [ 873.748386][ T5839] dvb-usb: MAC address: 02:02:02:02:02:02 [ 873.764749][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 873.781180][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 873.798833][ T5839] dw2102: command 0x0e transfer failed. [ 873.801732][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 873.803716][ T5839] dw2102: command 0x0e transfer failed. [ 873.821218][ T6347] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 873.824037][ T6347] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.828303][ T6347] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 873.832447][ T6347] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.838134][ T6347] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 873.843605][ T6347] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 873.847376][ T6347] usb 8-1: Product: syz [ 873.848906][ T6347] usb 8-1: Manufacturer: syz [ 873.855783][ T6347] cdc_wdm 8-1:1.0: skipping garbage [ 873.860914][ T6347] cdc_wdm 8-1:1.0: skipping garbage [ 873.869365][ T6347] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 873.871769][ T6347] cdc_wdm 8-1:1.0: Unknown control protocol [ 874.065917][T16855] jffs2: notice: (16855) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 874.101852][T16855] jffs2: warning: (16855) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=52 [ 874.131421][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 874.133410][ T5839] dw2102: command 0x0e transfer failed. [ 874.135562][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 874.137493][ T5839] dw2102: command 0x0e transfer failed. [ 874.139339][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 874.142169][ T5839] dw2102: command 0x51 transfer failed. [ 874.145215][T16827] dvb-usb: bulk message failed: -22 (5/0) [ 874.150195][T16827] dw2102: i2c transfer failed. [ 874.208200][ T5839] DVB: Unable to find symbol ds3000_attach() [ 874.211020][T16859] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 874.213297][ T5839] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 874.239341][T16864] jffs2: notice: (16864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 874.290198][ T5839] rc_core: IR keymap rc-su3000 not found [ 874.296209][ T5839] Registered IR keymap rc-empty [ 874.308573][ T5839] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 874.320955][ T5839] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input10 [ 874.329929][ T5093] Bluetooth: hci1: command 0x0c1a tx timeout [ 874.334447][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 874.336733][ T5839] dw2102: su3000_power_ctrl: 0, initialized 1 [ 874.347856][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 874.363996][ T5839] usb 5-1: USB disconnect, device number 29 [ 874.437313][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 874.603414][ T5093] Bluetooth: hci4: unexpected event for opcode 0x200c [ 875.130063][ T5093] Bluetooth: hci2: command 0x0406 tx timeout [ 875.416453][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.423656][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.429061][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 875.439426][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 875.451737][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 875.974326][ T5782] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.059589][T16905] wg2 speed is unknown, defaulting to 1000 [ 876.100177][ T5782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.139962][ T6649] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 876.169460][ T5782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.229966][T11765] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 876.294942][ T5782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.300920][ T6649] usb 9-1: Using ep0 maxpacket: 32 [ 876.307421][ T6649] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 876.312587][ T6649] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 876.319690][ T6649] usb 9-1: string descriptor 0 read error: -22 [ 876.324869][ T6649] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 876.328790][ T6649] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.344205][T16937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 876.363933][ T6649] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 876.366837][ T6649] usb 9-1: MIDIStreaming interface descriptor not found [ 876.380874][T11765] usb 7-1: Using ep0 maxpacket: 32 [ 876.439492][ T5839] usb 8-1: USB disconnect, device number 33 [ 876.577103][ T5732] usb 9-1: USB disconnect, device number 20 [ 876.664184][T16947] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 876.678771][T16947] tipc: Enabled bearer , priority 10 [ 876.841024][ T5782] bridge_slave_1: left allmulticast mode [ 876.844486][ T5782] bridge_slave_1: left promiscuous mode [ 876.847498][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.851639][ T5782] bridge_slave_0: left allmulticast mode [ 876.853453][ T5782] bridge_slave_0: left promiscuous mode [ 876.855534][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.861149][ T5782] lo: left allmulticast mode [ 877.021030][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.026661][ T5782] bond0 (unregistering): Released all slaves [ 877.038712][ T5782] bond1 (unregistering): (slave ): Releasing active interface [ 877.053548][ T5782] bond1 (unregistering): Released all slaves [ 877.133117][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.137182][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.140224][T16905] bridge_slave_0: entered allmulticast mode [ 877.144764][T16905] bridge_slave_0: entered promiscuous mode [ 877.154406][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.158353][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.160945][T16905] bridge_slave_1: entered allmulticast mode [ 877.172397][T16905] bridge_slave_1: entered promiscuous mode [ 877.206200][T16905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.210989][ T5736] Bluetooth: hci2: command 0x0406 tx timeout [ 877.212269][T16905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.235644][T16905] team0: Port device team_slave_0 added [ 877.240635][T16905] team0: Port device team_slave_1 added [ 877.271008][T16905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.273276][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.295034][T16905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.314605][T16905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.325868][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.363400][T16905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.540770][ T5736] Bluetooth: hci3: command tx timeout [ 877.551428][T16905] hsr_slave_0: entered promiscuous mode [ 877.556783][T16905] hsr_slave_1: entered promiscuous mode [ 877.562668][T16905] debugfs: 'hsr0' already exists in 'hsr' [ 877.566384][T16905] Cannot create hsr debugfs directory [ 877.691228][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 877.737401][T11765] usb 7-1: unable to get BOS descriptor or descriptor too short [ 877.757880][T11765] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 877.763732][T11765] usb 7-1: can't read configurations, error -71 [ 878.001800][ T5782] hsr_slave_0: left promiscuous mode [ 878.009248][ T5782] hsr_slave_1: left promiscuous mode [ 878.014002][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.021103][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.031035][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.037370][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.053064][ T5782] veth1_macvtap: left promiscuous mode [ 878.057758][ T5782] veth0_macvtap: left promiscuous mode [ 878.450235][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 878.472356][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 878.556744][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 878.578882][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 878.588136][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2441'. [ 878.694249][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 879.612580][ T5736] Bluetooth: hci3: command tx timeout [ 879.620024][T17028] overlayfs: failed to resolve './file1': -2 [ 879.985282][T17030] netlink: 'syz.4.2453': attribute type 10 has an invalid length. [ 880.043095][T17033] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2453'. [ 880.169575][T17035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2453'. [ 880.718381][T17045] qrtr: Invalid version 0 [ 880.893422][T17052] jffs2: notice: (17052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 881.143627][T17058] overlayfs: failed to resolve './bus': -2 [ 881.147185][T17058] overlayfs: failed to resolve './bus': -2 [ 881.286788][T17066] qrtr: Invalid version 0 [ 881.638314][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 881.678505][T17076] overlayfs: failed to resolve './bus': -2 [ 881.692121][ T5736] Bluetooth: hci3: command tx timeout [ 881.698709][T17076] overlayfs: failed to resolve './bus': -2 [ 881.744462][T17030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.753558][T17030] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 881.785901][T17033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.794985][T17033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.805801][T17033] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 881.816615][T17033] bond0 (unregistering): Released all slaves [ 882.046104][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 882.357823][T16905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 882.372696][T16905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 882.382652][T16905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 882.421219][T16905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.425329][T16905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 882.437718][T16905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 882.445103][T16905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 882.453152][T16905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 882.553701][T16905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.583466][T16905] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.595265][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.597568][ T6847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.630945][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.633328][ T6847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.759877][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 882.934791][T17153] qrtr: Invalid version 0 [ 883.085742][T16905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.142368][T16905] veth0_vlan: entered promiscuous mode [ 883.158218][T16905] veth1_vlan: entered promiscuous mode [ 883.201212][T16905] veth0_macvtap: entered promiscuous mode [ 883.215569][T16905] veth1_macvtap: entered promiscuous mode [ 883.226373][T16905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.244082][T16905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.267385][T17177] random: crng reseeded on system resumption [ 883.280129][T15631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.293500][T15631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.322167][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.331413][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.371685][T17182] capability: warning: `syz.2.2501' uses deprecated v2 capabilities in a way that may be insecure [ 883.455474][ T6847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.466761][ T6847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.543695][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.549821][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.726348][T17201] syzkaller0: entered promiscuous mode [ 883.728239][T17201] syzkaller0: entered allmulticast mode [ 883.770025][ T5736] Bluetooth: hci3: command tx timeout [ 884.027095][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 884.034001][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 884.038817][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 884.043700][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 884.056005][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.371076][ T5782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.424513][T17208] wg2 speed is unknown, defaulting to 1000 [ 884.486624][ T5782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.610448][ T5782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.740514][ T5782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.032755][T17252] < [ 885.097267][ T5782] bridge_slave_1: left allmulticast mode [ 885.108597][ T5782] bridge_slave_1: left promiscuous mode [ 885.112445][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.140663][ T5782] bridge_slave_0: left allmulticast mode [ 885.150879][ T5782] bridge_slave_0: left promiscuous mode [ 885.157774][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.274958][ T5782] bond1 (unregistering): (slave ip6gretap0): Releasing backup interface [ 885.360091][ T50] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 885.523260][ T50] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 885.530564][ T50] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.535565][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 885.543280][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.550309][ T50] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 885.553422][ T50] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 885.559542][ T50] usb 5-1: Product: syz [ 885.567350][ T50] usb 5-1: Manufacturer: syz [ 885.594765][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 885.598504][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 885.606582][ T50] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 885.610590][ T50] cdc_wdm 5-1:1.0: Unknown control protocol [ 885.636991][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.648936][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.652799][ T5782] bond0 (unregistering): Released all slaves [ 885.658344][ T5782] bond1 (unregistering): Released all slaves [ 885.688096][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 885.711760][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.725052][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.729120][T17208] bridge_slave_0: entered allmulticast mode [ 885.735604][T17208] bridge_slave_0: entered promiscuous mode [ 885.744866][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.756902][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.759353][T17208] bridge_slave_1: entered allmulticast mode [ 885.766026][T17208] bridge_slave_1: entered promiscuous mode [ 885.822539][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.850018][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.907986][T17208] team0: Port device team_slave_0 added [ 885.911258][ T9] wg2 speed is unknown, defaulting to 1000 [ 885.918051][T17208] team0: Port device team_slave_1 added [ 885.919275][ T9] syz2: Port: 1 Link DOWN [ 885.965002][T11765] wg2 speed is unknown, defaulting to 1000 [ 885.967294][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.972445][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.990434][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.003572][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.025648][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.040438][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.092375][ T5736] Bluetooth: hci0: command tx timeout [ 886.197183][T17305] qrtr: Invalid version 0 [ 886.238826][T17208] hsr_slave_0: entered promiscuous mode [ 886.245694][T17208] hsr_slave_1: entered promiscuous mode [ 886.252826][T17208] debugfs: 'hsr0' already exists in 'hsr' [ 886.257740][T17208] Cannot create hsr debugfs directory [ 886.433501][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 886.447293][T17313] overlayfs: missing 'lowerdir' [ 886.528758][ T5782] hsr_slave_0: left promiscuous mode [ 886.539404][ T5782] hsr_slave_1: left promiscuous mode [ 886.541865][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.544878][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.548192][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.553580][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.568982][ T5782] veth1_macvtap: left promiscuous mode [ 886.571017][ T5782] veth0_macvtap: left promiscuous mode [ 886.572904][ T5782] veth1_vlan: left promiscuous mode [ 886.574667][ T5782] veth0_vlan: left promiscuous mode [ 886.745703][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 886.754207][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 886.785945][ T1156] smc: removing ib device syz2 [ 886.861924][T17321] tipc: Started in network mode [ 886.868075][T17321] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 886.874687][T17321] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 886.879155][ T1156] smbdirect: ib_dev[syz2] removed [ 886.881541][T17321] tipc: Enabled bearer , priority 10 [ 887.086949][T17327] qrtr: Invalid version 0 [ 887.297987][T17335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2559'. [ 887.904332][T17353] jffs2: notice: (17353) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 888.000773][ T6649] tipc: Node number set to 1 [ 888.109478][T17208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 888.120909][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.126321][ T6649] usb 5-1: USB disconnect, device number 30 [ 888.129477][T17208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 888.170040][ T5736] Bluetooth: hci0: command tx timeout [ 888.170959][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.189421][T17208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 888.220814][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.238251][T17208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 888.249658][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.281644][ T5782] IPVS: stop unused estimator thread 0... [ 888.298947][T17376] overlayfs: missing 'lowerdir' [ 888.416947][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.443683][T17208] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.453184][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.455531][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.475883][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.478310][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.549605][T17392] qrtr: Invalid version 0 [ 889.091912][T17428] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 889.150828][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 889.158794][T17424] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 889.297567][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2585'. [ 889.309285][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2585'. [ 889.352940][T17434] futex_wake_op: syz.4.2585 tries to shift op by -1; fix this program [ 889.359710][T17424] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 889.417311][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.466871][T17208] veth0_vlan: entered promiscuous mode [ 889.489231][T17208] veth1_vlan: entered promiscuous mode [ 889.541166][T17208] veth0_macvtap: entered promiscuous mode [ 889.551613][T17208] veth1_macvtap: entered promiscuous mode [ 889.577556][T17208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.600618][T17208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.767961][ T6847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.779155][ T6847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.785463][T17452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2591'. [ 889.790747][T17455] fuse: Bad value for 'fd' [ 889.822963][T11765] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 889.851541][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.856345][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.863954][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.869071][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.890581][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.899814][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.250043][ T5736] Bluetooth: hci0: command tx timeout [ 892.340386][ T5736] Bluetooth: hci0: command tx timeout [ 899.757001][T17504] jffs2: notice: (17504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 900.025416][T17516] netlink: 'syz.2.2601': attribute type 1 has an invalid length. [ 900.029002][T17512] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 900.084555][T17512] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 900.093109][T17512] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 900.096409][T17512] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 900.108537][T17512] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 900.115507][T17512] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 900.118926][T17512] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 900.129011][T17512] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 900.131409][T17516] bond1: entered promiscuous mode [ 900.134874][T17512] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 900.138427][T17512] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 900.143188][T17516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 900.184676][T17521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2602'. [ 900.203587][T17523] fuse: Bad value for 'fd' [ 900.233283][T17519] bond1: (slave bridge1): making interface the new active one [ 900.243999][T17519] bridge1: entered promiscuous mode [ 900.271080][T17519] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 900.405384][T17528] jffs2: notice: (17528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 900.761375][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 900.770078][ T6347] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 900.876442][T17555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2617'. [ 900.967195][ T6347] usb 8-1: Using ep0 maxpacket: 8 [ 900.976882][ T6347] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 900.983560][ T6347] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 900.992126][ T6347] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 901.001841][ T6347] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 901.013641][ T6347] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.021747][ T6347] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 901.026303][ T6347] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.240756][ T6347] usb 8-1: usb_control_msg returned -32 [ 901.245182][ T6347] usbtmc 8-1:16.0: can't read capabilities [ 901.692624][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'. [ 902.517055][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'. [ 902.817290][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 903.370361][ T5809] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 903.464994][T17634] overlayfs: missing 'workdir' [ 903.521750][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 903.531377][ T5809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 903.543049][ T5809] usb 5-1: string descriptor 0 read error: -22 [ 903.548137][ T5809] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 903.556591][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 903.576603][T13610] usb 8-1: USB disconnect, device number 34 [ 903.577850][ T5809] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 903.597530][ T5809] dw2102: su3000_power_ctrl: 1, initialized 0 [ 903.605117][ T5809] dvb-usb: bulk message failed: -22 (2/0) [ 903.613941][ T5736] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 903.621460][ T5736] Bluetooth: hci0: Injecting HCI hardware error event [ 903.625951][ T5736] Bluetooth: hci0: hardware error 0x00 [ 903.651487][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 903.668975][ T5809] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 903.672152][ T5809] usb 5-1: media controller created [ 903.673949][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 903.675871][ T5809] dw2102: i2c transfer failed. [ 903.677409][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 903.679226][ T5809] dw2102: i2c transfer failed. [ 903.681039][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 903.683276][ T5809] dw2102: i2c transfer failed. [ 903.684969][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 903.686836][ T5809] dw2102: i2c transfer failed. [ 903.688652][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 903.693206][ T5809] dw2102: i2c transfer failed. [ 903.695071][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 903.696968][ T5809] dw2102: i2c transfer failed. [ 903.698484][ T5809] dvb-usb: MAC address: 02:02:02:02:02:02 [ 903.709490][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 903.734689][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 903.736677][ T5809] dw2102: command 0x0e transfer failed. [ 903.738631][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 903.741106][ T5809] dw2102: command 0x0e transfer failed. [ 904.051497][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 904.063849][ T5809] dw2102: command 0x0e transfer failed. [ 904.072320][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 904.083005][ T5809] dw2102: command 0x0e transfer failed. [ 904.089437][ T5809] dvb-usb: bulk message failed: -22 (1/0) [ 904.102398][ T5809] dw2102: command 0x51 transfer failed. [ 904.178325][ T5809] DVB: Unable to find symbol ds3000_attach() [ 904.186465][ T5809] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 904.313052][ T5809] rc_core: IR keymap rc-su3000 not found [ 904.318665][ T5809] Registered IR keymap rc-empty [ 904.333115][ T5809] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 904.349332][ T5809] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input11 [ 904.363479][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 904.371659][ T5809] dw2102: su3000_power_ctrl: 0, initialized 1 [ 904.375911][T17659] fuse: Bad value for 'fd' [ 904.378979][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 904.406714][ T5809] usb 5-1: USB disconnect, device number 31 [ 904.534620][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 904.878878][T17674] overlayfs: missing 'lowerdir' [ 905.104720][ T5093] Bluetooth: hci2: unexpected event for opcode 0x200c [ 905.702586][ T5736] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 905.932643][T17689] binder: 17688:17689 ioctl c0306201 80000040 returned -22 [ 905.936521][T17689] binder: 17688:17689 ioctl c0306201 80000640 returned -22 [ 906.146972][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 906.496815][T17717] binder: 17715:17717 ioctl c0306201 80000040 returned -22 [ 906.518157][T17717] binder: 17715:17717 ioctl c0306201 80000640 returned -22 [ 906.997176][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 907.002544][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 907.141675][T17739] random: crng reseeded on system resumption [ 907.556447][T17753] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 907.568528][T17753] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 907.650039][ T5818] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.664220][ T5818] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.675469][ T5818] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.700261][ T5818] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.864513][T13610] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 908.018823][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 908.022031][T17776] binder: 17775:17776 ioctl c0306201 80000040 returned -22 [ 908.030457][T13610] usb 9-1: Using ep0 maxpacket: 32 [ 908.034897][T17776] binder: 17775:17776 ioctl c0306201 80000640 returned -22 [ 908.047121][T13610] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 908.066512][T13610] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 908.075383][T13610] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 908.087643][T13610] usb 9-1: Product: syz [ 908.093894][T13610] usb 9-1: Manufacturer: syz [ 908.101274][T13610] usb 9-1: SerialNumber: syz [ 908.117539][T13610] usb 9-1: config 0 descriptor?? [ 908.129416][T17757] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 908.137670][T13610] hub 9-1:0.0: bad descriptor, ignoring hub [ 908.154126][T13610] hub 9-1:0.0: probe with driver hub failed with error -5 [ 908.290234][T17788] No source specified [ 908.400586][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 908.409949][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 908.460855][T13610] usb 9-1: USB disconnect, device number 21 [ 908.800139][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'. [ 908.888909][T17806] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 908.893233][T17806] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 909.275913][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'. [ 909.305393][T17821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2726'. [ 909.563397][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2724'. [ 911.119075][T17875] overlayfs: missing 'lowerdir' [ 911.210108][ T5093] Bluetooth: hci3: command 0x0406 tx timeout [ 911.894948][T17902] overlayfs: missing 'lowerdir' [ 912.154222][T17917] random: crng reseeded on system resumption [ 912.156631][T17908] __nla_validate_parse: 3 callbacks suppressed [ 912.156645][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 912.162959][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 912.218841][T17915] futex_wake_op: syz.2.2763 tries to shift op by -1; fix this program [ 912.349460][T17925] overlayfs: missing 'lowerdir' [ 912.467206][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 912.481120][T17931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2774'. [ 912.613420][ T5839] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 912.709675][T17943] binder: 17941:17943 ioctl c0306201 80000640 returned -22 [ 912.779838][ T5839] usb 9-1: Using ep0 maxpacket: 8 [ 912.794204][ T5839] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 912.802831][ T5839] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 912.814631][ T5839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 912.823809][ T5839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 912.833176][ T5839] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.849901][ T5839] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 912.853558][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.077270][ T5839] usb 9-1: usb_control_msg returned -32 [ 913.080068][ T5839] usbtmc 9-1:16.0: can't read capabilities [ 913.547726][T17984] jffs2: notice: (17984) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 913.895972][T18001] overlayfs: failed to resolve './file0': -2 [ 913.957333][T18004] overlayfs: missing 'workdir' [ 913.963052][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'. [ 913.968525][T18007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2810'. [ 914.222799][ T5736] Bluetooth: hci2: unexpected event for opcode 0x200c [ 914.316128][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 914.325713][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 914.394924][T18016] futex_wake_op: syz.0.2813 tries to shift op by -1; fix this program [ 914.862248][T18026] random: crng reseeded on system resumption [ 915.400877][ T5839] usb 9-1: USB disconnect, device number 22 [ 916.171640][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2845'. [ 916.189114][T18087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2845'. [ 917.372105][T18125] __nla_validate_parse: 3 callbacks suppressed [ 917.372130][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 917.393283][T18129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2864'. [ 917.397597][T18128] random: crng reseeded on system resumption [ 917.690610][ T5809] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 917.731941][ T5839] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 917.749505][T18150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2875'. [ 917.842320][ T5809] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.845701][ T5809] usb 7-1: config 0 has no interfaces? [ 917.847336][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 917.847668][ T5809] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 917.854879][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.859139][ T5809] usb 7-1: config 0 descriptor?? [ 917.892885][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 917.897430][T18156] jffs2: notice: (18156) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 917.897707][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.908910][ T5839] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 917.913023][ T5839] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 917.917529][ T5839] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 917.925452][ T5839] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 917.930101][ T5839] usb 5-1: config 1 interface 1 has no altsetting 0 [ 917.938530][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 917.941679][ T5839] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 917.945495][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.372306][ T5839] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 918.383116][ T5839] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 918.400035][ T5839] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 918.472937][ T5839] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 918.497465][ T5839] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 918.517489][ T5839] usb 5-1: USB disconnect, device number 32 [ 919.410044][T11765] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 919.557786][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 919.566873][T11765] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.573121][T11765] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 919.577161][T11765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.614609][T11765] as10x_usb: device has been detected [ 919.623536][T11765] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 919.672085][T11765] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 919.715569][T11765] as10x_usb: error during firmware upload part1 [ 919.719049][T11765] Registered device Abilis Systems DVB-Titan [ 920.256841][ T42] audit: type=1326 audit(1786156403.929:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.293182][ T42] audit: type=1326 audit(1786156403.929:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.317147][ T42] audit: type=1326 audit(1786156403.949:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.346065][ T42] audit: type=1326 audit(1786156403.949:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.355673][ T42] audit: type=1326 audit(1786156403.949:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.374273][ T42] audit: type=1326 audit(1786156403.949:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.387719][ T42] audit: type=1326 audit(1786156403.949:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.396914][ T42] audit: type=1326 audit(1786156403.949:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.408803][ T42] audit: type=1326 audit(1786156403.949:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18193 comm="syz.3.2890" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 920.477688][ T5809] usb 7-1: USB disconnect, device number 7 [ 920.961645][T18230] random: crng reseeded on system resumption [ 921.761731][ T5839] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 921.919843][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 921.926512][ T5839] usb 7-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 921.940095][ T5839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 921.944477][ T5839] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 921.953557][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.972959][ T5839] usb 7-1: config 0 descriptor?? [ 922.402297][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.407788][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.414171][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.420749][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.423603][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.434673][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.444502][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.453562][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.461240][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.466627][ T5839] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 922.484190][ T5839] kye 0003:0458:0138.0002: hidraw1: USB HID v0.04 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 922.593707][ T5839] usb 7-1: USB disconnect, device number 8 [ 923.480882][ T50] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 923.637369][ T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 923.649842][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 923.658372][ T50] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 923.664065][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.671533][ T50] usb 7-1: Product: syz [ 923.674243][ T50] usb 7-1: Manufacturer: syz [ 923.680689][ T50] usb 7-1: SerialNumber: syz [ 923.907315][ T50] usblp 7-1:1.0: usblp1: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 924.109196][T18267] overlayfs: missing 'lowerdir' [ 924.113609][ T5809] usb 7-1: USB disconnect, device number 9 [ 924.123626][ T5809] usblp1: removed [ 924.475041][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 925.121292][T18298] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 925.179056][T18298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 925.188216][T18298] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 925.195212][T18298] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 925.200666][T18298] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 925.251712][T18298] pci 0000:00:01.0: Adding to iommu group 1 [ 925.268473][T18298] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 925.271221][T18298] pci 0000:00:01.0: vgaarb: bridge control possible [ 925.273933][T18298] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 925.305273][T18298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 925.310071][T18298] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 925.324813][T18298] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 925.357108][T18298] [drm] Found bochs VGA, ID 0xb0c5. [ 925.360582][T18298] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 925.407060][T18298] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 925.682323][T18298] Console: switching to colour frame buffer device 160x50 [ 925.722455][T18298] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 925.875224][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 925.957258][ T5809] usb 5-1: USB disconnect, device number 33 [ 926.022371][T18309] overlayfs: missing 'lowerdir' [ 926.026821][ T5809] Unregistered device Abilis Systems DVB-Titan [ 926.029433][ T5809] as10x_usb: device has been disconnected [ 926.334217][T18313] futex_wake_op: syz.2.2937 tries to shift op by -1; fix this program [ 926.404198][ T50] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 926.592231][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 926.601411][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.612063][ T50] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.622066][ T50] usb 8-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 926.629855][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.636301][ T50] usb 8-1: Product: syz [ 926.639441][ T50] usb 8-1: Manufacturer: syz [ 926.649844][ T50] usb 8-1: SerialNumber: syz [ 926.875215][ T50] usb 8-1: unit 255 not found! [ 926.980358][ T50] usb 8-1: USB disconnect, device number 35 [ 927.759893][T11765] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 927.910100][T11765] usb 5-1: Using ep0 maxpacket: 8 [ 927.914402][T11765] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 33, using maximum allowed: 30 [ 927.919010][T11765] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 927.925231][T11765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 927.928258][T11765] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 927.933642][T11765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.939338][T11765] usb 5-1: config 0 descriptor?? [ 928.060959][ T5809] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 928.213078][ T5809] usb 8-1: Using ep0 maxpacket: 32 [ 928.223932][ T5809] usb 8-1: unable to get BOS descriptor or descriptor too short [ 928.238327][ T5809] usb 8-1: string descriptor 0 read error: -22 [ 928.244049][ T5809] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 928.252541][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 928.275592][ T5809] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 928.286528][ T5809] dw2102: su3000_power_ctrl: 1, initialized 0 [ 928.289244][ T5809] dvb-usb: bulk message failed: -22 (2/0) [ 928.298457][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2971'. [ 928.302555][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2971'. [ 928.323803][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 928.334902][ T5809] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 928.345326][ T5809] usb 8-1: media controller created [ 928.347667][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 928.352154][ T5809] dw2102: i2c transfer failed. [ 928.354516][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 928.356992][ T5809] dw2102: i2c transfer failed. [ 928.361639][T11765] hid (null): unknown global tag 0xc [ 928.370967][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 928.384143][T11765] hid_parser_main: 30 callbacks suppressed [ 928.384171][T11765] itetech 0003:06CB:2968.0003: unknown main item tag 0x1 [ 928.391709][ T5809] dw2102: i2c transfer failed. [ 928.394308][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 928.396935][T11765] itetech 0003:06CB:2968.0003: unknown global tag 0xc [ 928.400070][ T5809] dw2102: i2c transfer failed. [ 928.402660][T11765] itetech 0003:06CB:2968.0003: item 0 2 1 12 parsing failed [ 928.405699][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 928.408146][ T5809] dw2102: i2c transfer failed. [ 928.411117][T11765] itetech 0003:06CB:2968.0003: probe with driver itetech failed with error -22 [ 928.415455][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 928.421426][ T5809] dw2102: i2c transfer failed. [ 928.428168][ T5809] dvb-usb: MAC address: 02:02:02:02:02:02 [ 928.448195][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.476594][T18381] dvb-usb: bulk message failed: -22 (5/0) [ 928.485497][T18381] dw2102: i2c transfer failed. [ 928.504946][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 928.509715][ T5809] dw2102: command 0x0e transfer failed. [ 928.515574][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 928.517892][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 928.523434][ T5809] dw2102: command 0x0e transfer failed. [ 928.562085][ T9] usb 5-1: USB disconnect, device number 34 [ 928.784557][T18408] device-mapper: ioctl: Invalid ioctl structure: name E, dev 23d346bfd068000d [ 928.829926][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 928.833229][ T5809] dw2102: command 0x0e transfer failed. [ 928.835673][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 928.837967][ T5809] dw2102: command 0x0e transfer failed. [ 928.846758][ T5809] dvb-usb: bulk message failed: -22 (1/0) [ 928.849423][ T5809] dw2102: command 0x51 transfer failed. [ 928.889397][ T5809] DVB: Unable to find symbol ds3000_attach() [ 928.894122][ T5809] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 928.960049][ T5809] rc_core: IR keymap rc-su3000 not found [ 928.962721][ T5809] Registered IR keymap rc-empty [ 928.968564][ T5809] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 928.984779][ T5809] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input12 [ 929.001543][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 929.006621][ T5809] dw2102: su3000_power_ctrl: 0, initialized 1 [ 929.009290][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 929.016757][ T5809] usb 8-1: USB disconnect, device number 36 [ 929.029710][T17539] udevd[17539]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 929.114364][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 929.275783][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 929.436758][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 929.720018][ T5839] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 929.746928][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 929.855650][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 929.880043][ T5839] usb 9-1: Using ep0 maxpacket: 32 [ 929.886721][ T5839] usb 9-1: unable to get BOS descriptor or descriptor too short [ 929.893368][ T5839] usb 9-1: string descriptor 0 read error: -22 [ 929.895975][ T5839] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 929.900816][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 929.912471][ T5839] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 929.916391][ T5839] dw2102: su3000_power_ctrl: 1, initialized 0 [ 929.918948][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 929.932258][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 929.936009][ T5839] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 929.943131][ T5839] usb 9-1: media controller created [ 929.946673][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 929.948577][ T5839] dw2102: i2c transfer failed. [ 929.952899][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 929.955492][ T5839] dw2102: i2c transfer failed. [ 929.962472][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 929.967644][ T5839] dw2102: i2c transfer failed. [ 929.970494][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 929.976543][ T5839] dw2102: i2c transfer failed. [ 929.980864][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 929.987174][ T5839] dw2102: i2c transfer failed. [ 929.991363][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 929.999318][ T5839] dw2102: i2c transfer failed. [ 930.005274][ T5839] dvb-usb: MAC address: 02:02:02:02:02:02 [ 930.053534][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 930.087119][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 930.093676][ T5839] dw2102: command 0x0e transfer failed. [ 930.097994][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 930.106187][ T5839] dw2102: command 0x0e transfer failed. [ 930.372544][T18453] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 930.429944][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 930.432420][ T5839] dw2102: command 0x0e transfer failed. [ 930.435996][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 930.441249][ T5839] dw2102: command 0x0e transfer failed. [ 930.445091][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 930.448860][ T5839] dw2102: command 0x51 transfer failed. [ 930.456528][T18434] dvb-usb: bulk message failed: -22 (5/0) [ 930.458496][T18434] dw2102: i2c transfer failed. [ 930.564655][ T5839] DVB: Unable to find symbol ds3000_attach() [ 930.576942][ T5839] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 930.633883][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 930.701471][ T5839] rc_core: IR keymap rc-su3000 not found [ 930.705566][ T5839] Registered IR keymap rc-empty [ 930.714938][ T5839] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 930.735816][ T5839] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input13 [ 930.744219][T18476] netlink: 444 bytes leftover after parsing attributes in process `syz.3.3005'. [ 930.762572][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 930.775977][ T5839] dw2102: su3000_power_ctrl: 0, initialized 1 [ 930.782513][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 930.798167][ T5839] usb 9-1: USB disconnect, device number 23 [ 930.882530][T18480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3007'. [ 930.900608][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 930.969468][T18482] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 930.973605][T18482] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 931.135647][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.139188][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.273252][T18494] netlink: 444 bytes leftover after parsing attributes in process `syz.0.3014'. [ 931.372945][T18487] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 931.459852][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 931.611458][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.615951][ T9] usb 9-1: config 0 has no interfaces? [ 931.618547][ T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 931.630081][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.644124][ T9] usb 9-1: config 0 descriptor?? [ 931.772946][T18502] Console: switching to colour dummy device 80x25 [ 932.012180][T18505] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 932.061932][T18505] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 932.064870][T18505] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 932.067523][T18505] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 932.071906][T18505] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 932.106279][T18505] pci 0000:00:01.0: Adding to iommu group 1 [ 932.139704][T18505] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 932.142005][T18505] pci 0000:00:01.0: vgaarb: bridge control possible [ 932.144272][T18505] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 932.197660][T18505] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 932.201707][T18505] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 932.217031][T18505] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 932.239527][T18505] [drm] Found bochs VGA, ID 0xb0c5. [ 932.241474][T18505] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 932.294286][T18505] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 932.382919][ T5839] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 932.514258][T18505] Console: switching to colour frame buffer device 160x50 [ 932.539997][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 932.542369][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 932.548952][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 932.549105][ T5839] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 932.549119][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 932.567281][ T5839] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 932.567322][ T5839] dw2102: su3000_power_ctrl: 1, initialized 0 [ 932.567341][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 932.600491][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 932.603681][ T5839] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 932.603740][ T5839] usb 5-1: media controller created [ 932.603769][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 932.603789][ T5839] dw2102: i2c transfer failed. [ 932.603800][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 932.603808][ T5839] dw2102: i2c transfer failed. [ 932.603838][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 932.603849][ T5839] dw2102: i2c transfer failed. [ 932.603856][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 932.603865][ T5839] dw2102: i2c transfer failed. [ 932.603871][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 932.603880][ T5839] dw2102: i2c transfer failed. [ 932.603887][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 932.603894][ T5839] dw2102: i2c transfer failed. [ 932.603900][ T5839] dvb-usb: MAC address: 02:02:02:02:02:02 [ 932.630371][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.642770][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 932.642843][ T5839] dw2102: command 0x0e transfer failed. [ 932.642873][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 932.642881][ T5839] dw2102: command 0x0e transfer failed. [ 932.734806][T18505] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 932.943780][T18513] usb usb9: usbfs: process 18513 (syz.3.3022) did not claim interface 0 before use [ 932.949852][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 932.954960][ T5839] dw2102: command 0x0e transfer failed. [ 932.961032][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 932.967082][ T5839] dw2102: command 0x0e transfer failed. [ 932.974674][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 932.980127][ T5839] dw2102: command 0x51 transfer failed. [ 932.986110][T18507] dvb-usb: bulk message failed: -22 (5/0) [ 932.988654][T18507] dw2102: i2c transfer failed. [ 933.041416][ T5839] DVB: Unable to find symbol ds3000_attach() [ 933.044232][ T5839] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 933.109888][ T5839] rc_core: IR keymap rc-su3000 not found [ 933.111985][ T5839] Registered IR keymap rc-empty [ 933.118946][ T5839] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 933.135574][ T5839] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input14 [ 933.153908][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 933.161537][ T5839] dw2102: su3000_power_ctrl: 0, initialized 1 [ 933.166889][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 933.184623][ T5839] usb 5-1: USB disconnect, device number 35 [ 933.223551][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 933.307415][T18519] netlink: 444 bytes leftover after parsing attributes in process `syz.2.3023'. [ 933.355767][T18521] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 933.604300][T18525] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3027'. [ 933.860322][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 933.991436][ T9] usb 7-1: device descriptor read/64, error -71 [ 934.009369][T18543] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 934.077526][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'. [ 934.223356][ T6347] usb 9-1: USB disconnect, device number 24 [ 934.229853][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 934.308713][T18555] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3041'. [ 934.361032][ T9] usb 7-1: device descriptor read/64, error -71 [ 934.364676][T18557] binder: 18556:18557 ioctl c0306201 800004c0 returned -14 [ 934.470150][ T9] usb usb7-port1: attempt power cycle [ 934.498477][T18539] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 934.810203][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 934.840471][ T9] usb 7-1: device descriptor read/8, error -71 [ 935.079871][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 935.110330][ T9] usb 7-1: device descriptor read/8, error -71 [ 935.220118][ T9] usb usb7-port1: unable to enumerate USB device [ 935.574322][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3051'. [ 935.765487][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 937.033517][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'. [ 937.037408][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'. [ 937.083329][T18589] futex_wake_op: syz.2.3056 tries to shift op by -1; fix this program [ 938.130267][T11765] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 938.260805][T11765] usb 5-1: device descriptor read/64, error -71 [ 938.429969][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 938.432899][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 938.484279][T18619] futex_wake_op: syz.3.3068 tries to shift op by -1; fix this program [ 938.499990][T11765] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 938.629996][T11765] usb 5-1: device descriptor read/64, error -71 [ 938.745214][T11765] usb usb5-port1: attempt power cycle [ 939.080902][T11765] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 939.100800][T11765] usb 5-1: device descriptor read/8, error -71 [ 939.340143][T11765] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 939.349934][ T6347] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 939.360667][T11765] usb 5-1: device descriptor read/8, error -71 [ 939.471050][T11765] usb usb5-port1: unable to enumerate USB device [ 939.515123][ T6347] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.530026][ T6347] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 939.536771][ T6347] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.552835][ T6347] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 939.558355][ T6347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 939.567046][ T6347] usb 7-1: SerialNumber: syz [ 939.584484][ T6347] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 939.593019][ T6347] usb-storage 7-1:1.0: USB Mass Storage device detected [ 939.622618][ T6347] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 941.330026][ T5839] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 941.492332][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 941.502049][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 941.514319][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 941.518954][ T5839] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 941.526902][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 941.556150][ T5839] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 941.569903][ T5839] dw2102: su3000_power_ctrl: 1, initialized 0 [ 941.572699][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 941.579921][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 941.590676][ T5839] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 941.597530][ T5839] usb 5-1: media controller created [ 941.605456][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 941.612000][ T5839] dw2102: i2c transfer failed. [ 941.625119][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 941.627613][ T5839] dw2102: i2c transfer failed. [ 941.629626][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 941.639870][ T5839] dw2102: i2c transfer failed. [ 941.641978][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 941.644360][ T5839] dw2102: i2c transfer failed. [ 941.649851][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 941.653879][ T5839] dw2102: i2c transfer failed. [ 941.657664][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 941.666885][ T5839] dw2102: i2c transfer failed. [ 941.669056][ T5839] dvb-usb: MAC address: 02:02:02:02:02:02 [ 941.686532][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.702278][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 941.704840][ T5839] dw2102: command 0x0e transfer failed. [ 941.707196][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 941.709582][ T5839] dw2102: command 0x0e transfer failed. [ 941.843664][T11765] usb 7-1: USB disconnect, device number 14 [ 942.019902][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 942.029858][ T5839] dw2102: command 0x0e transfer failed. [ 942.033830][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 942.036709][ T5839] dw2102: command 0x0e transfer failed. [ 942.043334][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 942.048428][ T5839] dw2102: command 0x51 transfer failed. [ 942.058953][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 942.059891][T18652] dvb-usb: bulk message failed: -22 (5/0) [ 942.068116][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 942.069446][T18652] dw2102: i2c transfer failed. [ 942.123608][ T5839] DVB: Unable to find symbol ds3000_attach() [ 942.129263][ T5839] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 942.140269][T18657] futex_wake_op: syz.2.3080 tries to shift op by -1; fix this program [ 942.212003][ T5839] rc_core: IR keymap rc-su3000 not found [ 942.222046][ T5839] Registered IR keymap rc-empty [ 942.226428][ T5839] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 942.240354][ T5839] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input15 [ 942.266591][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 942.272988][ T5839] dw2102: su3000_power_ctrl: 0, initialized 1 [ 942.277857][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 942.299690][ T5839] usb 5-1: USB disconnect, device number 40 [ 942.365419][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 942.372856][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3083'. [ 942.820024][ T5839] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 942.908503][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 942.928396][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 942.978376][ T5839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.983685][ T5839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.986922][ T5839] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 942.993001][T18681] futex_wake_op: syz.3.3089 tries to shift op by -1; fix this program [ 942.995735][ T5839] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 942.998806][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.006108][ T5839] usb 9-1: config 0 descriptor?? [ 943.181728][T18688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3092'. [ 943.205310][T18688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3092'. [ 943.450334][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.463204][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.469974][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.478634][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.483515][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.490139][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.496623][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.503448][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.510109][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.517024][ T5839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 943.556350][ T5839] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 943.717803][ T50] usb 9-1: USB disconnect, device number 25 [ 943.989867][ T5809] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 944.149955][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 944.157706][ T5809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 944.169515][ T5809] usb 5-1: string descriptor 0 read error: -22 [ 944.175972][ T5809] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 944.185015][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 944.204641][ T5809] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 944.217950][ T5809] dw2102: su3000_power_ctrl: 1, initialized 0 [ 944.220387][ T5809] dvb-usb: bulk message failed: -22 (2/0) [ 944.224344][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 944.230331][ T5809] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 944.239995][ T5809] usb 5-1: media controller created [ 944.243291][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 944.247388][ T5809] dw2102: i2c transfer failed. [ 944.254711][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 944.258726][ T5809] dw2102: i2c transfer failed. [ 944.264517][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 944.268542][ T5809] dw2102: i2c transfer failed. [ 944.272617][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 944.279906][ T5809] dw2102: i2c transfer failed. [ 944.281750][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 944.285578][ T5809] dw2102: i2c transfer failed. [ 944.289158][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 944.294816][ T5809] dw2102: i2c transfer failed. [ 944.298485][ T5809] dvb-usb: MAC address: 02:02:02:02:02:02 [ 944.324285][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 944.356987][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 944.371612][ T5809] dw2102: command 0x0e transfer failed. [ 944.375398][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 944.379268][ T5809] dw2102: command 0x0e transfer failed. [ 944.690094][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 944.692403][ T5809] dw2102: command 0x0e transfer failed. [ 944.694241][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 944.696516][ T5809] dw2102: command 0x0e transfer failed. [ 944.698527][ T5809] dvb-usb: bulk message failed: -22 (1/0) [ 944.715446][ T5809] dw2102: command 0x51 transfer failed. [ 944.721112][T18698] dvb-usb: bulk message failed: -22 (5/0) [ 944.729300][T18698] dw2102: i2c transfer failed. [ 944.787523][ T5809] DVB: Unable to find symbol ds3000_attach() [ 944.798957][ T5809] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 944.853052][ T5809] rc_core: IR keymap rc-su3000 not found [ 944.862639][ T5809] Registered IR keymap rc-empty [ 944.873972][ T5809] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 944.888987][ T5809] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input16 [ 944.928138][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 944.940236][ T5809] dw2102: su3000_power_ctrl: 0, initialized 1 [ 944.953382][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 944.968651][ T5809] usb 5-1: USB disconnect, device number 41 [ 945.038492][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 945.554185][T18713] syzkaller0: entered promiscuous mode [ 945.557694][T18713] syzkaller0: entered allmulticast mode [ 945.697159][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3099'. [ 945.711509][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3099'. [ 945.771186][T18714] futex_wake_op: syz.4.3099 tries to shift op by -1; fix this program [ 945.930331][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'. [ 946.290246][ T5809] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 946.441058][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 946.443373][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 946.449184][ T5809] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 946.452900][ T5809] usb 5-1: config 179 has no interface number 0 [ 946.455595][ T5809] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 946.460373][ T5809] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 946.465077][ T5809] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 946.469693][ T5809] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 946.474319][ T5809] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 946.479650][ T5809] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 946.483415][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.489323][T18731] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 946.589939][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 946.595361][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.599878][ T9] usb 7-1: config 0 has no interfaces? [ 946.600100][ T6347] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 946.605214][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 946.609565][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 946.613337][ T9] usb 7-1: Product: syz [ 946.615127][ T9] usb 7-1: Manufacturer: syz [ 946.616679][ T9] usb 7-1: SerialNumber: syz [ 946.624013][ T9] usb 7-1: config 0 descriptor?? [ 946.751624][ T6347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.756373][ T6347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.760715][ T6347] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 946.767018][ T6347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.777963][ T6347] usb 9-1: config 0 descriptor?? [ 946.834861][ T5809] usb 7-1: USB disconnect, device number 15 [ 946.906839][ T50] usb 5-1: USB disconnect, device number 42 [ 946.906871][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 946.912741][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 947.044143][T18742] futex_wake_op: syz.3.3113 tries to shift op by -1; fix this program [ 947.187376][T18748] __nla_validate_parse: 3 callbacks suppressed [ 947.187392][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3115'. [ 947.195636][T18748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3115'. [ 947.240806][ T6347] pyra 0003:1E7D:2CF6.0005: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 947.438955][ T6347] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 947.448344][ T6347] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 947.471210][ T6347] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 947.480601][ T6347] usb 9-1: USB disconnect, device number 26 [ 947.586041][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 947.665799][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 947.669593][T18767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3124'. [ 948.043905][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 948.343983][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 948.443941][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 948.455294][T18787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3134'. [ 948.510833][ T9] usb 7-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 948.525128][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.539258][ T9] usb 7-1: Product: syz [ 948.546914][ T9] usb 7-1: Manufacturer: syz [ 948.554766][ T9] usb 7-1: SerialNumber: syz [ 948.633048][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.646666][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.652156][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.659246][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.666575][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.799718][ T9] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 948.823459][ T9] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 948.869691][ T9] usb 7-1: USB disconnect, device number 16 [ 948.935674][T17539] udevd[17539]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.145312][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 949.155397][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 949.207104][T18791] futex_wake_op: syz.0.3135 tries to shift op by -1; fix this program [ 949.613113][ T5782] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.732687][ T5093] Bluetooth: hci1: command tx timeout [ 951.940048][ T5093] Bluetooth: hci2: command 0x0406 tx timeout [ 951.956160][T18801] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 951.964508][T18801] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 952.682302][ T5782] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.789166][T18801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 952.800802][T18801] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 952.821752][ T5093] Bluetooth: hci1: command tx timeout [ 952.912309][ T5782] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.130102][ T5782] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.256576][T18801] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 953.270118][T18801] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 953.473644][T18788] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.480386][T18788] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.483062][T18788] bridge_slave_0: entered allmulticast mode [ 953.486851][T18788] bridge_slave_0: entered promiscuous mode [ 953.492794][T18788] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.495288][T18788] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.497783][T18788] bridge_slave_1: entered allmulticast mode [ 953.500877][T18788] bridge_slave_1: entered promiscuous mode [ 953.560035][T15631] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.573401][T18788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.601387][T18788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.646081][T18788] team0: Port device team_slave_0 added [ 953.652847][ T5782] bridge_slave_1: left allmulticast mode [ 953.655053][ T5782] bridge_slave_1: left promiscuous mode [ 953.657685][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.663883][ T5782] bridge_slave_0: left allmulticast mode [ 953.666234][ T5782] bridge_slave_0: left promiscuous mode [ 953.668743][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.821824][T18788] team0: Port device team_slave_1 added [ 953.855433][T18788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.858639][T18788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.871234][T18788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.878073][T18788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.881717][T18788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.892465][T18788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.920410][T15631] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.012274][T18788] hsr_slave_0: entered promiscuous mode [ 954.015650][T18788] hsr_slave_1: entered promiscuous mode [ 954.025770][T18788] debugfs: 'hsr0' already exists in 'hsr' [ 954.039951][T18788] Cannot create hsr debugfs directory [ 954.421237][T15631] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.424837][T15631] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.677615][T18889] __nla_validate_parse: 1 callbacks suppressed [ 954.677640][T18889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 954.684715][T18889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 954.796798][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 954.808108][T18899] futex_wake_op: syz.2.3151 tries to shift op by -1; fix this program [ 954.953752][T18788] netdevsim netdevsim4 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.064692][ T5782] hsr_slave_0: left promiscuous mode [ 955.071455][ T5782] hsr_slave_1: left promiscuous mode [ 955.075633][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.081156][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.093151][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.098697][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.122908][ T5782] veth1_vlan: left promiscuous mode [ 955.126882][ T5782] veth0_vlan: left promiscuous mode [ 955.474849][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 955.485291][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 955.531249][ T5736] Bluetooth: hci4: command 0x1003 tx timeout [ 955.541448][ T5093] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 955.711209][T18788] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.827844][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 956.022789][T18788] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.141851][T18788] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.480717][ T5839] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 956.640074][ T5839] usb 8-1: Using ep0 maxpacket: 32 [ 956.656904][T18920] device-mapper: ioctl: Unable to rename non-existent device, to  [ 956.681400][ T5839] usb 8-1: unable to get BOS descriptor or descriptor too short [ 956.690082][T18788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 956.695648][ T5839] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 956.702340][T18788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.702854][ T5839] usb 8-1: can't read configurations, error -71 [ 956.707434][T18788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 956.715600][T18788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 956.719026][T18788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 956.728902][T18788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 956.735969][T18788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 956.760211][T18788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 956.948240][T18788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.977802][T18788] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.991525][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.993856][ T6847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.011329][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.013778][ T6847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.745262][T18788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.050644][ T50] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 958.127399][T18788] veth0_vlan: entered promiscuous mode [ 958.154230][T18788] veth1_vlan: entered promiscuous mode [ 958.195888][T18788] veth0_macvtap: entered promiscuous mode [ 958.203616][T18788] veth1_macvtap: entered promiscuous mode [ 958.212884][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 958.219511][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.229693][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.230883][T18788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.238526][ T50] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 958.248065][T18788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.250174][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.264496][ T50] usb 8-1: config 0 descriptor?? [ 958.294034][T15631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.324586][T15631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.341707][T15631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.402755][ T5782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.469155][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.486672][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.530276][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.534782][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.705389][ T50] hid_parser_main: 12 callbacks suppressed [ 958.705413][ T50] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 958.717446][ T50] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 958.723520][ T50] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 958.730172][ T50] koneplus 0003:1E7D:2D51.0006: item fetching failed at offset 4/5 [ 958.743259][ T50] koneplus 0003:1E7D:2D51.0006: parse failed [ 958.747220][ T50] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -22 [ 958.892962][T18984] gretap0: entered promiscuous mode [ 958.906068][ T50] usb 8-1: USB disconnect, device number 39 [ 960.623673][ T5732] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 960.760493][ T5732] usb 7-1: device descriptor read/64, error -71 [ 960.888155][T19039] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 960.894556][T19039] device-mapper: ioctl: Invalid data size in the ioctl structure: 108 [ 961.010034][ T5732] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 961.071546][ T7024] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 961.160286][ T5732] usb 7-1: device descriptor read/64, error -71 [ 961.231855][ T7024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.237335][ T7024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.243034][ T7024] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.250768][ T7024] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 961.255941][ T7024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.271377][ T7024] usb 8-1: config 0 descriptor?? [ 961.280578][ T5732] usb usb7-port1: attempt power cycle [ 961.407101][T19080] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 961.592306][T19085] overlayfs: missing 'lowerdir' [ 961.629883][ T5732] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 961.650652][ T5732] usb 7-1: device descriptor read/8, error -71 [ 961.708651][ T7024] plantronics 0003:047F:FFFF.0007: invalid report_size -1383008696 [ 961.713050][ T7024] plantronics 0003:047F:FFFF.0007: item 0 4 1 7 parsing failed [ 961.716537][ T7024] plantronics 0003:047F:FFFF.0007: parse failed [ 961.726135][ T7024] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 961.892664][T11765] usb 8-1: USB disconnect, device number 40 [ 961.899885][ T5732] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 961.930965][ T5732] usb 7-1: device descriptor read/8, error -71 [ 962.050403][ T5732] usb usb7-port1: unable to enumerate USB device [ 962.309718][T19109] overlayfs: missing 'lowerdir' [ 962.400056][ T5732] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 962.550283][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 962.556220][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 962.560865][ T5732] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 962.567287][ T5732] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 962.572152][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 962.575778][ T5732] usb 5-1: Product: syz [ 962.577680][ T5732] usb 5-1: Manufacturer: syz [ 962.580251][ T5732] usb 5-1: SerialNumber: syz [ 962.584933][ T5732] usb 5-1: config 0 descriptor?? [ 962.590528][ T5732] hub 5-1:0.0: bad descriptor, ignoring hub [ 962.594960][ T5732] hub 5-1:0.0: probe with driver hub failed with error -5 [ 962.904392][ T5732] usb 5-1: USB disconnect, device number 43 [ 963.484218][T19129] overlayfs: missing 'lowerdir' [ 963.788586][T19148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3239'. [ 963.798308][T19148] bridge_slave_1: left allmulticast mode [ 963.802849][T19148] bridge_slave_1: left promiscuous mode [ 963.812733][T19148] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.821539][T19148] bridge_slave_0: left allmulticast mode [ 963.823969][T19148] bridge_slave_0: left promiscuous mode [ 963.829888][T19148] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.029274][T19157] fuse: Bad value for 'fd' [ 964.289991][ T5732] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 964.449945][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 964.456421][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 964.464945][ T5732] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 964.477509][ T5732] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 964.483841][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 964.488388][ T5732] usb 5-1: Product: syz [ 964.490685][ T5732] usb 5-1: Manufacturer: syz [ 964.492825][ T5732] usb 5-1: SerialNumber: syz [ 964.497286][ T5732] usb 5-1: config 0 descriptor?? [ 964.503506][ T5732] hub 5-1:0.0: bad descriptor, ignoring hub [ 964.506121][ T5732] hub 5-1:0.0: probe with driver hub failed with error -5 [ 964.810157][ T852] usb 5-1: USB disconnect, device number 44 [ 965.177958][T19184] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3255'. [ 965.243107][T19186] netlink: 380 bytes leftover after parsing attributes in process `syz.2.3256'. [ 965.659502][T19201] overlayfs: missing 'workdir' [ 965.680150][ T5732] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 965.700295][ T7024] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 965.713303][ T42] audit: type=1326 audit(1786156449.389:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19202 comm="syz.0.3263" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 965.842597][ T5732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.847758][ T5732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.851807][ T7024] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.851834][ T7024] usb 9-1: config 0 has no interfaces? [ 965.854277][ T7024] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 965.857347][ T5732] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 965.858507][ T7024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.862407][ T5732] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 965.867444][ T7024] usb 9-1: Product: syz [ 965.870839][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.874503][ T7024] usb 9-1: Manufacturer: syz [ 965.879450][ T5732] usb 7-1: config 0 descriptor?? [ 965.887575][ T7024] usb 9-1: SerialNumber: syz [ 965.893637][ T7024] usb 9-1: config 0 descriptor?? [ 966.111761][ T852] usb 9-1: USB disconnect, device number 27 [ 966.298795][ T5732] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 966.312755][ T5732] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 966.557700][ T5732] usb 7-1: USB disconnect, device number 21 [ 966.808723][T19217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3269'. [ 966.814367][T19217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3269'. [ 966.819138][T19217] tc_dump_action: action bad kind [ 966.866471][T19223] overlayfs: missing 'lowerdir' [ 967.984124][T19252] Illegal XDP return value 65535 on prog (id 898) dev syz_tun, expect packet loss! [ 968.181602][T19264] netlink: 444 bytes leftover after parsing attributes in process `syz.3.3289'. [ 968.225066][T19266] netlink: 'syz.4.3291': attribute type 3 has an invalid length. [ 968.240263][T19266] netlink: 'syz.4.3291': attribute type 3 has an invalid length. [ 968.263161][T19268] ------------[ cut here ]------------ [ 968.266015][T19268] skb_assert_len [ 968.267111][T19268] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x21bc/0x4970, CPU#2: syz.2.3290/19268 [ 968.271424][T19268] Modules linked in: [ 968.274187][T19268] CPU: 2 UID: 0 PID: 19268 Comm: syz.2.3290 Not tainted syzkaller #0 PREEMPT(full) [ 968.277106][T19268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 968.280567][T19268] RIP: 0010:__dev_queue_xmit+0x21c3/0x4970 [ 968.282780][T19268] Code: 41 b8 01 00 00 00 31 d2 31 f6 48 89 df e8 95 7f f8 ff e9 b3 e0 ff ff e8 cb 55 7f f8 48 8d 3d 14 3a a6 07 48 c7 c6 e0 6f 16 8d <67> 48 0f b9 3a 44 0f b6 25 f1 1e 7f 07 31 ff 44 89 e6 e8 b6 4f 7f [ 968.290723][T19268] RSP: 0018:ffffc900052bf820 EFLAGS: 00010283 [ 968.292949][T19268] RAX: 0000000000000132 RBX: ffff8880218ac280 RCX: ffffc90027793000 [ 968.295417][T19268] RDX: 0000000000080000 RSI: ffffffff8d166fe0 RDI: ffffffff9130a550 [ 968.297942][T19268] RBP: ffff8880218ac290 R08: 0000000000000005 R09: 0000000000000000 [ 968.301014][T19268] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888067867400 [ 968.304614][T19268] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880218ac334 [ 968.307679][T19268] FS: 0000000000000000(0000) GS:ffff888096df3000(0063) knlGS:00000000f546db40 [ 968.310816][T19268] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 968.313136][T19268] CR2: 000000000c2f264a CR3: 000000006b14d000 CR4: 0000000000352ef0 [ 968.315603][T19268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 968.318077][T19268] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 968.321080][T19268] Call Trace: [ 968.322199][T19268] [ 968.323204][T19268] ? __alloc_skb+0x4e9/0x710 [ 968.324686][T19268] ? __alloc_skb+0x5b7/0x710 [ 968.326210][T19268] ? __pfx___alloc_skb+0x10/0x10 [ 968.327791][T19268] ? __pfx___dev_queue_xmit+0x10/0x10 [ 968.329542][T19268] ? sock_alloc_send_pskb+0x751/0x980 [ 968.332260][T19268] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 968.334597][T19268] ? packet_parse_headers+0x5ab/0x810 [ 968.336877][T19268] ? __asan_memset+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 968.338702][T19268] ? packet_parse_headers+0x5b7/0x810 [ 968.341396][T19268] ? packet_parse_headers+0x2b4/0x810 [ 968.344203][T19268] ? __pfx_packet_parse_headers+0x10/0x10 [ 968.346282][T19268] packet_xmit+0x243/0x310 [ 968.348167][T19268] packet_sendmsg+0x28d6/0x4eb0 [ 968.350603][T19268] ? __pfx_packet_sendmsg+0x10/0x10 [ 968.352951][T19268] ? __might_fault+0xc5/0x140 [ 968.354977][T19268] ? apparmor_socket_sendmsg+0x15b/0x270 [ 968.357371][T19268] __sys_sendto+0x48b/0x4e0 [ 968.359248][T19268] ? __pfx_packet_sendmsg+0x10/0x10 [ 968.361463][T19268] ? __pfx___sys_sendto+0x10/0x10 [ 968.363512][T19268] __ia32_sys_sendto+0xdd/0x1b0 [ 968.365545][T19268] ? __do_fast_syscall_32+0x98/0x970 [ 968.367803][T19268] ? lockdep_hardirqs_on+0x78/0x100 [ 968.370166][T19268] __do_fast_syscall_32+0xe7/0x970 [ 968.372428][T19268] do_fast_syscall_32+0x32/0x70 [ 968.374481][T19268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.377211][T19268] RIP: 0023:0xf707efec [ 968.379051][T19268] Code: Unable to access opcode bytes at 0xf707efc2. [ 968.382095][T19268] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 968.385376][T19268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 968.388672][T19268] RDX: 0000000000000000 RSI: 0000000004000010 RDI: 0000000080000000 [ 968.392185][T19268] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 968.397028][T19268] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 968.400379][T19268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.403702][T19268] [ 968.405306][T19268] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 968.408313][T19268] CPU: 2 UID: 0 PID: 19268 Comm: syz.2.3290 Not tainted syzkaller #0 PREEMPT(full) [ 968.412187][T19268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 968.416398][T19268] Call Trace: [ 968.417826][T19268] [ 968.419100][T19268] dump_stack_lvl+0x100/0x190 [ 968.421108][T19268] vpanic+0x552/0x970 [ 968.422816][T19268] ? __pfx_vpanic+0x10/0x10 [ 968.424766][T19268] panic+0xd1/0xe0 [ 968.426372][T19268] ? __pfx_panic+0x10/0x10 [ 968.428281][T19268] check_panic_on_warn.cold+0x19/0x34 [ 968.430545][T19268] ? __dev_queue_xmit+0x21bc/0x4970 [ 968.432761][T19268] __warn.cold+0x191/0x318 [ 968.434663][T19268] __report_bug+0x30f/0x440 [ 968.436626][T19268] ? __dev_queue_xmit+0x21bc/0x4970 [ 968.438828][T19268] ? __pfx___report_bug+0x10/0x10 [ 968.441002][T19268] ? __pfx___skb_flow_dissect+0x10/0x10 [ 968.443355][T19268] report_bug_entry+0xe1/0x290 [ 968.445357][T19268] ? __dev_queue_xmit+0x21c3/0x4970 [ 968.447558][T19268] handle_bug+0x1cd/0x2a0 [ 968.449421][T19268] exc_invalid_op+0x17/0x50 [ 968.451389][T19268] asm_exc_invalid_op+0x1a/0x20 [ 968.453487][T19268] RIP: 0010:__dev_queue_xmit+0x21c3/0x4970 [ 968.455386][T19268] Code: 41 b8 01 00 00 00 31 d2 31 f6 48 89 df e8 95 7f f8 ff e9 b3 e0 ff ff e8 cb 55 7f f8 48 8d 3d 14 3a a6 07 48 c7 c6 e0 6f 16 8d <67> 48 0f b9 3a 44 0f b6 25 f1 1e 7f 07 31 ff 44 89 e6 e8 b6 4f 7f [ 968.462744][T19268] RSP: 0018:ffffc900052bf820 EFLAGS: 00010283 [ 968.465249][T19268] RAX: 0000000000000132 RBX: ffff8880218ac280 RCX: ffffc90027793000 [ 968.468539][T19268] RDX: 0000000000080000 RSI: ffffffff8d166fe0 RDI: ffffffff9130a550 [ 968.471763][T19268] RBP: ffff8880218ac290 R08: 0000000000000005 R09: 0000000000000000 [ 968.474954][T19268] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888067867400 [ 968.478213][T19268] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880218ac334 [ 968.481505][T19268] ? __alloc_skb+0x4e9/0x710 [ 968.483451][T19268] ? __alloc_skb+0x5b7/0x710 [ 968.485414][T19268] ? __pfx___alloc_skb+0x10/0x10 [ 968.487477][T19268] ? __pfx___dev_queue_xmit+0x10/0x10 [ 968.489736][T19268] ? sock_alloc_send_pskb+0x751/0x980 [ 968.492005][T19268] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 968.494247][T19268] ? packet_parse_headers+0x5ab/0x810 [ 968.496475][T19268] ? __asan_memset+0x23/0x50 [ 968.498406][T19268] ? packet_parse_headers+0x5b7/0x810 [ 968.500607][T19268] ? packet_parse_headers+0x2b4/0x810 [ 968.502809][T19268] ? __pfx_packet_parse_headers+0x10/0x10 [ 968.505194][T19268] packet_xmit+0x243/0x310 [ 968.507074][T19268] packet_sendmsg+0x28d6/0x4eb0 [ 968.509160][T19268] ? __pfx_packet_sendmsg+0x10/0x10 [ 968.511287][T19268] ? __might_fault+0xc5/0x140 [ 968.513089][T19268] ? apparmor_socket_sendmsg+0x15b/0x270 [ 968.515215][T19268] __sys_sendto+0x48b/0x4e0 [ 968.516917][T19268] ? __pfx_packet_sendmsg+0x10/0x10 [ 968.518844][T19268] ? __pfx___sys_sendto+0x10/0x10 [ 968.520743][T19268] __ia32_sys_sendto+0xdd/0x1b0 [ 968.522589][T19268] ? __do_fast_syscall_32+0x98/0x970 [ 968.524408][T19268] ? lockdep_hardirqs_on+0x78/0x100 [ 968.526056][T19268] __do_fast_syscall_32+0xe7/0x970 [ 968.527689][T19268] do_fast_syscall_32+0x32/0x70 [ 968.529513][T19268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.531771][T19268] RIP: 0023:0xf707efec [ 968.533073][T19268] Code: Unable to access opcode bytes at 0xf707efc2. [ 968.535128][T19268] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 968.537724][T19268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 968.540182][T19268] RDX: 0000000000000000 RSI: 0000000004000010 RDI: 0000000080000000 [ 968.542661][T19268] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 968.545158][T19268] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 968.548246][T19268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.551345][T19268] [ 968.553119][T19268] Kernel Offset: disabled [ 968.554800][T19268] Rebooting in 86400 seconds..